Skip to content

cloud.fetcher/fetcher

by fetcher.cloud · remote · no sign-in to list tools · v1.1.3 · published by cloud.fetcher

The web capability layer for AI agents: render, extract, DNS, SSL, WHOIS & more via x402.

Final · 1Changes · 7

19 tools: 1 do something that can't be undone, 7 change things and 11 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http fetcher https://api.fetcher.cloud/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

19 tools

Can't be undone 1Claude Code: ask
  • guard_txPre-sign wallet firewall: decode a transaction and flag unlimited approvals, setApprovalForAll, scam addresses, and spend-cap breaches before signing.No findings

    Why it is in this group

    • The input addresses people (input.to): what it sends cannot be taken back.
    Description, as the server wrote it
    Pre-sign wallet firewall: decode a transaction and flag unlimited approvals, setApprovalForAll, scam addresses, and spend-cap breaches before signing. Returns a risk verdict + reasons. (security; $0.008/call in USDC via x402, 25 free/day).
Changes things 7Claude Code: ask
  • check_domainCheck domain availability across TLDs via RDAP.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Check domain availability across TLDs via RDAP. Set enriched=true for DNS, age, and Wayback history. (domain-dns; $0.004/call in USDC via x402, 50 free/day).
  • check_robotsParse robots.txt; answer whether a user-agent may crawl a path; list sitemaps.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Parse robots.txt; answer whether a user-agent may crawl a path; list sitemaps. (web-intel; $0.002/call in USDC via x402, 50 free/day).
  • extract_contentExtract a page's main content as clean Markdown + text with metadata.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Extract a page's main content as clean Markdown + text with metadata. (content; $0.005/call in USDC via x402, 30 free/day).
  • extract_pdfExtract text + metadata from a PDF URL (text-based PDFs).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Extract text + metadata from a PDF URL (text-based PDFs). (content; $0.01/call in USDC via x402, 20 free/day).
  • generate_qrGenerate a QR code (SVG) for text or a URL.No findings

    Why it is in this group

    • The name "generate_qr" says "generate": a word for a change.
    Description, as the server wrote it
    Generate a QR code (SVG) for text or a URL. (utility; $0.002/call in USDC via x402, 50 free/day).
  • render_pageRender a JavaScript page in a real browser; returns rendered HTML, text, optional screenshot.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Render a JavaScript page in a real browser; returns rendered HTML, text, optional screenshot. (browser; $0.02/call in USDC via x402, 10 free/day).
  • unfurl_urlLink preview card (title, description, image, favicon) for any URL.No findings

    Why it is in this group

    • The description's first verb is "link": a word for a change.
    Description, as the server wrote it
    Link preview card (title, description, image, favicon) for any URL. (content; $0.003/call in USDC via x402, 50 free/day).
Only reads 11Claude Code: allow
  • diff_pagesCompare two pages (or one page vs its latest Wayback snapshot); return what changed.No findings

    Why it is in this group

    • The name "diff_pages" says "diff": a word for reading.
    Description, as the server wrote it
    Compare two pages (or one page vs its latest Wayback snapshot); return what changed. (content; $0.008/call in USDC via x402, 25 free/day).
  • dns_lookupFull DNS record dump (A/AAAA/MX/NS/TXT/SOA/CAA/CNAME) for a host.No findings

    Why it is in this group

    • The name "dns_lookup" says "lookup": a word for reading.
    Description, as the server wrote it
    Full DNS record dump (A/AAAA/MX/NS/TXT/SOA/CAA/CNAME) for a host. (domain-dns; $0.003/call in USDC via x402, 50 free/day).
  • find_faviconFind a site's best icon/logo.No findings

    Why it is in this group

    • The name "find_favicon" says "find": a word for reading.
    Description, as the server wrote it
    Find a site's best icon/logo. (web-intel; $0.002/call in USDC via x402, 50 free/day).
  • get_feedDiscover and parse a site's RSS/Atom feed into JSON items.No findings

