Site must be slammed - but I'm interested bc I'm working on a similar thing. But my project (one aspect at least) is for expressing HTTP calls as MCP tools.
The format looks like this:
```
---
[add-list-item] Add a new item to a list.
# Adjust the fields object to match your list's actual columns.
Been having a lot of fun with this, as I can pile up these integrations and make detailed MCPs quickly.
jrecyclebin
Congrats on the launch! The approach of turning unstructured sites into deterministic MCPs is really interesting, especially the self-healing maintenance jobs.
Curious about the failure mode: what happens when a browser action fails or times out? The agent will often just blindly retry the exact same MCP tool call with the exact same arguments. Since the tool call itself returns a 200 OK, standard retry counters miss it, and you just burn tokens while the browser keeps timing out in the background.
Are you doing any payload/state validation at the runtime layer to hard-stop those cyclic failures before the next call, or does the Guardian model handle that?
- at 'minting' time, uses OpenAI API keys, instead of coding agent subscription
- tries to solve for a particular use case, instead of all the site provides
rahimnathwani
How do you handle credentials and sessions for sites behind a login, like the bank and insurance portals you mention? Is the user's password or session cookie stored on your side, or does the generated MCP run against a session the user keeps locally?
Related: page content is untrusted input that now flows straight into an agent's context. Do the deterministic tools return only structured fields you've extracted, or can arbitrary page text (reviews, messages, product descriptions) pass through? That seems like the main prompt-injection surface for anything that can also perform actions like checkout.
shipsafestack
Curious how this handles session isolation and rate-limiting when converting dynamic DOM heavy pages into MCPs.
If an agent hits a heavy SPA with infinite scroll or aggressive bot protection, does Pomerado handle edge-caching or proxy-level deduplication, or is it parsing raw DOM on every tool call?
KallowayThayer
How do you get around bot detection? For example, if I pointed this at Amazon, I don't expect it would work.
But does it magically somehow?
thefourthchime
I built a self-healing scraper for arbitrary car dealership sites. Layout changes were the easy part to heal; anti-bot was where it got hard. Curious how your repair agent handles that.
gvieira
I want to slap this on LinkedIn Sales Navigator, but some say it gets your account banned if they detect using using the DOM or accessibility.
theturtletalks
What does self healing mean here? And are you guys trying to be a more general version of webMCP? Looks promising, congratulations on the launch!
a_c
> We’re ex-McKinsey
I see this often, qualifying ex-big consulting firm. What does it imply? Could it be more specific?
comments (10)
The format looks like this:
``` --- [add-list-item] Add a new item to a list. # Adjust the fields object to match your list's actual columns.
$fields is object POST https://graph.microsoft.com/v1.0/sites/$site_id/lists/$list_... Authorization: Bearer $token Content-Type: application/json { "fields": $fields }
HTTP 201 ```
Been having a lot of fun with this, as I can pile up these integrations and make detailed MCPs quickly.
jrecyclebin
Curious about the failure mode: what happens when a browser action fails or times out? The agent will often just blindly retry the exact same MCP tool call with the exact same arguments. Since the tool call itself returns a 200 OK, standard retry counters miss it, and you just burn tokens while the browser keeps timing out in the background.
Are you doing any payload/state validation at the runtime layer to hard-stop those cyclic failures before the next call, or does the Guardian model handle that?
bshafiq
The obvious differences I can see are:
- generates an MCP server instead of a CLI
- at 'minting' time, uses OpenAI API keys, instead of coding agent subscription
- tries to solve for a particular use case, instead of all the site provides
rahimnathwani
Related: page content is untrusted input that now flows straight into an agent's context. Do the deterministic tools return only structured fields you've extracted, or can arbitrary page text (reviews, messages, product descriptions) pass through? That seems like the main prompt-injection surface for anything that can also perform actions like checkout.
shipsafestack
If an agent hits a heavy SPA with infinite scroll or aggressive bot protection, does Pomerado handle edge-caching or proxy-level deduplication, or is it parsing raw DOM on every tool call?
KallowayThayer
But does it magically somehow?
thefourthchime
gvieira
theturtletalks
a_c
I see this often, qualifying ex-big consulting firm. What does it imply? Could it be more specific?
dogscatstrees