io.github.n24q02m/wet-mcp
PYPI · WET-MCP · SCANNED SEP 20
Open-source MCP server for AI agents: web search, content extraction, and library docs.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security32
- Malware scan not yet available for this package.Unverified
- CVE check failed: a known advisory affects this package; its severity couldn't be graded. See how to fix → View diagnostics → Fail
- Runs hatchling.build at install time, a recognised native-build step with no shell scripting around it. View diagnostics → Pass
- 20 of 193 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency23
- Repository check failed: the declared repository URL redirects; it must resolve directly. See how to fix → View diagnostics → Fail
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (Apache-2.0).Pass
- Actively maintained (last published 0 days ago).Pass
- Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability55
- AI-judged instruction clarity (good).Pass
- Context-footprint check failed: tool/resource definitions use about 2123 tokens (~353/item across 6 items; 6 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management30
- Stability observed for 9 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage71
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 0% of tool parameters carry a description.Fail
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 6 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 7 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
How do I install the io.github.n24q02m/wet-mcp server?
io.github.n24q02m/wet-mcp runs locally as a PyPI package, launched with uvx wet-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
pypi · wet-mcp
claude mcp add n24q02m-wet-mcp -- uvx wet-mcp
{
"mcpServers": {
"n24q02m-wet-mcp": {
"command": "uvx",
"args": [
"wet-mcp"
]
}
}
} {
"servers": {
"n24q02m-wet-mcp": {
"command": "uvx",
"args": [
"wet-mcp"
]
}
}
} codex mcp add n24q02m-wet-mcp -- uvx wet-mcp
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"n24q02m-wet-mcp": {
"type": "local",
"command": [
"uvx",
"wet-mcp"
],
"enabled": true
}
}
} openclaw mcp add n24q02m-wet-mcp --command uvx --arg wet-mcp
mcp_servers:
n24q02m-wet-mcp:
command: "uvx"
args: ["wet-mcp"] {
"McpServers": {
"n24q02m-wet-mcp": {
"Transport": "stdio",
"Command": "uvx",
"Arguments": [
"wet-mcp"
]
}
}
} assistant mcp add n24q02m-wet-mcp -t stdio -c uvx -a wet-mcp
{
"mcpServers": {
"n24q02m-wet-mcp": {
"command": "uvx",
"args": [
"wet-mcp"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 19 Sept 26 +1
- Package version: 3.15.3 → 3.15.5 functional
- Package version: 3.15.3 → 3.15.4 functional
- 18 Sept 26 0
- Package version: 3.14.9 → 3.15.3 functional
- Package version: 3.14.9 → 3.15.1 functional
- Package version: 3.14.9 → 3.15.0 functional
- 17 Sept 26 −14
- Malware scan: pass → unverified ▼ security
- Package version: 3.14.8 → 3.14.9 functional
- 16 Sept 26 +15
- Stability: 0.13 → unverified ▼ security
- Tool safety: pass → unverified ▼ security
- Malware scan: unverified → pass ▲ security
- Tool coverage: 100 → unverified ▼ functional
- Capabilities: pass → unverified ▼ functional
- Schema quality: Schema quality not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet. functional
- Package version: 3.14.7 → 3.14.8 functional
- 15 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 10 to 13. That category is still filling its 30-day observation window: 3 days of observed history at the previous scan, 4 at this one. The score rises as the window fills, whether or not the server changes.
