Unverified50% confidenceOpinionExact time
A prerendered website cannot call the agent directly, because a browser directly requesting the Foundry service would require issuing an API key or access token, which any user could view via F12 and steal; the Azure Functions proxy establishes a trusted channel on the server side, and credentials never leave the server side.
1
Sources
50%
Confidence
Long-term
Relevance
10/14/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedThe Tailspin Toys website is fully prerendered with no backend server, so the browser cannot call the agent directly and should not hold Foundry credentials; the developer had Copilot build a small Azure Functions proxy to connect securely.70% similarUnverifiedBy having web pages proactively define tool boundaries through WebMCP, AI can only call the functional interfaces explicitly authorized by the website rather than arbitrarily operating any page element, providing structural safeguards for security.69% similarUnverifiedA limitation of WebMCP is that the application must be open in the user's browser for the relevant tools to be available, making it inherently bound to the web application66% similarUnverifiedThe idea behind WebMCP is to have websites proactively expose a machine-readable capability interface, enabling AI agents to invoke webpage functionality as if calling an API.65% similarUnverifiedNetwork-layer blocking drops requests before the browser rendering engine attempts to establish a connection, circumventing the limitations of extension APIs.65% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1030769API
curl https://kongchang.com/api/v1/knowledge/claims/1030769MCP
get_claim(id=1030769)