WebKit Blog Details Safari 27 Developer Features Including MCP Support

How Safari MCP Enables AI Agent Interaction

Following Apple's 2027 system software rollout, the WebKit team has published a comprehensive overview of Safari 27.0, highlighting new tools aimed at improving developer workflows. The update arrives alongside broader platform updates across iOS, iPadOS, and macOS, with a focus on integrating AI-assisted browsing capabilities directly into the browser environment. Central to the release is the introduction of the Safari MCP server, designed to allow artificial intelligence agents to interact with and control browser windows programmatically.

The Safari MCP server acts as a bridge between external AI systems and the browser, enabling developers to build tools where AI can read page content, fill forms, navigate tabs, or execute JavaScript based on natural language prompts. According to the WebKit blog, this functionality is intended to reduce repetitive tasks during testing, debugging, and code exploration. Developers must explicitly enable the feature through Safari’s developer settings, and all interactions are subject to the same security policies governing web content. The server operates locally and does not transmit browsing data to external services unless explicitly configured by the user or organization.

What Security Measures Protect MCP Usage

Apple emphasizes that MCP access requires user consent and is isolated to individual browsing sessions, preventing cross-site data leakage. The WebKit team notes that the protocol includes built-in rate limiting and origin validation to prevent abuse. While the feature is currently exposed primarily for developer use, the blog suggests future iterations could extend MCP functionality to accessibility tools or automated testing frameworks. No timeline was provided for broader consumer-facing applications of the technology.

What does MCP stand for in Safari 27? MCP stands for Machine Control Protocol, a framework that allows external AI agents to send commands to control browser actions like navigation, input, and script execution.

Frequently Asked Questions

Is Safari MCP enabled by default for all users? No, the MCP server must be manually activated by developers in Safari’s advanced settings and is not available to general users without explicit configuration.

Can websites use MCP to control a visitor’s browser without permission? No, MCP access is strictly governed by user permission and developer opt-in; websites cannot initiate MCP interactions without user consent and proper security context.