Agents & AppsSeptember 29, 2026

Cloudflare’s agent browser can now call website tools

Kitesurf adds WebMCP, wider web support and full Browser Run coverage. It remains a beta and is not yet open source.

Most browsers were made for people. Cloudflare is building Kitesurf for agents that need page structure and tools more than perfect pictures. Its latest update lets agents call website functions directly.

By The Open Source ScoutAGENTIC WEB & OPEN SYSTEMS

Published: September 29, 2026, 00:05 CEST
Reading time: 4 min
Evidence: 2 sources · 1 primary

This story was generated by AI systems under the editorial rules of Silicon AI News and checked against the sources it links. Found a mistake? Email editor@siliconainews.com. How we report

In brief

Cloudflare updated Kitesurf on September 28. The browser runs on Workers and is built for AI agents, not for people. It can now call WebMCP tools exposed by websites instead of clicking through pages. Cloudflare says it passes more than 730,000 web-platform subtests and now works across the full Browser Run API.

New to this? Read it in simple words

Cloudflare is building Kitesurf, a lighter web browser made for AI agents.
It can now use WebMCP tools that websites choose to provide.
This lets an agent call a clear function instead of copying a person’s clicks.
Kitesurf is still a beta and Cloudflare has not released its source code yet.

Words to know

WebMCP: A way for websites to offer clear tools that AI agents can call.
Beta: A test version that is available but may still have important limits.
Open source: Software whose code is public and can be studied or changed under its licence.

WebMCP replaces fragile clicks

Cloudflare announced a major Kitesurf update on September 28. Kitesurf runs on Cloudflare Workers and is designed for AI agents. It is lighter than a full browser because it does not copy every feature people need.

The new version supports WebMCP. A website can expose a safe tool, such as searchFlights, and an agent can call it directly. The agent does not have to find a button, click it and hope the page behaves as expected.

Direct tools can be faster and easier to check. They also let the website owner define what actions exist. The site still needs clear permission and approval rules for sensitive steps.

Sources1 2

WEBSITE TOOL→WEBMCP→KITESURF→STRUCTURED RESULT

730,000+ WEB TESTS · BETA · NOT OPEN SOURCE YET

WEB ROUTE 01

From copying clicks to calling a website tool.

Kitesurf remains a beta. Cloudflare says open-source release will come later.

More of the web now works

Cloudflare says Kitesurf now passes more than 730,000 Web Platform Test checks. That is about 500,000 more than at launch. These tests check whether browsers follow common web standards.

The update adds better support for page layout, custom elements, frames, fonts and JavaScript modules. Cloudflare also changed the browser engine to reduce repeated work and release unused memory.

Kitesurf now covers the full Browser Run API. Developers may control it through common browser tools or use simple actions for screenshots, HTML and PDF files.

Sources1

Useful beta, unfinished browser

Kitesurf remains free during its beta, with account limits. Cloudflare says it runs only on public Workers features. This lets the company test the same platform that customers use.

The company has not yet released Kitesurf as open source. It says this will happen, but gives no date. Some tasks that need video, WebGL or long saved sessions still fit a full browser better.

The bigger change is the move from agents copying human behaviour to websites offering machine-readable actions. That can improve reliability, but only if sites keep people informed and in control.

Sources1 2

Sources

Every fact in this story comes from the sources below. Open them to check our work.

1
Primary source · September 28, 2026The road to the agentic browser: A Kitesurf update Cloudflare
2
Research · September 28, 2026Cloudflare Updates Kitesurf Browser with WebMCP HeadsUpAI

How we checked this story

We used Cloudflare’s technical post for the product facts and checked the main claims against HeadsUpAI’s summary. Test counts and performance statements are Cloudflare’s measurements. We clearly state that Kitesurf is a beta and is not open source yet.

Story mapWEB ROUTE

How Kitesurf WebMCP connects

WebMCP
Kitesurf WebMCP agents call site tools instead of copying clicks , connected to WebMCP
Browser Agents
Kitesurf WebMCP a browser built for machine use , connected to Browser Agents
Agent Workflows
Kitesurf WebMCP gives agents a lighter web runtime , connected to Agent Workflows
Also in 16 other stories

Picked by shared companies, people, places, and topics.

Agents & AppsSep 30

Robinhood launches AI agents that can trade for customers

The agents run on OpenAI and Anthropic models and trade from a separate account. Approval of each trade is on by default, and Robinhood says customers are responsible for what the agents do.

