FetcherSAFE
MCP server for fetch web page content using Playwright headless browser.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
中文 | Deutsch | Español | français | 日本語 | 한국어 | Português | Русский
MCP server for fetch web page content using Playwright headless browser.
🌟 Recommended: OllaMan - Powerful Ollama AI Model Manager.
Advantages
- JavaScript Support: Unlike traditional web scrapers, Fetcher MCP uses Playwright to execute JavaScript, making it capable of handling dynamic web content and modern web applications.
- Intelligent Content Extraction: Built-in Readability algorithm automatically extracts the main content from web pages, removing ads, navigation, and other non-essential elements.
- Flexible Output Format: Supports both HTML and Markdown output formats, making it easy to integrate with various downstream applications.
- Parallel Processing: The
fetch_urlstool enables concurrent fetching of multiple URLs, significantly improving efficiency for batch operations.
- Resource Optimization: Automatically blocks unnecessary resources (images, stylesheets, fonts, media) to reduce bandwidth usage and improve performance.
- Robust Error Handling: Comprehensive error handling and logging ensure reliable operation even when dealing with problematic web pages.
- Configurable Parameters: Fine-grained control over timeouts, content extraction, and output formatting to suit
0fb220803c8dOBSERVED · 2026-09-25Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add fetcher-mcp -- npx -y [email protected]
{
"mcpServers": {
"fetcher-mcp": {
"command": "npx",
"args": [
"-y",
"[email protected]"
]
}
}
}Exposed tools (3)
2 read · 1 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
browser_install | write | Install Playwright Chromium browser binary. Call this if you get an error about the browser not being installed. |
fetch_url | read | Retrieve web page content from a specified URL |
fetch_urls | read | Retrieve web page content from multiple specified URLs |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (1 observation(s))
- Network
- declared (1 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (1)
@modelcontextprotocol/sdk, @mozilla/readability, express, jsdom, playwright, turndown, turndown-plugin-gfm, @types/express
Gates applied: no_behavioural_pass.
0fb220803c8dfull audit observations/trust-audit/mcp-server/jae-jae__fetcher-1.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-09-25 | 0fb220803c8d | SAFE | B | 89 | first audit |
Questions
What is the Fetcher MCP server?
MCP server for fetch web page content using Playwright headless browser.
What tools does Fetcher expose?
3 in total: 2 read-only, 1 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Fetcher safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does Fetcher need?
No credential environment variables were found in its source, so it appears to need none.
How does Fetcher run?
It speaks sse, stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as fetcher-mcp at 0.3.9.
How current is this page?
The grade is for one exact copy of the source (0fb220803c8d), read on 2026-09-25. The repository is watched and re-audited when it changes.