{
  "format_version": "0.2.0",
  "report_id": "6a078ce8-236b-4af8-8a44-e5bef5eec7b1",
  "generated_at": "2026-09-25T06:17:11.825Z",
  "subject": {
    "server_name": "io.github.firecrawl/firecrawl-mcp-server",
    "artifact": {
      "ecosystem": "npm",
      "package": "firecrawl-mcp",
      "version": "3.25.5",
      "sha256": "d1d2137fdd163afafce5a2c46d644d13ab1a211ac49a64f450011e60015d8821",
      "download_url": "https://registry.npmjs.org/firecrawl-mcp/-/firecrawl-mcp-3.25.5.tgz",
      "registry_metadata_url": "https://registry.npmjs.org/firecrawl-mcp/3.25.5",
      "acquired_at": "2026-09-25T06:17:11.825Z",
      "registry_metadata_sha256": "e261931300845406c75934139aa9116d2693468a57b9782cee7cbccb17e5a9b9",
      "integrity_claim": "sha512-maWfL4TQRvu2nHnaHGsSxBP8SwZB7nVyHAicRIZTdfZdqJDsvz1SiTqN6tZOLjmjyg7UgLmbMibXb7Ndtq/Iog==",
      "integrity_verified": true
    }
  },
  "analysis": {
    "engine": {
      "name": "sentinel",
      "version": "0.2.0",
      "build_sha256": "76ecfa3e5785d89b34d6618b32c84c01f0e40666b3541871cc874aba61200160"
    },
    "protocol_profile": {
      "id": "mcp-2026-07-28",
      "specification_revision": "2026-07-28",
      "local_retrieval_date": "2026-08-01",
      "discovery_status": "not_run"
    },
    "authorization_profiles": [
      {
        "id": "none",
        "credential_present": false,
        "description": "No credentials were supplied."
      }
    ],
    "rule_pack": {
      "version": "0.1.0",
      "sha256": "302d85219dda34199bd2402fcc94ba34233152fe996a128e0b332ac3efef24b3"
    },
    "semantic_analysis": []
  },
  "observations": [
    {
      "id": "observation:package-metadata",
      "kind": "artifact_metadata",
      "coverage": "declared",
      "evidence": [
        {
          "sha256": "e407bf1680644d4c26c8fe62ba1fc13fd7ea9e547d8aaf909116ca6727ce7e26",
          "artifact_path": "package/package.json",
          "capture_kind": "artifact_file"
        }
      ],
      "data": {
        "name": "firecrawl-mcp",
        "version": "3.25.5",
        "mcpName": "io.github.firecrawl/firecrawl-mcp-server",
        "description": "MCP server for Firecrawl — search, scrape, and interact with the web, and search scientific papers. Supports both cloud and self-hosted instances. Features include web search, scraping, page interaction, batch processing, LLM-powered content analysis, and research paper search over biomedical and arXiv literature (PubMed, bioRxiv, medRxiv, arXiv) with citation-graph expansion and full-text reading.",
        "bin": {
          "firecrawl-mcp": "dist/index.js"
        },
        "scripts": {
          "build": "rm -rf dist && tsup && node -e \"require('fs').chmodSync('dist/index.js', '755')\"",
          "test": "npm run build && node --test tests/*.test.mjs",
          "start": "node dist/index.js",
          "start:cloud": "CLOUD_SERVICE=true node dist/index.js",
          "lint": "eslint src/**/*.ts",
          "lint:fix": "eslint src/**/*.ts --fix",
          "format": "prettier --write .",
          "publish-prod": "npm run build && npm publish",
          "publish-beta": "npm run build && npm publish --tag beta"
        },
        "engines": {
          "node": ">=22.0.0"
        }
      }
    },
    {
      "id": "observation:file-inventory",
      "kind": "file",
      "coverage": "declared",
      "evidence": [
        {
          "sha256": "d1d2137fdd163afafce5a2c46d644d13ab1a211ac49a64f450011e60015d8821",
          "capture_kind": "artifact_file"
        }
      ],
      "data": {
        "entry_count": 6,
        "regular_file_bytes": 245559,
        "entries": [
          {
