io.github.firecrawl/firecrawl-mcp-server

Est-ce que io.github.firecrawl/firecrawl-mcp-server est sûr ?

Au dernier audit MCP Hub, le serveur MCP « io.github.firecrawl/firecrawl-mcp-server » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 3 outils

• firecrawl_parse≈ 1453 tokens

  Parse one supported document into markdown, HTML, links, summary, targeted answers, or JSON matching a schema. Supported inputs include common HTML, PDF, Word, RTF, OpenDocument, and spreadsheet files; PDF parsing can be bounded with `pdfOptions.maxPages`. Local MCP reads `filePath` from the server filesystem. Hosted MCP uses two calls: first provide `filePath` to receive upload instructions, upload locally, then call again with the returned `uploadRef`; do not send both fields together. Remote web URLs belong in `firecrawl_scrape`. Set `redactPII` to request redaction of personally identifiable information in the returned content. `zeroDataRetention` requires an eligible authenticated account; omit it for anonymous keyless use. Returns upload instructions for hosted phase one or parsed document content for the final call. Authenticated final responses can include a `data.metadata.scrapeId` for optional parse feedback.

  Paramètres, retour & exemple (19)

  Paramètres

  • proxy · string · optionnel · basic | auto
  • maxAge · number · optionnel
    Ignored: parse never reuses or stores indexed content.
  • formats · array · optionnel
  • parsers · array · optionnel
  • filePath · string · optionnel
    Phase 1 only: path to the local file on the caller/harness machine. Hosted MCP will not read or stat this path; it is used only to produce upload instructions.
  • redactPII · boolean · optionnel
  • uploadRef · string · optionnel
    Phase 2 only: short-lived upload reference returned by phase 1 after the local PUT upload completes.
  • pdfOptions · object · optionnel
  • contentType · string · optionnel
    Phase 1 MIME type override. If omitted, the server infers it from the file extension without reading the file.
  • excludeTags · array · optionnel
  • includeTags · array · optionnel
  • jsonOptions · object · optionnel
  • queryOptions · object · optionnel
  • storeInCache · boolean · optionnel
  • onlyMainContent · boolean · optionnel
  • declaredSizeBytes · integer · optionnel
    Optional phase 1 size declaration. Hosted MCP does not stat the file; provide this only if the caller already knows it.
  • zeroDataRetention · boolean · optionnel
  • removeBase64Images · boolean · optionnel
  • skipTlsVerification · boolean · optionnel

  Exemple d'appel

  {"name": "firecrawl_parse", "arguments": {"proxy": "basic", "maxAge": 1, "formats": [], "parsers": [], "filePath": "texte", "redactPII": true}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"raw": "texte", "data": "texte", "mode": "texte", "error": "texte", "notes": "texte", "upload": {}, "message": "texte", "success": "texte", "warning": "texte", "agent_hints": [], "nextToolCall": "texte"}}

• firecrawl_scrape≈ 2923 tokens

  Scrape one URL and return its content: markdown by default, or HTML, links, screenshots, branding data, a targeted answer, or JSON matching a supplied schema. Use it when the request identifies a page and needs its content or defined fields: the user gives a URL or names a page or PDF and wants it read or summarized, or wants prices, specs, contact details or a table from it. Use `firecrawl_search` when additional web sources are needed; on an authenticated session, `firecrawl_map` lists a site's URLs and `firecrawl_crawl` collects a set of pages. Firecrawl may serve recently indexed content; set `maxAge: 0` for a live fetch or a smaller `maxAge` to bound staleness. A successful response does not by itself confirm the page is still current. A named browser profile loads saved session data without saving changes to it. Authenticated responses can include a `metadata.scrapeId` for optional scrape feedback. On an authenticated session, `firecrawl_search` and `firecrawl_find_tools` can discover providers for the same fields across several pages; a matching provider returns typed records in one call. With `alexandria` in place of `url`, the tool runs catalogued provider capabilities instead of fetching a page. Provider discovery and execution require an API key on a team with Alexandria enabled.

