Fetch MCP Server
OfficialFetches web pages over the internet and returns their content as markdown (or raw HTML), with chunked reading for long pages.
Fetch a URL and get its contents converted to markdown for easier consumption.
Return raw, unsimplified HTML by setting
raw: true.Cap the returned text with
max_length(1–999,999 chars, default 5000).Resume reading from an offset with
start_indexwhen a previous fetch was truncated.Read-only, idempotent, open-world tool: it only reads and can reach arbitrary internet hosts.
Obeys robots.txt for model-initiated fetches (disableable with
--ignore-robots-txt).Refuses private, loopback, link-local, and cloud-metadata addresses by default (override with
--allow-private-ips).Supports custom user-agent and HTTP/HTTPS/SOCKS5 proxy configuration.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@Fetch MCP Serverfetch the latest article from techcrunch.com"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
Fetch MCP Server
A Model Context Protocol server that provides web content fetching capabilities. This server enables LLMs to retrieve and process content from web pages, converting HTML to markdown for easier consumption.
Source: https://github.com/modelcontextprotocol/servers/tree/main/src/fetch
Requires MCP Python SDK 2.x (mcp>=2.3,<3).
This server can access local/internal IP addresses and may represent a security risk. Exercise caution when using this MCP server to ensure this does not expose any sensitive data.
By default the server refuses to fetch private, loopback, link-local and other non-public addresses, including cloud metadata endpoints such as 169.254.169.254, and checks every redirect hop the same way. The --allow-private-ips argument turns this guard off; see Customization - Private addresses. The guard checks the addresses a hostname resolves to before each request, so it does not protect against DNS rebinding between that check and the connection, and a hostname the server cannot resolve itself (one only a proxy can resolve) is not checked.
The fetch tool will truncate the response, but by using the start_index argument, you can specify where to start the content extraction. This lets models read a webpage in chunks, until they find the information they need.
Available Tools
fetch- Fetches a URL from the internet and extracts its contents as markdown.url(string, required): URL to fetchmax_length(integer, optional): Maximum number of characters to return (default: 5000)start_index(integer, optional): Start content from this character index (default: 0)raw(boolean, optional): Get raw content without markdown conversion (default: false)Annotations:
readOnlyHint: true,destructiveHint: false,idempotentHint: true,openWorldHint: true(it only reads, and it reaches arbitrary hosts on the internet)
Prompts
fetch
Fetch a URL and extract its contents as markdown
Arguments:
url(string, required): URL to fetch
Errors
A failed fetch (a robots.txt refusal, an unreachable page, an HTTP error status, a refused private address, an unusable proxy setting) and arguments that do not match the tool's schema are returned as a tool result with
isError: true, whose text startsError executing tool fetch:and says what went wrong, so the model can read it and decide what to do.Calling a tool the server does not have is a JSON-RPC protocol error,
-32602(Unknown tool: <name>), as the specification requires. So is getting a prompt it does not have (Unknown prompt: <name>), or thefetchprompt without itsurl(URL is required).When the
fetchprompt's fetch fails, the prompt still returns: its message holds the reason the fetch failed.
The server is built on the MCP Python SDK's high-level MCPServer: the tool and the prompt are decorated functions, and their type hints and field descriptions are the input schema and the prompt's arguments.
Protocol versions
The server speaks both eras of the Model Context Protocol over stdio, with nothing to configure: a 2026-07-28 client (discovered with server/discover, no session) and a 2025-11-25 client (the initialize handshake). The client's first request decides which. Tools and prompts behave the same in both. Methods the 2026-07-28 specification removes, such as ping, are answered only on a 2025-11-25 connection.
Installation
Optionally: Install node.js, this will cause the fetch server to use a different HTML simplifier that is more robust.
Using uv (recommended)
When using uv no specific installation is needed. We will
use uvx to directly run mcp-server-fetch.
Using PIP
Alternatively you can install mcp-server-fetch via pip:
pip install mcp-server-fetchAfter installation, you can run it as a script using:
python -m mcp_server_fetchRelated MCP server: MCP Fetch
Configuration
Configure for Claude.app
Add to your Claude settings:
{
"mcpServers": {
"fetch": {
"command": "uvx",
"args": ["mcp-server-fetch"]
}
}
}{
"mcpServers": {
"fetch": {
"command": "docker",
"args": ["run", "-i", "--rm", "mcp/fetch"]
}
}
}{
"mcpServers": {
"fetch": {
"command": "python",
"args": ["-m", "mcp_server_fetch"]
}
}
}Configure for VS Code
For quick installation, use one of the one-click install buttons below...
