{
  "format_version": "0.2.0",
  "report_id": "f9b854e3-d71a-4326-ab90-50e363d97740",
  "generated_at": "2026-08-12T18:17:29.684Z",
  "subject": {
    "server_name": "io.github.firecrawl/firecrawl-mcp-server",
    "artifact": {
      "ecosystem": "npm",
      "package": "firecrawl-mcp",
      "version": "3.24.0",
      "sha256": "34e8f48139a9f445c40046253bf3dd240344b6465b1845dc275b59ae23cbcb2c",
      "download_url": "https://registry.npmjs.org/firecrawl-mcp/-/firecrawl-mcp-3.24.0.tgz",
      "registry_metadata_url": "https://registry.npmjs.org/firecrawl-mcp/3.24.0",
      "acquired_at": "2026-08-12T18:17:29.684Z",
      "registry_metadata_sha256": "9e6ae5a16962f10fb65bc988e848ec67408c00c4aae14789f20700edfe873170",
      "integrity_claim": "sha512-GJdI37XWXWK+Hu/LnITH9KSoUgzWxPBNrS+ixrNILukRieKYypL5LskACjPlmtbH9290HtpK/lkHWW6052V3rg==",
      "integrity_verified": true
    }
  },
  "analysis": {
    "engine": {
      "name": "sentinel",
      "version": "0.2.0",
      "build_sha256": "76ecfa3e5785d89b34d6618b32c84c01f0e40666b3541871cc874aba61200160"
    },
    "protocol_profile": {
      "id": "mcp-2026-07-28",
      "specification_revision": "2026-07-28",
      "local_retrieval_date": "2026-08-01",
      "discovery_status": "not_run"
    },
    "authorization_profiles": [
      {
        "id": "none",
        "credential_present": false,
        "description": "No credentials were supplied."
      }
    ],
    "rule_pack": {
      "version": "0.1.0",
      "sha256": "302d85219dda34199bd2402fcc94ba34233152fe996a128e0b332ac3efef24b3"
    },
    "semantic_analysis": []
  },
  "observations": [
    {
      "id": "observation:package-metadata",
      "kind": "artifact_metadata",
      "coverage": "declared",
      "evidence": [
        {
          "sha256": "8b01eff994c713b7d207226542db9375a15fbd0bb942b27394183ea489b80a58",
          "artifact_path": "package/package.json",
          "capture_kind": "artifact_file"
        }
      ],
      "data": {
        "name": "firecrawl-mcp",
        "version": "3.24.0",
        "mcpName": "io.github.firecrawl/firecrawl-mcp-server",
        "description": "MCP server for Firecrawl — search, scrape, and interact with the web, and search scientific papers. Supports both cloud and self-hosted instances. Features include web search, scraping, page interaction, batch processing, LLM-powered content analysis, and research paper search over biomedical and arXiv literature (PubMed, bioRxiv, medRxiv, arXiv) with citation-graph expansion and full-text reading.",
        "bin": {
          "firecrawl-mcp": "dist/index.js"
        },
        "scripts": {
          "build": "rm -rf dist && tsup && node -e \"require('fs').chmodSync('dist/index.js', '755')\"",
          "test": "npm run build && node --test tests/*.test.mjs",
          "start": "node dist/index.js",
          "start:cloud": "CLOUD_SERVICE=true node dist/index.js",
          "lint": "eslint src/**/*.ts",
          "lint:fix": "eslint src/**/*.ts --fix",
          "format": "prettier --write .",
          "publish-prod": "npm run build && npm publish",
          "publish-beta": "npm run build && npm publish --tag beta"
        },
        "engines": {
          "node": ">=22.0.0"
        }
      }
    },
    {
      "id": "observation:file-inventory",
      "kind": "file",
      "coverage": "declared",
      "evidence": [
        {
          "sha256": "34e8f48139a9f445c40046253bf3dd240344b6465b1845dc275b59ae23cbcb2c",
          "capture_kind": "artifact_file"
        }
      ],
      "data": {
        "entry_count": 5,
        "regular_file_bytes": 167858,
        "entries": [
          {
            "path": "package/dist/index.js",
            "type": "file",
            "size": 127781,
            "sha256": "983ad26c834ceef34f6b3d2a5cf8e1974230668d467566e094402a6d372a937e"
          },
          {
            "path": "package/dist/www-authenticate.js",
            "type": "file",
            "size": 175,
            "sha256": "e84a9ee0a8773281182ef9427daa9d4f9444419cf2b2efa3ba5fcf5306d3d2d2"
          },
          {
            "path": "package/LICENSE",
            "type": "file",
            "size": 1065,
            "sha256": "9c12811442b47e27f690be7cf0252f6bf93ddee18476f13e0fc6b4badb09c22c"
          },
          {
            "path": "package/package.json",
            "type": "file",
            "size": 2158,
            "sha256": "8b01eff994c713b7d207226542db9375a15fbd0bb942b27394183ea489b80a58"
          },
          {
            "path": "package/README.md",
            "type": "file",
            "size": 36679,
            "sha256": "298194cdf03241443970e60fc85844a644ee2ce1c4103f6bbc1636b1bcea0fb0"
          }
        ]
      }
    },
    {
      "id": "observation:registry-metadata",
      "kind": "artifact_metadata",
      "coverage": "declared",
      "evidence": [
        {
          "sha256": "9e6ae5a16962f10fb65bc988e848ec67408c00c4aae14789f20700edfe873170",
          "capture_kind": "registry_metadata"
        }
      ],
      "data": {
