Index live · v1.7.0 · OCT 6 2026

Firecrawl

Official
byFirecrawl

Advanced web scraping with JS rendering, PDF extraction, and structured data.

SSETypeScriptAPI Key Required
SSE, widely popular

Configuration

{
     "mcpServers": {
       "firecrawl-mcp": {
         "command": "npx",
         "args": ["-y", "firecrawl-mcp"],
         "env": {
           "FIRECRAWL_API_KEY": "YOUR-API-KEY"
         }
       }
     }
   }

Run in a terminal. Copied verbatim from the upstream README.

AgenticSkills Audit

Automated framework checks. Deep code review tracked separately. Read the methodology →

2/2
2 of 2 automated checks passed
Audited Aug 7, 2026
Hosted endpoint
TLS-only (HTTPS) endpoint
Mitigates: Plaintext credential interceptionResponded 200 over HTTPS
Evidence
OAuth 2.1 metadata (RFC 9728)
Mitigates: Token mismanagement, audience confusionRFC 9728 metadata present
Evidence
Repo-level checks
SECURITY.md published
Mitigates: Coordinated disclosure pathHosted server — repo-level check not applicable
Commit in last 90 days
Mitigates: Maintainer abandonmentHosted server — no public commit log
≥2 active contributors
Mitigates: Bus-factor of oneHosted server — no public contributor list
CI pipeline configured
Mitigates: Code health regressionHosted server — no public CI
Dependency lockfile committed
Mitigates: Dependency confusionHosted server — repo-level check not applicable
Signed releases (npm provenance)
Mitigates: Supply-chain backdoorHosted server — supply chain via vendor
Software Bill of Materials (SBOM)
Mitigates: Audit trailHosted server — repo-level check not applicable
License declared
Mitigates: Legal ambiguityHosted server — vendor terms of service apply

Deep framework checks (OAuth 2.1 / PKCE implementation, input validation, sandboxing) require human source review and are tracked separately. This scorecard covers programmatically verifiable signals only.

Quick Stats

Trust LevelOfficial
TransportSSE
API KeyRequired
LanguageTypeScript
CategoryWeb Search & Browsing
Sourcefirecrawl/firecrawl-mcp-server
Websitefirecrawl.dev

Author

F

Firecrawl

Official

Tags

scrapingcrawlingextractionpdf

Used in 2 workflows

The SEO Content Sprint

Audit → outline → draft → schema → publish → verify indexing, in a single session.

5 skills · 4 MCP

The Programmatic SEO Page Factory

Template + differentiated data → hundreds of long-tail pages, monitored at scale.

3 skills · 3 MCP

Get new MCP servers in your inbox. What we added, what failed the security audit, and why. See a past issue.