Unverified50% confidenceTradeoffExact time
在持有真实登录态的场景下，Agent操作等同于以用户身份在网站上行动，网站无法区分手动操作还是Agent自动化行为
1
Sources
50%
Confidence
Long-term
Relevance
7/18/2026
First Seen
Sources
Related Claims
Unverified在持有真实登录态的场景下，Agent操作等同于以用户身份在网站上行动，携带的认证凭据与用户本人完全相同78% similarUnverifiedWebMCP's declarative API includes an agent-invoked boolean attribute that can distinguish whether a form is being filled by an AI Agent or a human, allowing websites to decide whether to skip human interaction steps such as CAPTCHA verification.70% similarUnverifiedIndirect prompt injection refers to attack instructions hidden in external web pages, documents, or API responses accessed by an agent, where the malicious instructions are activated when the agent retrieves and injects them into the context.70% similarUnverifiedAt the current stage, the Agent capabilities of the Active input method still require active user triggering and have not yet achieved fully automatic understanding and execution.69% similarUnverifiedagent-readable websites理念希望网站能以结构化、语义清晰的方式向Agent暴露其功能与数据67% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/550781API
curl https://kongchang.com/api/v1/knowledge/claims/550781MCP
get_claim(id=550781)