Partially ready.

My website target.com has no WebMCP tools registered. WebMCP (the W3C draft at https://webmachinelearning.github.io/webmcp/, shipping behind a Chrome origin trial and supported in the ChatGPT desktop browser) lets a page expose typed tools that AI agents can call instead of guessing at the UI.

Task: identify the 2-3 core actions a visitor performs on this site (e.g. search, check availability, get pricing, submit an inquiry) and register each as a WebMCP tool on page load:

document.modelContext.registerTool({
  name: 'search_products',            // snake_case, specific
  description: 'Search the catalog; returns names, prices and URLs.', // written FOR the model: what it does, when to call it, what it returns
  inputSchema: { type: 'object', properties: { query: { type: 'string' } }, required: ['query'] },
  async execute({ query }) { /* call the site's existing search endpoint and return JSON */ }
});

Guard for environments without the API (if (!('modelContext' in document)) use the @mcp-b/global polyfill or return early). Wire execute() to existing endpoints — do not invent new backend functionality. When you are done, verify the fix by re-scanning at https://webmcp-ai.dev/score/target.com (or POST the URL to https://webmcp-ai.dev/api/scan) and confirm the check now passes.

My website target.com has HTML forms but none are annotated as declarative WebMCP tools. The WebMCP draft defines a zero-JavaScript path: annotate a form with toolname/tooldescription attributes and agents can invoke it as a structured tool.

Task: find the site's most important forms (search, contact, booking, newsletter) and add declarative tool attributes, e.g.:

<form toolname="contact_sales" tooldescription="Send a message to the sales team; expects name, email and message." action="/contact" method="post">

Keep names snake_case and descriptions written for an AI model (what it does + what it expects). Do not change form behavior for human users. When you are done, verify the fix by re-scanning at https://webmcp-ai.dev/score/target.com (or POST the URL to https://webmcp-ai.dev/api/scan) and confirm the check now passes.

My website target.com serves no MCP server card. Agents probe /.well-known/mcp/server-card.json to discover whether a site offers a backend MCP server.

Task: if the site has (or should advertise) an MCP endpoint, publish a valid JSON server card at /.well-known/mcp/server-card.json describing it (name, description, endpoint URL, transport). If there is no MCP server, this check is optional — skip it rather than publishing a card that points nowhere. When you are done, verify the fix by re-scanning at https://webmcp-ai.dev/score/target.com (or POST the URL to https://webmcp-ai.dev/api/scan) and confirm the check now passes.

My website target.com serves /llms.txt but no /llms-full.txt. llms-full.txt is the companion file with full flattened content for LLM ingestion.

Task: generate /llms-full.txt containing the full markdown content of the site's key pages (docs, guides, product pages) concatenated under clear H1/H2 headings, ideally regenerated at build time so it never goes stale. When you are done, verify the fix by re-scanning at https://webmcp-ai.dev/score/target.com (or POST the URL to https://webmcp-ai.dev/api/scan) and confirm the check now passes.

My website target.com's pages are missing substantive meta descriptions.

Task: add a unique <meta name="description"> of 120-160 characters to every indexable page stating concretely what the page does or offers — no keyword stuffing, no boilerplate repeated across pages. When you are done, verify the fix by re-scanning at https://webmcp-ai.dev/score/target.com (or POST the URL to https://webmcp-ai.dev/api/scan) and confirm the check now passes.

My website target.com sends no Permissions-Policy header. WebMCP tool exposure is governed by this policy (the "tools" directive, default self), and declaring one signals deliberate configuration.

Task: add a Permissions-Policy response header at the server/CDN layer declaring the powerful features the site actually uses and disabling the rest, e.g.: geolocation=(), microphone=(), camera=(). When you are done, verify the fix by re-scanning at https://webmcp-ai.dev/score/target.com (or POST the URL to https://webmcp-ai.dev/api/scan) and confirm the check now passes.