{
  "format_version": "0.2.0",
  "report_id": "9b54620a-3e8d-4581-883c-5b41db30630b",
  "generated_at": "2026-09-29T06:17:11.107Z",
  "subject": {
    "server_name": "io.github.firecrawl/firecrawl-mcp-server",
    "artifact": {
      "ecosystem": "npm",
      "package": "firecrawl-mcp",
      "version": "3.26.0",
      "sha256": "cb1bbffd9a7c94d5b696bb323d0901a63a7533d9501edc32a4d3a6056cc452af",
      "download_url": "https://registry.npmjs.org/firecrawl-mcp/-/firecrawl-mcp-3.26.0.tgz",
      "registry_metadata_url": "https://registry.npmjs.org/firecrawl-mcp/3.26.0",
      "acquired_at": "2026-09-29T06:17:11.107Z",
      "registry_metadata_sha256": "481fb8d658c7a3130b6101018f082a0948b164119c0a0d8280ab543dd9d4ce6c",
      "integrity_claim": "sha512-aJPkPDSeQAIvA1RthFsLStXf5GHWE6hZa8MC36fk3JXC9etj0kUwBF1CFl3th0DmaFTZ0gZ9+eSvauyEDdPDwA==",
      "integrity_verified": true
    }
  },
  "analysis": {
    "engine": {
      "name": "sentinel",
      "version": "0.2.0",
      "build_sha256": "76ecfa3e5785d89b34d6618b32c84c01f0e40666b3541871cc874aba61200160"
    },
    "protocol_profile": {
      "id": "mcp-2026-07-28",
      "specification_revision": "2026-07-28",
      "local_retrieval_date": "2026-08-01",
      "discovery_status": "not_run"
    },
    "authorization_profiles": [
      {
        "id": "none",
        "credential_present": false,
        "description": "No credentials were supplied."
      }
    ],
    "rule_pack": {
      "version": "0.1.0",
      "sha256": "302d85219dda34199bd2402fcc94ba34233152fe996a128e0b332ac3efef24b3"
    },
    "semantic_analysis": []
  },
  "observations": [
    {
      "id": "observation:package-metadata",
      "kind": "artifact_metadata",
      "coverage": "declared",
      "evidence": [
        {
          "sha256": "502adbe4b4c468de3363ba90de05eeb0efc83cf292e959c1c029b6df4092d3aa",
          "artifact_path": "package/package.json",
          "capture_kind": "artifact_file"
        }
      ],
      "data": {
        "name": "firecrawl-mcp",
        "version": "3.26.0",
        "mcpName": "io.github.firecrawl/firecrawl-mcp-server",
        "description": "MCP server for Firecrawl — search, scrape, and interact with the web, and search scientific papers. Supports both cloud and self-hosted instances. Features include web search, scraping, page interaction, batch processing, LLM-powered content analysis, and research paper search over biomedical and arXiv literature (PubMed, bioRxiv, medRxiv, arXiv) with citation-graph expansion and full-text reading.",
        "bin": {
          "firecrawl-mcp": "dist/index.js"
        },
        "scripts": {
          "build": "rm -rf dist && tsup && node -e \"require('fs').chmodSync('dist/index.js', '755')\"",
          "test": "npm run build && node --test --test-concurrency=1 tests/*.test.mjs",
          "start": "node dist/index.js",
          "start:cloud": "CLOUD_SERVICE=true node dist/index.js",
          "lint": "eslint src/**/*.ts",
          "lint:fix": "eslint src/**/*.ts --fix",
          "format": "prettier --write .",
          "prepare": "npm run build",
          "publish-prod": "npm run build && npm publish",
          "publish-beta": "npm run build && npm publish --tag beta"
        },
        "engines": {
          "node": ">=22.0.0"
        }
      }
    },
    {
      "id": "observation:file-inventory",
      "kind": "file",
      "coverage": "declared",
      "evidence": [
        {
          "sha256": "cb1bbffd9a7c94d5b696bb323d0901a63a7533d9501edc32a4d3a6056cc452af",
          "capture_kind": "artifact_file"
        }
      ],
      "data": {
        "entry_count": 8,
