Gap note
WebMCP gaps
WebMCP is a gap note assembled on 2026-10-23. It quotes primary pages for settlement asset, spend controls, revocation, protocol composition, license, governance body, and cross-company use. A line that says not documented uses the day that page was read. The note does not rank the listing.
Last verified 2026-10-23
Sources
WebMCP listing · Protocol compatibility · Gaps JSON
| Dimension | Status |
|---|---|
| Settlement asset | Not documented |
| Spend controls | Documented |
| Revocation | Omitted |
| Protocol composition | Mixed |
| License | Documented |
| Governance body | Documented |
| Cross-company use | Omitted |
Settlement asset
Not documented
Not documented as of 2026-10-23. The draft does not name a settlement asset.
WebMCP Draft Community Group Report, 20 October 2026 · Read 2026-10-23
Spend controls
Documented
Tools can carry readOnlyHint, untrustedContentHint, and consequentialHint. consequentialHint marks a consequential, real world or non reversible action such as transferring money, and is a signal clients can use to require user confirmation. The spec says a malicious site can omit or misrepresent hints.
WebMCP Draft Community Group Report, 20 October 2026 · Read 2026-10-23
Access is gated by the permissions policy feature tools. The default allowlist is self.
WebMCP Draft Community Group Report, 20 October 2026 · Read 2026-10-23
Revocation
No checked source for this dimension in this note.
Protocol composition
Documented
The draft says a page using the API can be thought of as an MCP server that implements tools in client side script instead of on the backend.
WebMCP Draft Community Group Report, 20 October 2026 · Read 2026-10-23
The Cloudflare blog says an edge implementation, launched in beta in August, injects a script so a site's tools become available and proxies a backend MCP server's tools to the browser. Commerce.com turned it on across almost 100,000 storefront domains, with a per merchant opt out. The shopper still clicks checkout.
Cloudflare blog on WebMCP commerce, 21 October 2026 · Read 2026-10-23
Cloudflare Browser Run supports WebMCP through the Chrome Lab and Kitesurf backends.
Cloudflare Browser Run WebMCP documentation · Read 2026-10-23
mpp.dev lists a guide, Add payments to WebMCP tools, for browser agents paying for actions.
MPP protocol site · Read 2026-10-23
Not documented
Not documented as of 2026-10-23. The draft does not prescribe the format in which tools reach the browser agent.
WebMCP Draft Community Group Report, 20 October 2026 · Read 2026-10-23
License
Documented
The spec says the report is published by the Web Machine Learning Community Group under the W3C Community Contributor License Agreement (CLA).
WebMCP Draft Community Group Report, 20 October 2026 · Read 2026-10-23
Governance body
Documented
The report is a Draft Community Group Report of the Web Machine Learning Community Group, dated 20 October 2026. The spec says it is not a W3C Standard and is not on the W3C Standards Track.
WebMCP Draft Community Group Report, 20 October 2026 · Read 2026-10-23
Cross-company use
No checked source for this dimension in this note.
Questions
- What does not documented mean?
- Not documented means the cited page does not state the fact. The line names that page and the day it was read. It is not a claim that the fact is false.
- What does omitted mean?
- Omitted means this note has no checked source for that dimension. The dimension was left out rather than filled in.
- Does the index rank these products?
- No. The table can be sorted by name, by dimension status, or by checked date. Sort order is not a score.
- Where is the machine readable file?
- GET /data/gaps.json. The file includes every note, the cited sources, and the read dates.