fizzgig__fetch_url_scanner
detects third-party apis called via fetch() urls (no installed sdk). emits architecture_facts for stack-map.
Scans concatenated source for fetch() URLs and bare hostnames cited inside fetch / axios / SDK base_url config, classifies them against a registry of 70+ platforms across 12 categories (auth providers, payments, AI APIs, cloud, communications, observability, data + search, maps + geo, code hosting, UK public data, web tools + scrapers, commerce + property), and emits architecture_facts in the exact shape stack-map ingests. Re-running stack-map after this scan lights up the integrated stack on the map. Closes the "packaged-only stack" gap dep-audit + stack-map cannot see — exactly the integrations most likely to break (rate limits, status, auth keys).
caught a policy that would have leaked every user's comments. shipped a fix in 4 minutes.
first tool i installed. it's the one that pays for itself.
works great. one false positive on a join table — easy to ignore.
{
"fizzgig": {
"url": "https://mcp.fizzgig.ai",
"tools": ["fetch_url_scanner"]
}
}