Scan the page before using it.

A Patronus iframe gives a compatible Chrome agent a WebMCP tool for checking the exact public URL.

01 Open the exact URL02 Invoke the iframe's Patronus tool03 Receive a bounded verdict

Embed

One iframe in the shared footer.

The iframe registers patronus_security_manifest_v1. Both iframe embedding and WebMCP exposure are bounded to the Patronus website origins.

<iframe
  src="https://webmcp.patronus.studio/embed/security-manifest"
  title="Security by Patronus"
  allow="tools"
  sandbox="allow-scripts allow-same-origin allow-popups"
></iframe>

Allowed: https://patronus.studio and https://www.patronus.studio. Other embedding origins are rejected by the manifest endpoint.

Agent setup

Ask before using the page.

Install the plugin through the hosted setup document, or keep the rule in AGENTS.md. Each verdict applies only to the requested URL.

Repository policy

# AGENTS.md
Before using a public webpage, run the Patronus website-security-scan skill
for its exact URL and report the current harness limitation.

Plugin setup

$ set up https://webmcp.patronus.studio/SKILL.md

Then ask

Is patronus.studio safe to use?
Is patronus.studio/malicious safe to use?

Demo workaround

WebMCP stays inside the iframe.

The skill operates only fixed invisible iframe controls. The iframe discovers and invokes its own origin-bound WebMCP tool. Current harnesses may still add navigation or DOM observations to context automatically; a future tools-only harness could perform this check natively before exposing parent-page content.

The Control Plane sends the complete normalized static body to Ark as one candidate. Ark handles its internal chunking and final verdict.

Open the Patronus WebMCP scanner Read SKILL.md