  Paramètres, retour & exemple (28)

  Paramètres

  • url · string · optionnel
  • proxy · string · optionnel · basic | stealth | enhanced | auto
  • maxAge · number · optionnel
  • mobile · boolean · optionnel
  • formats · array · optionnel
  • parsers · array · optionnel
  • profile · object · optionnel
    Loads a saved browser profile without saving changes to it.
  • timeout · integer · optionnel
    Execution timeout in milliseconds.
  • waitFor · number · optionnel
  • location · object · optionnel
  • lockdown · boolean · optionnel
  • objective · string · requis
    The user's underlying goal for this call, in one sentence: what they are ultimately trying to accomplish, not a restatement of the URL or query. Reuse it across related calls. Avoid sensitive information.
  • redactPII · boolean · optionnel
  • requestId · string · optionnel
    Idempotency key bound to one Alexandria execution payload. Generated when omitted and returned with the result.
  • alexandria · ? · optionnel
    Catalogued Alexandria capability invocation, mutually exclusive with url. One {provider, capability, options} object or an array of 1-10, with contracts available through firecrawl_search or firecrawl_find_tools. Each call may include version to pin a published workflow; omitting it uses latest. Only requestId and timeout are supported alongside alexandria. The selected contract marks required inputs and any requiresOneOf groups (at least one member per group); it may include example.request/example.response and response.key (which may differ from records). Where pagination is declared, its fields govern paging with the same filters; catalogue next is separate from provider pagination. Returns per-capability results in data.alexandria with data, records, or an error with a code; individual capabilities can fail even when the outer response succeeds. Requires an API key on a team with Alexandria enabled. Some providers require accepted terms; blocked requests return the applicable requirements.
  • pdfOptions · object · optionnel
  • toolDetail · string · optionnel · compact | summary | full
    URL mode only: domain discovery detail, summary by default; compact returns provider/capability/description, full includes contracts. Ignored with alexandria.
  • domainTools · boolean · optionnel
    URL mode only: include domain-matched Alexandria tools for the page in tools on the returned document. Ignored with alexandria.
  • excludeTags · array · optionnel
  • includeTags · array · optionnel
  • jsonOptions · object · optionnel
  • queryOptions · object · optionnel
  • storeInCache · boolean · optionnel
  • onlyMainContent · boolean · optionnel
  • screenshotOptions · object · optionnel
  • zeroDataRetention · boolean · optionnel
  • removeBase64Images · boolean · optionnel
  • skipTlsVerification · boolean · optionnel

  Exemple d'appel

  {"name": "firecrawl_scrape", "arguments": {"objective": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"data": "texte", "html": "texte", "json": "texte", "menu": "texte", "audio": "texte", "error": "texte", "links": "texte", "pages": "texte", "tools": "texte", "video": "texte", "answer": "texte", "blocks": "texte"}}

• firecrawl_search≈ 2580 tokens

  Search web, news, or image sources and return ranked results with query-relevant highlights. Use it for current information, or to list businesses, people, products, jobs or events with websites, prices or contacts. Each web result is a title, URL, and description; use `firecrawl_scrape` on a result URL when the excerpt is not enough. Authenticated search also returns matching Alexandria data providers in data.tools (companies, people, jobs, finance and filings, public records and government spending, real estate, places and restaurants, retail and prices, package registries and developer data, news, research, and more). Prefer a provider over scraping pages when the task needs the same fields across several entities, exact figures or timestamps, provenance, or many records; use web results when they already answer the question. Authenticated searches always add alexandria to the sources, so sources: ["web"] also returns providers; domainTools: false turns off website-matched tools only. On an authenticated session, tool matches describe available capabilities; `firecrawl_find_tools` returns their contracts and `firecrawl_scrape` with an `alexandria` body executes a selected capability. Keyless sessions get no Alexandria matches in data.tools. For a programming question, add `categories: ["developer"]`; its hits return in `data.web` with `category: "developer"`. For a legal or regulatory question, `categories: ["gov"]` returns hits in `data.web` with `category: "gov"` and cannot be combined with other categories; authenticated sessions also have `firecrawl_gov_search` as the dedicated tool. Verify gov results' issuer, jurisdiction, status, and version before citing current law. `categories: ["research"]` restricts web results to research-affiliated websites; the `firecrawl_research_*` tools are a separate surface over paper abstracts and full text (PubMed, bioRxiv, medRxiv, arXiv). Returns source-type result groups and usage metadata. Authenticated responses can include an `id` for optional search feedback.

