Registry/dondai1234/master-fetch

dondai1234/master-fetch

Verified

MCP server for web fetching with Cloudflare bypass, Trafilatura extraction, and smart routing. Free, self-hosted, no API keys.

By dondai1234MIT

python

ai ml

42stars

7forks

Scanned Jul 20, 2026

Repository GITHUB

ai ai-agents fetch mcp web websearch-agent

F0%

Scanned 20h ago

Critical Issues

Vulnerabilities Found

10Crit

64High

27Med

0Low

0Info

Security ScoreF

out of 100

Vulnerabilities Found

Crit

High

Medi

Low

Info

Last scanned: 7/20/2026

Quality ScoreC

out of 100

Maint.

Popular

Docs

Compat

Maintenance58%

Popularity23%

Documentation48%

Compatibility67%

Maintenance58

Unknown

Commit Frequency65%

Release Frequency35%

Issue Response80%

Popularity23

Stars

Downloads

Forks

Stars Score46%

Downloads Score0%

Forks Score32%

Documentation48

README Quality50%

Available Documentation

API DocsExamplesChangelog

Compatibility67

MCP Spec Compliance80%

Transport Support50%

Features

TypeScript

Agentic MCP Risk Intelligence

MCPSafe checks risks unique to AI-connected MCP servers — prompt surfaces, model-controlled tools, credentials, filesystems, and network reachability.

agentic findings

Severe agentic exposure

Multiple MCP-native exploit paths were detected. Review before connecting this server to an AI client.

Prompt Injection Surface

Tool metadata can steer or hijack AI clients before a user invokes the tool.

AI → Command Execution

Model-selected tool arguments can reach shell/process execution.

Secret Exfiltration Path

Tool context combines credential access with outbound network capability.

Unbounded Filesystem

AI-controlled paths may access files outside the intended workspace.

Agent SSRF

AI-controlled URLs may reach local, metadata, or internal network services.

Vulnerabilities(101)

10Critical

64High

27Medium

Filter:

README

No README available for this server.

View repository

Embed Security Badge

Add this badge to your README or documentation

Badge Type

Style

[![dondai1234/master-fetch MCPSafe Security](https://api.mcpsafe.org
/api/badge/dondai1234-master-fetch.svg)](https://mcpsafe.org/registry/dondai1234-master-fetch)

Need more customization options?Badge Documentation

Server Information

Source: GITHUB
Language: python
License: MIT
Added: Jul 20, 2026
Updated: Jul 20, 2026

Actions

Compare with other servers Request rescan

dondai1234/master-fetch

Security ScoreF

Vulnerabilities Found

Quality ScoreC

Maintenance58

Popularity23

Documentation48

Available Documentation

Compatibility67

Features

Agentic MCP Risk Intelligence

Vulnerabilities(101)

Hardcoded Credentials Detected (Python)

Hardcoded Credentials Detected (Python)

Hardcoded Credentials Detected (Python)

Hardcoded Credentials Detected (Python)

SQL Injection via Dynamic Query Construction

Hardcoded Credentials Detected (Python)

eval() with External Input

child_process.exec() with User Input

Python Malware Pattern Detected

Potential Command Injection

open() with Unvalidated Path

path.join() with User Input

path.join() with User Input

path.join() with User Input

fs Operation with User-Controlled Path

fs Operation with User-Controlled Path

MCP Tool URL Argument Enables SSRF

Missing Authentication on Handler

Potential Typosquatting Package Name

MCP Tool URL Argument Enables SSRF

open() with Unvalidated Path

open() with Unvalidated Path

HTTP Request with User-Controlled URL (Python)

Internal IP Address Access Pattern Detected (Python)

open() with Unvalidated Path

open() with Unvalidated Path

open() with Unvalidated Path

open() with Unvalidated Path

open() with Unvalidated Path

open() with Unvalidated Path

open() with Unvalidated Path

open() with Unvalidated Path

open() with Unvalidated Path

open() with Unvalidated Path

open() with Unvalidated Path

open() with Unvalidated Path

open() with Unvalidated Path

open() with Unvalidated Path

Internal IP Address Access Pattern Detected (Python)

HTTP Request with User-Controlled URL (Python)

HTTP Request with User-Controlled URL (Python)

Internal IP Address Access Pattern Detected (Python)

Internal IP Address Access Pattern Detected (Python)

Internal IP Address Access Pattern Detected (Python)

Internal IP Address Access Pattern Detected (Python)

Internal IP Address Access Pattern Detected (Python)

Internal IP Address Access Pattern Detected (Python)

HTTP Request with User-Controlled URL (Python)

HTTP Request with User-Controlled URL (Python)

HTTP Request with User-Controlled URL (Python)

HTTP Request with User-Controlled URL (Python)

open() with Unvalidated Path

open() with Unvalidated Path

open() with Unvalidated Path

open() with Unvalidated Path

HTTP Request with User-Controlled URL (Python)

HTTP Request with User-Controlled URL (Python)

HTTP Request with User-Controlled URL (Python)

HTTP Request with User-Controlled URL (Python)

HTTP Request with User-Controlled URL (Python)

Flask XSS Vulnerability

HTTP Request with User-Controlled URL (Python)

Internal IP Address Access Pattern Detected (Python)

Internal IP Address Access Pattern Detected (Python)

MCP Tool URL Argument Enables SSRF

MCP Tool URL Argument Enables SSRF

MCP Tool URL Argument Enables SSRF

MCP Tool URL Argument Enables SSRF