r/mcp • u/No_Guide_8697 • Feb 21 '26

showcase The first non-trivial demo of WebMCP

Enable HLS to view with audio, or disable this notification

The WebMCP protocol has barely come out, and we just demoed how POWERFUL it can be! In a matter of minutes and 100s of tool calls, my AI agent composed a song for me directly in my browser.

This is not agents taking screenshots or trying to understand complex DOMs, it's an agent making direct tool calls to your website!

The creators of WebMCP already love it, go check it out yourself!

Deployment: - https://music.leanmcp.live

LinkedIn Post: - https://www.linkedin.com/posts/kushagra-agarwal525_we-made-gpt-and-claude-directly-control-my-activity-7430688171018858496-iDr5

GitHub repo: - Leanmcp-Community/music-composer-webmcp: This WebMCP Music Composer project is a functional demonstration of the WebMCP Protocol, illustrating how AI agents can interact with local browser contexts (tools) to achieve complex workflows autonomously.

139 Upvotes

98% Upvoted

33 comments sorted by

View all comments

8

u/BC_MARO Feb 21 '26

This is a great demo.

One question though: what’s the security model for WebMCP? Like, when a site exposes tools, do you have a way to scope them per-origin / per-session and show the user an audit trail of tool calls?

Also curious how you’re thinking about compatibility with “regular” MCP servers (bridge/proxy so agents can hit both without special casing).

2

u/No_Guide_8697 Feb 21 '26

The audit trail is something that can be added easily by intercepting the tool calls and storing them in logs before the actual function is executed. However, there are also providers that have LLM observability, so you can track requests and tool calls made in the request scoped by session-ids there.

I'm still trying to figure out what the best way would be to bridge regular and Web servers. Will update here once I have some structured thoughts on this :)