Verified facts
- Enabling agent integrations adds WebMCP tools, separate from the app’s MCP server; they can also be requested without a server.
- Read tools and easy-to-undo actions are prioritized; deleting, paying, sending, publishing or sharing require an explicit request from the builder.
- An option also allows all tools from a chat connector, including tools added later, for the user’s own approvals.
What changes
Apps are no longer designed only for humans to click.
Practical implication
Prefer explicit confirmation for irreversible actions.
Availability
Belgium/EEA: the source specifies no explicit regional exclusion; availability depends on the account, plan and service region.
Limits and uncertainty
Allowing an entire connector extends trust to future tools. An agent-accessible interface is not a security audit.