{
  "name": "safe-fetch-mcp-server",
  "version": "0.1.3",
  "description": "A secure-by-default MCP server for fetching web content: SSRF, DNS-rebinding, and redirect-to-internal protection with post-resolution IP validation.",
  "mcpName": "io.github.Sanoy24/safe-fetch",
  "type": "module",
  "bin": {
    "safe-fetch-mcp-server": "dist/index.js"
  },
  "main": "dist/index.js",
  "files": [
    "dist"
  ],
  "engines": {
    "node": ">=18"
  },
  "repository": {
    "type": "git",
    "url": "git+https://github.com/sanoy24/safe-fetch-mcp-server.git"
  },
  "homepage": "https://github.com/sanoy24/safe-fetch-mcp-server#readme",
  "bugs": {
    "url": "https://github.com/sanoy24/safe-fetch-mcp-server/issues"
  },
  "author": "sanoy",
  "scripts": {
    "build": "tsc",
    "dev": "tsc --watch",
    "start": "node dist/index.js",
    "start:http": "node dist/index.js --http",
    "test": "vitest run",
    "test:watch": "vitest",
    "lint": "eslint .",
    "lint:fix": "eslint . --fix",
    "format": "prettier --write .",
    "inspector": "npm run build && npx @modelcontextprotocol/inspector node dist/index.js",
    "prepublishOnly": "npm run build && npm run lint && npm test"
  },
  "keywords": [
    "mcp",
    "model-context-protocol",
    "fetch",
    "ssrf",
    "security",
    "agent"
  ],
  "license": "MIT",
  "dependencies": {
    "@modelcontextprotocol/sdk": "^1.30.0",
    "express": "^4.19.0",
    "express-rate-limit": "^8.6.2",
    "turndown": "^7.1.3",
    "zod": "^3.23.0"
  },
  "devDependencies": {
    "@types/express": "^4.17.21",
    "@types/node": "^22.0.0",
    "@types/turndown": "^5.0.4",
    "eslint": "^9.0.0",
    "prettier": "^3.3.0",
    "typescript": "^5.5.0",
    "typescript-eslint": "^8.0.0",
    "vitest": "^2.0.0"
  },
  "//": "@modelcontextprotocol/sdk is pinned >=1.30.0 deliberately: 1.21.1 is the first version with the DNS-rebinding fix (CVE-2025-66414/66416). Re-verify this floor periodically."
}