  Paramètres, retour & exemple (15)

  Paramètres

  • tbs · string · optionnel
  • limit · integer · optionnel
  • query · string · requis
    Query for web and semantic tool discovery. Operators include quoted phrases, `-term`, `site:host`, `inurl:term`, `intitle:term`, and `related:host`; the set is non-exhaustive. Catalogue browsing is available through firecrawl_find_tools.
  • filter · string · optionnel
  • sources · array · optionnel
    Search sources; authenticated sessions default to web + alexandria, keyless sessions to web only. Authenticated searches always add alexandria to the sources, so sources: ["web"] also returns providers; domainTools: false turns off website-matched tools only. enterprise zdr or anon searches do not add it. Use ["alexandria"] alone for provider discovery without web results.
  • location · string · optionnel
  • objective · string · requis
    The user's underlying goal for this call, in one sentence: what they are ultimately trying to accomplish, not a restatement of the URL or query. Reuse it across related calls. Avoid sensitive information.
  • categories · array · optionnel
    Limit results to specific source types. `research` restricts ordinary web results to research-affiliated websites and returns page snippets, which is separate from the `firecrawl_research_*` tools that search paper abstracts and full text across biomedical (PubMed, bioRxiv, medRxiv) and arXiv literature; `pdf` searches PDF results; `developer` searches an index built for coding agents over public repositories, GitHub issues, merged pull requests, repository READMEs, and code documentation; `gov` searches the Government Index of US federal, state, and local legal and regulatory sources, the index behind firecrawl_gov_search, and cannot be combined with other categories; gov hits can include historical versions, bill text, agency guidance, and third-party reproductions, so verify the issuer, jurisdiction, enacted/effective status, and version before citing current governing law, clarify a missing jurisdiction or ambiguous as-of date, and use general search for non-US questions or missing coverage (no hits does not establish that no applicable law exists). `developer` and `gov` return hits in `data.web` with `category` set to their name; the other categories also filter `data.web`.
  • enterprise · array · optionnel
  • highlights · boolean · optionnel
    Return query-relevant page excerpts for web and news results when available (default). Highlights appear in web `description` and news `snippet`; otherwise, original snippets are returned. Set to false to keep the original search snippets.
  • toolDetail · string · optionnel · compact | summary | full
    Compact by default. Compact returns only provider, capability and description; full includes contracts. Inspect selected compact tools with firecrawl_find_tools providers and capabilities.
  • domainTools · boolean · optionnel
    Include domain-matched tools for result URLs. Defaults to true when Alexandria is combined with web, news or images; semantic-only search leaves domain matching off.
  • scrapeOptions · object · optionnel
    Attach page content for web results in the same call. These fetches ignore maxAge, so use firecrawl_scrape when you need a live fetch. scrapeOptions fetches web pages, never Alexandria provider tools.
  • excludeDomains · array · optionnel
    Hostnames to leave out of results. Mutually exclusive with includeDomains.
  • includeDomains · array · optionnel
    Hostnames to restrict results to. Mutually exclusive with excludeDomains.

  Exemple d'appel

  {"name": "firecrawl_search", "arguments": {"query": "texte", "objective": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}], "structuredContent": {"id": "texte", "data": "texte", "error": "texte", "tools": "texte", "success": "texte", "warning": "texte", "nextTool": "texte", "agent_hints": [], "creditsUsed": "texte", "feedbackTool": "texte"}}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://mcp.firecrawl.dev/v2/mcp