Skip to content

ScrapingBee

by scrapingbee.com · remote · no sign-in to list tools · v2.2.1 · published by com.scrapingbee

Scrape any web page, search Google/Amazon/Walmart/YouTube and extract data via the ScrapingBee API.

Final · 1Changes · 2

18 tools: 1 do something that can't be undone, 2 change things and 15 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http scrapingbee https://mcp.scrapingbee.com/mcp --header 'Authorization: <your-authorization>'

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

18 tools

Can't be undone 1Claude Code: ask
  • ask_chatgptThis tool allows you to send a prompt to OpenAI's ChatGPT via ScrapingBee and get back the generated response.Can send data outNo findings

    Why it is in this group

    • The description's first verb is "send": a word for sending, and what is sent cannot be taken back.

    What it can reach

    • outboundThe description's first verb is "send": it sends or publishes something to other people.
    Description, as the server wrote it
    This tool allows you to send a prompt to OpenAI's ChatGPT via ScrapingBee and get back the generated response. Scope: one query per call. To run many queries in one pass, or to write results to disk instead of into the conversation, use the ScrapingBee CLI — `scrapingbee <command> --input-file queries.txt --output-dir results`.
Changes things 2Claude Code: ask
  • ask_geminiAsk Gemini through ScrapingBee and receive citation objects when available.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Ask Gemini through ScrapingBee and receive citation objects when available. Scope: one query per call. To run many queries in one pass, or to write results to disk instead of into the conversation, use the ScrapingBee CLI — `scrapingbee <command> --input-file queries.txt --output-dir results`.
  • extract_page_dataScrape a URL using ScrapingBee and extract specific data using CSS or XPath selectors.Reads text others writeCan send data outNo findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    What it can reach

    • untrusted-inputThe description's first sentence says "scrape": it reads web pages, which anyone can write.
    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.
    Description, as the server wrote it
    Scrape a URL using ScrapingBee and extract specific data using CSS or XPath selectors. Scope: one URL per call, with the result returned into the conversation. For many URLs, a whole site, output written to a file or directory, resumable jobs, or a scheduled re-run, use the ScrapingBee CLI instead — `scrapingbee scrape --input-file urls.txt --output-dir results`, `scrapingbee crawl URL --save-pattern ...`, `scrapingbee schedule --every`. This server has no batch, crawl, file-output or scheduling equivalent.
Only reads 15Claude Code: allow, ask for 4 outbound
  • get_amazon_pricingRetrieve current Amazon product pricing and seller offers for a given ASIN.No findings

    Why it is in this group

    • The name "get_amazon_pricing" says "get": a word for reading.
    Description, as the server wrote it
    Retrieve current Amazon product pricing and seller offers for a given ASIN. Scope: one query per call. To run many queries in one pass, or to write results to disk instead of into the conversation, use the ScrapingBee CLI — `scrapingbee <command> --input-file queries.txt --output-dir results`.
  • get_amazon_product_detailsScrape Amazon product details using ScrapingBee.Reads text others writeNo findings

    Why it is in this group

    • The name "get_amazon_product_details" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe description's first sentence says "scrape": it reads web pages, which anyone can write.
    Description, as the server wrote it
    Scrape Amazon product details using ScrapingBee. Scope: one query per call. To run many queries in one pass, or to write results to disk instead of into the conversation, use the ScrapingBee CLI — `scrapingbee <command> --input-file queries.txt --output-dir results`.
  • get_amazon_search_resultsScrape Amazon search results using ScrapingBee.Reads text others writeNo findings

    Why it is in this group

    • The name "get_amazon_search_results" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe description's first sentence says "scrape": it reads web pages, which anyone can write.
    Description, as the server wrote it
    Scrape Amazon search results using ScrapingBee. Scope: one query per call. To run many queries in one pass, or to write results to disk instead of into the conversation, use the ScrapingBee CLI — `scrapingbee <command> --input-file queries.txt --output-dir results`.
  • get_fileFetches a file from a URL and returns it in a format suitable for FastMcP.Reads private dataReads text others writeCan send data outNo findings

    Why it is in this group

    • The name "get_file" says "get": a word for reading.

    What it can reach

    • private-dataThe name "get_file" says "get" and "file": it reads files.
    • private-dataThe description's first sentence says "fetch" and "file": it reads files.
    • untrusted-inputThe description's first sentence says "fetch" and "url": it reads web pages, which anyone can write.
    • untrusted-inputThe input takes a URL (input.url), and the tool reads it: it reads web pages, which anyone can write.
    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.

    Claude Code: ask, because it is tagged outbound.

