WebMCP for your website: what ChatGPT site tools mean for Australian businesses
WebMCP for your website is a new way to let AI agents like ChatGPT actually do things on your pages, not just read them. In late August 2026 OpenAI switched on “site tools” in the built-in browser of the ChatGPT desktop app, so a website can now hand an agent a list of safe actions, search a catalogue, add to a cart, book a slot, update a booking, instead of the agent guessing which button to click. It’s early and experimental, but the direction is clear, and if you run a website in Australia it’s worth understanding what’s coming before your competitors do. We build and maintain WordPress and WooCommerce sites every week, so here’s the plain version.
Site tools flip the model. Instead of an agent poking at your buttons, your site tells the agent exactly what it’s allowed to do.
MyWebs Agency
What is WebMCP and what are ChatGPT site tools?
WebMCP is an open standard that lets a website declare named, callable functions that an AI agent can use directly. Your page registers a set of JavaScript functions, each with a name, a description and a structured list of inputs, and the agent calls those instead of pretending to be a person with a mouse. OpenAI’s version is branded “site tools”, and it went live in the ChatGPT desktop app’s own browser. According to Search Engine Journal’s report, it currently needs the GPT-5.6 Sol or Terra models and isn’t available in Enterprise or Edu workspaces yet. Worth knowing: this is separate from the older server-based Model Context Protocol. With WebMCP the live page itself offers the tools, so there’s no separate connector to set up.
- Search your content. An agent can query your products, docs or listings through a tool you expose, rather than scraping the page.
- Update a cart or booking. Add items, change a quantity, hold an appointment, all through functions you define and control.
- Work in the signed-in session. Tools run inside the current page and the customer’s own login, using your existing permissions.
- Stay page-specific. A tool is tied to the page it came from and disappears when that page closes. Nothing carries over silently.
- You register JavaScript functions on the page as tools, with names and input schemas.
- The agent reads that list and picks a suitable tool for the task at hand.
- An arrow appears in the browser address bar, showing whether a tool can read data or make changes.
- Before anything is bought, deleted or changed, ChatGPT asks the person to confirm.
Here’s the context that makes this matter locally. The Australian Bureau of Statistics reported in June 2026 that about 12 per cent of Australian businesses used AI in 2024 to 25, up from roughly 1 per cent two years earlier, and among small and micro businesses it was around 11 per cent. That’s still low, which is the point. The businesses that get their websites ready for agents now will be the ones the agents can actually transact with when adoption climbs.
Don’t rebuild your site for robots. Expose a few safe, useful actions and keep the human experience exactly as it is.
MyWebs Agency
How do you know if a site offers site tools?
Look at the address bar. When a page exposes site tools, ChatGPT’s browser shows an indicator, and you can inspect what the page offers and whether each tool only reads data or can also change it. If you’d rather not test it inside ChatGPT, developers can trial WebMCP in Google Chrome through an experimental flag or the origin trial. We usually check both, because the read versus write distinction is exactly what you want to get right before letting an agent near a live checkout.
Should a small business bother with WebMCP yet?
For most Aussie SMBs, the honest answer today is: not a full rebuild, but yes to a small experiment if it fits your business. A trades business taking bookings, a cafe with online ordering, or a shop with a product catalogue are the obvious early cases, because “find me a sparky in Parramatta who can quote a switchboard job this week” is exactly the kind of task people are starting to hand to an agent. OpenAI is even running a WebMCP Challenge with Shopify, Google Chrome, Cloudflare, Vercel, Netlify and Render behind it, which tells you where the big platforms think this is heading. If your site already has a clean booking or search flow, adding a couple of tools is a modest job, not a rewrite.
WebMCP site tools vs standard browsing vs server MCP
These three get muddled constantly, so here’s how they actually differ in practice.
| Approach | How the agent acts | Best for |
|---|---|---|
| Standard browsing | Clicks and types like a person, guessing the interface | Any site, but slower and less reliable |
| WebMCP site tools | Calls named functions your page exposes, in the live session | Search, carts, bookings on your own site |
| Server-based MCP | Connects to a separate server, works without an open page | Back-office data and system integrations |
WebMCP for your website: 7 steps to get ready
You don’t need to do all of this at once. Getting WebMCP for your website working well is mostly about picking the right handful of actions and keeping them safe. Here’s the order we’d work through it on a real project.
- Pick two or three high-value actions. Usually search, add to cart, or request a booking. Ignore everything else for now.
- Sort your read versus write tools. Make searching read-only and keep anything that spends money or changes data clearly separate.
- Tidy the underlying flow first. If your WordPress or WooCommerce booking flow is messy for humans, it’ll be worse for agents.
- Write clear tool descriptions. The agent relies on your names and descriptions, so vague ones lead to wrong calls.
- Keep confirmations on. Let the person approve any purchase, cancellation or account change. Never auto-confirm money.
- Test in ChatGPT and Chrome. Check the address-bar indicator, run each tool, and watch what happens on a real order.
- Keep your normal SEO strong. Being found still comes first, so pair this with solid SEO and content work.
The security bit you can’t skip
Letting an agent act on a signed-in session is powerful, and that cuts both ways. OpenAI’s own site tools documentation flags real risks, chiefly prompt injection and data exfiltration, where a dodgy tool description or a poisoned response tricks the agent into doing something it shouldn’t. ChatGPT reviews each tool call and asks for permission before sensitive actions like purchases, deletions, setting changes or sending messages, but those checks don’t prove a site is trustworthy. Our rule of thumb: expose the smallest useful set of tools, keep write actions behind a confirmation, log everything, and treat agent traffic with the same caution you’d give any automated access. This is standard territory for us on the sites we look after, and it’s the part we’d never rush.
Frequently asked questions
Do I need to be on a special platform to use WebMCP for my website?
No. WebMCP is an open standard, so any site can expose tools, including a standard WordPress or WooCommerce build. The launch partners include Shopify, Vercel, Netlify, Cloudflare and Render, but you’re not locked into any of them.
Is WebMCP finished and safe to rely on?
Not yet. OpenAI calls it experimental, and the specification is a draft from the W3C Web Machine Learning Community Group, not a finalised standard. Treat it as an early experiment worth watching, not a finished feature to bet the business on.
Will site tools change my Google rankings?
There’s no evidence of that. OpenAI’s documentation doesn’t connect WebMCP with search rankings, citations or recommendations. Getting cited in AI answers is a separate job, driven by clear content, schema and genuine authority.
How much does it cost to add WebMCP site tools?
It depends on how clean your existing flows are. If your booking or checkout is already solid, exposing two or three tools is a small piece of work. If it needs tidying first, that’s the bigger cost, and it improves the site for humans too.
Curious whether WebMCP for your website is worth trialling for your business? We’ll take an honest look at your site, your booking or checkout flow, and where AI agents fit, then tell you plainly what’s worth doing and what isn’t. Book a free website audit and a one-hour consultation with our Sydney team and we’ll map it out with you.