Web design & dev news, tracked daily.
Front-end, performance, security, and platform-tooling news relevant to building and maintaining ecommerce sites.
What changed, as it happens.
Tracked daily from primary sources. The items below are what we're watching for clients right now.
Chrome warns the WebMCP tools you expose to agents can be used to hijack them
Chrome’s developer docs for WebMCP (still in origin trial) describe two attack vectors — malicious tool manifests and “contaminated output,” where user-generated content like reviews carries hidden instructions an agent then follows — and specify mitigations for site owners: an untrustedContentHint flag, a readOnlyHint, exposedTo origin restriction, and character-budget caps on tool descriptions and outputs. If you wire up WebMCP tools, treat any UGC-derived text as untrusted before an agent acts on it.Search Engine Journal →
Safari/WebKit ships an MCP server for AI-assisted web debugging
Apple’s WebKit released a Model Context Protocol server for Safari that lets AI agents connect to the browser to collect network and DOM data, aimed at debugging accessibility, compatibility, and performance issues including Core Web Vitals. Another mainstream browser wiring itself for agent access.Search Engine Journal →
Microsoft Clarity now flags bots that ignore your robots.txt
Clarity added a robots.txt-violations layer to its Bot Analytics dashboard, showing which crawlers request disallowed URLs, trends over time, and filtering by operator — practical visibility into AI crawlers like ClaudeBot and GPTBot ignoring directives. It needs a connected CDN or the latest Clarity WordPress plugin.Search Engine Journal →
Google and Shopify back Cloudflare’s PACT protocol for gating AI bots
Google, Shopify, and several browser makers are backing PACT, a Cloudflare-hosted standard for authenticating and gating AI agents and automated bots. It’s positioned as a permission and authentication layer for agentic web access, complementing the ARD and WebMCP specs — and Shopify’s support signals ecommerce platforms are wiring these standards into their infrastructure.Search Engine Journal →
Chrome ships a Lighthouse “Agentic Browsing” audit in M150
Chrome shipped an informational Lighthouse “Agentic Browsing” audit category in M150 that checks accessibility-tree quality, Cumulative Layout Shift, and WebMCP tool/schema availability. It ships with Chrome DevTools for Agents, which lets developers simulate agent interactions while debugging — early tooling for making sites agent-ready.Chrome for Developers →
Custom ecommerce engineering, AI apps, and SEO — typically 60–80% less than traditional agency pricing.
20+ years of BigCommerce engineering, now AI-augmented. Tell us your store, your stack, and your deadline — we quote fixed scope on the first call.