            "path": "package/dist/index.js",
            "type": "file",
            "size": 189617,
            "sha256": "ee3e868a5673b570e02d50989edc6cb431733496a8abd1505146a12912f5645e"
          },
          {
            "path": "package/dist/origin.js",
            "type": "file",
            "size": 1203,
            "sha256": "c03f07faddf4e1c383faeb959354a143837cc81cf421867ed2abd7d3e4bb570e"
          },
          {
            "path": "package/dist/www-authenticate.js",
            "type": "file",
            "size": 175,
            "sha256": "e84a9ee0a8773281182ef9427daa9d4f9444419cf2b2efa3ba5fcf5306d3d2d2"
          },
          {
            "path": "package/LICENSE",
            "type": "file",
            "size": 1065,
            "sha256": "9c12811442b47e27f690be7cf0252f6bf93ddee18476f13e0fc6b4badb09c22c"
          },
          {
            "path": "package/package.json",
            "type": "file",
            "size": 2145,
            "sha256": "e407bf1680644d4c26c8fe62ba1fc13fd7ea9e547d8aaf909116ca6727ce7e26"
          },
          {
            "path": "package/README.md",
            "type": "file",
            "size": 51354,
            "sha256": "be087825c4759d568b22d3c6fbcf13ed6befdd32162ed7c1cba86db7841e446b"
          }
        ]
      }
    },
    {
      "id": "observation:registry-metadata",
      "kind": "artifact_metadata",
      "coverage": "declared",
      "evidence": [
        {
          "sha256": "e261931300845406c75934139aa9116d2693468a57b9782cee7cbccb17e5a9b9",
          "capture_kind": "registry_metadata"
        }
      ],
      "data": {
        "metadata_url": "https://registry.npmjs.org/firecrawl-mcp/3.25.5",
        "requested_package": "firecrawl-mcp",
        "requested_version": "3.25.5",
        "tarball_url": "https://registry.npmjs.org/firecrawl-mcp/-/firecrawl-mcp-3.25.5.tgz",
        "integrity_claim": "sha512-maWfL4TQRvu2nHnaHGsSxBP8SwZB7nVyHAicRIZTdfZdqJDsvz1SiTqN6tZOLjmjyg7UgLmbMibXb7Ndtq/Iog==",
        "integrity_verified": true
      }
    },
    {
      "id": "observation:runtime-dependencies",
      "kind": "dependency",
      "coverage": "declared",
      "evidence": [
        {
          "sha256": "e407bf1680644d4c26c8fe62ba1fc13fd7ea9e547d8aaf909116ca6727ce7e26",
          "artifact_path": "package/package.json",
          "capture_kind": "artifact_file"
        }
      ],
      "data": {
        "dependencies": {
          "dotenv": "^17.2.2",
          "fastmcp": "4.3.2",
          "firecrawl": "4.40.0",
          "zod": "^4.2.1"
        }
      }
    },
    {
      "id": "observation:network-api-c1b2fb833bb647e8",
      "kind": "code_indicator",
      "coverage": "inferred",
      "evidence": [
        {
          "sha256": "ee3e868a5673b570e02d50989edc6cb431733496a8abd1505146a12912f5645e",
          "artifact_path": "package/dist/index.js",
          "capture_kind": "artifact_file",
          "byte_range": [
            35491,
            35497
          ]
        }
      ],
      "data": {
        "indicator": "network-api",
        "description": "Source references a network API."
      }
    },
    {
      "id": "observation:filesystem-api-72ad8d7cef973b31",
      "kind": "code_indicator",
      "coverage": "inferred",
      "evidence": [
        {
          "sha256": "ee3e868a5673b570e02d50989edc6cb431733496a8abd1505146a12912f5645e",
          "artifact_path": "package/dist/index.js",
          "capture_kind": "artifact_file",
          "byte_range": [
            182709,
            182718
          ]
        }
      ],
      "data": {
        "indicator": "filesystem-api",
        "description": "Source references a filesystem API."