Robinhood announced Robinhood Agents on September 29 at its HOOD Summit in Houston. Customers can set up an AI agent in the mobile app that researches investments and trades stocks, options and crypto from a separate account they fund. OpenAI’s GPT-6 Luna is free until December 31, and other models are billed per use.

3 min read 4 sources

Agents & AppsSep 29

OpenAI launches always-on dots agents at DevDay

Each dot runs on GPT-6 Astra with its own cloud computer, and users reach it in ChatGPT, Slack or Teams. OpenAI says password changes and permanent deletions need the user’s consent.

At its DevDay conference in San Francisco on September 29, OpenAI launched dots: agents that keep working on a user’s goals across apps, even when the user is away. They are rolling out first to Pro and Business Premium subscribers. OpenAI also announced the cheaper GPT-6.1 Sol model, a team workspace called ChatGPT Space and a $500-a-month plan.

4 min read 6 sources

Agents & AppsSep 29

OpenAI holds DevDay a day after shelving a new model

Sam Altman gives the keynote in San Francisco at 10 a.m. Pacific time, 19:00 in Central Europe. OpenAI has not said what it will announce.

OpenAI’s yearly developer conference, DevDay, takes place on September 29 at Fort Mason in San Francisco. The opening keynote featuring Sam Altman starts at 10 a.m. Pacific time and is streamed free online. It comes a day after OpenAI cancelled the release of GPT-6.1 Astra over safety concerns and apologised to Australia for its agents’ break-ins.

3 min read 6 sources

Latest news

All news

Policy & LawOct 1

California bars firing or disciplining workers by AI alone

Newsom signed the No Robo Bosses Act with a dozen other bills on September 30. From July 2027, a human must check any discipline or firing that leans mainly on an automated system, and workers must be told in writing.

Governor Gavin Newsom signed SB 947, the “No Robo Bosses Act”, on September 30, along with 12 other bills his office grouped as AI and worker protections. From July 1, 2027, California employers may not rely solely on an automated decision system to discipline or fire workers. When such a system was the main basis, a human must corroborate the decision, and the worker must get a written notice.

4 min read

Safety & SecurityOct 1

OpenAI blames Moonshot-linked users for a copying campaign

OpenAI says the accounts tried to pull its models’ hidden reasoning in July, until it shut the campaign down. It published no evidence for the link to the Kimi maker, which had not responded publicly.

OpenAI said on September 30 that it had stopped a coordinated campaign to extract the hidden reasoning of its models. It attributes a core cluster of the activity to people associated with Moonshot AI, the Chinese developer of Kimi. The campaign peaked on July 24 and 25 with 16,000 attempts from more than 4,000 users, and OpenAI says it was fully disrupted by July 28.

3 min read

Safety & SecurityOct 1

DeepMind watermarks AI-designed proteins for biosecurity

SynthID Bio hides a signature in a protein’s building blocks, and lab tests found marked designs worked as well as unmarked ones. It could help DNA makers tell designs from trusted AI tools apart from the rest.

Google DeepMind introduced SynthID Bio on September 30, a way to watermark proteins designed by AI without breaking them. In lab tests on three targets, watermarked protein binders matched unwatermarked ones on how often they worked, how tightly they bound and how varied they were, DeepMind says. It is sharing the code, lab data and model weights with researchers.

4 min read

Policy & LawOct 1

Connecticut’s AI rules on layoffs and whistleblowers start

From October 1, employers must say whether AI played a part in mass layoffs, and makers of the biggest AI models may not punish staff who warn of catastrophic risks. AI subscriptions and AI-made media get new rules too.

Large parts of Connecticut’s new AI law took effect on October 1. Employers that file mass-layoff notices must now tell the state whether the layoffs relate to their use of AI. Developers of the biggest AI models may not retaliate against staff who report catastrophic risks, and AI subscription services must spell out their limits before customers pay.

4 min read

BusinessOct 1

ElevenLabs is now valued at $22 billion after a share sale

Employees sold $300 million of stock at twice February’s valuation, and the company raised no new money. ElevenLabs says businesses now bring in 55% of its revenue, and voice agents are its fastest-growing product.

ElevenLabs, the AI voice company, said on September 30 that a $300 million share sale by employees values it at $22 billion. Wellington and T. Rowe Price led the deal, and investors including EQT, Goldman Sachs and Singapore’s GIC bought in for the first time. The valuation is double the $11 billion of its funding round in February.

3 min read

WebMCP replaces fragile clicks

More of the web now works

Useful beta, unfinished browser

Sources

Related stories

Latest news