WebMCP Spec Update: Consequential Hint Added

This title was summarized by AI from the post below.

I’m excited to share that we've added a consequential hint to the WebMCP spec! Here’s what you need to know about it: For site devs: consequentialHint should be set to true when WebMCP tools may perform a high-stakes action: anything that might need explicit user permission in order to execute. If you’re going to make a purchase, send an email, or book travel, it would be beneficial to set this to true. annotations: { consequentialHint: true } For agent/model devs: the agent should regard this hint as a time to take a step back, ask for user verification- if there’s an alignment tool critic, it should be judging whether or not a consequential action is appropriate given the user’s request. The interesting thing about hints like this, unlike other web specs, is that both the site and the agent have to get it right for this to work well. If one side exposes a hint and the other doesn’t honor it, it’s not doing much. And alternatively, if the site dev doesn’t expose but the agent is looking for it… you get it. But combined, it’s powerful. It can create a safeguard against generating an action a user might not want or be expecting. And it gives more tools to developers to have precision in what should be occurring on their site. So the collective effect can keep users safer. Further reading: https://lnkd.in/eVse3Hun Remember, this is a proposed hint only. It will be adopted only if we are confident people will use it. Origin Trial feedback is important. Thanks to Johann Hofmann for the initial proposal: https://x.com/johannh And François Beaufort and Alexandra Klepper AlexandraScript@ for the docs!

The alignment critic has the same failure mode as any judge: it needs calibrating before it's trusted to block. Worth specifying what happens when the critic is uncertain. Ours quarantines instead of deciding, because a wrong block teaches people to bypass the hint entirely, and then the safeguard is worse than not having one.

Like
Reply

Please make sure this is also added to the declarative API.

Do you think we could make the name better if it moved forward? Eg "hasRisk" so everyone can understand and is shorter.

A wrong flag costs someone, if over-marked, the hint stops being a signal, if under-marked, the agent holds the risk. When a site over flags everything as consequential, does the browser still force the prompt, or does the model's call win? Sarah Drasner

Like
Reply

This is a massive step forward for agent safety ‏‏Sarah Drasner‏‏ Moving from heuristic guessing to a standardized bilateral protocol hint (consequentialHint) bridges a huge trust gap for human-in-the-loop execution

Like
Reply

Curious how this handles a multi-step flow where only the last call is actually consequential - browse, compare, then book. Does the hint apply per tool call, or is there a way to flag a whole sequence as leading to one high-stakes action, so the agent asks once at the right moment instead of interrupting on every intermediate read-only step?

Like
Reply

the two-sided part is the hard bit, agreed. one thing i keep running into though: the hint sits on the tool, but the consequence usually sits in the arguments. same sendEmail is harmless to one teammate and a real incident to a 4,000 person list. a boolean on the tool can't tell those apart. is the expectation that sites annotate conservatively and eat the friction?

Like
Reply

Thanks! I have already added this update to the latest release of WebMCP agent skill I maintain https://github.com/webmaxru/web-ai-agent-skills

Like
Reply

Adopting! Humans and agents will use this 🛸

Like
Reply
See more comments

To view or add a comment, sign in

Explore content categories