    Description, as the server wrote it
    Fetches a file from a URL and returns it in a format suitable for FastMcP. This tool can be used to fetch any file type, including images, PDFs, etc. The framework will handle the encoding and packaging of the file. Scope: one URL per call, with the result returned into the conversation. For many URLs, a whole site, output written to a file or directory, resumable jobs, or a scheduled re-run, use the ScrapingBee CLI instead — `scrapingbee scrape --input-file urls.txt --output-dir results`, `scrapingbee crawl URL --save-pattern ...`, `scrapingbee schedule --every`. This server has no batch, crawl, file-output or scheduling equivalent.
  • get_google_search_resultsThis is a FALLBACK tool — use fast_search first for general web searches.No findings

    Why it is in this group

    • The name "get_google_search_results" says "get": a word for reading.
    Description, as the server wrote it
    This is a FALLBACK tool — use fast_search first for general web searches. Only use this tool when you need specialized search types that fast_search does not support: news, maps, Google Lens, shopping, image search, or Google AI mode. Scrape Google search results using ScrapingBee and return the results. This tool can scrape normal results, news results, maps results, search using google lens, shopping related results, image results, and get the result from Google's AI mode. It can even return the HTML along with the search results. Scope: one query per call. To run many queries in one pass, or to write results to disk instead of into the conversation, use the ScrapingBee CLI — `scrapingbee <command> --input-file queries.txt --output-dir results`.
  • get_page_htmlScrape a URL using ScrapingBee and return the page content in HTML.Reads text others writeCan send data outNo findings

    Why it is in this group

    • The name "get_page_html" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe name "get_page_html" says "get" and "html": it reads web pages, which anyone can write.
    • untrusted-inputThe description's first sentence says "scrape": it reads web pages, which anyone can write.
    • untrusted-inputThe input takes a URL (input.url), and the tool reads it: it reads web pages, which anyone can write.
    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.

    Claude Code: ask, because it is tagged outbound.

    Description, as the server wrote it
    Scrape a URL using ScrapingBee and return the page content in HTML. Scope: one URL per call, with the result returned into the conversation. For many URLs, a whole site, output written to a file or directory, resumable jobs, or a scheduled re-run, use the ScrapingBee CLI instead — `scrapingbee scrape --input-file urls.txt --output-dir results`, `scrapingbee crawl URL --save-pattern ...`, `scrapingbee schedule --every`. This server has no batch, crawl, file-output or scheduling equivalent.
  • get_page_textScrape a URL using ScrapingBee and return the page content in Markdown or Text format.Reads text others writeCan send data outNo findings

    Why it is in this group

    • The name "get_page_text" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe description's first sentence says "scrape": it reads web pages, which anyone can write.
    • untrusted-inputThe input takes a URL (input.url), and the tool reads it: it reads web pages, which anyone can write.
    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.

    Claude Code: ask, because it is tagged outbound.

    Description, as the server wrote it
    Scrape a URL using ScrapingBee and return the page content in Markdown or Text format. Scope: one URL per call, with the result returned into the conversation. For many URLs, a whole site, output written to a file or directory, resumable jobs, or a scheduled re-run, use the ScrapingBee CLI instead — `scrapingbee scrape --input-file urls.txt --output-dir results`, `scrapingbee crawl URL --save-pattern ...`, `scrapingbee schedule --every`. This server has no batch, crawl, file-output or scheduling equivalent.
  • get_scrapingbee_usageRead real-time credit and concurrency usage for the authenticated ScrapingBee account.No findings

    Why it is in this group

    • The name "get_scrapingbee_usage" says "get": a word for reading.
    Description, as the server wrote it
    Read real-time credit and concurrency usage for the authenticated ScrapingBee account. Note: This endpoint is rate-limited to 6 calls per minute and does not count against the account's concurrency limit. Returns: max_api_credit, used_api_credit, max_concurrency, current_concurrency, renewal_subscription_date.
  • get_screenshotScrape a URL using ScrapingBee and return it's screenshot.Reads text others writeCan send data outNo findings

    Why it is in this group

    • The name "get_screenshot" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe description's first sentence says "scrape": it reads web pages, which anyone can write.
    • untrusted-inputThe input takes a URL (input.url), and the tool reads it: it reads web pages, which anyone can write.
    • outboundThe input takes a URL (input.url): a request to a URL can carry data to whoever runs it.

    Claude Code: ask, because it is tagged outbound.