        "metadata_url": "https://registry.npmjs.org/firecrawl-mcp/3.24.0",
        "requested_package": "firecrawl-mcp",
        "requested_version": "3.24.0",
        "tarball_url": "https://registry.npmjs.org/firecrawl-mcp/-/firecrawl-mcp-3.24.0.tgz",
        "integrity_claim": "sha512-GJdI37XWXWK+Hu/LnITH9KSoUgzWxPBNrS+ixrNILukRieKYypL5LskACjPlmtbH9290HtpK/lkHWW6052V3rg==",
        "integrity_verified": true
      }
    },
    {
      "id": "observation:runtime-dependencies",
      "kind": "dependency",
      "coverage": "declared",
      "evidence": [
        {
          "sha256": "8b01eff994c713b7d207226542db9375a15fbd0bb942b27394183ea489b80a58",
          "artifact_path": "package/package.json",
          "capture_kind": "artifact_file"
        }
      ],
      "data": {
        "dependencies": {
          "@mendable/firecrawl-js": "4.25.2",
          "dotenv": "^17.2.2",
          "fastmcp": "4.3.2",
          "zod": "^4.1.5"
        }
      }
    },
    {
      "id": "observation:network-api-dec00c44f02241f1",
      "kind": "code_indicator",
      "coverage": "inferred",
      "evidence": [
        {
          "sha256": "983ad26c834ceef34f6b3d2a5cf8e1974230668d467566e094402a6d372a937e",
          "artifact_path": "package/dist/index.js",
          "capture_kind": "artifact_file",
          "byte_range": [
            6479,
            6485
          ]
        }
      ],
      "data": {
        "indicator": "network-api",
        "description": "Source references a network API."
      }
    },
    {
      "id": "observation:filesystem-api-6baed1a2a7c79c10",
      "kind": "code_indicator",
      "coverage": "inferred",
      "evidence": [
        {
          "sha256": "983ad26c834ceef34f6b3d2a5cf8e1974230668d467566e094402a6d372a937e",
          "artifact_path": "package/dist/index.js",
          "capture_kind": "artifact_file",
          "byte_range": [
            122253,
            122262
          ]
        }
      ],
      "data": {
        "indicator": "filesystem-api",
        "description": "Source references a filesystem API."
      }
    },
    {
      "id": "observation:static-tool-inventory",
      "kind": "protocol_inventory",
      "coverage": "inferred",
      "evidence": [
        {
          "sha256": "34e8f48139a9f445c40046253bf3dd240344b6465b1845dc275b59ae23cbcb2c",
          "capture_kind": "artifact_file"
        }
      ],
      "data": {
        "extraction": "static_source_analysis",
        "complete": false,
        "incompleteness": [
          "no_recognized_registration_pattern",
          "tools_inferred_from_definitions_only"
        ],
        "scanned_files": [
          "package/dist/index.js",
          "package/dist/www-authenticate.js"
        ],
        "tools": [
          {
            "name": "firecrawl_agent",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              112956,
              114667
            ],
            "description_sha256": "faac93c2f0fb6de5d4644e2ada3853a0dc211692c3c79ad936a16f8468e1aee1",
            "description_repr": "string_literal",
            "input_schema_sha256": "cf01b235ac6adbac58e4ad2f1340a8100fbea26ecd90f63058dd9e796f09ef8a",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_agent_status",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              114685,
              115927
            ],
            "description_sha256": "130caf92ee350adb5ec92df88931264ffba1714c12c66adb977cf9438703bd00",
            "description_repr": "string_literal",
            "input_schema_sha256": "5f96fcf4007a83139f0500c828e624500072df9413512893a8982bb2c8e89092",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_check_crawl_status",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              111030,
              111835
            ],
            "description_sha256": "bcb065d57566228584057de87e19dd50f7ad01534d75f3097cf4c3c2a5b64c62",
            "description_repr": "string_literal",
            "input_schema_sha256": "5f96fcf4007a83139f0500c828e624500072df9413512893a8982bb2c8e89092",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_crawl",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              108119,
              111012
            ],
            "description_sha256": "25649d7791ff0002501bb04e94cd9d6d3d48f47b378b80dd6740fe9e07046bb3",
            "description_repr": "string_literal",
            "input_schema_sha256": "2b93927ed344260d633bb218e1ad8f8041d8216312146a3712249ec5128ab9e5",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_developer_search",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              1131,
              2962
            ],
            "description_sha256": "6ecdaa5dd827aab0b860ece1eed83e334db4876e09ae9afa030400021b021ee9",
            "description_repr": "string_literal",
            "input_schema_sha256": "624194ed54a50b9234e549f2b3ac5407abd9043386df4d9553b22633ab3f3217",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_extract",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              111853,
              112938
            ],
            "description_sha256": "6a727a1fbf74c975a0f6402aed7782a8aee14c7e068a8a7eb4c046bcc1ec2564",
            "description_repr": "string_literal",
            "input_schema_sha256": "485934c974ff21b564012b529cb18467771f01b07e1b0b5cc8b4c3e323a9ac8f",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_feedback",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              104667,
              108099
            ],
            "description_sha256": "3c7a932a57a027e90039bfb4ee20e5c708e04a69e3d88e4369fc1645878232c6",
            "description_repr": "string_literal",
            "input_schema_sha256": "1d33f5eec93500a480f18e53413f60a6919c91901ddf1deeb4b16c73b239c1ef",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_interact",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              115945,
              119420
            ],
            "description_sha256": "9bcc166bd0fe9e6e8732ec076d8d461a31f8d66e149d1e4c5e3aa7a8cd02fd99",
            "description_repr": "string_literal",
            "input_schema_sha256": "3630559247c18408603b7bbe46c268435bf1b050d156e60306c93a8e7f35b06a",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_interact_stop",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              119438,
              120378
            ],
            "description_sha256": "c08c8b5758ad123824329fd12481618240d68d30f98721a53d1504d62462c801",
            "description_repr": "string_literal",
            "input_schema_sha256": "b97b93f33d2cb78973c964fd451fd434bed0d1d77064c678e20dbf4ea5a342c1",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_map",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              89493,
              91046
            ],
            "description_sha256": "cfddd1afe8586b1e7b35b10118a4162541b82136444b90c757b6d223c7e01187",
            "description_repr": "string_literal",
            "input_schema_sha256": "238fe71835a1072db6db8578d56ded03f0c6bf34a0538f01971db66afff600e5",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_monitor_check",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              17745,
              19235
            ],
            "description_sha256": "442231c9d932d9790d63f223578cfe05960b0bba3809448b2303bb6f9cf0c98a",
            "description_repr": "string_literal",
            "input_schema_sha256": "b77318fddaa6db5bbbf946b8967f94f6dfbbfdcdff145101d13b55a10caef95c",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_monitor_checks",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              16673,
              17724
            ],
            "description_sha256": "12eff404d7439cb4eadd5cf4d12e5cf56f6df70981397ad1cd0ba396cfb5d9b7",
            "description_repr": "string_literal",
            "input_schema_sha256": "8d20fdd65d8ec756bf5254fefd7844a198c299507bfdca6681cbf98740409ff0",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_monitor_create",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              9911,
              12095
            ],
            "description_sha256": "367c5c7144bcccb0dd7a0a61d55913e087fa83fae106469628439ccf516d3911",
            "description_repr": "string_literal",
            "input_schema_sha256": "85a267b89d6c2ba233394621a80ef81145d2a6f66886c8ba9a3804c500545ad5",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_monitor_delete",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              14874,
              15730
            ],
            "description_sha256": "4b6629ddb5d9c559004d818bbfbc7b2b1846a3f891df7daf72b923d9ead9c439",
            "description_repr": "string_literal",
            "input_schema_sha256": "62330e8807292463489a985ac775e0ec4d2d85fd940479cfe70e726ea99fba92",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_monitor_get",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              13031,
              13771
            ],
            "description_sha256": "5048f239c31b18d5ea5cb403e3495cced96bfd7d25fd9d945f00f885eb260edb",
            "description_repr": "string_literal",
            "input_schema_sha256": "62330e8807292463489a985ac775e0ec4d2d85fd940479cfe70e726ea99fba92",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_monitor_list",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              12116,
              13010
            ],
            "description_sha256": "f82eddfee287bed28ed9ac62cea3d6a7bd92bcec9b5842eb7cbdba27f3eb74db",
            "description_repr": "string_literal",
            "input_schema_sha256": "2a8530fe42f5a2212426352010f7b6d2d70a4d60e2903802eddb92ed1a04c648",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_monitor_run",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              15751,
              16652
            ],
            "description_sha256": "6768e440b9d6064f919bb626549928596cd234dcca9b06ca775d60b69b7e4cc4",
            "description_repr": "string_literal",
            "input_schema_sha256": "62330e8807292463489a985ac775e0ec4d2d85fd940479cfe70e726ea99fba92",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_monitor_update",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              13792,
