WebMCP setup for your website
WebMCP lets an AI agent that is browsing your site call tools your page registers, instead of guessing from the layout. LightSite installs four read-only tools with one secure script, HTTPS-only and bound to your domain: business facts, site search, product search and contact. Then it logs which tools agents call, what they ask and whether they got an answer.
- Check readiness. Scan your site to see which agent signals and files are already in place.
- Deploy tools securely. Add one script on your existing CMS or CDN. No rebuild, no migration.
- Track what agents do. See agent visits, tool calls, the questions asked, answers given and the clicks or forms that follow.
What is WebMCP?
WebMCP is a proposed web standard, published as a W3C Community Group draft, that lets a web page expose tools to AI agents running in the browser. A page registers each tool with a name, a description and an input schema through navigator.modelContext, or declares it on a form. Chrome documents how to build and test these tools.
For background on what Google's WebMCP work means for marketers, read our WebMCP explainer article.
How do I add WebMCP to my site?
You can write the tools yourself, following Chrome's WebMCP guide: register each tool on page load, describe it clearly and validate inputs. Or you can install LightSite's script, which registers four read-only tools for you, answered from your own site content.
The script only runs over HTTPS, only in the top frame and only on the domain its site key is bound to. It works next to your current CMS, theme and CDN.
Which tools does LightSite install?
| Tool | What an agent can do | Example question |
|---|---|---|
| get_business_facts | Read verified facts: what you offer, where, contact details | Do you have parking? |
| search_site | Search your pages and get the matching passages | What is the cancellation policy? |
| find_products | Find products or services that match a need | Waterproof hiking boots under $150 |
| contact_business | Get the right way to reach your team | How do I book a demo? |
All four are read-only. Agents can ask and get answers, then continue on your site's own pages and forms. The tools do not place orders, take payments or complete bookings.
Is WebMCP secure?
Read-only tools are the safest place to start, because an agent can only ask questions and read what your site already publishes. LightSite's script adds HTTPS-only loading, top-frame-only execution and domain binding, so the tools cannot be reused from another site or an embedded frame.
How do I see which agents call my tools?
LightSite logs every tool call: the tool, the cleaned question, the page, the session, whether it was answered, and the agent's name when the agent declares itself, such as ChatGPT-User, Claude-User or Perplexity-User. Other automated visits are flagged as automated.
The same dashboard shows the agent's path through your site, including clicks, form submissions and booking steps, so you can see which questions lead to real actions. Read more about AI agent journey tracking.
Frequently asked questions
Do I need to rebuild my site to add WebMCP?
No. LightSite adds WebMCP with one script on your existing site, and you can remove it the same way.
Can agents buy or book through these tools?
No. The four tools are read-only plus a contact route. Purchases and bookings still happen on your own checkout and forms.
Does WebMCP replace MCP?
No. WebMCP runs tools in the browser on your site; MCP connects apps such as ChatGPT or Claude to a server. Many sites use both.
Related
- Make your website agent-ready
- Check your site with the Agent Readiness Checker
- WebMCP vs MCP
- Track AI agent traffic
- What Google WebMCP means for marketers
- Technical documentation
Sources
Last updated 2026-11-06