mcp-server-fetch
One of the official MCP reference servers, providing web content retrieval capabilities that enable large language models to access and fetch webpage information through the standard MCP protocol.
Timeline (last 90 days)
On the Python side, mcp-server-fetch uses httpx and relies on the certifi package for HTTPS validation; installing from PyPI resolves to the current version of certifi; in this release, the Dockerfile in the repository advanced the lock file to certifi 2026.10.23.
mcp-server-fetch version 2026.10.28 refuses autonomous fetching when robots.txt returns a 5xx; rejects IPv4-compatible IPv6 addresses (::/96); adds a --no-readability-js option; and requires readabilipy 0.3.0, among other changes.
@modelcontextprotocol/server-filesystem and @modelcontextprotocol/server-everything are upgraded to version 2.0.1, and on the Python side mcp-server-fetch is upgraded to version 2026.10.24.
mcp-server-fetch 2026.10.24 addresses three network-request-related issues, with the approach being to make the address that is checked the address that is connected to.
mcp-server-fetch fixes an issue in internationalized domain name (IDNA) scenarios where one form of a domain is checked but another form is connected to, potentially reaching internal network addresses (GHSA-v38p-wf49-hx2j).
mcp-server-fetch now rejects NAT64 requests in the 64:ff9b::/96 range that encapsulate private, loopback, or link-local IPv4 addresses (GHSA-66qx-2266-pmj6).
mcp-server-fetch's robots.txt check no longer targets only the initially requested URL but is re-checked after every redirect (GHSA-3jqg-r5pp-rmp2).
Each Python server now declares prompts and resources capabilities (listChanged: false), with fetch's fetch prompt being the only entry.
The Python/PyPI-side servers mcp-server-fetch, mcp-server-git, and mcp-server-time adopt the CalVer calendar version 2026.10.10.
mcp-server-fetch rejects private addresses, loopback addresses, and metadata addresses by default as an SSRF protection measure.
4 more timeline events
All Facts (13)
On the Python side, mcp-server-fetch uses httpx and relies on the certifi package for HTTPS validation; installing from PyPI resolves to the current version of certifi; in this release, the Dockerfile in the repository advanced the lock file to certifi 2026.10.23.
50%Unverifiedmcp-server-fetch's robots.txt check no longer targets only the initially requested URL but is re-checked after every redirect (GHSA-3jqg-r5pp-rmp2).
50%Unverifiedmcp-server-fetch 2026.10.24 addresses three network-request-related issues, with the approach being to make the address that is checked the address that is connected to.
50%Unverifiedmcp-server-fetch fixes an issue in internationalized domain name (IDNA) scenarios where one form of a domain is checked but another form is connected to, potentially reaching internal network addresses (GHSA-v38p-wf49-hx2j).
50%Unverifiedmcp-server-fetch now rejects NAT64 requests in the 64:ff9b::/96 range that encapsulate private, loopback, or link-local IPv4 addresses (GHSA-66qx-2266-pmj6).
50%UnverifiedEach Python server now declares prompts and resources capabilities (listChanged: false), with fetch's fetch prompt being the only entry.
50%UnverifiedThe Python/PyPI-side servers mcp-server-fetch, mcp-server-git, and mcp-server-time adopt the CalVer calendar version 2026.10.10.
50%Unverifiedmcp-server-fetch rejects private addresses, loopback addresses, and metadata addresses by default as an SSRF protection measure.
50%Unverifiedmcp-server-fetch added SOCKS proxy support and reports incorrect proxy settings as tool errors.
50%UnverifiedAll three Python servers now correctly report their own package version in serverInfo.
50%UnverifiedFor mcp-server-fetch, which requires access to external networks, production environments need additional attention to sandbox isolation and request allowlist configuration to prevent models from being induced to initiate malicious requests.
50%Unverifiedmcp-server-fetch version 2026.10.28 refuses autonomous fetching when robots.txt returns a 5xx; rejects IPv4-compatible IPv6 addresses (::/96); adds a --no-readability-js option; and requires readabilipy 0.3.0, among other changes.
50%Unverified@modelcontextprotocol/server-filesystem and @modelcontextprotocol/server-everything are upgraded to version 2.0.1, and on the Python side mcp-server-fetch is upgraded to version 2026.10.24.
50%