              14853
            ],
            "description_sha256": "a4abca1d7a337f027801045cd73dfba88eabbd0f7850b766a12be9b3a4046b8d",
            "description_repr": "string_literal",
            "input_schema_sha256": "97a27ad9ab23ac60fcc29d9046c047838a753ca8f00bc8a7431fd174d5c8a16b",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_parse",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              120396,
              123511
            ],
            "description_sha256": "e86ceef19c1a60930e88a73952259d9261f58158ca8b2448cad7e79b9618e54d",
            "description_repr": "string_literal",
            "input_schema_sha256": "aab409f015f99e35f511ef518531e74dafdd6e6b6d9f7877bf11eabecb7761f3",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_research_inspect_paper",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              25388,
              26522
            ],
            "description_sha256": "000022503306a3a1b4038bc15ef595fc32eec425710ead129f8a0b11402e1247",
            "description_repr": "string_literal",
            "input_schema_sha256": "99ed8d27fa671e2c64fdb66915a9e540adae5203b034bdb49d4cb7792a1900f4",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_research_read_paper",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              28544,
              30157
            ],
            "description_sha256": "56049b21ac095194f96a4f368dc85d449049429186b857361fb0034c07e9d239",
            "description_repr": "string_literal",
            "input_schema_sha256": "2f21c4efb410b939627bbb0c93af5e7e22d5c7cf54318ef3cf80a114fc471f89",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_research_related_papers",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              26543,
              28523
            ],
            "description_sha256": "353ca09daf6256d9e017b90fc4200ec9bf82a7e060c3ed4298ba4e01ba0f6a21",
            "description_repr": "string_literal",
            "input_schema_sha256": "61616656afd642b8dada6c368a21b6612cee9bc409b2f17f952c7f89d9b20107",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_research_search_github",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              30178,
              31298
            ],
            "description_sha256": "e068176cf05c2247c53c7eb8d7ba12b68bded91426d5c3f66b5583c1e04c2bb2",
            "description_repr": "string_literal",
            "input_schema_sha256": "1a8283ec675323f1a62de2f98563aeae7b967849047cbcae30dba41a66f18423",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_research_search_papers",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              22958,
              25367
            ],
            "description_sha256": "0b90d0b4bac0a8ecc6f5008667237ec1310c4c4062dc93dd0c5e0af4971ab4fa",
            "description_repr": "string_literal",
            "input_schema_sha256": "8dc7e00b3bcb761b675c6a33259108fe9a614da73ae8af5e68a0a91f2fed333d",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_scrape",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              87145,
              89475
            ],
            "description_sha256": "d11718a9564a082713a9261e46232f48415a8dd1c0f4feb32c9dc1993307fc5d",
            "description_repr": "string_literal",
            "input_schema_sha256": "ee055f2119476dae5c80eb9d9b19cf47dcddc81c8fdf61721e3a04d180bb8bbe",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_search",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              91064,
              94020
            ],
            "description_sha256": "b92c7e71a255fd184a908b4da9fb2f180b71adb9dce7794835e255d5fe6d773b",
            "description_repr": "string_literal",
            "input_schema_sha256": "65e0d8a6e27819b40bc6f078ed3a75944adfc0182d0e7aeac8d72f2a9ce1d2bd",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_search_feedback",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              100429,
              104392
            ],
            "description_sha256": "59225dedb205bdbffec91e30da6cb09a0e136a1acb91f43d63bf9aff84d0f436",
            "description_repr": "string_literal",
            "input_schema_sha256": "c356cda9a5f37568eabf6b4cd29c97a308ceeefe59accc55998a2eee3b0baac5",
            "input_schema_repr": "source_text"
          }
        ]
      }
    }
  ],
  "findings": [],
  "limitations": [
    {
      "code": "protocol_discovery_not_run",
      "summary": "M1 performs static artifact inspection only; no MCP protocol session was opened."
    },
    {
      "code": "tool_calls_not_performed",
      "summary": "No tools were invoked."
    },
    {
      "code": "semantic_analysis_not_run",
      "summary": "No semantic model analysis was run."
    },
    {
      "code": "static_tool_extraction_incomplete",
      "summary": "The declared tool surface could not be fully resolved from source (no_recognized_registration_pattern, tools_inferred_from_definitions_only). Treat the inventory as a lower bound, not a complete list."
    }
  ]
}