    Description, as the server wrote it
    Scrape a URL using ScrapingBee and return it's screenshot. Scope: one URL per call, with the result returned into the conversation. For many URLs, a whole site, output written to a file or directory, resumable jobs, or a scheduled re-run, use the ScrapingBee CLI instead — `scrapingbee scrape --input-file urls.txt --output-dir results`, `scrapingbee crawl URL --save-pattern ...`, `scrapingbee schedule --every`. This server has no batch, crawl, file-output or scheduling equivalent.
  • get_walmart_product_detailsScrape Walmart product details using ScrapingBee.Reads text others writeNo findings

    Why it is in this group

    • The name "get_walmart_product_details" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe description's first sentence says "scrape": it reads web pages, which anyone can write.
    Description, as the server wrote it
    Scrape Walmart product details using ScrapingBee. Scope: one query per call. To run many queries in one pass, or to write results to disk instead of into the conversation, use the ScrapingBee CLI — `scrapingbee <command> --input-file queries.txt --output-dir results`.
  • get_walmart_search_resultsScrape Walmart search results using ScrapingBee.Reads text others writeNo findings

    Why it is in this group

    • The name "get_walmart_search_results" says "get": a word for reading.

    What it can reach

    • untrusted-inputThe description's first sentence says "scrape": it reads web pages, which anyone can write.
    Description, as the server wrote it
    Scrape Walmart search results using ScrapingBee. Scope: one query per call. To run many queries in one pass, or to write results to disk instead of into the conversation, use the ScrapingBee CLI — `scrapingbee <command> --input-file queries.txt --output-dir results`.
  • get_youtube_search_resultsSearch YouTube and return structured results.No findings

    Why it is in this group

    • The name "get_youtube_search_results" says "get": a word for reading.
    Description, as the server wrote it
    Search YouTube and return structured results. Scope: one query per call. To run many queries in one pass, or to write results to disk instead of into the conversation, use the ScrapingBee CLI — `scrapingbee <command> --input-file queries.txt --output-dir results`.
  • get_youtube_video_metadataFetch structured metadata for a YouTube video including title, description, views, likes, channel info, and technical details.No findings

    Why it is in this group

    • The name "get_youtube_video_metadata" says "get": a word for reading.
    Description, as the server wrote it
    Fetch structured metadata for a YouTube video including title, description, views, likes, channel info, and technical details. Scope: one query per call. To run many queries in one pass, or to write results to disk instead of into the conversation, use the ScrapingBee CLI — `scrapingbee <command> --input-file queries.txt --output-dir results`.
  • get_youtube_video_subtitlesRetrieve subtitles for one YouTube video.No findings

    Why it is in this group

    • The name "get_youtube_video_subtitles" says "get": a word for reading.
    Description, as the server wrote it
    Retrieve subtitles for one YouTube video. Scope: one query per call. To run many queries in one pass, or to write results to disk instead of into the conversation, use the ScrapingBee CLI — `scrapingbee <command> --input-file queries.txt --output-dir results`.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

60 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 1 private-data tool breaks every one.

Reads private data1
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write10
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out6
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
deny to break every path
{
  "permissions": {
    "deny": [
      "mcp__scrapingbee__get_file"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Install

Pinned to version 2.2.1. Values in angle brackets are yours to fill in.

claude mcp add --transport http scrapingbee https://mcp.scrapingbee.com/mcp --header 'Authorization: <your-authorization>'

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__scrapingbee__get_amazon_search_results",
      "mcp__scrapingbee__get_amazon_product_details",
      "mcp__scrapingbee__get_amazon_pricing",
      "mcp__scrapingbee__fast_search",
      "mcp__scrapingbee__get_google_search_results",
      "mcp__scrapingbee__get_scrapingbee_usage",
      "mcp__scrapingbee__get_walmart_search_results",
      "mcp__scrapingbee__get_walmart_product_details",
      "mcp__scrapingbee__get_youtube_search_results",
      "mcp__scrapingbee__get_youtube_video_metadata",
      "mcp__scrapingbee__get_youtube_video_subtitles"
    ],
    "ask": [
      "mcp__scrapingbee__ask_chatgpt",
      "mcp__scrapingbee__ask_gemini",
      "mcp__scrapingbee__get_page_text",
      "mcp__scrapingbee__get_page_html",
      "mcp__scrapingbee__extract_page_data",
      "mcp__scrapingbee__get_screenshot",
      "mcp__scrapingbee__get_file"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as scrapingbee. Review it before you use it.

Capability tags behind 11 rules
  • mcp__scrapingbee__get_amazon_search_results untrusted-input
  • mcp__scrapingbee__get_amazon_product_details untrusted-input
  • mcp__scrapingbee__ask_chatgpt outbound
  • mcp__scrapingbee__fast_search untrusted-input
  • mcp__scrapingbee__get_page_text untrusted-input, outbound
  • mcp__scrapingbee__get_page_html untrusted-input, outbound
  • mcp__scrapingbee__extract_page_data untrusted-input, outbound
  • mcp__scrapingbee__get_screenshot untrusted-input, outbound
  • mcp__scrapingbee__get_file private-data, untrusted-input, outbound
  • mcp__scrapingbee__get_walmart_search_results untrusted-input
  • mcp__scrapingbee__get_walmart_product_details untrusted-input