Firecrawl MCP Server
REMOTE · MCP.FIRECRAWL.DEV · 2 COMPONENTS
Firecrawl, the context API for AI agents: search, scrape, interact with the web, plus paper search.
Available components
Last scanned (4 hours ago)
Scores higher than 69% of remote servers
Reachable. Last reached 5 Nov 2026.
Category Web Scraping
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security74
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one. See how to fix → View diagnostics → Partial
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability63
- 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 3056 tokens (~764/item across 4 items; 3 tools + 1 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management67
- Stability check failed: schema churn in the 30 days we've observed: 0 tool removals, 2 breaking changes, 0 auth/transport breaks, 0 additions. See how to fix → Fail
Tool Coverage82
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 38% of tool parameters carry a description.Partial
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 3 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 5 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a current MCP spec version (2026-07-28).Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 5 Nov 26 +1
- The server rewrote its instructions, which are the text every model session reads security
- Server version: 3.36.1 → 3.37.0 functional
- 4 Nov 26 −1
- The server rewrote its instructions, which are the text every model session reads security
- 3 Nov 26 0
- Server version: 3.36.0 → 3.36.1 functional
- 1 Nov 26 0
- The server rewrote its instructions, which are the text every model session reads security
- “firecrawl_parse” added an optional parameter “conversationId” cosmetic
- “firecrawl_scrape” added an optional parameter “conversationId” cosmetic
- “firecrawl_search” added an optional parameter “conversationId” cosmetic
- 28 Oct 26 +1
- MCP protocol: Implements a current MCP spec version (2026-07-28). functional
- MCP protocol version: 2025-11-25 → 2026-07-28 functional
- Server version: 3.35.0 → 3.36.0 functional
- “firecrawl_scrape” reworded the description of “alexandria” cosmetic
- 26 Oct 26 +1
- Server version: 3.34.1 → 3.35.0 functional
- 24 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 47 to 50.
- 23 Oct 26 0
- Server version: 3.33.4 → 3.34.1 functional
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 5 Nov 2026 · Probed https://mcp.firecrawl.dev/v2/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=mcp.firecrawl.dev | CN=YR2,O=Let's Encrypt,C=US | 17 Sept 2026 | 16 Dec 2026 | RSA 2048 | SHA256-RSA | 5351810f70cd5cde8f879e317f347590fcb |
| SANs: mcp.firecrawl.dev | ||||||
| CN=YR2,O=Let's Encrypt,C=US (CA) | CN=Root YR,O=ISRG,C=US | 3 Sept 2025 | 2 Sept 2028 | RSA 2048 | SHA256-RSA | 4ebd24947e24d394802d84a52fd5b319 |
| CN=Root YR,O=ISRG,C=US (CA) | CN=ISRG Root X1,O=Internet Security Research Group,C=US | 13 May 2026 | 2 Sept 2032 | RSA 4096 | SHA256-RSA | f24b6d17f9d9ad7cb1c9fea78782699f |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of mcp.firecrawl.dev. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| dev. | present | 60074 | 8 | Verified |
| firecrawl.dev. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://mcp.firecrawl.dev/v2/mcp | Verified | 200 | |
| http (plaintext) | http://mcp.firecrawl.dev/v2/mcp | HTTPS enforced | 301 | https://mcp.firecrawl.dev/v2/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
firecrawl_parse Firecrawl file parsing ~520
Parse one supported document into markdown, HTML, links, summary, targeted answers, or JSON matching a schema. Supported inputs include common HTML, PDF, Word, RTF, OpenDocument, and spreadsheet files; PDF parsing can be bounded with `pdfOptions.maxPages`. Local MCP reads `filePath` from the server filesystem. Hosted MCP uses two calls: first provide `filePath` to receive upload instructions, upload locally, then call again with the returned `uploadRef`; do not send both fields together. Remote web URLs belong in `firecrawl_scrape`. Set `redactPII` to request redaction of personally identifiable information in the returned content. `zeroDataRetention` requires an eligible authenticated account; omit it for anonymous keyless use. Returns upload instructions for hosted phase one or parsed document content for the final call. Authenticated final responses can include a `data.metadata.scrapeId` for optional parse feedback.