        "regular_file_bytes": 269222,
        "entries": [
          {
            "path": "package/dist/agent-hints.js",
            "type": "file",
            "size": 1704,
            "sha256": "38901a790035ae3804654aa7d0d24cadda60ed11ea2b06c1a65eeaca07e6585f"
          },
          {
            "path": "package/dist/index.js",
            "type": "file",
            "size": 204229,
            "sha256": "7990b22a2f927f5d2e3f23d7ff2b256352ec248a60c1cd0fc82e86d980ebe097"
          },
          {
            "path": "package/dist/introspection-cache.js",
            "type": "file",
            "size": 1985,
            "sha256": "49615d834b6d826d1d7a37ec94e63f0c482bb59511113c793e00a7d7665d178f"
          },
          {
            "path": "package/dist/origin.js",
            "type": "file",
            "size": 1203,
            "sha256": "c03f07faddf4e1c383faeb959354a143837cc81cf421867ed2abd7d3e4bb570e"
          },
          {
            "path": "package/dist/www-authenticate.js",
            "type": "file",
            "size": 175,
            "sha256": "e84a9ee0a8773281182ef9427daa9d4f9444419cf2b2efa3ba5fcf5306d3d2d2"
          },
          {
            "path": "package/LICENSE",
            "type": "file",
            "size": 1065,
            "sha256": "9c12811442b47e27f690be7cf0252f6bf93ddee18476f13e0fc6b4badb09c22c"
          },
          {
            "path": "package/package.json",
            "type": "file",
            "size": 2199,
            "sha256": "502adbe4b4c468de3363ba90de05eeb0efc83cf292e959c1c029b6df4092d3aa"
          },
          {
            "path": "package/README.md",
            "type": "file",
            "size": 56662,
            "sha256": "941760d13663c5fee90a8c7c00bcb87525b0f321466f45b18e6de3317b751ae2"
          }
        ]
      }
    },
    {
      "id": "observation:registry-metadata",
      "kind": "artifact_metadata",
      "coverage": "declared",
      "evidence": [
        {
          "sha256": "481fb8d658c7a3130b6101018f082a0948b164119c0a0d8280ab543dd9d4ce6c",
          "capture_kind": "registry_metadata"
        }
      ],
      "data": {
        "metadata_url": "https://registry.npmjs.org/firecrawl-mcp/3.26.0",
        "requested_package": "firecrawl-mcp",
        "requested_version": "3.26.0",
        "tarball_url": "https://registry.npmjs.org/firecrawl-mcp/-/firecrawl-mcp-3.26.0.tgz",
        "integrity_claim": "sha512-aJPkPDSeQAIvA1RthFsLStXf5GHWE6hZa8MC36fk3JXC9etj0kUwBF1CFl3th0DmaFTZ0gZ9+eSvauyEDdPDwA==",
        "integrity_verified": true
      }
    },
    {
      "id": "observation:runtime-dependencies",
      "kind": "dependency",
      "coverage": "declared",
      "evidence": [
        {
          "sha256": "502adbe4b4c468de3363ba90de05eeb0efc83cf292e959c1c029b6df4092d3aa",
          "artifact_path": "package/package.json",
          "capture_kind": "artifact_file"
        }
      ],
      "data": {
        "dependencies": {
          "dotenv": "^17.2.2",
          "fastmcp": "4.3.2",
          "firecrawl": "4.42.0",
          "zod": "^4.2.1"
        }
      }
    },
    {
      "id": "observation:network-api-d68226b5bc75b5f2",
      "kind": "code_indicator",
      "coverage": "inferred",
      "evidence": [
        {
          "sha256": "7990b22a2f927f5d2e3f23d7ff2b256352ec248a60c1cd0fc82e86d980ebe097",
          "artifact_path": "package/dist/index.js",
          "capture_kind": "artifact_file",
          "byte_range": [
            38738,
            38744
          ]
        }
      ],
      "data": {
        "indicator": "network-api",
        "description": "Source references a network API."
