{ "schema": "varexis-public-evidence-record/0.3", "generated_at_utc": "2026-10-14T00:29:51.399Z", "record_id": "VXI-EXT-TOOL-TRUST-FIRECRAWL-01-v1", "record_kind": "external_reference", "title": "Firecrawl MCP: Endpoint mode, browser state and interaction", "system": "Firecrawl MCP", "evidence_family": "agent_tool_trust_review", "index_status": "PUBLIC_SAFE_SOURCE_REVIEW", "evidence_state": "PRIMARY_DOCUMENTATION_REVIEW_ONLY", "canonical_question": "Does a Firecrawl search connection also allow browser interactions or saved login state?", "near_questions": [ "Is every Firecrawl MCP endpoint read-only?", "Can Firecrawl interaction tools click and type?", "What distinguishes Firecrawl search-only and full endpoints?", "Can a Firecrawl browser profile retain login state?", "Which Firecrawl tools are exposed without a key?", "Does scraping a page authorize submitting its forms?", "What data can enter a Firecrawl browser profile?", "How should I review a Firecrawl connection for a search task?", "Does using Firecrawl locally prove all processing stays local?", "What should I check before allowing Firecrawl interactions?", "Can I save the reviewed Firecrawl endpoint restrictions?", "When should a Firecrawl task require action approval?" ], "supported_claims": [ { "claim": "Firecrawl documents different hosted tool sets. Its full interface includes interaction tools that can click, type and preserve browser state, while a dedicated search-only endpoint has a restricted tool set. Review the actual endpoint and exposed tools before treating a connection as retrieval only.", "reliance": "DOCUMENTED_CAPABILITY_ONLY" } ], "not_demonstrated_claims": [ "Verified buyer configuration or effective access rights", "Independent execution, completeness or security testing", "Vendor certification, legal compliance or guaranteed suitability" ], "public_summary": "Firecrawl documents different hosted tool sets. Its full interface includes interaction tools that can click, type and preserve browser state, while a dedicated search-only endpoint has a restricted tool set. Review the actual endpoint and exposed tools before treating a connection as retrieval only.", "related_record_ids": [ "VXI-EXT-TOOL-TRUST-APIFY-01-v1", "VXI-EXT-TOOL-TRUST-TAVILY-01-v1", "VXI-EXT-TOOL-TRUST-EXA-01-v1", "VXI-EXT-TOOL-TRUST-BRAVE-SEARCH-01-v1" ], "source_review": { "source_type": "official_external_documentation", "source_title": "Firecrawl official MCP capabilities and hosted modes", "source_url": "https://github.com/firecrawl/firecrawl-mcp-server", "checked_on": "2026-10-14", "candidate_record_id": "VXI-EXT-TOOL-TRUST-FIRECRAWL-01-v1", "candidate_record_sha256": "084681173fc159dff8cd11a6faa152fd1b5ecf5ada887a6cf6f95efdf83b3682", "method": "Primary documentation reviewed for the published bounded statement.", "deployment_tested_by_varexis": false, "revalidation": "The delivered snapshot preserves the review date shown. Recheck current primary documentation and deployment context before relying on present applicability; payment does not trigger fresh research." }, "answer_policy": { "classification": "DOCUMENTED_WITH_DEPLOYMENT_BOUNDARY", "bounded_answer": "Firecrawl documents different hosted tool sets. Its full interface includes interaction tools that can click, type and preserve browser state, while a dedicated search-only endpoint has a restricted tool set. Review the actual endpoint and exposed tools before treating a connection as retrieval only.", "required_buyer_context": "Endpoint mode, cloud or self-hosted configuration, authentication, exposed tools, browser profile and approved websites.", "missing_evidence": "A broader claim needs evidence matching the intended use. Payment does not upgrade the evidence state." }, "private_boundary": "Raw logs, thresholds, private paths, source code, protected mechanisms and reconstruction-level details are excluded from public and paid delivery.", "trust_profile": { "schema": "varexis-agent-tool-trust/1", "identity": { "tool": "Firecrawl MCP", "variant": "Official server; hosted full, keyless and search-only modes" }, "review_status": "documentation_review_only", "checked_on": "2026-10-14", "version_scope": "Dated rolling documentation snapshot; no installed or hosted runtime version independently verified.", "plan_scope": "Buyer plan, entitlement and effective configuration are not verified.", "findings": [ { "field": "operator", "label": "Publisher and operator", "status": "documented", "statement": "Firecrawl publishes the official MCP server and hosted endpoints.", "source_ids": [ "firecrawl-main" ] }, { "field": "purpose", "label": "Purpose", "status": "documented", "statement": "Retrieve