This week on the channel +115K views this week

Chrome for Developers tests AI safety with a smart-home demo

Maud Nalpas and Kasper Kulikowski demonstrate permission checks and a playlist that tricks an agent into switching off the lights.

Channel:

Chrome for Developers Story of November 4, 2026Trari Newsroom

Why this story? The channel's weekly summary: what went up this week, what is drawing views now, and where the channel stands among similar channels.

How to build safer WebMCP tools for AI agents

Things we can learn from the video

Press to jump

1:19readOnlyHint identifies tools that only read data, reducing unnecessary permission prompts.
3:40consequentialHint makes the demo agent request confirmation before high-stakes actions such as unlocking a door.
6:21Indirect prompt injection hides malicious instructions inside external data consumed by an agent.
6:51Playlist metadata tricks an unconfigured agent into switching off the simulated living room lights.
8:10untrustedContentHint flags external text for defensive handling, including isolation through spotlighting.

A playlist shouldn't be able to tell your smart home what to do. In Chrome for Developers' most-watched new upload, hidden instructions in playlist metadata persuade an AI agent to turn off the living room lights.

It's a simulated smart-home application, not someone's actual house. Maud Nalpas and Kasper Kulikowski use it in "How to build safer WebMCP tools for AI agents" to explain how developers can distinguish harmless reading from consequential actions, such as unlocking a front door. These are Google's own developer tutorials for its browser tools.

The useful contrast is between fewer warnings and better warnings. Read-only tools can avoid unnecessary permission prompts, while high-stakes actions should demand confirmation every time. As Nalpas puts it: "Because if we spam users with useless warnings, they just stop paying attention and blindly click allow without thinking." A separate annotation marks external text as untrusted, helping protect against the playlist trick.

The tutorial reached roughly 4,800 views, narrowly the largest total among four new uploads. WebMCP occupied three of them, with companion lessons on inspecting tools in the Application panel and debugging them with an agent. The earlier "What is WebMCP?" explainer also remains among the channel's busiest videos by daily viewing.

Subscribers were unchanged over the week, and daily channel viewing is currently well below its usual level. Nearby Microsoft Developer is having a busier-than-usual day, while Amazon Web Services is also below its typical daily viewing.

The freshest subject is calendar arithmetic. "Modern Web Guidance in your AI workflow: Global holidays" currently has the most daily views, showing how a coding agent can use Temporal to handle lunisolar dates and avoid leap-month mistakes, with fallbacks for browsers without support.

Published on Trari

Where next?

Also in Technology companies and softwareThis week on the channel +56K views this weekA haunted checkout gives AWS Developers an AI troubleshooting projectMorgan Willis and Rafael Lopes use a mock candy store to build an agent that investigates alarms and reports evidence to Slack.Channel: AWS Developers · Story of November 4, 2026

A different discovery todayVideo taking off 70x its usual first dayTalarico, Ossoff and North Carolina's flip run through AP's election-night streamThe Associated Press put its race calls and balance-of-power maps on a single live feed, with cameras inside campaigns in Texas, Michigan and Georgia.Channel: Associated Press · Story of November 4, 2026

What viewers say

Scoping permissions and enforcing explicit user confirmation on state-changing actions is essential for browser-based agent tools. Treating every DOM parameter as untrusted input and keeping read operations strictly separated from write actions prevents a lot of subtle prompt injection headaches.
@MeWeBeComSee it on YouTube

Public comments from the video's page on YouTube

Or follow us on Telegram

The videos drawing views on Chrome for Developers right now

Debug WebMCP with Chrome DevTools4,761 views · 2026-11-02

Support for WebMCP in Chrome DevTools4,293 views · 2026-10-28

Modern Web Guidance in your AI workflow: Global holidays2,431 views · 2026-11-03

What is WebMCP?36,848 views

The facts

Channel: Chrome for Developers
Subscribers: 822,000
Channel views, last 7 days: 115,010
Videos published this week: 4
Video published: October 30, 2026
Video views so far: 4,843
Views on its first day: 3,156

The numbers

Here is how Chrome for Developers' week looks in views and subscribers.

views gained this week: this channel and similar channels

3,860,703

1,565,065

1,174,237

1,095,776

Chrome for Developers

115,010

Elgato

86,567

Microsoft Surface

73,540

amazon

43,318

subscribers

822,000

no significant change in the last 7 days

total views

1,007,257,803

views per day

4,476

typical day: 13,993

first-day views of each video posted this week

How to build safer WebMCP tools for AI …

3,156

Debug WebMCP with Chrome DevTools

3,733

Support for WebMCP in Chrome DevTools

2,888

subscribers: this channel and similar channels

1,290,000

1,190,000

1,040,000

849,000

Chrome for Developers

822,000

761,000

700,000

529,000

511,000

As of November 4, 2026 · Data source: Trari Social News, Trari Traffic Trends and Ranking Platform, Google YouTube

Subscriber, view, like and comment counts are YouTube's. Rates, usual days, rankings, comparisons and categories are Trari's own calculations.

💡 Test your knowledge

Which annotation is demonstrated for high-stakes actions such as unlocking a front door?