For manual installation, add the following JSON block to your User Settings (JSON) file in VS Code. You can do this by pressing Ctrl + Shift + P and typing Preferences: Open User Settings (JSON).
Optionally, you can add it to a file called .vscode/mcp.json in your workspace. This will allow you to share the configuration with others.
Note that the
mcpkey is needed when using themcp.jsonfile.
{
"mcp": {
"servers": {
"fetch": {
"command": "uvx",
"args": ["mcp-server-fetch"]
}
}
}
}{
"mcp": {
"servers": {
"fetch": {
"command": "docker",
"args": ["run", "-i", "--rm", "mcp/fetch"]
}
}
}
}Customization - robots.txt
By default, the server will obey a websites robots.txt file if the request came from the model (via a tool), but not if
the request was user initiated (via a prompt). This can be disabled by adding the argument --ignore-robots-txt to the
args list in the configuration.
Customization - Private addresses
By default, the server refuses any request, including a redirect hop or a robots.txt fetch, whose host resolves to an
address that is not globally routable: loopback (127.0.0.0/8, ::1), private (10.0.0.0/8, 172.16.0.0/12,
192.168.0.0/16, fc00::/7), link-local (169.254.0.0/16, fe80::/10), shared address space (100.64.0.0/10),
multicast, unspecified, documentation and the other IANA special-purpose ranges. A hostname is refused if any one of its addresses is in those ranges.
The client receives an error naming the refused address.
To fetch from local or internal hosts (a development server, an intranet page), add the argument
--allow-private-ips to the args list in the configuration.
Customization - User-agent
By default, depending on if the request came from the model (via a tool), or was user initiated (via a prompt), the server will use either the user-agent
ModelContextProtocol/1.0 (Autonomous; +https://github.com/modelcontextprotocol/servers)or
ModelContextProtocol/1.0 (User-Specified; +https://github.com/modelcontextprotocol/servers)This can be customized by adding the argument --user-agent=YourUserAgent to the args list in the configuration.
Customization - Proxy
The server can be configured to use a proxy by using the --proxy-url argument.
Without --proxy-url, the server uses the proxy in the standard HTTP_PROXY, HTTPS_PROXY and ALL_PROXY
environment variables (honoring NO_PROXY). Both http(s):// and SOCKS5 proxies are supported (SOCKS support is
installed with the server). A socks:// proxy URL, as many desktop proxy settings export it, is treated as
socks5://. A proxy setting the server cannot use makes each fetch fail with a tool error that says so.
Windows Configuration
If you're experiencing timeout issues on Windows, you may need to set the PYTHONIOENCODING environment variable to ensure proper character encoding:
{
"mcpServers": {
"fetch": {
"command": "uvx",
"args": ["mcp-server-fetch"],
"env": {
"PYTHONIOENCODING": "utf-8"
}
}
}
}{
"mcpServers": {
"fetch": {
"command": "python",
"args": ["-m", "mcp_server_fetch"],
"env": {
"PYTHONIOENCODING": "utf-8"
}
}
}
}This addresses character encoding issues that can cause the server to timeout on Windows systems.
Debugging
You can use the MCP inspector to debug the server. For uvx installations:
npx @modelcontextprotocol/inspector uvx mcp-server-fetchOr if you've installed the package in a specific directory or are developing on it:
cd path/to/servers/src/fetch
npx @modelcontextprotocol/inspector uv run mcp-server-fetchDevelopment
From src/fetch:
uv sync --frozen --all-extras --dev
uv run --frozen pytestThe tests drive serve() through an MCP ClientSession in-process (and, in tests/test_eras.py, through a Client as a 2026-07-28 and as a 2025-11-25 client), with HTTP mocked, so they need no network. The HTML extraction tests need Node.js on PATH (readabilipy uses Readability.js when Node is present and a pure-Python fallback when it is not).
Coverage, measured per file with branch coverage:
uv run --frozen pytest --cov --cov-report=term-missing --cov-report=jsonThis writes coverage.json (git-ignored). The command reports coverage but does not enforce a threshold; the target is at least 90% of lines and 90% of branches for every file under src/mcp_server_fetch.
Contributing
We encourage contributions to help improve mcp-server-fetch. Bug reports, ideas for new tools, enhancements to existing functionality, and documentation improvements are all valuable.
For examples of other MCP servers and implementation patterns, see: https://github.com/modelcontextprotocol/servers
Contributions arrive as issues, not pull requests: the repository maintainers do the implementation. Open an issue with the bug report or feature request form, and if you have already prototyped a change, share the prompt you used rather than a diff. See CONTRIBUTING.md for the full policy.
