Fireround MCP Server

How to install Fireround

Built from the start command in the project's README: docker run -d --name fireround-pg -p 5432:5432 -e POSTGRES_PASSWORD=postgres postgres:18. Check the README for required keys or settings.

claude mcp add fireround -- docker run -d --name fireround-pg -p 5432:5432 -e POSTGRES_PASSWORD=postgres postgres:18

{
  "mcpServers": {
    "fireround": {
      "command": "docker",
      "args": [
        "run",
        "-d",
        "--name",
        "fireround-pg",
        "-p",
        "5432:5432",
        "-e",
        "POSTGRES_PASSWORD=postgres",
        "postgres:18"
      ]
    }
  }
}

{
  "mcpServers": {
    "fireround": {
      "command": "docker",
      "args": [
        "run",
        "-d",
        "--name",
        "fireround-pg",
        "-p",
        "5432:5432",
        "-e",
        "POSTGRES_PASSWORD=postgres",
        "postgres:18"
      ]
    }
  }
}

code --add-mcp '{"name":"fireround","command":"docker","args":["run","-d","--name","fireround-pg","-p","5432:5432","-e","POSTGRES_PASSWORD=postgres","postgres:18"]}'

What Fireround can touch

• Our checks did not find this. The tool may still do it.Run shell commandsNot seen in this scan
• Our checks did not find this. The tool may still do it.Run dynamic codeNot seen in this scan
• Our checks did not find this. The tool may still do it.Read or write filesNot seen in this scan
• Our checks did not find this. The tool may still do it.Read environment and secretsNot seen in this scan
• Our checks did not find this. The tool may still do it.Control a web browserNot seen in this scan
• Our checks did not find this. The tool may still do it.Connect to databasesNot seen in this scan
• Not checked directly. Its own description suggests it does this.Read or send messagesLikely, from its own description
• Our checks did not find this. The tool may still do it.Touch money or tradingNot seen in this scan
• Seen in this scan, either in the code or while it ran.Connect to the internetFound in the code by our scan

"Not seen" means our checks did not find it, and the tool may still do it. Covers commit ad1ae1f, Nov 5, 2026. See the scan policy.