No red flags found in any of the 11 categories — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →
by zcaceres · MCP Server · ★ 810
Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h
🔒 Is fetch-mcp safe to install? View the security audit →
Fetch MCP Server An MCP server for fetching web content in multiple formats — HTML, JSON, plain text, Markdown, readable article content, and YouTube transcripts. Tools All tools accept the following common parameters: fetchhtml — Fetch a website and return its raw HTML content. fetchmarkdown — Fetch a website and return its content converted to Markdown. fetchtxt — Fetch a website and return plain text with HTML tags, scripts, and styles removed. fetchjson — Fetch a URL and return the JSON response. fetchreadable — Fetch a website and extract the main article content using Mozilla Readability, returned as Markdown. Strips navigation, ads, and boilerplate.
| Stars | 810 |
| Forks | 119 |
| Language | TypeScript |
| Category | MCP Server |
| License | MIT |
| Quality Score | 75.5550267019119/100 |
| Open Issues | 5 |
| Last Updated | 2026-03-12 |
| Created | 2024-12-18 |
| Platforms | mcp, node |
| Est. Tokens | ~73k |
These tools work well together with fetch-mcp for enhanced workflows:
Explore other popular mcp server tools:
fetch-mcp is A flexible HTTP fetching Model Context Protocol server.. It is categorized as a MCP Server with 810 GitHub stars.
fetch-mcp is primarily written in TypeScript.
You can find installation instructions and usage details in the fetch-mcp GitHub repository at github.com/zcaceres/fetch-mcp. The project has 810 stars and 119 forks, indicating an active community.
fetch-mcp is released under the MIT license, making it free to use and modify according to the license terms.
Grades come from a rule-based scan built on the SlowMist agent-security taxonomy, covering 11 red-flag categories including credential harvesting, data exfiltration, and curl | sh installers. It is a first-layer scan, not a manual audit — we say so rather than overstate it.
The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.
Sources & who's responsible: