# FireKey MCP (npm · firekey-mcp)

Manage FireKey browser profiles and browser lifecycles through an authenticated localhost API.

- Trust score: 68/100 (medium)
- Change this week: +5
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-09-20

## Components

- npm · `firekey-mcp`: 68/100 (this document), [markdown](https://verifymcp.io/servers/partnerhbhl-firekey-mcp/firekey-mcp.md), [page](https://verifymcp.io/servers/partnerhbhl-firekey-mcp/firekey-mcp)

## Channel facts

- Registry: `npm`
- Package: `firekey-mcp`
- Version: `0.1.3`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-09-20.

- **Supply Chain Security**: 98/100
  - No malware found by supply-chain analysis.
  - No known CVEs affecting this package version or its production dependencies.
  - No install/post-install scripts declared.
  - 31 of 96 dependencies flagged as unhealthy.
- **Provenance & Transparency**: 19/100
  - Repository check failed: no source repository is declared.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 10 days ago).
  - Security-disclosure policy not yet verified: we couldn't inspect the source repository.
- **Schema Quality & AI Usability**: 75/100
  - AI-judged instruction clarity (good).
  - Tool/resource definitions use about 1412 tokens (~94/item across 15 items; 15 tools + 0 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 37/100
  - Stability observed for 11 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Tool Safety**: 75/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - 0 of 2 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation; "profile_delete" implies "delete" and declares no destructiveHint at all, which the MCP spec reads as destructive by default.
  - An AI judge read all 15 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### How do I install the FireKey MCP server?

FireKey MCP runs locally as an npm package, launched with npx -y firekey-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add partnerhbhl-firekey-mcp -- npx -y firekey-mcp
```

### Cursor

```json
{
  "mcpServers": {
    "partnerhbhl-firekey-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "firekey-mcp"
      ]
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "partnerhbhl-firekey-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "firekey-mcp"
      ]
    }
  }
}
```

### Codex

```bash
codex mcp add partnerhbhl-firekey-mcp -- npx -y firekey-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "partnerhbhl-firekey-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "firekey-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add partnerhbhl-firekey-mcp --command npx --arg -y --arg firekey-mcp
```

### Hermes

```yaml
mcp_servers:
  partnerhbhl-firekey-mcp:
    command: "npx"
    args: ["-y", "firekey-mcp"]
```

### Netclaw

```json
{
  "McpServers": {
    "partnerhbhl-firekey-mcp": {
      "Transport": "stdio",
      "Command": "npx",
      "Arguments": [
        "-y",
        "firekey-mcp"
      ]
    }
  }
}
```

### Vellum

```bash
assistant mcp add partnerhbhl-firekey-mcp -t stdio -c npx -a -y firekey-mcp
```

### Other

```json
{
  "mcpServers": {
    "partnerhbhl-firekey-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "firekey-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-09-19 (score 68, +1)

No change was recorded against any check on this day. Stability & Change Management went from 30 to 33. That category is still filling its 30-day observation window: 9 days of observed history at the previous scan, 10 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-09-17 (score 67, +4)

- [functional improvement] Stability: unverified → 0.27

### 2026-09-09 (score 63)

First indexed and scored.

## MCP tools (15)

### `browser_start` (~185 tokens)

Start a browser profile. Returns WebSocket endpoints for Puppeteer/Selenium automation.

Input parameters:

- `cdp_mask` (string): CDP masking: 0=off, 1=on (default)
- `delete_cache` (string): Clear cache on close: 0=no (default), 1=yes
- `headless` (string): Headless mode: 0=visible (default), 1=headless
- `last_opened_tabs` (string): Restore last tabs: 0=no, 1=yes (default)
- `launch_args` (array): Extra Chrome launch arguments
- `profile_id` (string): Profile public ID (use this or profile_no)
- `profile_no` (string): Profile serial number (alternative to profile_id)
- `proxy_detection` (string): Show proxy detection page: 0=skip, 1=show (default)

### `browser_stop` (~36 tokens)

Stop a running browser profile.

Input parameters:

- `profile_id` (string): Profile public ID
- `profile_no` (string): Profile serial number

### `browser_active` (~32 tokens)

List currently running browser profiles with their WebSocket endpoints.

Input parameters:

- `profile_id` (string): Filter by specific profile ID

### `profile_list` (~115 tokens)

List browser profiles with pagination and filtering.

Input parameters:

- `group_id` (string): Filter by group ID
- `limit` (string): Items per page, max 100 (default: 50)
- `page` (string): Page number (default: 1)
- `profile_id` (array): Filter by specific profile IDs
- `profile_no` (array): Filter by serial numbers
- `sort_order` (string): Sort order (default: desc)
- `sort_type` (string): Sort field (default: profile_no)

### `profile_create` (~494 tokens)

Create a new browser profile with fingerprint and proxy settings.

