MCP server official
Risk level
low
10/100

Firecrawl MCP ↗

Firecrawl MCP is an officially published MCP server from Mendable AI. Anomity scores its risk at 10 out of 100 (low).

network:outbound

Analysis summary

Firecrawl MCP is an officially published MCP server from Mendable AI. Anomity scores its risk at 10 out of 100 (low).

Firecrawl gives an agent web scraping, crawling, and search as structured tools — turning arbitrary pages into clean markdown suitable for a context window, including sites that need JavaScript rendering.

Declared capability is outbound network access. The security framing worth stating plainly: this server's entire job is to bring untrusted third-party text into a model's context, which makes it the most direct prompt-injection channel most agents have. Pages can and do contain instructions aimed at whatever agent reads them. Anything downstream of a scrape — especially an agent that also holds write capabilities — should treat scraped content as data, never as direction.

Why this entry scored 10 out of 100

This profile starts at the catalog's neutral base of 50. Because the entry is officially published, trust adjusts the score by -40. The entry declares no high-risk capabilities on its own, so capabilities add nothing. It matches no dangerous capability combinations. The clamped result is 10, placing it in the low band.

See the full scoring formula →

Findings

  • Published by the vendor Trust offset
    Contribution to score: -40

Capabilities

Every capability the entry declares, with the security implication of each.

  • network:outbound Outbound network
    Can make outbound network requests. Required for hosted model providers and remote APIs; also the path for data exfiltration if combined with read access.