Fetch MCP
A flexible HTTP fetching Model Context Protocol server.
Fetch MCP is an open-source mcp server by zcaceres, written mainly in TypeScript, with 835 GitHub stars and the MIT license. Its code was last updated Mar 12, 2026. The latest npm release is mcp-fetch-server 1.1.2, published Mar 9, 2026, with 4,697 downloads last week.
Scan summary: scanned Nov 5, 2026 at commit 1ddb1a5. Seen able to connect to the internet. 1 published advisory for its package. Scan policy
How to install Fetch MCP
Built from the start command in the project's README: npx mcp-fetch-server. Check the README for required keys or settings.
claude mcp add fetch-mcp -- npx mcp-fetch-server{
"mcpServers": {
"fetch-mcp": {
"command": "npx",
"args": [
"mcp-fetch-server"
]
}
}
}{
"mcpServers": {
"fetch-mcp": {
"command": "npx",
"args": [
"mcp-fetch-server"
]
}
}
}code --add-mcp '{"name":"fetch-mcp","command":"npx","args":["mcp-fetch-server"]}'What Fetch MCP can touch
- Our checks did not find this. The tool may still do it.Run shell commandsNot seen in this scan
- Our checks did not find this. The tool may still do it.Run dynamic codeNot seen in this scan
- Our checks did not find this. The tool may still do it.Read or write filesNot seen in this scan
- Our checks did not find this. The tool may still do it.Read environment and secretsNot seen in this scan
- Our checks did not find this. The tool may still do it.Control a web browserNot seen in this scan
- Our checks did not find this. The tool may still do it.Connect to databasesNot seen in this scan
- Our checks did not find this. The tool may still do it.Read or send messagesNot seen in this scan
- Our checks did not find this. The tool may still do it.Touch money or tradingNot seen in this scan
- Seen in this scan, either in the code or while it ran.Connect to the internetFound in the code by our scan
"Not seen" means our checks did not find it, and the tool may still do it. Covers commit 1ddb1a5, Nov 5, 2026. See the scan policy.
Before you install Fetch MCP
AgenticMart scanned Fetch MCP on Nov 5, 2026 with automated checks for hidden code, known-malicious packages, leaked secrets and vulnerable dependencies. The result covers one commit under our scan policy, so review what access you give it and check any advisories shown here.
What it can access
- An MCP server is a program your AI app starts and talks to. A local one runs with your user's permissions: it can see the files, environment variables and network your account can.
Before you install
- Pin the version you reviewed instead of always installing the latest release.
- Read the tool list or scripts before the first run, and keep approval prompts on for actions that write, send or delete.
- Maintained by zcaceres on GitHub, 835 stars and 126 forks. Popularity is not proof of safety.
- Last code change: Mar 12, 2026.
- Open-source license: MIT.
Published advisories for mcp-fetch-server
From the OSV database, for this npm package. Check that your installed version is past any fix.
- CVE-2025-65513Fetch MCP Server has a Server-Side Request Forgery (SSRF) vulnerability
Fetch MCP is an open-source mcp server by zcaceres, written mainly in TypeScript. A flexible HTTP fetching Model Context Protocol server.
At a glance
- Stars
- 835
- Forks
- 126
- Language
- TypeScript
- License
- MIT
- Created
- Dec 2024
- Last update
- Mar 12, 2026
- Type
- MCP Server
- Price
- Free
Questions about Fetch MCP
What is Fetch MCP?
A flexible HTTP fetching Model Context Protocol server.
Who maintains Fetch MCP?
Fetch MCP is maintained by zcaceres on GitHub (zcaceres/fetch-mcp). AgenticMart lists it from public repository data.
Is Fetch MCP safe to use?
AgenticMart scanned Fetch MCP on Nov 5, 2026 with automated checks for hidden code, known-malicious packages, leaked secrets and vulnerable dependencies. The result covers one commit under our scan policy, so review what access you give it and check any advisories shown here.
What license does Fetch MCP use?
It is published under the MIT license.
Fetch MCP alternatives
View more →Similar mcp servers in Other, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.
| Name | Stars | Licence | Last updated | Scan |
|---|---|---|---|---|
| Fetch MCP (this page) zcaceres | 835 | MIT | Mar 12, 2026 | Scanned, no flagged issues |
| Github MCP Server github | 34k | MIT | Oct 30, 2026 | Scanned, no flagged issues |
| Fastapi MCP tadata-org | 12k | MIT | Nov 24, 2025 | Scanned, no flagged issues |
| GhidraMCP LaurieWired | 12k | Apache-2.0 | Oct 10, 2026 | Scanned, no flagged issues |
| MCP Go mark3labs | 9.2k | MIT | Oct 30, 2026 | Scanned, no flagged issues |
| Git MCP idosal | 8.5k | Apache-2.0 | May 8, 2026 | Scanned, no flagged issues |