Input parameters:

- `audio_context_mode` (string): AudioContext (default: noise)
- `bookmarks` (string): Bookmarks to import
- `canvas_mode` (string): Canvas fingerprint (default: noise)
- `chrome_version` (string): Chrome major version (e.g. 143, 142, 141)
- `cookies` (string): Cookies to import (JSON string)
- `cpu_threads` (number): CPU threads: 2,4,6,8,12,16 (default: 8)
- `geolocation_mode` (string): Geolocation (default: prompt)
- `group_id` (string, required): Group ID to assign the profile to (required)
- `language_mode` (string): Language mode (default: auto)
- `languages` (string): Languages (when language_mode=manual)
- `launch_args` (string): Extra Chrome launch arguments
- `name` (string): Profile name
- `os` (string): Operating system (default: win). Aliases: windows→win, mac→macIntel
- `processor` (string): Mac processor (only for macArm)
- `proxy_host` (string): Proxy host
- `proxy_method` (string): Proxy method: none=no proxy (default), your=custom proxy, saved=use saved proxy
- `proxy_pass` (string): Proxy password
- `proxy_port` (string): Proxy port
- `proxy_saved_id` (string): Saved proxy ID (when proxy_method=saved)
- `proxy_type` (string): Proxy type
- `proxy_user` (string): Proxy username
- `ram` (number): RAM in GB: 2,4,8,16,32 (default: 8)
- `screen_resolution` (string): Screen resolution (e.g. 1920x1080)
- `start_url` (string): URL to open on browser start
- `timezone` (string): Timezone (when timezone_mode=manual)
- `timezone_mode` (string): Timezone mode (default: auto)
- `user_agent` (string): Custom User-Agent (auto-generated if empty)
- `webgl_image_mode` (string): WebGL image (default: noise)
- `webgl_meta_mode` (string): WebGL metadata (default: mask)
- `webrtc_mode` (string): WebRTC mode (default: auto)

### `profile_update` (~71 tokens)

Update an existing browser profile.

Input parameters:

- `fingerprint_config` (object): Fingerprint configuration
- `name` (string): New profile name
- `profile_id` (string, required): Profile ID to update (required)
- `remark` (string): Profile notes/remark
- `user_proxy_config` (object): Proxy configuration

### `profile_delete` (~35 tokens)

Delete browser profiles (soft delete to trash).

Input parameters:

- `profile_id` (array, required): Array of profile IDs to delete (max 100)

### `profile_move` (~47 tokens)

Move profiles to a different group.

Input parameters:

- `group_id` (string, required): Target group ID ("0" for ungrouped)
- `profile_id` (array, required): Array of profile IDs to move

### `profile_delete_cache` (~48 tokens)

Delete cached data for browser profiles (cookies, history, localStorage, etc.).

Input parameters:

- `profile_id` (array, required): Array of profile IDs
- `type` (array, required): Cache types to delete

### `profile_cookies` (~42 tokens)

Get cookies from a browser profile (from running browser via CDP, or from local files).

Input parameters:

- `profile_id` (string, required): Profile ID to get cookies from

### `group_list` (~63 tokens)

List profile groups with optional name search.

Input parameters:

- `group_name` (string): Search by group name
- `page` (string): Page number (default: 1)
- `page_size` (string): Items per page, max 2000 (default: 10)

### `group_create` (~36 tokens)

Create a new profile group.

Input parameters:

- `group_name` (string, required): Name for the new group
- `remark` (string): Group description

### `group_update` (~46 tokens)

Update an existing group.

Input parameters:

- `group_id` (string, required): Group ID to update
- `group_name` (string): New group name
- `remark` (string): New group description

### `proxy_list` (~63 tokens)

List saved proxy configurations.

Input parameters:

- `limit` (string): Items per page, max 200 (default: 50)
- `page` (string): Page number (default: 1)
- `proxy_id` (array): Filter by specific proxy IDs (max 100)

### `proxy_create` (~99 tokens)

Create a new proxy configuration.

Input parameters:

- `host` (string, required): Proxy host
- `ipchecker` (string): IP checker service
- `password` (string): Proxy password
- `port` (string, required): Proxy port (0-65536)
- `proxy_url` (string): Proxy refresh/change IP URL
- `remark` (string): Proxy name/description
- `type` (string, required): Proxy type
- `user` (string): Proxy username

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/partnerhbhl-firekey-mcp/firekey-mcp#diagnostics

## Score history

- 2026-09-20: 68
- 2026-09-19: 68
- 2026-09-18: 67
- 2026-09-17: 67
- 2026-09-16: 63
- 2026-09-15: 63
- 2026-09-14: 63
- 2026-09-13: 63
- 2026-09-12: 63
- 2026-09-11: 63
- 2026-09-10: 63
- 2026-09-09: 63

## Common questions

### What is the FireKey MCP server?

FireKey MCP is listed in the public MCP registry as io.github.partnerhbhl/firekey-mcp. Manage FireKey browser profiles and browser lifecycles through an authenticated localhost API. This page covers its npm package (firekey-mcp).

### Is the FireKey MCP server safe to use?

FireKey MCP scores 68 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 20 September 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the FireKey MCP server expose?

FireKey MCP exposes 15 tools: browser_start, browser_stop, browser_active, profile_list, profile_create, and 10 more. Their descriptions and schemas cost roughly 1,412 tokens of context every time the server is loaded.

### Is the FireKey MCP server still maintained?

FireKey MCP is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

### What licence is the FireKey MCP server under?

FireKey MCP declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.

## Links

- npm package: https://www.npmjs.com/package/firekey-mcp
- Socket report: https://socket.dev/npm/package/firekey-mcp
- Website: https://firekey.ai/
- Changelog RSS feed: https://verifymcp.io/servers/partnerhbhl-firekey-mcp/firekey-mcp.xml
- Changelog JSON feed: https://verifymcp.io/servers/partnerhbhl-firekey-mcp/firekey-mcp.json
- HTML version of this page: https://verifymcp.io/servers/partnerhbhl-firekey-mcp/firekey-mcp