FetchSAFE
A flexible HTTP fetching Model Context Protocol server.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://www.npmjs.com/package/mcp-fetch-server)
An MCP server for fetching web content in multiple formats — HTML, JSON, plain text, Markdown, readable article content, and YouTube transcripts.
Tools
All tools accept the following common parameters:
- fetch_html — Fetch a website and return its raw HTML content.
- fetch_markdown — Fetch a website and return its content converted to Markdown.
- fetch_txt — Fetch a website and return plain text with HTML tags, scripts, and styles removed.
- fetch_json — Fetch a URL and return the JSON response.
- fetch_readable — Fetch a website and extract the main article content using Mozilla Readability, returned as Markdown. Strips navigation, ads, and boilerplate. Ideal for articles and blog posts.
- fetch_youtube_transcript — Fetch a YouTube video's captions/transcript. Uses
yt-dlpif available, otherwise extracts directly from the page. Accepts an additionallangparameter (default:"en") to select the caption language.
Installation
As an MCP server
Add to your MCP client configuration:
{
"mcpServers": {
"fetch": {
"command": "npx",
"args": ["mcp-fetch-server"]
}
}
}As a CLI
npx m
3f4361d01094OBSERVED · 2026-09-27Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add mcp-fetch-server -- npx -y [email protected]
{
"mcpServers": {
"mcp-fetch-server": {
"command": "npx",
"args": [
"-y",
"[email protected]"
]
}
}
}Exposed tools (6)
6 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
fetch_html | read | Fetch a website and return its unmodified contents as HTML |
fetch_json | read | Fetch a JSON file from a URL |
fetch_markdown | read | Fetch a website and return its contents converted to Markdown |
fetch_readable | read | Fetch a website and return its main content parsed by Mozilla Readability, converted to Markdown. Strips away navigation, ads, and boilerplate. Ideal for articles and blog posts. |
fetch_txt | read | Fetch a website, convert the content to plain text (no HTML) |
fetch_youtube_transcript | read | Fetch a YouTube video page and extract its captions/transcript |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (1 observation(s))
- Shell
- declared (2 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (3)
url: "http://127.0.0.1/internal",
@modelcontextprotocol/sdk, @mozilla/readability, jsdom, private-ip, turndown, zod, @types/bun, @types/jsdom
logo.jpg
Gates applied: no_behavioural_pass.
3f4361d01094full audit observations/trust-audit/mcp-server/zcaceres__fetch.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-09-27 | 3f4361d01094 | SAFE | B | 89 | first audit |
Questions
What is the Fetch MCP server?
A flexible HTTP fetching Model Context Protocol server.
What tools does Fetch expose?
6 in total: 6 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Fetch safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does Fetch need?
No credential environment variables were found in its source, so it appears to need none.
How does Fetch run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as mcp-fetch-server at 1.1.2.
How current is this page?
The grade is for one exact copy of the source (3f4361d01094), read on 2026-09-27. The repository is watched and re-audited when it changes.