MIRRORPRIVATE SITE TOOLS / WEBMCPLocal WebMCP preview

PRIVATE ACTIONS FOR WEBMCP

Let agents act on private data without putting it in agent context.

WebMCP makes a website actionable. Mirror keeps sensitive site state under website control and releases only what the user approves.

WEBSITEPrivate state
→
MIRRORRestricted capability
→
AGENTBounded action
→
RESULTApproved disclosure

THE PRIVACY GAP

Useful actions often depend on private data.

Financial limits, patient records, legal conflicts and private business rules can leak through tool arguments, chat history, logs and agent handoffs.

WITHOUT A DATA BOUNDARYThe private record enters agent context.

The agent can read and carry it beyond the action that needed it.

WEBSITEPrivate record
AGENTReadable context
ACTIONTool or provider
RESIDUEHistory and traces
WITH MIRRORThe website keeps custody of the record.

The agent receives a capability limited by user, session, origin, tool, purpose and expiry.

WEBSITEPrivate record
MIRRORRestricted handle
AGENTBounded action
RESULTApproved release

SEE IT IN ONE REAL WORKFLOW

One buyer. One seller. Only the agreed offer crosses.

Procurement is one example. The same boundary can protect financial profiles, patient records, legal conflicts and private evaluations.

LOCAL

Buyer boundary

Enter private requirements directly into the website, never into agent chat.

Agent receivesNo handle created
BOUNDARY

Agent collaboration

Run the same registered tools used by a native browser agent.

USER AGENTCodex / WebMCPSees tool schemas and handles
SELLER AGENTMirror encrypted inferenceSees the allow-listed handoff as ciphertext
  • Budget received by seller agentNO
  • Browser handle received by seller agentNO
  • Seller price floor returnedNO

See exactly what each agent receives.

Seal the private requirements to begin.

Add the boundary without shipping the private SDK.

The public adapter is under 7 KB. It reads a same-origin manifest, joins the authenticated site session, and registers these tools. Handle state, keys, policy, and protected services remain behind the endpoints.

<script defer
  src="/mirror-webmcp-v1.js"
  data-mirror-webmcp
  data-site="mirror_site_public_id"
  data-manifest="/.well-known/mirror-webmcp.json">
</script>
  1. TOOLprocurement.find_private_matches
  2. TOOLprocurement.request_seller_proposal
  3. TOOLprocurement.release_proposal
  4. TOOLprocurement.accept_proposal

Public catalogue used by the match

gpu-flex-8

GPU Flex 8

Eight reserved accelerators with private networking and managed orchestration.

From €2,650 · 10 days
gpu-scale-32

GPU Scale 32

A larger reserved cluster for sustained training and inference workloads.

From €2,350 · 21 days
gpu-sovereign-12

GPU Sovereign 12

Dedicated accelerators with customer-managed keys and isolated operations.

From €3,150 · 14 days