🔥

Firecrawl

Tool

The API to search, scrape, and interact with the web for AI

Firecrawl567.0K installs4.6 (3.5K)

58

Caution

Security

8

Quality

90

Maintenance

93

Safety Tier Medium Risk

Security ScanScan Failed

PriceFreemium

Last Scanned5/12/2026

About

Open-source web scraping and search API that converts web pages to clean markdown. Used by 350k+ developers including Shopify, Zapier, and Replit. 48k+ GitHub stars.

Tags

#scraping #web #search #api #data-extraction

Categories

Data & AnalyticsDeveloper Tools

Security Scan

8/100

11 checks · 9 passed · 10 findings

5/13/2026

Scanners:customsemgrepgitleakstrivy

SSRF Detection2

Prompt Injection

Data Exfiltration

Dangerous Commands

Secret Detection

Obfuscation

External Fetches

Credential Access

Privilege Escalation

Secret Detection (Gitleaks)8

Static Security Analysis

Findings (10)

highUnvalidated URL fetchingcustom

.github/scripts/audit-ci-vuln-scan.mjs:254

highUnvalidated URL fetchingcustom

.github/scripts/check_version_has_incremented.py:105

mediumDiscovered a potential authorization token provided in a curl command header, which could compromise the curl accessed resource.gitleaks

README.md:116

mediumDiscovered a potential authorization token provided in a curl command header, which could compromise the curl accessed resource.gitleaks

README.md:173

mediumDiscovered a potential authorization token provided in a curl command header, which could compromise the curl accessed resource.gitleaks

README.md:239

mediumDiscovered a potential authorization token provided in a curl command header, which could compromise the curl accessed resource.gitleaks

README.md:245

mediumDiscovered a potential authorization token provided in a curl command header, which could compromise the curl accessed resource.gitleaks

README.md:322

mediumDiscovered a potential authorization token provided in a curl command header, which could compromise the curl accessed resource.gitleaks

README.md:413

mediumDiscovered a potential authorization token provided in a curl command header, which could compromise the curl accessed resource.gitleaks

README.md:436

mediumDiscovered a potential authorization token provided in a curl command header, which could compromise the curl accessed resource.gitleaks

README.md:460

50 files scanned from repository

Privacy Label

External APIs

Compatibility

Python

TypeScript

REST API

Links

Source Repository

Related Tools

Browser Use

Let AI agents control web browsers

ToolFreeScanned

145.6K4.3(892)Browser Use

Composio

250+ app integrations for AI agents

112.3K4.4(678)Composio

PythonJavaScriptCrewAILangGraph+1

E2B Code Interpreter

Sandboxed code execution for AI agents

ToolFreemiumScanned

89.7K4.6(534)E2B

PythonJavaScriptAny LLM