      }
    },
    {
      "id": "observation:static-tool-inventory",
      "kind": "protocol_inventory",
      "coverage": "inferred",
      "evidence": [
        {
          "sha256": "d1d2137fdd163afafce5a2c46d644d13ab1a211ac49a64f450011e60015d8821",
          "capture_kind": "artifact_file"
        }
      ],
      "data": {
        "extraction": "static_source_analysis",
        "complete": false,
        "incompleteness": [
          "no_recognized_registration_pattern",
          "tools_inferred_from_definitions_only"
        ],
        "scanned_files": [
          "package/dist/index.js",
          "package/dist/origin.js",
          "package/dist/www-authenticate.js"
        ],
        "tools": [
          {
            "name": "firecrawl_agent",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              172417,
              174483
            ],
            "description_sha256": "6e0fd21745600a73e70d09060dfe62e72e4525be53957183a1fb473e7231b08e",
            "description_repr": "string_literal",
            "input_schema_sha256": "df659ea3b205aee886b90cbc487d243ec601b906c8a67fd71aa6bee4c98d52eb",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_agent_status",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              174501,
              175890
            ],
            "description_sha256": "437f1fd93f1cd6b46a5a80ef6511e9fecaafdfb646c404b4e173cbe37b5f4a57",
            "description_repr": "string_literal",
            "input_schema_sha256": "73da49f1d785fdaae782c268483052e06832bd1c88b515a29d50b00821fcd76c",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_check_crawl_status",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              170262,
              171203
            ],
            "description_sha256": "bcb065d57566228584057de87e19dd50f7ad01534d75f3097cf4c3c2a5b64c62",
            "description_repr": "string_literal",
            "input_schema_sha256": "73da49f1d785fdaae782c268483052e06832bd1c88b515a29d50b00821fcd76c",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_crawl",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              167219,
              170244
            ],
            "description_sha256": "25649d7791ff0002501bb04e94cd9d6d3d48f47b378b80dd6740fe9e07046bb3",
            "description_repr": "string_literal",
            "input_schema_sha256": "0f58a90bc7cd7f945ae845b76491cca2fc4da999eefbfd733f4b1350c55a36c4",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_credit_usage",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              62202,
              65134
            ],
            "description_sha256": "d610bd74f9b58fe649aa9365065f2c0cb1576093417349edd71000538f62a136",
            "description_repr": "string_literal",
            "input_schema_sha256": "5dd23d58a31fbe19fdbced8fdc250718ce644b685e753bcdf04016d20963abb1",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_developer_search",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              29368,
              31208
            ],
            "description_sha256": "bacef0504f744fc6f9d7310079e93dd62488fd86e147408b5e67333dcaf621b5",
            "description_repr": "string_literal",
            "input_schema_sha256": "b270a6ff0c92b0ddecbb0931d07da569b5bb7b86eb6850579401e3919c663551",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_extract",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              171221,
              172399
            ],
            "description_sha256": "80875cf67bef19b5aa19f572878d5695b3acfe1767076de6429a01e1498b378f",
            "description_repr": "string_literal",
            "input_schema_sha256": "521ac43010507627fc12160b64b8e0ab2ef3536d9c6e3d11adf129a8ad912161",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_feedback",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              162093,
              167199
            ],
            "description_sha256": "25ada18239140ced34c7bd16bc30ed3b441debebf1491c754850ef65f28924e3",
            "description_repr": "string_literal",
            "input_schema_sha256": "c86bfc76ba8cbc92b417041e529724dae5144dfd8dad45a2b6a676c1ca410774",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_find_tools",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              145395,
              148442
            ],
            "description_sha256": "b7385c1fcc277f196a0a9360e116a00c40c94207bcd124c1e1b2ec0d386bf8b1",
            "description_repr": "source_text",
            "input_schema_sha256": "5e35d72ceddbeddc53d02e97274125517c9819df6d44596f5d084abb478d941d",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_interact",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              175908,
