WebMCP Today MCP server

Read from the package source without running it. The installed server may list more.

• execute_webmcp_toolwrite action
• focus_webmcp_tab

  Focus a connected tab, making it the selected target for list_webmcp_tools and execute_webmcp_tool. Use a tabId from list_connected_webmcp_tabs.

• get_package

  Get a single package by id, at its latest version.

• get_stats

  Registry stats: total packages, domains covered, top domains.

• get_webmcp_bridge_status

  Inspect the macOS Chrome or Brave WebMCP Today bridge installation without changing files. Reports bridge-owned paths and permissions but never returns the bridge secret.

• install_package

  Pin a package to its latest version, or a given versionId, on your webmcp.today account — creates the pin if absent, moves it if present (also how rollback works: pass an older versionId). This does not install into your browser; the extension's installs are local to the browser. Returns a link that installs this exact version there. Requires an API key.

• list_connected_webmcp_tabs

  List all Chrome/Brave tabs with reachable WebMCP tools: the user's selected tab plus tabs matching installed packages. Use focus_webmcp_tab with a tabId from this list to switch targets.

• list_installs

  List the caller's installed packages, each pinned to its installed version. Requires an API key.

• list_packages

  Browse registry packages with pagination and optional domain filter (each at its latest version).

• list_webmcp_tools

  List live WebMCP tools in the user-selected active visible Chrome/Brave tab. Returns a document and tool-list generation required by execute_webmcp_tool. If the tab is not eligible or available, call focus_webmcp_tab with the target tabId, then retry.

• lookup_package

  Look up WebMCP packages for a page URL, at each package's latest version. Returns matches most-specific-pattern first.

• publish_packagewrite action

  Publish a new WebMCP package to the registry as a fresh package whose version field must declare 1 (validated against @webmcp-today/schema). Requires an API key.

• publish_package_versionwrite action

  Publish the next version of a package you contributed (urlPatterns, tools, required api and minEngine, optional changelog) — owner only, append-only. The version field is author-declared and must equal the current latest version + 1 exactly (query the package first to see it); a 409 response returns the expectedVersion to declare on retry. Installed users stay pinned until they move their install

• setup_webmcp_bridge

  Install the first-party WebMCP Today native bridge for macOS Chrome or Brave. This copies a fixed bundled host to ~/.config/webmcp-today and writes only this bridge's native-messaging manifest under ~/Library/Application Support. Set confirm to true to approve these writes.

• uninstall_packagewrite action

  Remove the caller's install pin on your webmcp.today account. This does not affect the extension's local install in your browser. Requires an API key.

• uninstall_webmcp_bridgewrite action

  Remove WebMCP Today's macOS native-messaging bridge artifacts for Chrome or Brave. Brave retains Chrome's compatibility manifest because Brave may use it; the result reports that residual and the required follow-up Chrome uninstall. Set confirm to true to approve removal.

• update_package_metawrite action

  Update a package's metadata (title, description) — owner only. Domain is immutable and never touches urlPatterns/tools/minEngine; use publish_package_version for that. Requires an API key.

• Code scan23 source files scanned25/25
• –Live reliabilityno gateway calls yet and no remote to proben/a
• –Tool poisoningtools not inspected (local package is not executed); not countedn/a
• Auth qualitystatic API keys via environment variables6/15
• Maintenancelast push 16 days ago15/15
• Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Safety score

83/100

higher than 68% of 4,460 AI and agents servers

Tools

17

the typical AI and agents server has 6

Tools that change things

35%

typical: 0%. Fewer write tools means less an agent can break

GitHub stars

2

more than 65% of 2,711 AI and agents servers

Downloads a week

69

more than 54% of 1,538 AI and agents servers with a package

WebMCP Today: common questions

Is WebMCP Today MCP server safe?

Mostly: it is graded B (83/100). Read the WebMCP Today safety report

How do I install WebMCP Today?

It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.

Does WebMCP Today need an API key?

Yes. The registry entry asks for WEBMCP_TODAY_API_KEY.

Is WebMCP Today maintained?

The last commit was 21 days ago (2026-10-14). The latest release is v0.3.1.

What can I use instead of WebMCP Today?

Servers from other publishers that do the same job: Agent Security Scanner MCP server.

How does WebMCP Today compare with other AI and agents MCP servers?

safety score 83/100 (higher than 68% of 4,460 AI and agents servers); tools 17 (the typical AI and agents server has 6); tools that change things 35% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.