Apple Safari 27 integrates native Model Context Protocol for AI agents

Apple has released Safari 27, making it the first major consumer browser to include a native Model Context Protocol (MCP) server. This integration allows AI agents and external development environments to interact directly with web content through a standardized interface.

The implementation provides 17 distinct automation tools, including DOM manipulation, network visibility, runtime evaluation, and automated screenshot capabilities. These tools enable AI clients—such as Claude Code, Gemini, or Cursor—to navigate and interact with websites in ways previously limited to manual input or specialized scripts.

To address security concerns, Apple has designed the architecture to run locally as a stdio subprocess that does not transmit data to Apple. The system operates within an isolated automation window, preventing AI agents from accessing sensitive user information such as cookies, passwords, AutoFill data, or browsing history. Use of the feature requires a manual two-step opt-in through the browser's Advanced and Developer settings.