Overview
- Apple shipped a Safari MCP server in Safari Technology Preview 247 on Wednesday, July 1, 2026, enabling MCP-compatible agents to connect via safaridriver and use about 17 tools to inspect DOM, read console logs, list network requests, take screenshots, and drive page interactions.
- The server runs inside an isolated WebDriver automation session that prevents access to AutoFill, cookies, localStorage, and other logged-in Safari state so debugging is reproducible and does not expose personal data.
- Apple’s implementation runs entirely on the user’s Mac and makes no network calls to Apple; captured page content and screenshots go directly to the connected agent and what the agent does with that data depends on the agent and model used.
- Open-source projects such as safari-mcp remain relevant because they target a different use case by driving the user’s real, logged-in Safari session with broader toolsets, and the project maintainer says they will reposition and add an optional WebDriver backend later rather than abandon the project.
- MCP itself is an open standard created by Anthropic and now stewarded by the Agentic AI Foundation, and Apple’s move validates the protocol for agent tooling while signaling developers will balance first-party clean‑room debugging with third-party background automation workflows.