      }
    },
    {
      "id": "observation:filesystem-api-8b6c79856c011757",
      "kind": "code_indicator",
      "coverage": "inferred",
      "evidence": [
        {
          "sha256": "7990b22a2f927f5d2e3f23d7ff2b256352ec248a60c1cd0fc82e86d980ebe097",
          "artifact_path": "package/dist/index.js",
          "capture_kind": "artifact_file",
          "byte_range": [
            197119,
            197128
          ]
        }
      ],
      "data": {
        "indicator": "filesystem-api",
        "description": "Source references a filesystem API."
      }
    },
    {
      "id": "observation:static-tool-inventory",
      "kind": "protocol_inventory",
      "coverage": "inferred",
      "evidence": [
        {
          "sha256": "cb1bbffd9a7c94d5b696bb323d0901a63a7533d9501edc32a4d3a6056cc452af",
          "capture_kind": "artifact_file"
        }
      ],
      "data": {
        "extraction": "static_source_analysis",
        "complete": false,
        "incompleteness": [
          "no_recognized_registration_pattern",
          "tools_inferred_from_definitions_only"
        ],
        "scanned_files": [
          "package/dist/agent-hints.js",
          "package/dist/index.js",
          "package/dist/introspection-cache.js",
          "package/dist/origin.js",
          "package/dist/www-authenticate.js"
        ],
        "tools": [
          {
            "name": "firecrawl_agent",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              183570,
              188893
            ],
            "description_sha256": "59084ebd60e2a6d73b7324f7d752123f0b4ce628f962f32914b21d15b4583f91",
            "description_repr": "string_literal",
            "input_schema_sha256": "f1c1de6923ffb9d75b5943b2a97d547fb4e03352761025be606104672c8c0bbf",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_agent_status",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              188911,
              190300
            ],
            "description_sha256": "437f1fd93f1cd6b46a5a80ef6511e9fecaafdfb646c404b4e173cbe37b5f4a57",
            "description_repr": "string_literal",
            "input_schema_sha256": "73da49f1d785fdaae782c268483052e06832bd1c88b515a29d50b00821fcd76c",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_check_crawl_status",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              179301,
              180242
            ],
            "description_sha256": "bcb065d57566228584057de87e19dd50f7ad01534d75f3097cf4c3c2a5b64c62",
            "description_repr": "string_literal",
            "input_schema_sha256": "73da49f1d785fdaae782c268483052e06832bd1c88b515a29d50b00821fcd76c",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_crawl",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              176258,
              179283
            ],
            "description_sha256": "25649d7791ff0002501bb04e94cd9d6d3d48f47b378b80dd6740fe9e07046bb3",
            "description_repr": "string_literal",
            "input_schema_sha256": "0f58a90bc7cd7f945ae845b76491cca2fc4da999eefbfd733f4b1350c55a36c4",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_credit_usage",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              65788,
              68720
            ],
            "description_sha256": "d610bd74f9b58fe649aa9365065f2c0cb1576093417349edd71000538f62a136",
            "description_repr": "string_literal",
            "input_schema_sha256": "5dd23d58a31fbe19fdbced8fdc250718ce644b685e753bcdf04016d20963abb1",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_developer_search",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              32369,
              34241
            ],
            "description_sha256": "bacef0504f744fc6f9d7310079e93dd62488fd86e147408b5e67333dcaf621b5",
            "description_repr": "string_literal",
            "input_schema_sha256": "b270a6ff0c92b0ddecbb0931d07da569b5bb7b86eb6850579401e3919c663551",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_extract",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              180260,
              181438
            ],
            "description_sha256": "80875cf67bef19b5aa19f572878d5695b3acfe1767076de6429a01e1498b378f",
            "description_repr": "string_literal",
            "input_schema_sha256": "521ac43010507627fc12160b64b8e0ab2ef3536d9c6e3d11adf129a8ad912161",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_feedback",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              171016,
              176238
            ],
            "description_sha256": "25ada18239140ced34c7bd16bc30ed3b441debebf1491c754850ef65f28924e3",
            "description_repr": "string_literal",
            "input_schema_sha256": "c86bfc76ba8cbc92b417041e529724dae5144dfd8dad45a2b6a676c1ca410774",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_find_tools",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              153980,