              179503
            ],
            "description_sha256": "9bcc166bd0fe9e6e8732ec076d8d461a31f8d66e149d1e4c5e3aa7a8cd02fd99",
            "description_repr": "string_literal",
            "input_schema_sha256": "6b52ab87546aa9440bc732eddca3e4d064aae5bcbe4d120267309b3ff47e3986",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_interact_stop",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              179521,
              180572
            ],
            "description_sha256": "c08c8b5758ad123824329fd12481618240d68d30f98721a53d1504d62462c801",
            "description_repr": "string_literal",
            "input_schema_sha256": "bd95f981973b5191821ccc6a308034b3a4026c7db4632d536918ad9ee4fc63f9",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_map",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              138242,
              139962
            ],
            "description_sha256": "8e2e08055a8e408db81833671e3fd11388c0c4f2357eea328d9c651db5cba135",
            "description_repr": "string_literal",
            "input_schema_sha256": "5cbf16f845ca55aa0301021d3ebd7a7c501354e181e70b2e9a5369593b616fee",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_monitor_check",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              47642,
              49256
            ],
            "description_sha256": "442231c9d932d9790d63f223578cfe05960b0bba3809448b2303bb6f9cf0c98a",
            "description_repr": "string_literal",
            "input_schema_sha256": "3412868b167b723958cadfb16b07e8156b185be6d223f6d0aeb0a230e94b5d3c",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_monitor_checks",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              46445,
              47621
            ],
            "description_sha256": "12eff404d7439cb4eadd5cf4d12e5cf56f6df70981397ad1cd0ba396cfb5d9b7",
            "description_repr": "string_literal",
            "input_schema_sha256": "7a9471b0f4a6c2779e5fd399ce9c55eb2fb8996cafd91768180f934644158f30",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_monitor_create",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              38882,
              41223
            ],
            "description_sha256": "367c5c7144bcccb0dd7a0a61d55913e087fa83fae106469628439ccf516d3911",
            "description_repr": "string_literal",
            "input_schema_sha256": "1575a5cc38e9d154ba75fa2207a10daf99ca576b20f8b0874481d912f6bec842",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_monitor_delete",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              44399,
              45380
            ],
            "description_sha256": "4b6629ddb5d9c559004d818bbfbc7b2b1846a3f891df7daf72b923d9ead9c439",
            "description_repr": "string_literal",
            "input_schema_sha256": "e6e78330bd43873e873c80d567c2a57e063cc115be049acaf7d7b49d4b21aa36",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_monitor_get",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              42318,
              43177
            ],
            "description_sha256": "5048f239c31b18d5ea5cb403e3495cced96bfd7d25fd9d945f00f885eb260edb",
            "description_repr": "string_literal",
            "input_schema_sha256": "e6e78330bd43873e873c80d567c2a57e063cc115be049acaf7d7b49d4b21aa36",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_monitor_list",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              41244,
              42297
            ],
            "description_sha256": "f82eddfee287bed28ed9ac62cea3d6a7bd92bcec9b5842eb7cbdba27f3eb74db",
            "description_repr": "string_literal",
            "input_schema_sha256": "96705303d945d6ac498259c58ae1bac7844d9e1b65cff127a736b1a56521e197",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_monitor_run",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              45401,
              46424
            ],
            "description_sha256": "6768e440b9d6064f919bb626549928596cd234dcca9b06ca775d60b69b7e4cc4",
            "description_repr": "string_literal",
            "input_schema_sha256": "e6e78330bd43873e873c80d567c2a57e063cc115be049acaf7d7b49d4b21aa36",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_monitor_update",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              43198,
              44378
            ],
            "description_sha256": "a4abca1d7a337f027801045cd73dfba88eabbd0f7850b766a12be9b3a4046b8d",
            "description_repr": "string_literal",
            "input_schema_sha256": "51e24cf420750961ff47a77828cbcc775ad375d29680a74325a85de09983ed2b",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_parse",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              180590,
