Secure MCP Fetch MCP Server

Secure mcp fetch mcp server lets Claude, Cursor and other MCP clients work with Secure MCP Fetch directly. This project implements a secure URL fetching tool using FastMCP.

What Secure MCP Fetch does

This project implements a secure URL fetching tool using FastMCP.

Key capabilities

• Fetches URLs securely
• Resolves domains to IPs
• Checks for private/internal IPs
• Handles redirects (up to 3)
• Supports custom HTTP methods and headers
• Uses an allowlist for trusted domains/IPs

Installing the secure mcp fetch mcp server

The server is distributed via PyPI as fastmcp, so most clients can run it without a manual build step. Add it to your MCP client's configuration and restart the client to pick it up — the copy-paste configs for Claude Desktop, Claude Code and Cursor are on this page.

Configuration

The server reads one environment variable: SECURE_FETCH_ALLOWLIST. Keep credentials in your client's env block or a secrets manager rather than committing them.

Requirements

• Python 3.7+ - uv (Python package installer and environment manager)

Where it fits

Developer-tool servers are usually the first ones people connect, because they turn "help me with this code" into an assistant that can actually read the repo and act on it. Secure MCP Fetch sits in that group. Worth comparing against the other developer tools servers in this directory before you commit to one, since several overlap in scope but differ sharply in setup cost and permissions.

Practical notes

• This server runs locally, so it operates with whatever access your machine and its credentials already have. Scope that deliberately rather than by default.
• Maintained by appsec-innovation-labs, written in Python.
• MCP clients ask for confirmation before each tool call by default. Keep that on while you learn what the secure mcp fetch mcp server actually does with your data.
• Every entry in this directory is reviewed by hand before it goes live, and details are checked against the project's own documentation.