| Name | Type | Req | Description |
|---|---|---|---|
| contentType | string | – | Phase 1 MIME type override. If omitted, the server infers it from the file extension without reading the file. |
| conversationId | string | – | conversationId from any earlier Firecrawl tool result in this conversation; after parallel calls, any one of theirs. Omit only on the first call of a conversation; the result returns one to pass on e… |
| declaredSizeBytes | integer | – | Optional phase 1 size declaration. Hosted MCP does not stat the file; provide this only if the caller already knows it. |
| excludeTags | array | – | – |
| filePath | string | – | Phase 1 only: path to the local file on the caller/harness machine. Hosted MCP will not read or stat this path; it is used only to produce upload instructions. |
| formats | array | – | – |
| includeTags | array | – | – |
| jsonOptions | object | – | – |
| maxAge | number | – | Ignored: parse never reuses or stores indexed content. |
| onlyMainContent | boolean | – | – |
| parsers | array | – | – |
| pdfOptions | object | – | – |
| proxy | string | – | – |
| queryOptions | object | – | – |
| redactPII | boolean | – | – |
| removeBase64Images | boolean | – | – |
| skipTlsVerification | boolean | – | – |
| storeInCache | boolean | – | – |
| uploadRef | string | – | Phase 2 only: short-lived upload reference returned by phase 1 after the local PUT upload completes. |
| zeroDataRetention | boolean | – | – |
| Name | Type | Req | Description |
|---|---|---|---|
| agent_hints | array | – | Optional response guidance from the Firecrawl API. |
| conversationId | string | – | Pass on later Firecrawl calls in this conversation. |
| data | – | – | Parsed document content; can include `data.metadata.scrapeId` for parse feedback. |
| error | – | – | Error message or error object when the call did not succeed. |
| message | – | – | Guidance for the next call. |
| mode | – | – | Which phase of the hosted flow produced this response. |
| nextToolCall | – | – | Hosted phase one: the second `firecrawl_parse` call to make once the upload succeeds, as `{name, arguments}`. |
| notes | – | – | Hosted phase one: constraints on completing the upload flow. |
| raw | – | – | Response body when it was not JSON. |
| success | – | – | Whether the API call succeeded. |
| upload | object | – | Hosted phase one: how to upload the local file. |
| warning | – | – | Non-fatal warning about the result. |
No examples provided.
firecrawl_scrape Firecrawl scrape ~896
Scrape one URL and return its content: markdown by default, or HTML, links, screenshots, branding data, a targeted answer, or JSON matching a supplied schema. Use it when the request identifies a page and needs its content or defined fields: the user gives a URL or names a page or PDF and wants it read or summarized, or wants prices, specs, contact details or a table from it. Use `firecrawl_search` when additional web sources are needed; on an authenticated session, `firecrawl_map` lists a site's URLs and `firecrawl_crawl` collects a set of pages. Firecrawl may serve recently indexed content; set `maxAge: 0` for a live fetch or a smaller `maxAge` to bound staleness. A successful response does not by itself confirm the page is still current. A named browser profile loads saved session data without saving changes to it. Authenticated responses can include a `metadata.scrapeId` for optional scrape feedback. On an authenticated session, `firecrawl_search` and `firecrawl_find_tools` can discover providers for the same fields across several pages; a matching provider returns typed records in one call. With `alexandria` in place of `url`, the tool runs catalogued provider capabilities instead of fetching a page. Some providers require accepted terms; when a response reports a terms requirement, direct the user to the Firecrawl dashboard URL in that response.
| Name | Type | Req | Description |
|---|---|---|---|
| alexandria | – | – | Catalogued Alexandria capability invocation, mutually exclusive with url. One {provider, capability, options} object or an array of 1-10, with contracts available through firecrawl_search or firecraw… |
| conversationId | string | – | conversationId from any earlier Firecrawl tool result in this conversation; after parallel calls, any one of theirs. Omit only on the first call of a conversation; the result returns one to pass on e… |
| domainTools | boolean | – | URL mode only: include domain-matched Alexandria tools for the page in tools on the returned document. Ignored with alexandria. |