              184033
            ],
            "description_sha256": "95bb6672c075b244e71ff8ade647eb847b80080bd1ce9b85c5630c4e4f211e7b",
            "description_repr": "string_literal",
            "input_schema_sha256": "aab409f015f99e35f511ef518531e74dafdd6e6b6d9f7877bf11eabecb7761f3",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_research_inspect_paper",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              55513,
              56852
            ],
            "description_sha256": "000022503306a3a1b4038bc15ef595fc32eec425710ead129f8a0b11402e1247",
            "description_repr": "string_literal",
            "input_schema_sha256": "f6af4283466a59c75d815f2a67680b3f5852611cf55a6387e4a4c4d633728e9b",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_research_read_paper",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              59151,
              60931
            ],
            "description_sha256": "56049b21ac095194f96a4f368dc85d449049429186b857361fb0034c07e9d239",
            "description_repr": "string_literal",
            "input_schema_sha256": "5acec8ed3d7b4922ad34438a734996700d5069c2d26fce9528f222ea7082279d",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_research_related_papers",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              56873,
              59130
            ],
            "description_sha256": "353ca09daf6256d9e017b90fc4200ec9bf82a7e060c3ed4298ba4e01ba0f6a21",
            "description_repr": "string_literal",
            "input_schema_sha256": "2ff0f07f153d889c30b1eed4f9a1085eda42d98b075eb690d54054def64b2578",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_research_search_github",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              60952,
              61908
            ],
            "description_sha256": "29ae7d85e06f44b58068a99d880ff6e476c37ab266a4968f774b060a2affda51",
            "description_repr": "string_literal",
            "input_schema_sha256": "8628a0d6d4e32891974ed5e678eca7d3e9c0dc6bdb52ac63d7d2d94b54836df6",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_research_search_papers",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              52910,
              55492
            ],
            "description_sha256": "0b90d0b4bac0a8ecc6f5008667237ec1310c4c4062dc93dd0c5e0af4971ab4fa",
            "description_repr": "string_literal",
            "input_schema_sha256": "539411240cb30a2e64e77a745e4dced56cacb3a240130b4e9f06f792c4e43b8d",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_scrape",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              135004,
              138145
            ],
            "description_sha256": "5fd28ffdfa724315e4ab78e8a57e9596110326f5541184c60fabeeb43b2632af",
            "description_repr": "string_literal",
            "input_schema_sha256": "d86f6d39d14f45c949fe325ec92aa6e8e2fb5785bdebb53de08b111191353615",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_search",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              139980,
              143702
            ],
            "description_sha256": "41db124b5e3c3a9a752e4d89bfcd4e4feeca5dca677587b5b6b43b1010aa04ad",
            "description_repr": "source_text",
            "input_schema_sha256": "a7d430623ba8ef9ad32a424aecb5d6581d4f0235313effd2f1658ee50f3dd234",
            "input_schema_repr": "source_text"
          },
          {
            "name": "firecrawl_search_feedback",
            "discovery": "definition",
            "artifact_path": "package/dist/index.js",
            "byte_range": [
              157392,
              161695
            ],
            "description_sha256": "59225dedb205bdbffec91e30da6cb09a0e136a1acb91f43d63bf9aff84d0f436",
            "description_repr": "string_literal",
            "input_schema_sha256": "74ea21411dbe3fc5fb0ab833ef69dcc9a9769a0da2e4d000ffe8e619db324c7b",
            "input_schema_repr": "source_text"
          }
        ]
      }
    }
  ],
  "findings": [],
  "limitations": [
    {
      "code": "protocol_discovery_not_run",
      "summary": "M1 performs static artifact inspection only; no MCP protocol session was opened."
    },
    {
      "code": "tool_calls_not_performed",
      "summary": "No tools were invoked."
    },
    {
      "code": "semantic_analysis_not_run",
      "summary": "No semantic model analysis was run."
    },
    {
      "code": "static_tool_extraction_incomplete",
      "summary": "The declared tool surface could not be fully resolved from source (no_recognized_registration_pattern, tools_inferred_from_definitions_only). Treat the inventory as a lower bound, not a complete list."
    }
  ]
}