              157027
            ],
            "description_sha256": "b7385c1fcc277f196a0a9360e116a00c40c94207bcd124c1e1b2ec0d386bf8b1",
            "description_repr": "source_text",
            "input_schema_sha256": "5e35d72ceddbeddc53d02e97274125517c9819df6d44596f5d084abb478d941d",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_interact",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              190318,
              193913
            ],
            "description_sha256": "9bcc166bd0fe9e6e8732ec076d8d461a31f8d66e149d1e4c5e3aa7a8cd02fd99",
            "description_repr": "string_literal",
            "input_schema_sha256": "6b52ab87546aa9440bc732eddca3e4d064aae5bcbe4d120267309b3ff47e3986",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_interact_stop",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              193931,
              194982
            ],
            "description_sha256": "c08c8b5758ad123824329fd12481618240d68d30f98721a53d1504d62462c801",
            "description_repr": "string_literal",
            "input_schema_sha256": "bd95f981973b5191821ccc6a308034b3a4026c7db4632d536918ad9ee4fc63f9",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_map",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              146764,
              148547
            ],
            "description_sha256": "8e2e08055a8e408db81833671e3fd11388c0c4f2357eea328d9c651db5cba135",
            "description_repr": "string_literal",
            "input_schema_sha256": "5cbf16f845ca55aa0301021d3ebd7a7c501354e181e70b2e9a5369593b616fee",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_monitor_check",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              50993,
              52606
            ],
            "description_sha256": "442231c9d932d9790d63f223578cfe05960b0bba3809448b2303bb6f9cf0c98a",
            "description_repr": "string_literal",
            "input_schema_sha256": "3412868b167b723958cadfb16b07e8156b185be6d223f6d0aeb0a230e94b5d3c",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_monitor_checks",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              49797,
              50972
            ],
            "description_sha256": "12eff404d7439cb4eadd5cf4d12e5cf56f6df70981397ad1cd0ba396cfb5d9b7",
            "description_repr": "string_literal",
            "input_schema_sha256": "7a9471b0f4a6c2779e5fd399ce9c55eb2fb8996cafd91768180f934644158f30",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_monitor_create",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              42240,
              44580
            ],
            "description_sha256": "367c5c7144bcccb0dd7a0a61d55913e087fa83fae106469628439ccf516d3911",
            "description_repr": "string_literal",
            "input_schema_sha256": "1575a5cc38e9d154ba75fa2207a10daf99ca576b20f8b0874481d912f6bec842",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_monitor_delete",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              47753,
              48733
            ],
            "description_sha256": "4b6629ddb5d9c559004d818bbfbc7b2b1846a3f891df7daf72b923d9ead9c439",
            "description_repr": "string_literal",
            "input_schema_sha256": "e6e78330bd43873e873c80d567c2a57e063cc115be049acaf7d7b49d4b21aa36",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_monitor_get",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              45674,
              46532
            ],
            "description_sha256": "5048f239c31b18d5ea5cb403e3495cced96bfd7d25fd9d945f00f885eb260edb",
            "description_repr": "string_literal",
            "input_schema_sha256": "e6e78330bd43873e873c80d567c2a57e063cc115be049acaf7d7b49d4b21aa36",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_monitor_list",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              44601,
              45653
            ],
            "description_sha256": "f82eddfee287bed28ed9ac62cea3d6a7bd92bcec9b5842eb7cbdba27f3eb74db",
            "description_repr": "string_literal",
            "input_schema_sha256": "96705303d945d6ac498259c58ae1bac7844d9e1b65cff127a736b1a56521e197",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_monitor_run",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              48754,
              49776
            ],
            "description_sha256": "6768e440b9d6064f919bb626549928596cd234dcca9b06ca775d60b69b7e4cc4",
            "description_repr": "string_literal",
            "input_schema_sha256": "e6e78330bd43873e873c80d567c2a57e063cc115be049acaf7d7b49d4b21aa36",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_monitor_update",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              46553,
              47732
            ],
            "description_sha256": "a4abca1d7a337f027801045cd73dfba88eabbd0f7850b766a12be9b3a4046b8d",
