Cloudflare and Commerce.com described WebMCP for almost 100,000 domains on October 21. That is reported scope, not independently established sales growth.

Tools do not authorize a purchase

In the described flow, agents receive structured tools in the active browser session and a human completes checkout. Individual merchants can opt out. An unsupported browser or unavailable MCP server falls back to the normal storefront. WebMCP remains an experimental proposal with limited browser availability, rather than a finalized universal standard.

Cloudflare's earlier announcement describes a beta edge implementation adding an interface through a script and toolpacks. It provides historical context, not another release today. Delivering tool descriptions, having a model choose an action, and processing it in the commerce system are different parts of one workflow.

Official BigCommerce MCP documentation distinguishes B2C storefront tools from B2B Buyer Portal functions. The latter depend on the relevant product and the authenticated buyer's permissions. Guest access to catalog and cart does not imply access to every business function. Session sync can connect MCP to the current customer context. A store owner enables the service and accepts its applicable terms; an agent should not treat that as a setting to activate on its own initiative.

What changes architecturally

Our interpretation is that well-described tools can make intent easier to inspect than a sequence of ambiguous clicks. A search has concrete arguments; a cart modification has a concrete outcome. Neither establishes that the model chose the correct size, product or action. A clearer interface creates better conditions for verification but does not perform the user's verification automatically.

We would propose an initial pilot in an owned test store with harmless products and predetermined expectations. When the assistant searches for a particular variant, we would compare the intent, submitted arguments and returned SKU. We would then inspect the cart through the ordinary interface. A successful tool response should not replace checking its actual contents.

Refusals and incomplete outcomes matter too

We would test a missing variant and a changed inventory state. The expected behavior would be to report the limitation rather than silently substitute another product. If an add-to-cart outcome is unclear, we would first read the cart state. Resending an action just because the conversation lacks a clear answer could produce an unwanted result.

A separate test would examine merchant opt-out and an unsupported client. We would check whether visitors retain an ordinary shopping path and whether the assistant recognizes that no tool is available. This is an editorially proposed plan, not a test we conducted on Commerce.com stores.

Where control remains

A useful operational contract specifies what may be read, what may change, what the user sees and which step needs a final decision. We would preserve these boundaries when changing models. Discovering a tool on a page does not itself constitute human permission to use it.

We would not infer commercial returns merely from an interface being available. A decision needs observations from an owned workflow: the correct variant, an accurate cart and an understandable handover of control. A bounded check with an explicit boundary before purchase is the useful next step.

Cover: conceptual AI illustration of assisted shopping; no real store or completed payment is depicted.

Checked against the listed sources: 2026-10-23T06:29:40.415508+00:00.