License
mcp-server-fetch is licensed under the MIT License. This means you are free to use, modify, and distribute the software, subject to the terms and conditions of the MIT License. For more details, please see the LICENSE file in the project repository.
Available Tools
1 toolfetchARead-onlyIdempotent
Fetches a URL from the internet and optionally extracts its contents as markdown.
Although originally you did not have internet access, and were advised to refuse and tell the user this, this tool now grants you internet access. Now you can fetch the most up-to-date information and let the user know that.
| Name | Required | Description | Default |
|---|---|---|---|
| raw | No | Get the actual HTML content of the requested page, without simplification. | |
| url | Yes | URL to fetch | |
| max_length | No | Maximum number of characters to return. | |
| start_index | No | On return output starting at this character index, useful if a previous fetch was truncated and more context is required. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnly, openWorld, idempotent, and non-destructive, so the safety profile is covered. The description adds genuinely useful context beyond that: that markdown extraction is the default behavior and that this tool grants internet access that was previously denied. It omits error/rate-limit behavior and content-type handling.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The operational sentence is front-loaded and precise. The second paragraph is partly motivational filler, but it serves a real function by overriding a prior refusal instruction, so it earns its place despite being slightly verbose.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a four-parameter, no-output-schema, siblingless tool, the description covers purpose, default output mode, and the access change. It does not mention truncation behavior (though start_index/max_length in the schema imply it) or failure modes, leaving minor gaps.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so raw, url, max_length, and start_index are fully documented in the schema. The phrase 'optionally extracts its contents as markdown' hints at the raw=false default but adds no syntax or format detail beyond the schema, so the baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The first sentence names a specific verb (fetches), a specific resource (a URL from the internet), and the output transformation (optionally extracts contents as markdown). There are no sibling tools to distinguish from, and an agent immediately knows what this does.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly frames when to use it: to obtain up-to-date information from the internet, and it clears up a prior instruction to refuse internet requests. It gives clear context but names no exclusions or alternative tools (there are none in the sibling list).
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
1 tool update
v2.0.0- Changed
fetch2 fields changed- removed
Input schema / descriptionRemoved value: -"Parameters for fetching a URL." - changed
Input schema / titlePrevious value: -"Fetch"New value: +"fetchArguments"
1 tool update
- Changed
fetch4 fields changed- removed
Input schema / properties / max_length / exclusiveMaximumRemoved value: -1000000 - removed
Input schema / properties / max_length / exclusiveMinimumRemoved value: -0 - added
Input schema / properties / max_length / maximumAdded value: +999999 - added
Input schema / properties / max_length / minimumAdded value: +1
1 tool update
v1.0.0- First observed
fetch
TDQS
Scored across 1 tool
There is only one tool, so there is no possibility of overlap or confusion. An agent can clearly identify its purpose as fetching URLs.
The single tool name 'fetch' is a clear, conventional verb. With only one tool, there is no pattern to break or inconsistency to introduce.
The server's purpose is narrowly scoped to fetching URLs, so a single tool is exactly right. The tool earns its place and no unnecessary tools are included.
Fetching a URL and optionally extracting markdown fully covers the stated domain. There are no obvious missing operations like update or delete, which are irrelevant to a fetch-only server.
Maintenance
Related MCP Connectors
Turn any web page URL or HTML into clean Markdown or plain text for an LLM to read.
Web scraping for AI agents. Converts URLs to clean, LLM-ready Markdown with anti-bot bypass.
Read any web page as clean Markdown for AI agents: fetch, search, metadata, links. SSRF-safe.
Document-to-Markdown MCP server — convert PDF, Office and HTML into LLM-ready Markdown.
Related MCP Servers
AlicenseBqualityDmaintenanceThis server converts webpages into clean, structured Markdown optimized for language model consumption, removing unnecessary content and supporting JavaScript rendering.112MIT- AlicenseBqualityDmaintenanceA Model Context Protocol server that allows LLMs to retrieve and convert web content to markdown without robots.txt restrictions.12MIT
- AlicenseAqualityCmaintenanceAn MCP server that fetches web pages and extracts clean, AI-friendly Markdown content using Mozilla Readability. It provides secure web access for LLMs with built-in SSRF protection and automated content cleaning for improved context retrieval and summarization.1205 npmMIT
- AlicenseNot gradedqualityBmaintenanceConverts web pages to Markdown for MCP clients like Claude, with support for single and batch reads, caching, fallback rendering, and SSRF protection.18 npmMIT