FetchPan
by fetchpan.com · remote · no sign-in to list tools · v1.0.0 · published by com.fetchpan
Download links from file hosts and Chinese cloud drives (Rapidgator, Baidu, Quark) for AI agents.
9 tools: 5 change things and 4 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone0Claude Code: ask
- Changes things5Claude Code: ask: see these tools
- Only reads4Claude Code: allow: see these tools
3 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http fetchpan https://fetchpan.com/mcp --header 'Authorization: <your-authorization>'Findings
Matches of fixed checks, with the text they matched.
- Warncheck_link
The server marks "check_link" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":false}; The name "check_link" says "link": a word for a change.
The server marks "get_download_link" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "get_download_link" says "get": a word for reading.
- Warndownload
The server marks "download" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The description's first verb is "fetch": a word for reading.
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
9 tools
Changes things 5Claude Code: ask
check_linkIs this link from a site FetchPan supports, and is that site working right now?1 finding
Why it is in this group
- The name "check_link" says "link": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "check_link" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"openWorldHint":false}; The name "check_link" says "link": a word for a change.
Description, as the server wrote it Is this link from a site FetchPan supports, and is that site working right now? Does not use any quota. Call it before `download` when you are not sure.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
create_payment_linkCreate a payment page for a traffic pack and return its URL.No findings
Why it is in this group
- The name "create_payment_link" says "create": a word for a change.
Description, as the server wrote it Create a payment page for a traffic pack and return its URL. Give the URL to the user: only a person can pay it. Nothing is charged by calling this.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
downloadFetch a link and return a download URL, in one call.1 finding
Why it is in this group
- The description's first verb is "fetch": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
The server marks "download" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The description's first verb is "fetch": a word for reading.
Description, as the server wrote it Fetch a link and return a download URL, in one call. Waits up to `wait_seconds` for the file to be ready. If it is not ready yet, the result has status "running" and a `job_id`: call `get_job`, then `get_download_link`.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
get_download_linkGet the download URL of a succeeded job.1 finding
Why it is in this group
- The name "get_download_link" says "get": a word for reading.
- The server marks it as not read-only (readOnlyHint: false).
Findings
- Warn
The server marks "get_download_link" as not read-only (readOnlyHint: false), and its words say it reads.
What this check looks forMatched text
annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "get_download_link" says "get": a word for reading.
Description, as the server wrote it Get the download URL of a succeeded job. A free link uses one of the account's free files for the day; a fast link uses traffic from the account balance. Asking again for the same job and tier returns the same link.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: true
- openWorldHint: true
start_downloadStart fetching a link.No findings
Why it is in this group
- The name "start_download" says "start": a word for a change.
Description, as the server wrote it Start fetching a link. Returns a job id; poll it with `get_job`. Uses no free file yet.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
Only reads 4Claude Code: allow
get_accountThe account behind the token: email, traffic balance in bytes, free files per day, and the last downloads.No findings
Why it is in this group
- The name "get_account" says "get": a word for reading.
Description, as the server wrote it The account behind the token: email, traffic balance in bytes, free files per day, and the last downloads.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
get_jobStatus of a job: queued, running, succeeded or failed.No findings
Why it is in this group
- The name "get_job" says "get": a word for reading.
Description, as the server wrote it Status of a job: queued, running, succeeded or failed. When it has succeeded it also says whether a free download is possible (`free`) and what a fast one would cost in traffic bytes (`fast`).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
list_packagesTraffic packs that can be bought (code, size in bytes, price in USDT).No findings
Why it is in this group
- The name "list_packages" says "list": a word for reading.
Description, as the server wrote it Traffic packs that can be bought (code, size in bytes, price in USDT).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
list_supported_sitesList the sites FetchPan can download from, with live status (working, slow, down).No findings
Why it is in this group
- The name "list_supported_sites" says "list": a word for reading.
Description, as the server wrote it List the sites FetchPan can download from, with live status (working, slow, down). `main_sites` are the big ones (Baidu, Quark, Rapidgator ...). `file_hosts` are the other file hosts. `free` tells whether a free download is possible there or only a paid one.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http fetchpan https://fetchpan.com/mcp --header 'Authorization: <your-authorization>'Run in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__fetchpan__list_supported_sites",
"mcp__fetchpan__get_job",
"mcp__fetchpan__get_account",
"mcp__fetchpan__list_packages"
],
"ask": [
"mcp__fetchpan__check_link",
"mcp__fetchpan__start_download",
"mcp__fetchpan__get_download_link",
"mcp__fetchpan__download",
"mcp__fetchpan__create_payment_link"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as fetchpan. Review it before you use it.