Firecrawl and Dome

1. 01

   Add the Firecrawl MCP server

   One Firecrawl API key serves every agent. Dome sends it as a Bearer token, and the Gateway lists Firecrawl's tools once the server is added.

   $ dome tools add --name firecrawl \
     --url https://mcp.firecrawl.dev/v2/mcp \
     --auth-method api-key \
     --credential-type shared \
     --authorization "Bearer $FIRECRAWL_API_KEY" \
     --gateway prod-gateway

2. 02

   Block personal data in arguments

   The filter runs on requests. A match stops the call before Firecrawl fetches anything.

   $ cat > query-leak.json <<'EOF'
   $ {"json":{"components":[{"fieldActions":[{
     "matcher":{"contentMatchers":[{"ssn":{}},{"creditCard":{"requireLuhn":true}},{"email":{}}]},
     "action":"FILTER_ACTION_BLOCK"}]}]}}
   $ EOF
   $ dome guards filters create query-leak --config-from query-leak.json
   $ dome tools guards filters set firecrawl --direction request --filters query-leak

3. 03

   Apply the rules

   The site list is scoped to filings-reader. Simulate a scrape on and off the list, then deploy.

   $ dome rules apply firecrawl-sites.cedar --agent filings-reader --name firecrawl-sites

Commands and rules tested against a Dome workspace on October 1, 2026. For anything about Firecrawl itself, see Firecrawl's documentation.

permit (principal, action == Dome::Action::"mcp:call", resource is Dome::MCPTool)
when {
  resource.connection_name == "firecrawl" &&
  ["firecrawl_search", "firecrawl_scrape", "firecrawl_map"].contains(resource.tool_name)
};
 
forbid (principal, action == Dome::Action::"mcp:call", resource is Dome::MCPTool)
when {
  resource.connection_name == "firecrawl" &&
  !["firecrawl_search", "firecrawl_scrape", "firecrawl_map"].contains(resource.tool_name)
};
 
forbid (principal, action == Dome::Action::"mcp:call", resource is Dome::MCPTool)
when {
  resource.connection_name == "firecrawl" &&
  resource.tool_name == "firecrawl_search" &&
  resource has arguments &&
  resource.arguments has query &&
  resource.arguments.query like "*Halcyon*"
};
 
forbid (principal, action == Dome::Action::"mcp:call", resource is Dome::MCPTool)
when {
  resource.connection_name == "firecrawl" &&
  ["firecrawl_scrape", "firecrawl_map"].contains(resource.tool_name) &&
  !(resource has arguments &&
    resource.arguments has url &&
    (resource.arguments.url like "https://docs.northwind-supply.com/*" ||
     resource.arguments.url like "https://www.sec.gov/*"))
};