I was eating dinner when my AI agent ate my tabs. I had Safari open with a Chatwoot Meta dashboard in one tab and an n8n executions view in another — both with unsaved state, both in the middle of real work. In a third tab, my own tab, my agent was supposed to be testing a new feature in the MCP server I maintain ( Safari MCP ). I came back to the laptop and both real-work tabs had been navigated to URLs the agent picked. The Chatwoot tab was now showing some test page. The n8n tab was on a Reddit comment thread the agent had been debugging an unrelated module against. The agent hadn't gone rogue. The MCP server had a state-tracking bug — and instead of failing loudly, it had silently fallen back to "use whatever tab the user is on." This is a postmortem. The fix took three releases — v2.10.0 , v2.10.1 , and v2.10.3 — and the iteration is the interesting part. The shape of the bug Safari MCP exposes a safari_new_tab(url) tool.…