B+

npm:@yawlabs/fetch-mcp

https://www.npmjs.com/package/@yawlabs/fetch-mcp
89/100 · MCP Trust Grade · checked 2h ago · MCP 0.3.4

What it offers — 15 tools · Social & Comms

fetch_html_to_markdown

GET a URL, decode the HTML, and convert to clean markdown (headings, lists, links, code fences). Scripts, styles, iframes, nav, footer, and aside elem

fetch_html_to_text

GET a URL, decode the HTML, and return plain text with block-level structure preserved as newlines. Scripts, styles, and comments stripped; HTML entit

fetch_feed

Fetch and parse an RSS 2.0 or Atom 1.0 feed. Returns feed-level metadata (title, description, link, updated) plus a list of entries (title, link, id,

http_get

Perform an HTTP GET. Returns status, headers, and body. Automatically parses JSON when the server responds with application/json. Follows redirects (e

http_post

Perform an HTTP POST. Body can be given as a raw string (body) or as a JSON value (body_json \u2014 auto-sets content-type to application/json). NOT i

http_put

Perform an HTTP PUT. Use for full-resource replacement. Idempotent: the same PUT applied twice leaves the resource in the same state.

http_patch

Perform an HTTP PATCH. Use for partial updates. Spec-wise NOT guaranteed idempotent \u2014 depends on the server

http_delete

Perform an HTTP DELETE. Idempotent (per spec): a repeated DELETE on an already-deleted resource typically returns 404/410.

http_head

Perform an HTTP HEAD. Returns status + headers with no body. Useful for checking a resource exists, getting its size (Content-Length), or polling for

http_options

Perform an HTTP OPTIONS. Returns the server

fetch_links

Extract every outbound link from an HTML page, resolved to absolute URLs. Each entry includes href, anchor text, optional rel/title, and an internal/e

fetch_meta

GET a URL and extract its head metadata: title, description, canonical, language, robots directive, Open Graph / Twitter Card / article: properties, i

fetch_reader

GET a URL, locate the main article body (prefers <article>, <main>, itemprop=articleBody, or known CMS class names; falls back to <body>), strip navig

fetch_robots

Fetch and parse the robots.txt for a given origin, then tell the caller whether a target URL is crawlable by a given user-agent. Follows the Google-st

fetch_sitemap

Fetch a sitemap.xml (or sitemap-index) and return the contained URLs with their lastmod / changefreq / priority. Follows sitemap-index chaining up to

Spec / packaging20%100
Security (OWASP MCP)30%70
Maintenance / popularity20%100
Tool hygiene15%95
Transparency / provenance15%90

Findings

INFO Static analysis of npm package @yawlabs/fetch-mcp@0.3.4 (stdio server — no remote endpoint). Reliability/behavioral signals require running it; not measured.
Grade another server

We re-grade npm:@yawlabs/fetch-mcp on a schedule and alert your Slack/webhook the moment its tools change or its grade drops — rug-pull insurance for the connection.

Share this report card

A 1200×630 card with the grade + audit — drop it in a post, Slack, or your repo.

MCP Trust report card — npm:@yawlabs/fetch-mcp grade B+
Share on X Open card image

Embed this grade

A live badge — it re-verifies itself and shows current stability. Static scorecards can't. Paste it in your README or site to show users you're independently audited.

MCP Trust Grade B+ · wmcp.sh
[![MCP Trust Grade B+](https://wmcp.sh/mcp/grade/npm%3A%40yawlabs%2Ffetch-mcp/badge.svg)](https://wmcp.sh/mcp/grade/npm%3A%40yawlabs%2Ffetch-mcp)
<a href="https://wmcp.sh/mcp/grade/npm%3A%40yawlabs%2Ffetch-mcp"><img src="https://wmcp.sh/mcp/grade/npm%3A%40yawlabs%2Ffetch-mcp/badge.svg" alt="MCP Trust Grade B+ · wmcp.sh"></a>

Agents: check this before connecting

Add the wmcp.sh trust oracle as an MCP server and call grade_mcp_server / check_mcp_drift in your agent's pre-connection gate:

https://wmcp.sh/mcp/trust
How this grade is computed. An open, independent rubric — Spec conformance (20%), Security mapped to the OWASP MCP Top 10 (30%), Reliability (20%), Tool hygiene (15%), Transparency (15%) — run by connecting to the server and inspecting its real MCP surface. The grade is free and identical whether or not the operator pays. v1 uses static + spec signals from a single connection; continuous uptime, real latency, and annotation-truthing (declared readOnly vs observed behavior) layer on via the wmcp.sh proxy.