# use-webmcp-tool

> use-webmcp-tool is a community-maintained WebMCP tool from npm. Anomity scores its risk at 40 out of 100 (medium).

- **Canonical URL:** https://catalog.anomity.ai/webmcp/use-webmcp-tool
- **Kind:** WebMCP tool
- **Publisher:** npm
- **Trust level:** community
- **Risk score:** 40/100 (medium)
- **Website:** https://www.npmjs.com/package/use-webmcp-tool
- **Last updated:** 2026-09-02
- **JSON:** https://catalog.anomity.ai/api/entries/webmcp/use-webmcp-tool

## Description

A small React hook that registers a WebMCP tool when a component mounts, keeps its schema current as props change, and unregisters it on unmount. It makes the tool surface a function of the rendered UI, which is the right default: tools disappear when the screen that backs them does.

The capability surface is browser control, inherited from the API it wraps. The design consideration it surfaces is scoping. Because registration is tied to component lifecycle, a tool mounted inside an authenticated route is only present while that route is rendered — a meaningfully tighter surface than registering everything globally at page load. Prefer that pattern; a permanently-registered `deleteProject` tool is reachable from every page an agent wanders onto.

## Why it scored 40

The score starts at the catalog's neutral base of 50 and moves only through the signals below. The formula is published at https://catalog.anomity.ai/about — there is no model and no hidden heuristic.

| Signal | Contribution | Severity | Evidence |
| --- | --- | --- | --- |
| Established community project | -10 | trust offset |  |

Clamped result: **40/100**, band **medium**.

## Capabilities

| Capability | Name | Security implication |
| --- | --- | --- |
| `browser:control` | Browser control | Drives a browser session. Combined with credential access can impersonate the user on web services. |

## Related WebMCP tools

- [Latch](https://catalog.anomity.ai/webmcp/latch-webmcp) — risk 40 (medium)
- [Model Context Tool Inspector](https://catalog.anomity.ai/webmcp/model-context-tool-inspector) — risk 40 (medium)
- [nekuda WebMCP Workbench](https://catalog.anomity.ai/webmcp/nekuda-webmcp-workbench) — risk 40 (medium)
- [WebMCP Bridge](https://catalog.anomity.ai/webmcp/webmcp-bridge) — risk 40 (medium)
- [WordLift AI Audit](https://catalog.anomity.ai/webmcp/wordlift-ai-audit) — risk 40 (medium)
- [WebMCP Evals](https://catalog.anomity.ai/webmcp/webmcp-evals) — risk 20 (low)

---

Source: Anomity Catalog (https://catalog.anomity.ai/). Scoring methodology: https://catalog.anomity.ai/about. Machine-readable index: https://catalog.anomity.ai/llms.txt · https://catalog.anomity.ai/openapi.json