Chrome warns WebMCP tool exposure can hijack AI agents
WebMCP lets sites expose tools that AI agents can call, but Chrome’s security guide shows malicious tool manifests or contaminated outputs can hijack those agents and steal user data. The doc recommends deterministic guardrails—untrustedContentHint, token limits, origin restrictions, and user confirmations—to stop prompt‑injection attacks.