web content and, with applicable tools, interact with pages.", "source_ids": [ "firecrawl-main" ] }, { "field": "reads", "label": "Read capability", "status": "documented", "statement": "Search results, scraped content and supported parsed documents.", "source_ids": [ "firecrawl-main" ] }, { "field": "writes", "label": "Write capability", "status": "documented", "statement": "Interaction tools can act on pages and save browser profile state.", "source_ids": [ "firecrawl-main" ] }, { "field": "auth", "label": "Authentication", "status": "documented", "statement": "Hosted keyless access is distinct from API-key configured server access.", "source_ids": [ "firecrawl-main" ] }, { "field": "permissions", "label": "Permission surface", "status": "documented", "statement": "Endpoint mode changes the available tool set.", "source_ids": [ "firecrawl-main" ] }, { "field": "egress", "label": "Data leaving the environment", "status": "review_inference", "statement": "Review page inputs, browser profile data and returned content recipients.", "source_ids": [ "firecrawl-main" ] }, { "field": "failures", "label": "Failure modes to consider", "status": "review_inference", "statement": "A full tool set or saved login can exceed a search-only task.", "source_ids": [ "firecrawl-main" ] }, { "field": "unknown", "label": "Unknowns and applicability", "status": "unknown", "statement": "Effective endpoint configuration, profile contents and account usage controls are unverified.", "source_ids": [] }, { "field": "gate", "label": "Suggested refusal or clarification condition", "status": "varexis_review_policy", "statement": "Require action authorization before using interaction tools or saving authenticated state.", "source_ids": [] } ], "evidence_sources": [ { "source_id": "firecrawl-main", "url": "https://github.com/firecrawl/firecrawl-mcp-server", "final_url": "https://github.com/firecrawl/firecrawl-mcp-server", "title": "Firecrawl official MCP capabilities and hosted modes", "checked_on": "2026-10-14", "sha256": "87eeed2b632b90c75d3de2a802ac93ec49bae840607385a649f05d469fc3ec26", "bytes": 716252 } ], "observed_tool_execution": false, "policy_basis": "Suggested VAREXIS review gates; apply the buyer's authorized task and policy. These conditions do not execute or enforce controls.", "commercial_reliance_boundary": "A source-linked review aid, not a vendor certification, security clearance or deployment assessment. Unknown does not mean false or unsafe.", "paid_value": { "decision_context": "Preserve which endpoint and browser-state boundary supported a retrieval-only decision.", "free": "Complete review, practical questions, sources and limitations; may be saved locally.", "single_request": "Existing server-saved version-bound route snapshot for later authenticated retrieval.", "evidence_receipt": "The same snapshot plus the existing unsigned delivery receipt.", "excluded": [ "Fresh vendor research", "Continuous monitoring or change alerts", "Testing the buyer configuration", "Private evidence or vendor certification" ], "integrity": "Hashes identify content versions; they do not prove truth or provide a signature." }, "revalidation": { "trigger": "Recheck when permissions, deployment, authentication, source guidance or intended use changes; a purchase does not trigger revalidation.", "specific_watch": "Recheck endpoint tools, authentication, browser profiles and credit consumption." }, "change_history": [ { "version": 1, "date": "2026-10-14", "change": "Initial documentation review; no earlier vendor assessment claimed." } ] }, "paid_access_note": "The full published answer and boundaries are free. Paid access saves the selected route and source versions, with an unsigned receipt when purchased. Preview coverage before paying. Fresh research, bespoke assessment and protected evidence are excluded.", "service_route": { "request_guide": "/varexis-index/request.html", "request_workflow": "/varexis-index/request-workflow.json", "service_id": "single_request", "service_routes_url": "/varexis-index/service-routes.json", "payment_required": true, "availability_endpoint": "/api/index/capabilities", "operational_status": "AUTOMATIC_SERVICE_CAPABILITIES_GATED", "checkout_url": "/index-access" }, "authority_boundary": "VAREXIS-INDEX informs evidence reliance. It does not provide advice, certification, deployment authority, security assurance, production approval, or guarantee.", "human_page": "/varexis-index/catalog.html#firecrawl-mcp-endpoint-action-trust", "machine_readable_record": "/varexis-index/records/firecrawl-mcp-endpoint-action-trust.json" }