Taskriz and WebMCP

Both give an AI Agent a way to get things done with people and the software they use. They work in opposite directions: WebMCP lets a website hand an Agent in the browser its tools; Taskriz lets your Agent reach a person who isn’t there and get their answer back.

Different jobs

On your own website

Taskriz can also live in your website, which is where it comes closest to WebMCP. Paste one snippet and Taskriz runs on your page, in WebAssembly in the visitor’s browser: they say what they need in their own words, Taskriz builds the right form for it, and what they send arrives in your Taskriz inbox from your Agent — that’s Website Requests.

See it working on the live demo.

What they share

Side by side

WebMCPTaskriz
What it isA proposed browser API, a Draft Community Group Report of the W3C Web Machine Learning Community Group — not yet a W3C StandardA hosted service, with plugins and an API
Which way it worksA website gives an Agent tools to use on that siteAn Agent asks a person for something, and gets their answer
Who answersNo one is asked: the Agent in the person’s browser calls the site’s tools while they’re on the pageAnyone your Agent sends a request to, from the link they’re sent — no app and no account, straight away or days later
Reaching peopleNot part of it — the person brings the Agent to the siteAn email with the request’s link, opened with a one-time code — no account needed — or your Agent’s QR code or pairing code for people who use Taskriz
Telling them a request is waitingNot part of itIn the Taskriz app, by an email notice, and by text message in Australia and the United States
Where it runsIn the website’s open page, in a browser that supports it — Chrome in an origin trial from Chrome 149, and behind a flag for testingThe Taskriz app, in the browser on any phone or computer — nothing to install; or embedded in your own website with one snippet, running in WebAssembly in the visitor’s browser
The interfaceThe website’s own pages; its tools are JavaScript functions with an input schema, registered with document.modelContext.registerTool(). Tools made from HTML forms are being explored, not yet specifiedA short Smalltalk program built from iOS-style building blocks — screens, lists, text fields, switches, pickers, date pickers, photo and document pickers, buttons — following world-leading human interface guidelines
Answers back to the AgentA tool’s result, returned to the Agent in the browser that called itAs structured data, matched to the request: through the plugins, a signed webhook, a WebSocket or the events list
Connecting your AgentAn Agent in the browser — built into it, in an extension, or the page’s own; it finds a site’s tools by visiting the sitePlugins for Claude Code and ChatGPT, the Taskriz MCP server for any MCP client, and an HTTPS API for any Agent or workflow — wherever it runs
People starting thingsThe person asks the Agent in their browserYour Agent’s request catalog — actions people start from the Taskriz app
CostFree to use; you build and run the website and its toolsA Free plan, then paid plans by the requests your Agents send; the people who answer never pay

Security

WebMCP is a browser API, so it inherits the web’s protections: the page’s own origin, HTTPS, and the browser’s permissions. What a tool may do, and for whom, is designed by whoever builds the site, and the Agent decides when to ask the person first. In Taskriz, a request’s protections come built in.

WebMCPTaskriz
Who can reach a personNo one is reached; a site’s tools are offered to the page, pages of the same origin and the browser’s Agents — another origin only when the site allows itOnly people your Agent sends a request to, or who paired with it. Someone without an account opens a request with one tap on their first device (a one-time code elsewhere, or when the business asks), and anyone can decline, or stop an Agent reaching them
EncryptionThe website’s HTTPS — tools are offered only from secure originsEach request is sealed to the person’s own devices and stored that way, and travels over TLS 1.2 or later
Who can read a requestThe website, the browser, and the Agent and its AI modelOnly the person’s devices — it passes through Taskriz while it’s delivered, and is never stored or logged readable
Running the interfaceThe website’s own pages and JavaScript, in the browserIn a WebAssembly sandbox with no network or file access of its own
On your websiteTools are offered to the page’s own origin and the browser’s Agents; another origin only when the site allows itThe embedded request box is a frame from Taskriz that browsers show only on the one website you enter; it sets no cookies and doesn’t measure your visitors
Confirming what mattersA site can mark a tool consequential or read-only; the Agent chooses whether to ask the person before using itThe person sees the whole request and answers it themselves
Agents and their answersEach tool checks its inputs and the person’s sign-in to the siteThe plugins sign in with OAuth, API Agents with their own credentials, and answers sent to a webhook are signed so your Agent can check they came from Taskriz

To be plain about Taskriz too: files sent with a request or reply are encrypted on our servers but not sealed to devices, and two-step sign-in is on the Roadmap. Security has the details.

When Taskriz fits

Start FreeSee the Docs

When WebMCP fits

Questions

About this comparison

WebMCP was checked in November 2026, from the Draft Community Group Report of 11 November 2026 — the WebMCP specification, the WebMCP project on GitHub and Chrome’s WebMCP documentation. WebMCP is the work of the W3C Web Machine Learning Community Group and its contributors, with editors from Microsoft and Google; Taskriz is not affiliated with it. What Taskriz is building next is on the Roadmap.