Back to Browse

Safe Fetch MCP Server

Developer ToolsModerate5.7MCP RegistryLocal
Free

Server data from the Official MCP Registry

MCP server for fetching URLs, safe against SSRF, DNS rebinding, and redirect-to-internal attacks.

About

MCP server for fetching URLs, safe against SSRF, DNS rebinding, and redirect-to-internal attacks.

Security Report

5.7
Moderate5.7Moderate Risk

This is a well-engineered MCP server with strong security controls designed specifically to prevent SSRF attacks. The codebase demonstrates excellent threat modeling, comprehensive input validation, and proper separation of concerns. Code quality is high with proper error handling and no obvious credential or exfiltration risks. Permissions are appropriately scoped for the stated purpose of safe web fetching. Supply chain analysis found 6 known vulnerabilities in dependencies (2 critical, 0 high severity). Package verification found 1 issue.

7 files analyzed · 11 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

network_https

Check that this permission is expected for this type of plugin.

env_vars

Check that this permission is expected for this type of plugin.

system_info

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

falseOptional

Environment variable: SAFE_FETCH_ALLOW_LOCAL

*(empty)*Optional

Environment variable: SAFE_FETCH_ALLOWLIST

5000000Optional

Environment variable: SAFE_FETCH_MAX_BYTES

10000Optional

Environment variable: SAFE_FETCH_TIMEOUT_MS

5Optional

Environment variable: SAFE_FETCH_MAX_REDIRECTS

127.0.0.1Optional

Environment variable: HOST

3000Optional

Environment variable: PORT

*(empty)*Optional

Environment variable: SAFE_FETCH_ALLOWED_ORIGINS

60Optional

Environment variable: SAFE_FETCH_RATE_LIMIT_MAX

60000Optional

Environment variable: SAFE_FETCH_RATE_LIMIT_WINDOW_MS

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-sanoy24-safe-fetch": {
      "env": {
        "HOST": "your-host-here",
        "PORT": "your-port-here",
        "SAFE_FETCH_ALLOWLIST": "your-safe-fetch-allowlist-here",
        "SAFE_FETCH_MAX_BYTES": "your-safe-fetch-max-bytes-here",
        "SAFE_FETCH_TIMEOUT_MS": "your-safe-fetch-timeout-ms-here",
        "SAFE_FETCH_ALLOW_LOCAL": "your-safe-fetch-allow-local-here",
        "SAFE_FETCH_MAX_REDIRECTS": "your-safe-fetch-max-redirects-here",
        "SAFE_FETCH_RATE_LIMIT_MAX": "your-safe-fetch-rate-limit-max-here",
        "SAFE_FETCH_ALLOWED_ORIGINS": "your-safe-fetch-allowed-origins-here",
        "SAFE_FETCH_RATE_LIMIT_WINDOW_MS": "your-safe-fetch-rate-limit-window-ms-here"
      },
      "args": [
        "-y",
        "safe-fetch-mcp-server"
      ],
      "command": "npx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!