My father sent me an India Post parcel, and I used ChatGPT’s in-app browser to check it using the consignment number. It worked, but the agent ended up seeing more information than it really needed.
This maps directly to the problem we built Mirror WebMCP Secure around: an agent may need authority to perform an action without needing access to all of the underlying private data.
If parcel tracking exposed a Mirror-protected WebMCP action, the tracking identifier could stay behind the website boundary, while the agent receives only the minimum shipment status it needs.
Log in or sign up for Devpost to join the conversation.