Safari 27 Adds Native MCP Server, Letting AI Agents Like Claude Code and Codex Control the Browser

Apple's WebKit team has detailed Safari 27.0, and the headline developer feature is a built-in Model Context Protocol (MCP) server that gives AI coding agents direct control over the browser window.

According to Apple's WebKit blog, the Safari MCP server lets tools like Claude Code, Codex, or "the agent of your choice" observe how code renders in real time. The server exposes access to the DOM, network requests, screenshots, and console output, letting an agent verify form states, checkout flows, and UI selections without a developer manually switching windows or pasting screenshots into a terminal.

Apple lists specific use cases for the feature, including comparing computed styles and layout against other browsers, testing accessibility issues such as missing labels, improper ARIA attributes, and poor contrast, and analyzing performance through navigation timing and resource load metrics.

Local-only, no Apple data collection

Apple states the MCP server runs entirely on the local machine, makes no network calls of its own, and has no access to a user's personal Safari data. Captured data goes directly to the agent in use rather than to Apple's servers, according to the company.

To enable it, developers must first turn on "Show features for web developers" under Safari > Settings > Advanced, which unlocks a Developer pane. From there, checking "Allow remote automation and external agents" activates the MCP server. Apple's blog post also includes the specific commands needed to connect Claude Code, Codex, or other MCP-compatible agents to Safari.

Broader Safari 27.0 changelog

Beyond MCP support, Apple says Safari 27.0 resolves nearly 850 issues — up sharply from the 525 fixes announced at WWDC just months earlier. Fixes span accessibility, CSS, encoding, fonts, forms, MathML, networking, and WebRTC, among other areas.

Other additions include support for immersive environments in visionOS, and an expansion of the HTML <model> element to iOS, iPadOS, and macOS, allowing websites to embed interactive 3D models the way they would images or video. A new Scroll Anchoring feature aims to stop pages from jumping when content like images loads above the user's current viewport position.

Web Inspector also gets upgrades, including inline color-contrast information, clearer redirect-chain visibility, and improved layout debugging tools. Apple's full post additionally covers changes to WebAssembly, WebGPU, JavaScript, CSS, WebRTC, media playback, Web Extensions, WKWebView, and Service Workers.

What this means

Safari becomes the first major browser to ship a first-party MCP server directly in the shipping product rather than through a third-party extension, positioning Apple to compete for the growing AI coding-agent workflow where Chrome DevTools and third-party MCP bridges have dominated. By keeping the server local and network-call-free, Apple is drawing an explicit privacy line against cloud-based browser-automation tools. The real test will be developer adoption: MCP support is only useful if agent makers like Anthropic and OpenAI's tooling ecosystems treat Safari as a first-class target rather than an afterthought behind Chromium-based browsers.