    Why it is in this group

    • The name "get_feed" says "get": a word for reading.
    Description, as the server wrote it
    Discover and parse a site's RSS/Atom feed into JSON items. (content; $0.003/call in USDC via x402, 40 free/day).
  • get_oembedRich embed (oEmbed) data for a media URL (YouTube, Vimeo, X, Spotify...).No findings

    Why it is in this group

    • The name "get_oembed" says "get": a word for reading.
    Description, as the server wrote it
    Rich embed (oEmbed) data for a media URL (YouTube, Vimeo, X, Spotify...). (content; $0.002/call in USDC via x402, 50 free/day).
  • guard_inspectScreen untrusted content (web pages, emails, tool output) for prompt-injection/manipulation before your agent trusts it.No findings

    Why it is in this group

    • The name "guard_inspect" says "inspect": a word for reading.
    Description, as the server wrote it
    Screen untrusted content (web pages, emails, tool output) for prompt-injection/manipulation before your agent trusts it. Returns a risk score + reasons; a screening signal, not a guarantee. (security; $0.005/call in USDC via x402, 30 free/day).
  • inspect_headersHTTP response headers + security-header analysis for a URL.No findings

    Why it is in this group

    • The name "inspect_headers" says "inspect": a word for reading.
    Description, as the server wrote it
    HTTP response headers + security-header analysis for a URL. (web-intel; $0.002/call in USDC via x402, 50 free/day).
  • resolve_urlFollow a URL's full redirect chain; return final URL, hops, and metadata.No findings

    Why it is in this group

    • The name "resolve_url" says "resolve": a word for reading.
    Description, as the server wrote it
    Follow a URL's full redirect chain; return final URL, hops, and metadata. (web-intel; $0.003/call in USDC via x402, 50 free/day).
  • screenshot_pageScreenshot a page (real browser) as a base64 PNG/JPEG.No findings

    Why it is in this group

    • The name "screenshot_page" says "screenshot": a word for reading.
    Description, as the server wrote it
    Screenshot a page (real browser) as a base64 PNG/JPEG. (browser; $0.02/call in USDC via x402, 10 free/day).
  • ssl_lookupTLS certificate details (issuer, expiry, SANs) via Certificate Transparency logs.No findings

    Why it is in this group

    • The name "ssl_lookup" says "lookup": a word for reading.
    Description, as the server wrote it
    TLS certificate details (issuer, expiry, SANs) via Certificate Transparency logs. (domain-dns; $0.004/call in USDC via x402, 40 free/day).
  • whois_lookupDeep domain registration record via RDAP (registrar, dates, nameservers, DNSSEC).No findings

    Why it is in this group

    • The name "whois_lookup" says "lookup": a word for reading.
    Description, as the server wrote it
    Deep domain registration record via RDAP (registrar, dates, nameservers, DNSSEC). (domain-dns; $0.005/call in USDC via x402, 40 free/day).

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.1.3. Values in angle brackets are yours to fill in.

claude mcp add --transport http fetcher https://api.fetcher.cloud/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__fetcher__screenshot_page",
      "mcp__fetcher__resolve_url",
      "mcp__fetcher__get_feed",
      "mcp__fetcher__get_oembed",
      "mcp__fetcher__find_favicon",
      "mcp__fetcher__inspect_headers",
      "mcp__fetcher__dns_lookup",
      "mcp__fetcher__ssl_lookup",
      "mcp__fetcher__whois_lookup",
      "mcp__fetcher__diff_pages",
      "mcp__fetcher__guard_inspect"
    ],
    "ask": [
      "mcp__fetcher__render_page",
      "mcp__fetcher__extract_content",
      "mcp__fetcher__unfurl_url",
      "mcp__fetcher__check_robots",
      "mcp__fetcher__extract_pdf",
      "mcp__fetcher__generate_qr",
      "mcp__fetcher__guard_tx",
      "mcp__fetcher__check_domain"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as fetcher. Review it before you use it.