Cross-session WebFetch cache for Claude Code. Persists fetched docs across sessions via SQLite (7-day TTL) so the same URL+prompt in any new session is an instant cache hit instead of re-fetching
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
Anthropic's MCP TypeScript SDK has a ReDoS vulnerability
Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default
process.env. You'll be asked to provide them before it can run.WEBCACHE_AUTOREAD— Manual lookup is still available if you want it: call cached_fetch(url, prompt) (or cached_search(query)) — returns the cached text, or [CACHE_MISS] … if absent. Disable auto-read with =0.WEBCACHE_COMPRESS— off 1 enables gzip on responses ≥4 KB. Stored as base64 in TEXT column. Existing uncompressed rows read fine (BC).WEBCACHE_DEBUG— off 1 enables verbose tracing in the auto-cache hook.WEBCACHE_DOMAIN_TTL— none Per-domain TTL JSON: {"news.com":1,"reuters.com":1,"arxiv.org":0}. Days; 0 = unlimited. Suffix-matches subdomains. Overrides global TTL when matched.WEBCACHE_MAX_OUTPUT_MB— 10 Reject WebFetch responses larger than N MB. Stats track oversize_skipped counter and last_oversize_url.WEBCACHE_MAX_SIZE_MB— unlimited Above this size, LRU eviction drops ~20% of oldest-by-last_hit_at entries on next write (debounced every 100 writes).WEBCACHE_NAMESPACE— gosdelo claude # cache writes/reads scoped to ns "gosdelo"WEBCACHE_QUIET— off 1 suppresses hook stderr output (file log at ~/.webcache/hook.log still written).WEBCACHE_SEARCH_TTL_HOURS— 6 TTL for cached WebSearch results (the websearch namespace). Search rankings drift, so this is short by default. 0 = never expire.WEBCACHE_STRICT_REDACT— off 1 makes the cache key use the redacted URL — collides per endpoint regardless of token value. See Security above.WEBCACHE_TTL_DAYS— unlimited Global TTL in days. 0 or unset = unlimited.[](https://m8ven.ai/mcp/theyahia-claude-webcache-1x4zqw)