Firecrawl

PARTIAL consensus from 1 PASS, 2 PARTIAL.

The API introduction requires bearer authentication, while the product introduction and Scrape guide document the same v2 scrape request without a key. The authenticated path is complete and unambiguous (base URL https://api.firecrawl.dev, Bearer fc- key, POST /v2/scrape, formats ["markdown", "html"]), but the API reference states a key is required on every request while the Scrape feature page, the Python SDK page, the Build with AI page, and the Rate Limits page all document a working keyless REST scrape. The main page offers a keyless cURL example immediately; adding an API key for higher limits is clearly explained one sentence later.

PASS consensus from 2 PASS, 1 PARTIAL.

Billing and Rate Limits provide monthly credits, endpoint RPM, concurrent-browser caps, queue caps, and Browser Sandbox RPM with matching plan figures. Per-plan requests per minute, concurrent browsers, max queued jobs, and browser sandbox limits are all exact and the concurrency figures agree between Rate Limits and Billing, but the keyless daily request and credit caps are described without any numbers and the keyless MCP page points back to that same page for the value. A single page lists every plan's per-endpoint RPM, concurrent browsers, and max queued jobs in two readable tables with no contradictions across pages.

PASS consensus from 3 PASS.

The Errors page distinguishes both 429 messages, gives a remedy for each, explains Retry-After, and includes backoff code. The error catalog gives both 429 conditions separate rows with distinct causes and remedies (Rate limit exceeded says back off and retry after Retry-After; Concurrency limit reached says wait for in-flight jobs, lower concurrency, or upgrade), plus a runnable backoff snippet in Python, Node, and cURL. Both 429 conditions (rate-limit exceeded and concurrency limit reached) are documented with distinct error messages and remedies, and the errors page includes a copy-pasteable exponential-backoff snippet.

PARTIAL consensus from 1 PASS, 2 PARTIAL.

The configuration, payload, and HMAC steps are complete, but Overview omits failed from Crawl while the Crawl page lists crawl.failed. The four webhook pages cover the full loop end to end: the webhook object fields with a crawl cURL example, the crawl.started/crawl.page/crawl.completed payloads, the sha256= prefixed X-Firecrawl-Signature with raw-body HMAC verification in Node and Python using timing-safe comparison, where the secret lives, the 10-second timeout with a 1/5/15 minute retry ladder, and a troubleshooting page naming the parsed-body mistake. Webhook configuration and lifecycle events are fully documented on the main webhooks page, but that page contains no link to the security page, no mention of X-Firecrawl-Signature, and no mention of HMAC verification, forcing an agent to discover the security page through search or prior knowledge.

PASS consensus from 3 PASS.

The Python quickstart installs firecrawl-py, constructs Firecrawl, and calls app.scrape(), matching the v2 API reference's SDK form. The quickstart, the SDK reference, and the API reference Python tab agree on pip install firecrawl-py, from firecrawl import Firecrawl, and firecrawl.scrape(url) against the current v2 API, so the minimum scrape example matches the current API form. The official Python SDK (firecrawl-py) and a minimal scrape example are documented on both the dedicated SDK page and the advanced scraping guide, using the current v2/scrape endpoint.