Governance Analysis of webMCP as an Emerging Agentic Interface Standard: A substrate-level evaluation of capability exposure, risk surfaces, and governance requirements for agent-callable web actions

webMCP is an emerging browser-level extension of the Model Context Protocol (MCP) that enables websites to expose structured, agent-callable actions through HTML annotations and JavaScript-registered tools. While early demonstrations of webMCP are intentionally exploratory and not intended for production use, the underlying design introduces a privileged action surface with significant governance implications. This document evaluates webMCP through a governance lens, identifying structural risks, capability boundaries, and the safety requirements necessary for responsible adoption. The analysis is not a critique of any specific implementation or demo; it is a substrate-level examination of the standard’s properties and their implications for agentic systems.