Is webfetch MCP server safe?
Yes, with the usual care.
Safe to use. Minor gaps such as a missing repository or slower maintenance.
No critical or high findings in the latest scan.
Public scan report
scanner v0.1.9 · 2026-09-25 · same rubric, same numbers if you re-run it
1 medium
- Code scan59 source files scanned20/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 65 days ago12/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Findings (1)
- mediumeval / new Function used
exec.evalwebfetch_llm-0.1.3/evals/run_matcher_eval.py: …""" Layer 1: offline semantic-matcher eval (no network beyond model downloads). Ans…
Overall 71/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON
Other servers that do what webfetch does
- SEO Tools: A-Parser bridgeBridge to a self-hosted A-Parser: SERP, suggests and 150+ parsers via its API (read-only).not reviewedGrowingB
- NotipoPublish to self-hosted WordPress from AI agents: markdown, images, SEO, and Notion sync.not reviewedGrowingA
- three.ws SignalsDiscover signal feeds ranked by proven edge, rank publishers, and subscribe + track results.not reviewedEstablishedB