An agent can connect on its own if it already holds X_API_KEY, X_API_KEY.Remote endpoint behind a static API key or header. The registry never sees the value; the agent fills the placeholder.
tools.schemasevery tool has an object input schema
pass
tools.annotations2 of 2 tools declare readOnlyHint or destructiveHint
fail
tools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: fetch_page (destructiveHint, idempotentHint); domain_reliability (destructiveHint, idempotentHint)
pass
tools.token_costabout 402 tokens to load every tool
pass
tools.api_dumptools are not a one-to-one API dump
stabilityn/a · weight 15
n/a
stability.changes, stability.rug_pulltool history recorded for 5 of the 7 days needed
dependenciesn/a · weight 15
n/a
deps.known_vulns, deps.mcp_sdk_version, deps.resolvabledeps.dev does not know [email protected]
2 tools, about 402 tokens to load them all · tool set 950ea5b291af · tools last changed 2026-11-02 · checked 2026-11-07 19:44 UTC
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
Dependencies
[email protected]npmthis version is not known to the dependency resolver
Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.
Endpoints
remote
auth
reachable
uptime 30d
p50
protocol
last ok
https://fetchrouter.dev/mcpstreamable-http
api_key ${X_API_KEY}
yes
100%
261 ms
2025-11-25
2026-11-07
package
registry
version
runtime
secrets
fetchrouter-mcp
npm
0.1.1
–
FETCHROUTER_API_KEY
Tools (2)
domain_reliabilityread-only
Pass rates per route (plain HTTP, browser, providers) for a domain over the last 30 days, from real verified fetches. Use it to choose mode/max_cost before fetching a hard site. Free, no key needed.
fetch_pageread-only
Fetch a public URL and get its content only if it really loaded. Checks for block pages, CAPTCHAs, login walls and empty JavaScript shells, and retries through other routes (including a headless browser) automatically. Billed only on success. Returns markdown by default. If ok is false, the reason says why (e.g. blocked:cloudflare, http_404, expect_text_missing): don't retry the same URL with the same settings.