- 14 Sept 26 0
- Malware scan: unverified → pass ▲ security
- Package version: 3.14.5 → 3.14.7 functional
- Package version: 3.14.5 → 3.14.6 functional
- 13 Sept 26 +1
- Malware scan: unverified → pass ▲ security
- Package version: 3.12.0 → 3.14.5 functional
- Package version: 3.12.0 → 3.14.4 functional
- Package version: 3.12.0 → 3.14.3 functional
- Package version: 3.12.0 → 3.12.1 functional
- 12 Sept 26 −15
- Malware scan: pass → unverified ▼ security
- Stability: unverified → 0.03 ▲ functional
- Package version: 3.11.0 → 3.12.0 functional
- Package version: 3.11.0 → 3.11.2 functional
- Package version: 3.11.0 → 3.11.1 functional
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Sept 2026 · Analysed pypi/wet-mcp@3.15.5
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | pypi |
Background: How many MCP packages publish verified provenance →
Install scripts 1 script
| Hook | Tier | Command |
|---|---|---|
| build_backend | allowlisted | hatchling.build |
Background: Why install scripts are a supply-chain risk →
Vulnerabilities 3 findings
| ID | CVE | Severity | Vector | Fix available |
|---|---|---|---|---|
| GHSA-w8v5-vhqr-4h9v | CVE-2025-69872 | medium | no | |
| PYSEC-2026-2447 | CVE-2025-69872 | none | no | |
| GHSA-8mgp-746c-j5xp | CVE-2026-81726 | high | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L | no |
Background: What a vulnerability scan can and cannot prove →
Dependencies 193 packages
| Packages resolved | 193 |
|---|---|
| Stale | 19 |
| No linked repository | 1 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
config ~89
Server config and management. Actions: status|set|cache_clear|docs_reindex|warmup|setup_sync|setup_status|setup_start|setup_skip|setup_reset|setup_complete. Use help tool with tool_name='config' for full docs.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | – |
| force | boolean | – | – |
| key | – | – | – |
| remote_type | – | – | – |
| value | – | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
config__open_relay ~50
Get the relay configuration URL for wet-mcp, opening it in the user's browser when possible. Returns the relay URL, whether the browser launched, and the current status.
| Name | Type | Req | Description |
|---|---|---|---|
| ctx | – | yes | – |
Structured output declared, but exposes no named fields.
No examples provided.
extract ~798
Read and return full page content from URLs or local files. Use this when you have a specific URL and need its content. For finding URLs first, use the `search` tool instead. Actions: - extract: Get clean content from URLs. Example: extract(action="extract", urls=["https://example.com/article"]) - batch: Batch extract with per-domain rate limiting (max 50 URLs). Example: extract(action="batch", urls=["https://a.com/1", "https://b.com/2"]) - crawl: Deep crawl following links from root URLs. Example: extract(action="crawl", urls=["https://docs.example.com"], depth=2) - map: Discover site URL structure without extracting content. Example: extract(action="map", urls=["https://example.com"]) - convert: Convert local files (PDF, DOCX, PPTX, XLSX) to Markdown. Example: extract(action="convert", paths=["/home/user/report.pdf"]) - extract_structured: Extract structured data using JSON Schema + LLM. Example: extract(action="extract_structured", urls=["https://example.com/pricing"], schema={"type": "object", "properties": {"price": {"type": "string"}}}) - agent: Multi-step research orchestration -- search the web, extract top results, synthesize a cited Markdown answer. Example: extract(action="agent", query="latest pydantic 2 changes", max_urls=5) - interact: Drive a page with click/fill/submit via patchright. Example: extract(action="interact", url="https://example.com/login", actions=[{"type": "fill", "selector": "#email", "value": "x@y.com"}, {"type": "submit", "selector": "form"}]) - diff: Track content changes across fetches of the same URL(s). Example: extract(action="diff", urls=["https://example.com/pricing"]) Key parameters: - urls (required for extract/batch/crawl/map/extract_structured/diff): List of URLs - paths (required for convert): List of local file paths - query (required for agent): Research question to answer - url (required for interact): Page URL to drive - actions (required for interact): List of {type, selector?, description?, value?} ops - max_urls…
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | – |
| actions | – | – | – |
| depth | integer | – | – |
| format | string | – | – |
| max_pages | integer | – | – |
| max_urls | integer | – | – |
| paths | – | – | – |
| prompt | – | – | – |
| query | – | – | – |
| refetch | boolean | – | – |
| schema | – | – | – |
| screenshot | boolean | – | – |
| session | – | – | – |
| stealth | boolean | – | – |
| synthesis_model | – | – | – |
| token_budget | integer | – | – |
| url | – | – | – |
| urls | – | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
help ~131
Get detailed documentation for any tool. Call this when you need full parameter reference or usage examples. Valid tool_name values: search, extract, media, config. Quick guide -- which tool to use: - Need to FIND information? Use `search` (returns result listings with URLs) - Need to READ a page? Use `extract` (returns full page content from a URL) - Need media files? Use `media` (discover, download images/videos/audio) - Need server settings? Use `config` (status, cache, settings, warmup, sync setup)
| Name | Type | Req | Description |
|---|---|---|---|
| tool_name | string | – | – |
| Name | Type | Req | Description |
|---|---|---|---|
| result | string | yes | – |
No examples provided.
