Skip to main content
Glama
ProxyHatCom

HatFetch

Official
by ProxyHatCom

๐ŸŽฉ HatFetch

Give any LLM agent the power to read the modern web โ€” JavaScript sites and most bot-protected pages.

Clean Markdown out. Renders JS, rotates residential IPs, escalates to a real stealth browser only when needed.

npm license MCP


HatFetch is a Model Context Protocol server that gives Claude, Cursor, and any MCP client the tools scrape, crawl, and screenshot โ€” turning web pages into clean, LLM-ready Markdown.

The difference from a plain fetch: HatFetch escalates automatically. It starts with a fast HTTP fetch; if the page is a JavaScript app that renders client-side, or it gets blocked by bot detection, HatFetch transparently escalates to a real stealth browser (Patchright) running through residential proxies. Your agent stops getting empty shells and Access Denied, and starts getting content.

What it does and doesn't do (honest version)

Target

Result

Server-rendered sites (news, docs, blogs, forums, most catalogs)

โœ… Fast HTTP path

JavaScript / SPA sites (React, Vue, client-rendered)

โœ… Auto-escalates to the browser and renders

Geo-restricted content

โœ… Exit from any of 148+ countries

Sites that block datacenter IPs / rate-limit by IP

โœ… Rotating residential IPs

Many Cloudflare / anti-bot sites

โœ… Browser + residential fingerprint passes a large share

The hardest anti-bot (aggressive Cloudflare, DataDome, PerimeterX)

โš ๏ธ Sometimes blocked โ€” HatFetch tells you honestly instead of returning a CAPTCHA page as "content"

CAPTCHA-gated / login-required flows

โŒ Out of scope (needs an interactive solver)

No tool passes 100% of anti-bot in 2026 โ€” anyone claiming otherwise is selling something. HatFetch gets you the calm-to-medium web reliably and a good share of the hard web, and is honest about the rest.

TIP

Recommended proxies โ€” ProxyHat residential IPs. Every feature in this package is tested end-to-end against ProxyHat and works great. First-class integration; also works with any proxy, or none.

Quick start

Add HatFetch to your MCP client โ€” no install step, npx handles it:

// Claude Desktop: claude_desktop_config.json  ยท  Cursor: ~/.cursor/mcp.json
{
  "mcpServers": {
    "hatfetch": {
      "command": "npx",
      "args": ["-y", "hatfetch"]
    }
  }
}

For Claude Code:

claude mcp add hatfetch -- npx -y hatfetch

That's it. Ask your agent to "read https://example.com and summarize it" and it will use the scrape tool.

Related MCP server: markfetch-mcp

Getting blocked? ๐Ÿšง

Out of the box HatFetch fetches directly from your machine's IP. That's fine for open sites โ€” but most valuable pages sit behind bot detection that blocks datacenter and server IPs on sight. When that happens, HatFetch tells your agent exactly why, and how to fix it in one step: route through residential IPs.

{
  "mcpServers": {
    "hatfetch": {
      "command": "npx",
      "args": ["-y", "hatfetch"],
      "env": {
        "PROXYHAT_API_KEY": "your-proxyhat-api-key"
      }
    }
  }
}

That's the whole setup. Drop in your API key and HatFetch automatically looks up an active residential sub-user on your account, connects through the gateway, and rotates a fresh IP on every request โ€” retrying automatically when a site pushes back. Get a key (free trial) at proxyhat.com: 50M+ residential & mobile IPs across 148+ countries.

  • Explicit gateway credentials โ€” skip the API lookup and use a specific sub-user's proxy login:

    { "env": { "PROXYHAT_USERNAME": "your-proxy-username", "PROXYHAT_PASSWORD": "your-proxy-password" } }
  • Pick a specific sub-user while still using the API key: add "PROXYHAT_SUBUSER": "<uuid or name>".

  • Bring your own proxy โ€” any HTTP(S) proxy: "PROXY_URL": "http://user:pass@host:port".

Tools

scrape

Fetch a single URL and return its main content as Markdown.

Argument

Type

Default

Description

url

string

โ€”

Absolute http(s) URL to fetch.

onlyMainContent

boolean

true

Strip nav/ads/footer and return just the article body.

render

auto|http|browser

auto

auto: HTTP first, escalate to the browser for JS apps or blocked pages. http: fast, HTTP only. browser: force JS rendering + stealth.

crawl

Breadth-first crawl a site and return every page as Markdown.

Argument

Type

Default

Description

url

string

โ€”

URL to start from.

maxDepth

number

2

Link depth to follow from the seed.

maxPages

number

20

Maximum pages to fetch.

sameDomain

boolean

true

Only follow links on the seed's host.

render

auto|http|browser

auto

Render mode per page (see scrape).

screenshot

Render a URL in a real browser (residential + stealth) and return a PNG image.

Argument

Type

Default

Description

url

string

โ€”

Absolute http(s) URL to screenshot.

