Concept
MCP server runs as browser extension or WebRTC/WebSocket bridge. Browser tools (tabs, bookmarks, active DOM) exposed via MCP.
Advertisement
Use cases
Agent reads current page. Agent auto-fills forms. Agent manages tabs. All under user's browser session (cookies, auth).
Advertisement
Security
Prompt injection risk enormous — every visited page is potential injection source. Sandboxed permission model required.