| excludeTags | array | – | – |
| formats | array | – | – |
| includeTags | array | – | – |
| jsonOptions | object | – | – |
| location | object | – | – |
| lockdown | boolean | – | – |
| maxAge | number | – | – |
| mobile | boolean | – | – |
| objective | string | yes | The user's underlying goal for this call, in one sentence: what they are ultimately trying to accomplish, not a restatement of the URL or query. Reuse it across related calls. Avoid sensitive informa… |
| onlyMainContent | boolean | – | – |
| parsers | array | – | – |
| pdfOptions | object | – | – |
| profile | object | – | Loads a saved browser profile without saving changes to it. |
| proxy | string | – | – |
| queryOptions | object | – | – |
| redactPII | boolean | – | – |
| removeBase64Images | boolean | – | – |
| requestId | string | – | Idempotency key bound to one Alexandria execution payload. Generated when omitted and returned with the result. |
| screenshotOptions | object | – | – |
| skipTlsVerification | boolean | – | – |
| storeInCache | boolean | – | – |
| timeout | integer | – | Execution timeout in milliseconds. |
| toolDetail | string | – | URL mode only: domain discovery detail, summary by default; compact returns provider/capability/description, full includes contracts. Ignored with alexandria. |
| url | string | – | – |
| waitFor | number | – | – |
| zeroDataRetention | boolean | – | – |
| Name | Type | Req | Description |
|---|---|---|---|
| actions | – | – | Results of the browser actions that ran during the scrape. |
| agent_hints | array | – | Optional response guidance from the Firecrawl API. |
| answer | – | – | Targeted answer to the question that was asked of the page. |
| attributes | – | – | Values collected by the requested attribute selectors. |
| audio | – | – | Audio extracted from the page. |
| blocks | – | – | Typed PDF layout blocks, when `parsers[].blocks` is set. |
| branding | – | – | Branding data extracted from the page. |
| changeTracking | – | – | Change-tracking comparison against the previous scrape. |
| conversationId | string | – | Pass on later Firecrawl calls in this conversation. |
| creditsCost | – | – | Credits this call consumed. |
| data | – | – | Alexandria mode: per-capability results in `data.alexandria`, each with `data`, `records`, or an `error`. |
| delivery | – | – | `retained` when the full result stayed server-side instead of being inlined. |
| error | – | – | Error message or error object when the call did not succeed. |
| estimatedTokens | – | – | Estimated token cost of the full result. |
| feedbackTool | – | – | Pointer to the feedback tool for reporting how this result served the task. |
| highlights | – | – | Highlighted passages from the page. |
| html | – | – | Processed HTML of the page. |
| idleTtlSeconds | – | – | Seconds a retained workspace stays available while idle. |
| images | – | – | Images found on the page. |
| inlineTokenBudget | – | – | Token budget above which a result is retained rather than inlined. |
| json | – | – | Structured data matching the requested JSON schema or prompt. |
| links | – | – | Links found on the page. |
| markdown | – | – | Page content as markdown. |
| menu | – | – | Menu data extracted from the page. |
| message | – | – | Guidance that accompanies the result. |
| metadata | – | – | Page metadata; authenticated responses can include `metadata.scrapeId` for scrape feedback. |
| nextTool | – | – | A follow-up tool call (`{name, arguments}`) that continues or inspects this result. |
| pages | – | – | Physical PDF pages, when `parsers[].pages` is set. |
| product | – | – | Product data extracted from the page. |
| rawHtml | – | – | Unprocessed HTML of the page. |
| receipt | – | – | Billing receipt for the execution. |
| requestId | – | – | Identifier of this Alexandria execution. |
| responseBytes | – | – | Size of the full result in bytes. |
| scrape_id | – | – | Identifier of the underlying scrape. |
| screenshot | – | – | Screenshot of the page. |
| success | – | – | Whether the API call succeeded. |
| summary | – | – | Summary of the page content. |
| tokenEstimateMethod | – | – | How `estimatedTokens` was derived. |
| tools | – | – | Domain-matched Alexandria tools for the page, when `domainTools` is set. |
| video | – | – | Video extracted from the page. |
| warning | – | – | Non-fatal warning about the result. |
| workspaceId | – | – | Workspace holding a retained result, for inspection through virtual Bash. |
No examples provided.