media ~309
Discover and download media files (images, videos, audio) from web pages. Actions: - list: Scan a page and return media URLs with metadata. Example: media(action="list", url="https://example.com/gallery", media_type="images") - download: Download media files to local storage. Example: media(action="download", media_urls=["https://example.com/photo.jpg"]) Key parameters: - url (required for list): Page URL to scan - media_urls (required for download): List of media URLs to download - media_type: Filter for list -- "images", "videos", "audio", "files", "all" (default: "all") - output_dir: Download directory (default: ~/.wet-mcp/downloads) - prompt: Reserved -- accepted for backward compatibility, ignored Typical workflow: list (discover) -> download (save locally). For LLM analysis (vision/audio/video), hand the downloaded path to imagine-mcp's understand action. The legacy media(action="analyze") was REMOVED in wet v2.0.0 (deprecated since v1.x.y); calling it now returns the standard unknown-action error. Use `help` tool with tool_name="media" for full documentation.
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | – |
| max_items | integer | – | – |
| media_type | string | – | – |
| media_urls | – | – | – |
| output_dir | – | – | – |
| prompt | string | – | – |
| url | – | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
search ~656
Find information across web, academic sources, or library docs. Returns search result listings (titles, URLs, snippets) -- NOT full page content. To read full content from a URL, use the `extract` tool instead. Actions: - search: Web search via SearXNG. Example: search(action="search", query="python async patterns") - research: Academic/scientific search (Google Scholar, arXiv, PubMed). Example: search(action="research", query="transformer attention mechanism") - docs: Search library documentation with auto-indexing. Example: search(action="docs", query="how to create routes", library="fastapi") - docs_resolve: Free-form library name to ranked library_id list. Example: search(action="docs_resolve", query="react") - docs_query: Version-aware library docs query honoring project lock + token cap. Example: search(action="docs_query", library="react", version="latest", topic="useState", query="how to set initial state") - docs_lock_project: Detect project manifests (pyproject/package.json/go.mod/Cargo.toml) and lock the library set for Cabinets isolation. Example: search(action="docs_lock_project", project_path="/repo/my-app") - similar: Find pages similar to a URL (pass URL as query). Example: search(action="similar", query="https://example.com/article") Key parameters: - query (required for all actions): Search terms or URL (for similar) - library (required for docs): Library name, e.g. "react", "fastapi" - language: Programming language for disambiguation in docs, e.g. "python", "java" - expand: Enable LLM query expansion for broader coverage (default: false) - enrich: Fetch actual page content for richer snippets (default: false, adds latency) - max_results: Number of results (default: 10) - time_range: Recency filter -- day, week, month, year - include_domains / exclude_domains: Domain filters - region (search only): 2-letter ISO 3166-1 country code (e.g. "US", "vn") geo filter. Backends without region support are skipped (named in a warning); a chain with no reg…
| Name | Type | Req | Description |
|---|---|---|---|
| action | string | yes | – |
| categories | string | – | – |
| enrich | boolean | – | – |
| exclude_domains | – | – | – |
| expand | boolean | – | – |
| include_domains | – | – | – |
| language | – | – | – |
| library | – | – | – |
| limit | integer | – | – |
| max_results | integer | – | – |
| parallel | boolean | – | – |
| project_path | – | – | – |
| query | – | – | – |
| refine | boolean | – | – |
| region | – | – | – |
| time_range | – | – | – |
| topic | – | – | – |
| version | – | – | – |
Structured output declared, but exposes no named fields.
No examples provided.
What is the io.github.n24q02m/wet-mcp server?
io.github.n24q02m/wet-mcp is listed in the public MCP registry as io.github.n24q02m/wet-mcp. Open-source MCP server for AI agents: web search, content extraction, and library docs. This page covers its PyPI package (wet-mcp).
Is the io.github.n24q02m/wet-mcp server safe to use?
io.github.n24q02m/wet-mcp scores 44 out of 100 on VerifyMCP. We recorded 3 known advisories against it as of 20 September 2026. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.n24q02m/wet-mcp server expose?
io.github.n24q02m/wet-mcp exposes 6 tools: config__open_relay, search, extract, media, help, config. Their descriptions and schemas cost roughly 2,033 tokens of context every time the server is loaded.
Is the io.github.n24q02m/wet-mcp server still maintained?
io.github.n24q02m/wet-mcp is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the io.github.n24q02m/wet-mcp server under?
io.github.n24q02m/wet-mcp declares the Apache-2.0 licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.