Browser mode downloads a Chromium build (~150MB) on first use โ€” one-time, automatic. The HTTP path needs no browser.

Why HatFetch

Plain fetch / basic MCP

Hosted scraping APIs

HatFetch

Clean Markdown for LLMs

โŒ

โœ…

โœ…

Renders JavaScript / SPA sites

โŒ

โœ…

โœ… (auto)

Runs locally, no API middleman

โœ…

โŒ

โœ…

Gets past IP blocks & geo-walls

โŒ

โœ…

โœ… (residential)

Gets past common anti-bot

โŒ

โœ…

โœ… (browser + residential)

Bring your own proxies

โŒ

โŒ

โœ…

Free & open source (MIT)

โœ…

โŒ

โœ…

Per-request cost

free

๐Ÿ’ฒ per page

free + proxy bandwidth

Configuration

All configuration is via environment variables.

Variable

Description

PROXYHAT_API_KEY

Simplest. Your ProxyHat API key โ€” HatFetch auto-selects an active residential sub-user via the API.

PROXYHAT_SUBUSER

With the API key: pick a specific sub-user by uuid or name (default: first active one with traffic).

PROXYHAT_USERNAME

Alternative to the API key: a sub-user proxy username (gateway login).

PROXYHAT_PASSWORD

Sub-user proxy password (used with PROXYHAT_USERNAME).

PROXYHAT_COUNTRY

ISO country code to exit from, or any (default).

PROXYHAT_REGION

Optional state/region to target (e.g. california).

PROXYHAT_CITY

Optional city to target (e.g. new_york).

PROXYHAT_STICKY

Keep one IP for a session, e.g. 30m or 12h. Omit for rotating IPs.

PROXYHAT_FILTER

AI IP-quality filter: medium (default), high, high-speed-fast, medium-speed-fast, or none.

PROXY_URL

Any generic http(s)://user:pass@host:port proxy (alternative to the above).

HatFetch connects to the ProxyHat HTTP gateway (gate.proxyhat.com:8080) and builds the targeting username for you. Prefer full API-driven provisioning (minting connection URLs via POST /v1/proxy-descriptors)? Set PROXY_URL to the minted URL instead.

Verify your setup

Run the built-in self-test to confirm your install and proxy credentials work end-to-end โ€” it compares your direct IP against the proxied exit IP and checks rotation:

PROXYHAT_API_KEY=your-key npx -y hatfetch --selftest
  โœ“ Direct connection works โ€” your IP is 203.0.113.5
  โœ“ Proxy resolved โ€” ProxyHat residential (via API key)
  โœ“ Traffic is routed through the proxy โ€” exit IP is 183.88.219.209 (not your 203.0.113.5)
  โœ“ IP rotation works โ€” second request exited from 73.149.15.4
  โœ“ Scrape pipeline works โ€” fetched and parsed example.com

Other commands: hatfetch --version, hatfetch --help.

How it works

HatFetch escalates from cheap to powerful, only paying for what a page needs:

  1. HTTP fetch with a realistic User-Agent (direct or through your proxy). Detects blocks โ€” anti-bot status codes (403/429/503) and challenge/block-page signatures from the major vendors (Cloudflare, DataDome, PerimeterX, Incapsula, Akamai) โ€” and retries through a fresh residential IP.

  2. Auto-escalate to the browser when the page is an empty JS shell, or was blocked/reset. A real Patchright Chromium (patched to defeat headless fingerprinting) loads the page through the residential proxy, waits for the network to settle, and scrolls to trigger lazy content.

  3. Extract the main content with Mozilla Readability and convert to Markdown with Turndown.

  4. Be honest โ€” if even the browser lands on a challenge/block page, HatFetch returns an actionable error instead of passing the block page off as content.

Safety: a built-in SSRF guard refuses internal/loopback/metadata addresses, and tool output is size-capped so a huge page can't blow your context window.

Development

npm install
npm run build      # compile to dist/
npm test           # vitest
npm run dev        # run from source (tsx)

Roadmap

  • search tool (query โ†’ results โ†’ scrape)

  • Structured extraction (CSS / schema)

  • Page actions (click, fill, login flows)

  • Optional CAPTCHA-solver hook for the hardest targets

  • Python edition

License

MIT ยฉ ProxyHat

Available Tools

3 tools
crawlCrawl a website to MarkdownA

Breadth-first crawl a site starting from a URL and return each page as clean Markdown. Follows in-domain links up to a depth/page limit. Same proxy and block-handling as scrape. Use to ingest a docs site or section of a site.

ParametersJSON Schema
NameRequiredDescriptionDefault
urlYesAbsolute http(s) URL to start crawling from.
renderNoRender mode per page (see scrape). Default 'auto'. 'browser' is slower but handles JS sites.
maxDepthNoLink depth from the seed. Default 2.
maxPagesNoMax pages to fetch. Default 20.
sameDomainNoOnly follow links on the seed's host. Default true.

