Our grade: 4 checks
Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.
Community rating
- 5 6
- 4 9
- 3 4
- 2 0
- 1 0
Trust in production
- Trust it - 68%
- With caveats - 26%
- Wouldn't - 5%
84% would recommend this server
How reviewers scored it
- Setup & docs 4.2
- Auth experience 3.9
- Reliability 4.1
- Maintainer responsiveness 4.3
Why it got a B
Firecrawl's own open-source server, hosted over HTTPS or run locally, with releases most weeks and several maintainers. Scrape, crawl and interact fetch any URL the model picks on Firecrawl's servers, so page text can carry instructions into your agent. The hosted server works anonymously on a free tier; OAuth or an API key unlocks everything and acts for your whole account. Biggest deduction: an open CVE (CVE-2026-85606) lets firecrawl_parse read any local file when the local server points at a self-hosted Firecrawl API. Use the hosted server, or don't set FIRECRAWL_API_URL.
How to connect
// Cursor Settings > Features > MCP Servers > + Add new global MCP server
{ "mcpServers": { "firecrawl-mcp": { "command": "npx",
"args": ["-y", "firecrawl-mcp"],
"env": { "FIRECRAWL_API_KEY": "YOUR-API-KEY" } } } }// .vscode/mcp.json
{ "inputs": [ { "type": "promptString", "id": "apiKey",
"description": "Firecrawl API Key", "password": true } ],
"servers": { "firecrawl": { "command": "npx",
"args": ["-y", "firecrawl-mcp"],
"env": { "FIRECRAWL_API_KEY": "${input:apiKey}" } } } }// claude_desktop_config.json
{ "mcpServers": { "mcp-server-firecrawl": { "command": "npx",
"args": ["-y", "firecrawl-mcp"],
"env": { "FIRECRAWL_API_KEY": "YOUR_API_KEY_HERE" } } } }Is Firecrawl MCP Server safe?
Is Firecrawl MCP Server safe to use?
Firecrawl MCP Server grades B (solid, with minor gaps). Login is optional, so check that it is turned on in your setup. It has 1 open CVE. Check the advisories before you install.
Does Firecrawl MCP Server have known vulnerabilities?
Yes, 1 open CVE in our data. The listing above explains what they affect and what to run instead.
Does Firecrawl MCP Server support authentication?
Optionally. It can run with a login, but it does not require one, so turn it on.
Alternatives in Search & Retrieval
- A Exa MCPOfficial hosted Exa server for web search, page fetching, and multi-step research.
- A Perplexity MCP ServerOfficial Perplexity server for web search, quick answers, reasoning, and deep research through the Perplexity API.
- A Tavily MCPOfficial Tavily server for web search, page extraction, site mapping, crawling, and research.
- B LawDB MCP ServerHosted server to search German and EU legislation and German, European and international case law, and fetch full texts and single provisions with stable citations.
- B Panda Public Funding ToolsCommunity stdio server with 10 tools, each running one of the author's paid Apify Actors on your account, for US grants, contracts, SAM.gov bids, SBIR/STTR topics, SEC financials, clinical trials, the Federal Register, recalls, VINs and EU tenders.
Embed this badge
[](https://trustedmcp.io/servers/firecrawl-mcp)<a href="https://trustedmcp.io/servers/firecrawl-mcp"><img src="https://trustedmcp.io/badge/firecrawl-mcp.svg" alt="TrustedMCP grade B" height="80"></a>Community reviews
Recommended it to two teams already
I use this almost daily. You can tell it is actively maintained, the rough edges keep getting fixed. Make sure you are on a patched version, there have been advisories against it. Would recommend without hesitation.
Used for Fact-checking drafts
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Solid core, fiddly setup
Useful tool, though I would not hand it to a junior unsupervised. Releases come often and the changelog is clear. I run it with auth enabled. Without it I would not let it near anything shared. The past CVEs put me off at first. The fixed releases have been fine, just keep it updated. Recommended, with sensible guardrails.
Used for Grounding answers with live results
- Setup & docs 3/5
- Auth experience 2/5
- Reliability 3/5
- Maintainer responsiveness 4/5
Good defaults, good docs
Installed it on a Friday, it was part of my workflow by Monday. Auth is optional, which is convenient locally. I turned it on before sharing it with the team. Happy to run it in production.
Used for Research agent for market questions
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Mixed feelings after two weeks
Works well enough for what I need. Self-hosting it was straightforward and I like keeping the data on our side. Worth it, just do not skip the hardening steps.
