THRONE
See report Verify server

registry / record

firecrawl-mcp

npm / sealed 2026-06-16 / No. 11ffe3e4

Does firecrawl-mcp MCP work in Claude Code and Cursor? Throne executed firecrawl-mcp mcp in a single-use Firecracker microVM and replayed both recorded client behaviours. Compatibility verdict: fit. Is firecrawl-mcp mcp safe? Static security scan: 1 finding(s) to review under security ruleset v1. The full per-step results, security findings, scan date, and evidence hash are below.

> throne registry firecrawl-mcp sealed
receiptsealed evidence
scan id
11ffe3e4cbb540068c03b16d84eea4fe
target
firecrawl-mcp
sealed at
2026-06-16 18:41:46Z
evidence hash
sha256:9a95978080717518baf14a547111cf1e10fb4f647a07a08d794c72ddf61761bd
01connectPASS1.5s

initialize ok: server firecrawl-fastmcp 3.0.0, negotiated protocolVersion 2025-06-18, capabilities ['logging', 'tools']

02discoverPASS39ms

supported: tools/list (21 tools); method not found (tolerated): resources/list, prompts/list

03validate_schemasPASS224ms

all 21 tool inputSchemas are valid JSON Schema

04smoke_test_toolsPASS514ms

called 8 of 10 tools (cap 10, strategy=serial): 1 ok, 7 returned tool-level errors (expected for synthesized args); 2 skipped, unsupported schema constraint: firecrawl_search_feedback: unsupported schema constraint: pattern ('test' does not match '^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$'); firecrawl_feedback: unsupported schema constraint: pattern ('test' does not match '^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$')

05error_handlingPASS7.2s

structured error responses, connection survived, wrong_type_args: firecrawl_scrape:error(-32602); firecrawl_map:error(-32602); firecrawl_search:error(-32602); firecrawl_search_feedback:error(-32602); firecrawl_feedback:error(-32602); unknown_method: error(-32601); invalid_id: no response (silent), connection alive; oversized_input: error(-32601); recovery: accepted (returned result); cancellation: error(-32601); old_version: accepted old version 2024-10-07, negotiated 2024-10-07, server may have stale protocol handling

06streamingNOT_APPLICABLE0ms

no streaming-capable tool declared by this server

07resource_lifecycleNOT_APPLICABLE1ms

resources capability not declared

08concurrent_callsWARN2ms

ladder 1 overlapping firecrawl_monitor_create calls: max_observed_stable_concurrency=1; all ids answered exactly once, but every call returned an error (tool-level isError result), the tool may need runtime dependencies this sandbox does not provide

09reconnectPASS1.4s

transport closed and relaunched; re-handshake ok (protocolVersion 2025-06-18, first session was 2025-06-18)

01connectPASS2.4s

initialize ok: server firecrawl-fastmcp 3.0.0, negotiated protocolVersion 2025-06-18, capabilities ['logging', 'tools'] [request_strategy=pipelined, connection_count=2, second connection established]

02discoverPASS36ms

supported: tools/list (21 tools); method not found (tolerated): resources/list, prompts/list; notes: connection 2 confirms 21 tools

03validate_schemasPASS177ms

all 21 tool inputSchemas are valid JSON Schema

04smoke_test_toolsPASS1.2s

called 8 of 10 tools (cap 10, strategy=pipelined): 1 ok, 7 returned tool-level errors (expected for synthesized args); 2 skipped, unsupported schema constraint: firecrawl_search_feedback: unsupported schema constraint: pattern ('test' does not match '^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$'); firecrawl_feedback: unsupported schema constraint: pattern ('test' does not match '^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$')

05error_handlingPASS6.4s

structured error responses, connection survived, wrong_type_args: firecrawl_scrape:error(-32602); firecrawl_map:error(-32602); firecrawl_search:error(-32602); firecrawl_search_feedback:error(-32602); firecrawl_feedback:error(-32602); unknown_method: error(-32601); invalid_id: no response (silent), connection alive; oversized_input: error(-32601); recovery: accepted (returned result); cancellation: error(-32601); old_version: accepted old version 2024-10-07, negotiated 2024-10-07, server may have stale protocol handling

06streamingNOT_APPLICABLE0ms

no streaming-capable tool declared by this server

07resource_lifecycleNOT_APPLICABLE2ms

resources capability not declared

08concurrent_callsWARN13ms

ladder 1/2/4/6 overlapping firecrawl_monitor_create calls: max_observed_stable_concurrency=6; all ids answered exactly once, but every call returned an error (tool-level isError result), the tool may need runtime dependencies this sandbox does not provide

09reconnectPASS2.5s

transport closed and relaunched; re-handshake ok (protocolVersion 2025-06-18, first session was 2025-06-18)

chatgpt desktop calibratingemulation profile pending real-traffic captureCOMING SOON
SECURITY: REVIEW / 1 finding(s) / review recommended
LOWTHR-NET-05 / Hardcoded outbound endpoints

6 non-local endpoint host(s) referenced in code, verify each is expected for this server's purpose: api.firecrawl.dev (package/dist/index.js:783), docs.example.com (package/dist/index.js:501), docs.firecrawl.dev (package/dist/index.js:922), firecrawl.dev (package/dist/index.js:254), mcp.firecrawl.dev (package/dist/index.js:60), www.firecrawl.dev (package/dist/index.js:59)

package/dist/index.js:254
VERDICT: FIT14 of 18 steps exercised across 2 clientsSANDBOXED RUN, submitted server executed in a disposable microVM, compatibility: 0 fail / 2 warn (14 of 18 steps exercised across 2 clients) / security: review, 1 finding(s), 0 highsealed by THRONE / No. 11ffe3e4 / 2026-06-16
scopeattestation tuple
target
firecrawl-mcp npm
engine
sandboxed
claude code
calibration: partial recorded=9,spec=0,assumed=9
cursor
calibration: partial recorded=11,spec=0,assumed=7
chatgpt desktop
calibration: unavailable recorded=0,spec=2,assumed=16
steps exercised
14 of 18
test suite
v1.0.0
security ruleset
v1.0.0
sealed at
2026-06-16 18:41:46Z
evidence hash
sha256:9a95978080717518baf14a547111cf1e10fb4f647a07a08d794c72ddf61761bd
valid until
2026-09-14
THRONE: FITwear the crown

paste this in your README. it renders the live verdict and links back to this record. if a release ever breaks the verdict, the badge says so on its own.

[![THRONE: FIT](https://api.usethrone.dev/api/badge/firecrawl-mcp)](https://usethrone.dev/server/firecrawl-mcp)
executed in a disposable microVM, created for this scan and destroyed after it. nothing outlives a run.

maintainer of this server? challenge this record: hello@usethrone.dev. tell us what we got wrong and we re-run it in the open.

this page renders the stored record of a real run. nothing on it is asserted without the execution that proved it.