            "description_repr": "string_literal",
            "input_schema_sha256": "51e24cf420750961ff47a77828cbcc775ad375d29680a74325a85de09983ed2b",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_parse",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              195000,
              198645
            ],
            "description_sha256": "95bb6672c075b244e71ff8ade647eb847b80080bd1ce9b85c5630c4e4f211e7b",
            "description_repr": "string_literal",
            "input_schema_sha256": "aab409f015f99e35f511ef518531e74dafdd6e6b6d9f7877bf11eabecb7761f3",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_research_inspect_paper",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              58997,
              60370
            ],
            "description_sha256": "000022503306a3a1b4038bc15ef595fc32eec425710ead129f8a0b11402e1247",
            "description_repr": "string_literal",
            "input_schema_sha256": "f6af4283466a59c75d815f2a67680b3f5852611cf55a6387e4a4c4d633728e9b",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_research_read_paper",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              62703,
              64517
            ],
            "description_sha256": "56049b21ac095194f96a4f368dc85d449049429186b857361fb0034c07e9d239",
            "description_repr": "string_literal",
            "input_schema_sha256": "5acec8ed3d7b4922ad34438a734996700d5069c2d26fce9528f222ea7082279d",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_research_related_papers",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              60391,
              62682
            ],
            "description_sha256": "353ca09daf6256d9e017b90fc4200ec9bf82a7e060c3ed4298ba4e01ba0f6a21",
            "description_repr": "string_literal",
            "input_schema_sha256": "2ff0f07f153d889c30b1eed4f9a1085eda42d98b075eb690d54054def64b2578",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_research_search_github",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              64538,
              65494
            ],
            "description_sha256": "29ae7d85e06f44b58068a99d880ff6e476c37ab266a4968f774b060a2affda51",
            "description_repr": "string_literal",
            "input_schema_sha256": "8628a0d6d4e32891974ed5e678eca7d3e9c0dc6bdb52ac63d7d2d94b54836df6",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_research_search_papers",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              56360,
              58976
            ],
            "description_sha256": "0b90d0b4bac0a8ecc6f5008667237ec1310c4c4062dc93dd0c5e0af4971ab4fa",
            "description_repr": "string_literal",
            "input_schema_sha256": "539411240cb30a2e64e77a745e4dced56cacb3a240130b4e9f06f792c4e43b8d",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_scrape",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              143534,
              146667
            ],
            "description_sha256": "2e27185be38b69ec1c6aa61ed1b80f93fceaf3dc9e93a151caeaf1d769c87e1a",
            "description_repr": "string_literal",
            "input_schema_sha256": "d86f6d39d14f45c949fe325ec92aa6e8e2fb5785bdebb53de08b111191353615",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_search",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              148565,
              152287
            ],
            "description_sha256": "41db124b5e3c3a9a752e4d89bfcd4e4feeca5dca677587b5b6b43b1010aa04ad",
            "description_repr": "source_text",
            "input_schema_sha256": "a7d430623ba8ef9ad32a424aecb5d6581d4f0235313effd2f1658ee50f3dd234",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_search_feedback",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              166199,
              170618
            ],
            "description_sha256": "59225dedb205bdbffec91e30da6cb09a0e136a1acb91f43d63bf9aff84d0f436",
            "description_repr": "string_literal",
            "input_schema_sha256": "74ea21411dbe3fc5fb0ab833ef69dcc9a9769a0da2e4d000ffe8e619db324c7b",
            "input_schema_repr": "source_text"
          }
        ]
      }
    }
  ],
  "findings": [],
  "limitations": [
    {
      "code": "protocol_discovery_not_run",
      "summary": "M1 performs static artifact inspection only; no MCP protocol session was opened."
    },
    {
      "code": "tool_calls_not_performed",
      "summary": "No tools were invoked."
    },
    {
      "code": "semantic_analysis_not_run",
      "summary": "No semantic model analysis was run."
    },
    {
      "code": "static_tool_extraction_incomplete",
      "summary": "The declared tool surface could not be fully resolved from source (no_recognized_registration_pattern, tools_inferred_from_definitions_only). Treat the inventory as a lower bound, not a complete list."
    }
  ]
}