Back to Browse

Brandfetch MCP Server

Developer ToolsUse Caution4.8MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

Search brands and retrieve design assets, company data, other brand context from Brandfetch's API

About

Search brands and retrieve design assets, company data, other brand context from Brandfetch's API

Remote endpoints: streamable-http: https://mcp.brandfetch.io/mcp

Security Report

4.8
Use Caution4.8High Risk

The Brandfetch MCP server demonstrates solid security practices with proper authentication, careful input validation, and appropriate permission scoping. Authentication is required for API access with token decoding and context isolation. Some minor code quality issues around broad exception handling and incomplete input validation exist, but do not represent security vulnerabilities. The server's permissions align well with its stated purpose of brand data retrieval and asset delivery. Supply chain analysis found 10 known vulnerabilities in dependencies (1 critical, 5 high severity).

4 files analyzed · 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

Brandfetch MCP Server

The official Model Context Protocol server for Brandfetch. It gives AI assistants access to brand search, company data, logos and design assets, and LLM-ready brand context from the Brandfetch API.

Tools

ToolDescription
brand_searchSearch for brands by name using Brandfetch's search index.
get_brandLook up full brand data by domain, stock ticker, ISIN, or crypto symbol.
enrich_transactionIdentify a merchant brand from a credit-card or bank-statement string.
get_brand_contextGet LLM-ready brand context for a domain — voice, audience, positioning, style.
build_logo_urlsConstruct Brandfetch Logo CDN URLs for one or more brands (no API call).
send_feedbackReport bugs, wrong or stale brand data, or missing capabilities to Brandfetch.

Interactive brand card (MCP Apps)

On hosts that support the MCP Apps extension (claude.ai, Claude Desktop, ...), get_brand results render as an interactive brand card: logo preview, format switcher (SVG/PNG/WebP/...), download and copy-URL actions. Hosts without Apps support fall back to the regular JSON tool result. The widget source lives in ui/ and is served by the server as the ui://brandfetch/brand-card.html resource.

Quick start (hosted server)

The easiest way to use this server is to connect to the Brandfetch-hosted endpoint — no install, no infrastructure:

https://mcp.brandfetch.io/mcp

Authentication uses a Brandfetch MCP token (a bf1. bearer token). Generate one from the Keys and MCP page in the Brandfetch dashboard, or connect via OAuth from a client that supports it.

Claude Desktop / Claude Code

{
  "mcpServers": {
    "brandfetch": {
      "type": "http",
      "url": "https://mcp.brandfetch.io/mcp",
      "headers": {
        "Authorization": "Bearer bf1.YOUR_TOKEN"
      }
    }
  }
}

Cursor

Add to ~/.cursor/mcp.json (or the project .cursor/mcp.json):

{
  "mcpServers": {
    "brandfetch": {
      "url": "https://mcp.brandfetch.io/mcp",
      "headers": {
        "Authorization": "Bearer bf1.YOUR_TOKEN"
      }
    }
  }
}

Clients that support OAuth can instead point at https://mcp.brandfetch.io/mcp with no token and complete the authorization flow in the browser.

Quota errors

get_brand, enrich_transaction, and get_brand_context consume API credits from your plan; brand_search and build_logo_urls don't and keep working when your credits run out.

  • 429 "API quota exhausted" — your key has used all of its API credits. Check usage or upgrade in the Brandfetch dashboard.
  • 403 "Forbidden" — the key has no available API credits or lacks access to that endpoint. The key itself may be valid, so check your plan and key status in the dashboard before rotating it.

Self-hosting

This is an HTTP (streamable-http) MCP server built with FastMCP. You can run your own instance with Docker.

docker build -t brandfetch-mcp-server .
docker run --rm -p 8080:8080 brandfetch-mcp-server

The server then listens on http://localhost:8080/mcp. Point your MCP client at that URL and send your Brandfetch credentials as a Bearer token.

The Dockerfile bundles the AWS Lambda Web Adapter and a few AWS_LWA_* environment variables. These are inert outside of AWS Lambda and can be ignored (or removed) for a plain container/host deployment.

Running without Docker

uv sync
uv run uvicorn src.main:app --host 0.0.0.0 --port 8080

Development

Requires uv and Python 3.11.

uv sync                 # install dependencies
uv run pytest           # run the tests
uv run ruff check .     # lint
uv run ruff format .    # format

License

MIT

Reviews

No reviews yet

Be the first to review this server!