Can an AI agent actually use your website?

A recent post about Lighthouse’s agentic browsing checks caught my attention. It raised a question I think more developers will need to ask: if someone sends an AI agent to use a website, can it work out what to do?

That could mean finding a product, checking availability or helping someone complete a form. An agent is software carrying out a task on a person’s behalf. It still needs to understand the interface, handle errors and recognise when the task is finished.

Working across WordPress websites and Laravel applications, I’m interested in where this becomes useful. A form can look simple and still leave plenty open to interpretation. Which fields are required? Did the submission work? Has anything actually been saved?

What Lighthouse is checking

Chrome’s agent-ready developer toolkit introduces an experimental Lighthouse category for agentic browsing. Its checks cover parts of accessibility, layout stability and WebMCP integration. These give developers clues about how clearly a page exposes its controls and behaviour.

The result is a fraction of checks passed, rather than the familiar weighted score out of 100. The scoring documentation describes it as an emerging set of signals. It is worth reading the individual results, including checks that are not applicable, before comparing two totals.

I’d use that report to decide what to investigate. I would still want to watch an agent complete a real task, including what happens when it enters something invalid. Passing a set of automated checks doesn’t demonstrate that every journey works.

Start with the interface

Some of this feels reassuringly familiar. Use actual buttons for actions, give form fields proper labels and avoid moving controls around while the page loads. Chrome explains that its audits draw on the accessibility tree, which exposes the names, roles and relationships of page elements.

These details matter to people first. I wouldn’t want accessibility work reduced to making software better at clicking things. Keyboard access, readable errors and clear focus states still need attention, and an agentic browsing result cannot stand in for a proper accessibility review.

This also fits how I think about minimal design. Removing visual clutter should make a page easier to understand. It shouldn’t mean removing labels or hiding the information someone needs to make a decision. A small interface still has to explain itself.

Where WebMCP fits

WebMCP is a proposed web standard that lets a website expose structured tools to browser agents. A tool has a defined purpose and inputs. There are two approaches: registering tools through JavaScript, or adding annotations to existing HTML forms.

Imagine a product compatibility checker. I could give it a clear operation, such as checking whether a particular accessory fits a selected model. The agent would supply the relevant identifiers and receive a result from the application. The business rules would remain in the system that already knows them.

That is a useful direction for the bespoke software I enjoy building. I’d much rather define what an operation accepts, what it returns and how it fails than rely on an agent interpreting a sequence of loosely labelled controls.

WebMCP is still experimental, and browser support needs checking. I’d treat it as an enhancement to a working website. People should still be able to use the same features through the ordinary interface.

Forms deserve particular care

The post that prompted this article described a contact form with a honeypot field labelled “Website”. An agent could interpret it as a genuine question, fill it in and cause the submission to be discarded. That was the author’s reported example, rather than a fault I’ve reproduced on my own projects, but it is a useful failure to think through.

There is a tension here. We want to stop automated spam, while allowing someone to use software to help them complete a legitimate task. Simply removing protection would be a poor answer. I’d review which fields the tool exposes, preserve server-side validation and rate limits, and test the legitimate journey all the way through to its confirmation.

I also want people to see what they are about to send. Chrome’s declarative API documentation describes a flow where the agent fills the form and the user submits it. Automatic submission is an explicit option through toolautosubmit. For a contact request, I would keep that review step.

That choice doesn’t secure the backend by itself. Authentication, permissions, validation and CSRF protection still belong in the application. A tool description cannot grant authority to change a record or place an order.

What I would try first

My starting point for evaluating WebMCP would be one small operation over public information, such as searching documentation or checking a product’s compatibility. I’d keep the scope narrow enough to understand exactly what the integration improves.

I’d give the task a clear success condition, then test incomplete inputs, no results and a failed request. I’d also check the page without WebMCP support and compare its loading behaviour before and after. An integration that adds weight and maintenance needs to earn its place.

Keeping the first experiment read-only reduces the chance of changing something accidentally, but it doesn’t make every lookup harmless. Chrome’s tool security guidance points out that read-only tools can still reveal personal information. A public documentation search is a different proposition from retrieving someone’s account details.

Keep search visibility separate

I would be cautious about selling this as an SEO improvement. Making an operation available to an agent doesn’t demonstrate that a page will rank higher or be cited in an AI answer. Google’s guidance for generative AI search continues to emphasise established SEO principles and useful, original content.

What interests me is the practical development work. We have another reason to be precise about what an interface does, what information it needs and where a person should remain in control. Those decisions draw on design and development together.

AI makes that judgement more valuable. I want to understand the task well enough to decide which parts are worth automating, then make the result understandable to the person using it. That is the part of this I’m keen to explore.

Technical references checked on 30 September 2026. WebMCP and its associated browser tooling are experimental and may change.

More about me