Used for Finding recent sources for articles
- Setup & docs 4/5
- Auth experience 3/5
- Reliability 3/5
- Maintainer responsiveness 3/5
Our team uses it every day
Our agents call this dozens of times a day. I run it with auth enabled. Without it I would not let it near anything shared. The API key sits in the config file, so I made a dedicated key with minimal permissions.
Used for Collecting references for reports
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Solid and well behaved
Of the Firecrawl integrations I tried, this one is the most predictable. I run it with auth enabled. Without it I would not let it near anything shared. Would recommend without hesitation.
Used for Fact-checking drafts
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Easy win for our agent setup
Clear tool names, sensible outputs, very few surprises. Out of the box it runs without sign-in, so remember to enable auth before exposing it anywhere. Nice that it supports both stdio and HTTP, I use stdio locally and HTTP for the shared agent.
Used for Technical research while coding
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Quietly reliable
Started with it as an experiment, now it is a fixture. Auth is optional, which is convenient locally. I turned it on before sharing it with the team. Self-hosting it was straightforward and I like keeping the data on our side. It is in our production agent and I sleep fine.
Used for Research agent for market questions
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 4/5
Surprisingly polished
Been running this for about a month now. The past CVEs put me off at first. The fixed releases have been fine, just keep it updated. Out of the box it runs without sign-in, so remember to enable auth before exposing it anywhere. Filed an issue and got a reply within two days. Happy to run it in production.
Used for Grounding answers with live results
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Better than the DIY script it replaced
Simple to set up in Cursor, simple to reason about. Nice to use something maintained by Firecrawl rather than a random fork. Good choice if you need Firecrawl in your agent.
Used for Collecting references for reports
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Set it up once, forgot about it
Set this up for our team after comparing a few options. It drives a real browser, so I give it a separate profile with no saved logins. Filed an issue and got a reply within two days. Check the advisories on the listing before installing an older version from a tutorial.
Used for Competitive research
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 3/5
- Maintainer responsiveness 4/5
Exactly what I needed from Firecrawl
Tried it on a side project first, then rolled it out at work. Make sure you are on a patched version, there have been advisories against it. Self-hosting it was straightforward and I like keeping the data on our side. Nice that it supports both stdio and HTTP, I use stdio locally and HTTP for the shared agent.
Used for Technical research while coding
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 3/5
Trustworthy enough for real work
Hooked Firecrawl MCP Server into Claude Code and it worked on the first try. The past CVEs put me off at first. The fixed releases have been fine, just keep it updated. You can tell it is actively maintained, the rough edges keep getting fixed.
Used for Competitive research
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 5/5
The Firecrawl integration I wanted
Simple to set up in Cursor, simple to reason about. Auth is optional, which is convenient locally. I turned it on before sharing it with the team. Updates land regularly, and nothing broke when I upgraded.
Used for Competitive research
- Setup & docs 4/5
- Auth experience 5/5
- Reliability 4/5
- Maintainer responsiveness 5/5
Earned a permanent spot in my config
I use this almost daily. Check the advisories on the listing before installing an older version from a tutorial. Nice that it supports both stdio and HTTP, I use stdio locally and HTTP for the shared agent. The OAuth flow worked first time in Claude Code.
Used for Technical research while coding
- Setup & docs 3/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Saves me a context switch every hour
Our agents call this dozens of times a day. Check the advisories on the listing before installing an older version from a tutorial.
Used for Collecting references for reports
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 3/5
- Maintainer responsiveness 4/5
No complaints after a month
Replaced a homegrown script with Firecrawl MCP Server and have not looked back. The past CVEs put me off at first. The fixed releases have been fine, just keep it updated. Easy recommendation.
Used for Finding recent sources for articles
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Works, just lock it down
Took longer to configure than I expected. I run it with auth enabled. Without it I would not let it near anything shared. Nice that it supports both stdio and HTTP, I use stdio locally and HTTP for the shared agent. Being official from Firecrawl counts for a lot when I pitch it to security. Keeping it to local experiments for now.
Used for Grounding answers with live results
- Setup & docs 3/5
- Auth experience 4/5
- Reliability 3/5
- Maintainer responsiveness 4/5
Good, but read the permissions first
It does the job, but it took some tweaking. Make sure you are on a patched version, there have been advisories against it.
Used for Fact-checking drafts
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 3/5
- Maintainer responsiveness 4/5
Write a review
Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.