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Describes algorithm (breadth-first), restrictions (in-domain links, depth/page limit), and behavior relative to sibling 'scrape' (same proxy/block-handling). No annotations were provided, so description carries full burden; it covers core behavioral traits without contradiction.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, each adding value. Front-loaded with purpose, followed by behavioral details and usage guidance. Zero wasted words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a crawl tool with 5 parameters and no output schema, description covers algorithm, constraints, and expected result (Markdown). Lacks explicit mention of return format details, but the purpose is clear enough.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3. Description adds context like 'breadth-first' and 'same proxy/block-handling as scrape' but does not elaborate on individual parameters beyond schema descriptions.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description clearly states 'Breadth-first crawl a site starting from a URL and return each page as clean Markdown.' The verb (crawl) and resource (website, Markdown) are specific, and the tool is distinguished from siblings 'scrape' and 'screenshot' by being a bulk crawl.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly says 'Use to ingest a docs site or section of a site.' and mentions equivalence to 'scrape' in proxy/block-handling. However, it does not specify when not to use or list alternatives explicitly.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

scrapeScrape a web page to MarkdownA

Fetch a single URL and return its content as clean, LLM-ready Markdown. Renders JavaScript sites and gets past bot detection automatically: tries a fast HTTP fetch, then escalates to a real stealth browser through residential proxies when a page is an empty JS app or is blocked (Cloudflare, DataDome, 403/429). Use for docs, articles, product pages, SPAs, or any single page.

ParametersJSON Schema
NameRequiredDescriptionDefault
urlYesAbsolute http(s) URL to fetch.
renderNoHow to fetch. 'auto' (default): HTTP first, escalate to a real browser if needed. 'http': fast, HTTP only. 'browser': force full JS rendering + stealth fingerprint.
onlyMainContentNoExtract just the main article/content, stripping nav/ads/footer. Default true.

TDQS

A4.4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Discloses automatic escalation from HTTP to browser with stealth proxies for JS rendering and bot detection bypass. No annotations present, so description carries full burden; missing potential failure or rate limit info.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences front-loaded with main purpose, no fluff. Every sentence adds necessary context.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Covers purpose, usage, behavior, and parameter details adequately for a simple fetch tool without output schema. Could mention error handling or timeouts.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, baseline 3. Description adds value by explaining 'render' enum behaviors (auto, http, browser) and 'onlyMainContent' default, going beyond schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Clearly states the tool fetches a single URL and returns LLM-ready Markdown. Distinguishes from siblings 'crawl' and 'screenshot' by specifying single-page focus and output format.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly says 'Use for docs, articles, product pages, SPAs, or any single page,' providing clear context. Lacks explicit exclusions but effectively implies appropriate use cases.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

screenshotScreenshot a web pageA

Render a URL in a real browser (through residential proxies + stealth) and return a PNG screenshot of the page. Use to see a page visually or capture JS-rendered content.

ParametersJSON Schema
NameRequiredDescriptionDefault
urlYesAbsolute http(s) URL to screenshot.

TDQS

A3.7/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Describes behavioral traits such as using a real browser, residential proxies, and stealth, which adds value beyond the schema. However, no annotations are provided and it does not disclose limitations, error handling, or rate limits.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, front-loaded information, no wasted words. Every sentence adds value.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Covers the main purpose and output format (PNG) but lacks details on screenshot dimensions, error behavior, or prerequisites. With no output schema, more completeness would be beneficial.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The only parameter 'url' is well-described in the schema. The description adds that the output is a PNG screenshot from a browser context, but does not add substantial new meaning beyond the schema. Baseline is 3 for 100% coverage.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

Clearly states it renders a URL in a real browser and returns a PNG screenshot. Includes specifics like residential proxies and stealth. However, does not explicitly differentiate from sibling tools (crawl, scrape) but the action is distinct.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides clear context for use: 'to see a page visually or capture JS-rendered content.' Lacks explicit when-not or alternatives, but the context is sufficient for basic guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.

  1. 3 tool updatesv0.5.1
    • First observedcrawl
    • First observedscrape
    • First observedscreenshot

TDQS

A4.1/5.0
Disambiguation5/5

Each tool has a distinct purpose: crawl for multi-page ingestion, scrape for single-page content, and screenshot for visual capture. No overlap in functionality.

Naming Consistency5/5

All tool names are simple verbs (crawl, scrape, screenshot), following a consistent pattern without mixing styles or conventions.

Tool Count4/5

Three tools is a minimal but reasonable set for a web fetching server. While it covers core needs, there is room for additional utilities like status checking or depth control.

Completeness4/5

The server covers essential operations for fetching web content (single, multi, visual). Minor gaps exist, such as options for crawl depth or page metadata, but agents can accomplish most tasks.

Maintenance

ActivitySlowing
ResponsivenessSyncing

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Connectors

Related MCP Servers

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/ProxyHatCom/HatFetch'

If you have feedback or need assistance with the MCP directory API, please join our Discord server