Firecrawl MCP Multiple Keys

Item: Firecrawl MCP Multiple Keys
Rating: 35
Author: M8ven

A Firecrawl MCP server with built-in support for multiple API key rotation, enabling web search, scraping, crawling, extraction, and more via MCP clients.

→ AdvaitR7/firecrawl-mcp-multiple-keys · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Secret credentials may flow to a network call

1 flow detected: KEYLESS_PROXY_SECRET. We can’t prove the destination matches the brand the credential belongs to.

🔐

You'll be asked for 5 credentials: FIRECRAWL_API_KEY, FIRECRAWL_OAUTH_INTROSPECT_SECRET, FIRECRAWL_OAUTH_TOKEN, KEYLESS_PROXY_SECRET, OPENAI_APPS_CHALLENGE_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configCLOUD_SERVICE— No Set to true for hosted cloud-service behavior

🔐 secretFIRECRAWL_API_KEY— Single-key fallback with

configFIRECRAWL_API_KEYS— Multi-key rotation with

configFIRECRAWL_API_URL— No Custom Firecrawl API URL for self-hosted instances

configFIRECRAWL_MCP_RESOURCE_URL

🔐 secretFIRECRAWL_OAUTH_INTROSPECT_SECRET

configFIRECRAWL_OAUTH_ISSUER

🔐 secretFIRECRAWL_OAUTH_TOKEN— FIRECRAWL_API_KEYS takes precedence over FIRECRAWL_API_KEY unless is set.

configHOST— No HTTP transport host, default localhost outside cloud mode

configHTTP_STREAMABLE_SERVER— No Set to true to use Streamable HTTP transport

🔐 secretKEYLESS_PROXY_SECRET

🔐 secretOPENAI_APPS_CHALLENGE_TOKEN

configPORT— No HTTP transport port, default 3000

configSSE_LOCAL— No Set to true to use local HTTP stream behavior

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 2 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/advaitr7-firecrawl-mcp-multiple-keys-s2h584)](https://m8ven.ai/mcp/advaitr7-firecrawl-mcp-multiple-keys-s2h584)

commit: d094fb01568e98cd806ba8594a1099b3e631be2f

code hash: ab13e5c8479fb8744bab1021aa8899107d8d56ede0033caeac2be989564ea678

verified: 7/16/2026, 8:44:02 AM

view raw JSON →