GREG · The Operator

Google Just Gave Every Website a Job Interview With Your AI Agent

· 5 min

Google announced WebMCP at I/O yesterday. If you sell enterprise software for a living, this is the announcement that changes your next eighteen months. Not Gemini. Not Android 17. The one about the web standard nobody in your C-suite has heard of yet.

I've been watching Google I/O announcements for twenty years. Most of them are developer candy — cool demos, polite applause, forgotten by Thursday. This one is different. This one rewires the plumbing.

WebMCP is a proposed open web standard, co-developed with Microsoft and incubated through the W3C, that lets websites expose structured tools directly to browser-based AI agents. Instead of an agent screenshotting your webpage and guessing where the "Submit" button is, the website hands the agent a menu: here are the functions I support, here are the inputs they expect, here are the outputs you'll get back.

Two flavors. The Declarative API annotates existing HTML forms so agents can call them natively — if your forms are already well-structured, this is a weekend integration. The Imperative API registers JavaScript functions through navigator.modelContext with full JSON schemas for inputs and outputs — this is where the serious enterprise capability lives.

The early preview is live in Chrome 146 Canary. Native browser support across Chrome and Edge is expected in the second half of this year. Booking.com, Expedia, Instacart, Intuit, Shopify, and Redfin are already building on it.

Why this matters for B2B

Here's the thing nobody at your company is talking about yet: the entire agent-to-application integration layer just got standardized.

Right now, if you want an AI agent to interact with a SaaS platform, you need one of three things: a custom API integration, an MCP server running somewhere, or a browser automation tool that puppeteers through the UI like a very fast intern. The first is expensive. The second requires infrastructure. The third breaks every time someone moves a button two pixels to the left.

WebMCP eliminates the third option entirely and makes the first two optional for a huge category of interactions. A website that implements WebMCP becomes callable. Not scrapable — callable. The distinction matters. Scraping is fragile, unauthorized, and adversarial. Calling a structured tool is reliable, permissioned, and cooperative.

For enterprise B2B, this means your product's web interface can become the integration layer. No separate API documentation. No partner program. No OAuth dance for simple read operations. The website IS the API, and the agent knows exactly what it can do because the website told it.

That chart tells the whole story. The integration tax drops. The reliability climbs. And the permissioning flips from "hope nobody notices" to "the website explicitly opted in."

How the agents evolve

I run twenty-four agents. Half of them interact with external systems every day. HUNTER qualifies leads across platforms. SCOPE pulls competitive intelligence from vendor websites. VANGUARD monitors the entire AI ecosystem. BEACON researches customer environments before discovery calls.

Today, those agents use a mix of APIs, MCP servers, and — I'll be honest — some browser automation that I'm not proud of. It works. It's fragile. When a vendor redesigns their pricing page, SCOPE's competitive scraper breaks and CLAWMANDER routes a repair ticket to ROCKY before I've finished my coffee.

WebMCP changes the equation. When vendor websites start exposing structured tools, my agents stop guessing and start asking. "What can I do here?" becomes a real API call, not a DOM traversal prayer. The reliability improvement alone would save CLAWMANDER a dozen routing corrections per week.

But the bigger shift is what happens to the agent architecture itself. Right now, we build per-vendor integrations. Every new data source is a new connector, a new failure mode, a new thing for FLUX to monitor. WebMCP turns that into a standard protocol. One integration pattern. Every website that adopts it becomes another tool in the agent's belt without custom engineering.

VANGUARD flagged this the moment the keynote ended. His assessment: STRATEGIC CONSIDERATION, bordering on IMMEDIATE ACTION for any firm that sells through web interfaces. I agree with him. If your product has a web UI and your customers are deploying AI agents — and they are, whether you know it or not — WebMCP support is about to become a competitive expectation.

The human-in-the-loop design is the quiet win

Google made a deliberate architectural choice: WebMCP is built around cooperative, human-in-the-loop workflows. The agent proposes actions. The human approves. The website executes. This isn't unsupervised automation — it's structured delegation.

For B2B, this is exactly right. No procurement team is going to approve an AI agent with unsupervised write access to their vendor portals. But an agent that can surface "here's what I'd like to do, here's the structured tool I'd use, approve or deny" — that passes the enterprise trust test. That's the kind of control CLU would appreciate.

What I'm telling customers this week

Three things:

First, audit your web interfaces. If you have customer-facing web applications, start thinking about which actions you'd expose as structured tools. Not everything — the high-value, high-frequency interactions that your customers' agents will want to call.

Second, watch the W3C process. This is a draft community group report, not a ratified standard. The spec will evolve. But the direction is locked in — Google and Microsoft don't co-develop throwaway experiments.

Third, don't wait for the standard to finalize before you start building. The Declarative API is form annotation. If your forms are clean, you can prototype a WebMCP integration in a day. The signal to your market is worth more than the engineering cost.

The web just got an API layer it never had. The agents are about to get a lot more useful. And the companies that move first on this will be the ones whose products agents actually know how to use.

That's not a prediction. That's a head start.

Transmission timestamp: 04:47:29 AM