firecrawl_search Firecrawl web search ~1,226
Search web, news, or image sources and return ranked results with query-relevant highlights. Use it for current information, or to list businesses, people, products, jobs or events with websites, prices or contacts. Each web result is a title, URL, and description; use `firecrawl_scrape` on a result URL when the excerpt is not enough. Authenticated search also returns matching Alexandria data providers in data.tools (companies, people, jobs, finance and filings, public records and government spending, real estate, places and restaurants, retail and prices, package registries and developer data, news, research, and more). Prefer a provider over scraping pages when the task needs the same fields across several entities, exact figures or timestamps, provenance, or many records; use web results when they already answer the question. Authenticated searches always add alexandria to the sources, so sources: ["web"] also returns providers; domainTools: false turns off website-matched tools only. On an authenticated session, tool matches describe available capabilities; `firecrawl_find_tools` returns their contracts and `firecrawl_scrape` with an `alexandria` body executes a selected capability. Keyless sessions get no Alexandria matches in data.tools. For a programming question, add `categories: ["developer"]`; its hits return in `data.web` with `category: "developer"`. For a legal or regulatory question, `categories: ["gov"]` returns hits in `data.web` with `category: "gov"` and cannot be combined with other categories; authenticated sessions also have `firecrawl_gov_search` as the dedicated tool. Verify gov results' issuer, jurisdiction, status, and version before citing current law. `categories: ["research"]` restricts web results to research-affiliated websites; the `firecrawl_research_*` tools are a separate surface over paper abstracts and full text (PubMed, bioRxiv, medRxiv, arXiv). Returns source-type result groups and usage metadata. Authenticated responses ca…
| Name | Type | Req | Description |
|---|---|---|---|
| categories | array | – | Limit results to specific source types. `research` restricts ordinary web results to research-affiliated websites and returns page snippets, which is separate from the `firecrawl_research_*` tools th… |
| conversationId | string | – | conversationId from any earlier Firecrawl tool result in this conversation; after parallel calls, any one of theirs. Omit only on the first call of a conversation; the result returns one to pass on e… |
| domainTools | boolean | – | Include domain-matched tools for result URLs. Defaults to true when Alexandria is combined with web, news or images; semantic-only search leaves domain matching off. |
| enterprise | array | – | – |
| excludeDomains | array | – | Hostnames to leave out of results. Mutually exclusive with includeDomains. |
| filter | string | – | – |
| highlights | boolean | – | Return query-relevant page excerpts for web and news results when available (default). Highlights appear in web `description` and news `snippet`; otherwise, original snippets are returned. Set to fal… |
| includeDomains | array | – | Hostnames to restrict results to. Mutually exclusive with excludeDomains. |
| limit | integer | – | – |
| location | string | – | – |
| objective | string | yes | The user's underlying goal for this call, in one sentence: what they are ultimately trying to accomplish, not a restatement of the URL or query. Reuse it across related calls. Avoid sensitive informa… |
| query | string | yes | Query for web and semantic tool discovery. Operators include quoted phrases, `-term`, `site:host`, `inurl:term`, `intitle:term`, and `related:host`; the set is non-exhaustive. Catalogue browsing is a… |
| scrapeOptions | object | – | Fetches the full page of every web result in the same call, and each fetched result is billed as a scrape. Leave it unset unless the task needs the full text of a few results: highlights usually answ… |
| sources | array | – | Search sources; authenticated sessions default to web + alexandria, keyless sessions to web only. Authenticated searches always add alexandria to the sources, so sources: ["web"] also returns provide… |
| tbs | string | – | – |
| toolDetail | string | – | Compact by default. Compact returns only provider, capability and description; full includes contracts. Inspect selected compact tools with firecrawl_find_tools providers and capabilities. |
| Name | Type | Req | Description |
|---|---|---|---|
| agent_hints | array | – | Optional response guidance from the Firecrawl API. |
| conversationId | string | – | Pass on later Firecrawl calls in this conversation. |
| creditsUsed | – | – | Credits this search consumed. |
| data | – | – | Ranked results grouped by source, such as `web`, `news`, `images`, and `alexandria`. Each result carries its `source` and a 1-indexed `position` within that group; pass those pairs to `firecrawl_sear… |
| error | – | – | Error message or error object when the call did not succeed. |
| feedbackTool | – | – | Pointer to the feedback tool for this search. |
| id | – | – | Search identifier, for optional `firecrawl_search_feedback`. |
| nextTool | – | – | A follow-up tool call that continues this search. |
| success | – | – | Whether the API call succeeded. |
| tools | – | – | Domain-matched Alexandria tools for the results. |
| warning | – | – | Non-fatal warning about the result. |
No examples provided.
How do I install the Firecrawl MCP Server server?
Firecrawl MCP Server is a hosted endpoint at https://mcp.firecrawl.dev/v2/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · mcp.firecrawl.dev
claude mcp add --transport http firecrawl-firecrawl-mcp-server 'https://mcp.firecrawl.dev/v2/mcp'
What is the Firecrawl MCP Server server?
Firecrawl MCP Server is listed in the public MCP registry as io.github.firecrawl/firecrawl-mcp-server. Firecrawl, the context API for AI agents: search, scrape, interact with the web, plus paper search. This page covers its hosted endpoint (https://mcp.firecrawl.dev/v2/mcp).
Is the Firecrawl MCP Server server safe to use?
Firecrawl MCP Server scores 77 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Firecrawl MCP Server server expose?
Firecrawl MCP Server exposes 3 tools: firecrawl_scrape, firecrawl_search, firecrawl_parse. Their descriptions and schemas cost roughly 2,642 tokens of context every time the server is loaded.
Does the Firecrawl MCP Server server require authentication?
No. We connected to Firecrawl MCP Server without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the Firecrawl MCP Server server still maintained?
Firecrawl MCP Server is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.