Search (npm) MCP Server

search-mcp npm v0.1.0

Published by an unidentified publisher — no publish provenance and no public repository, so the publisher could not be verified and the source cannot be independently located.

Universal MCP server providing Brave Search tools (web, local, rich)

View on npm ↗ Raw report (JSON) ↗

Trust grade

95/100

Last scanned 2026-09-07 get badge →

Trust

A · 95/100

Adoption risk for you: the threat score, then adjusted down for blast radius, publisher verification and how much the scan could see. Deterministic; every point is auditable.

Capability

Moderate

Blast radius if it went rogue — what the server’s tools could reach. Independent of trust.

Coverage

Source

How much the scan could actually inspect. Shallow coverage is stated, never hidden.

A Why this grade threat 100 − adoption risk = 95/100

The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.

1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:

The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.

2. Client adoption risk — 100 − 5 = 95. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:

Points	Adoption-risk factor
−3	capability blast radius (moderate) — client exposure if the model is manipulated
−2	publisher verification (unlinked) — no provenance/repo link, but the shipped source was fully read

Capability observations and info notes are shown under Findings but never scored. Open any row's finding below for the file, line and evidence behind a deduction.

Findings 0

✓ No findings. The scan raised nothing on this surface — see Coverage for how deep it could look.

Tools 4

Each tool and what it can reach — statically extracted from the published source.

local_descriptionsingests untrusted input
local_poisingests untrusted input
rich_fetchingests untrusted input
web_searchingests untrusted input

What this scan could not see

Tools were statically extracted from the published source (4 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".

Versions 1

Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.

Version	Score	Findings	Engine	Scanned
`v0.1.0` latest	A 95/100	0	1.13.0	2026-09-07

Embed this score

Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.

Markdown (GitHub README)

[![MCP Trust Score](https://mcptrustchecker.com/registry/search-mcp/badge.svg)](https://mcptrustchecker.com/registry/search-mcp)

HTML

<a href="https://mcptrustchecker.com/registry/search-mcp"><img src="https://mcptrustchecker.com/registry/search-mcp/badge.svg" alt="MCP Trust Score" height="20"></a>

Prefer shields.io styling? Point it at https://mcptrustchecker.com/registry/search-mcp/badge.json via https://img.shields.io/endpoint?url=…

Verify this score yourself

The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.

npx mcptrustchecker scan search-mcp --online

Use the free API → How scoring works

Other implementations of Search 14

Independent packages implementing the same tool, scanned with the same engine. Compare all 15 side by side →

Search (fractalizer) Source verified npm

@fractalizer/mcp-search

Advanced tool search engine with compile-time indexing and 5 search strategies

Web, Search & Scraping Score 100/100 0 findings 52/wk Cap. Minimal

Search (skyphusion) Source verified npm

@skyphusion/search-mcp

Bearer-gated MCP server and streaming query Worker over Cloudflare AI Search, plus a git-to-R2 corpus sync toolkit.

Web, Search & Scraping Score 100/100 2 findings 27/wk Cap. Minimal

Mcp (mcp.infobip.com) Remote

https://mcp.infobip.com/search

Infobip MCP server for omnichannel communication and messaging. SMS, RCS, WhatsApp, Viber and more.

Communication & Collaboration Score 100/100 0 findings Cap. Minimal

Jan Browser Automation (janhq) npm

search-mcp-server

Browser automation via the Jan Browser extension, with tools for web navigation, interaction, and search.

Browser Automation Score 99/100 0 findings 2.8k/wk Cap. Minimal

Search (krzysztofkucmierz) PyPI

search-mcp-server

A Model Context Protocol (MCP) search server

Web, Search & Scraping Score 99/100 0 findings Cap. Minimal

Search (abhishekguptain) npm

@abhishekguptain/mcp-search-server

Multi Provider Search MCP supporting Google, Tavily, DuckDuckGo, and Brave providers.

Web, Search & Scraping Score 98/100 0 findings 17/wk Cap. Minimal

More in Browser Automation

Agentql Source verified npm

agentql-mcp

Model Context Protocol (MCP) server that integrates AgentQL data extraction capabilities.

Browser Automation Score 100/100 0 findings 157/wk Cap. Minimal

APIScreenshot Remote

https://apiscreenshot.com/mcp

Screenshot any URL or HTML as PNG/JPEG/WebP from your AI agent. Full-page, clean, no install.

Browser Automation Score 100/100 0 findings Cap. Minimal

Aria51 Source verified npm

@aria51/mcp

MCP server for aria51 accessibility scanner

Browser Automation Score 100/100 0 findings 21/wk Cap. Minimal

Bifrost Source verified npm

@businessmaps/bifrost

Bridge any browser web app to Claude Code via MCP

Browser Automation Score 100/100 0 findings 16/wk Cap. Minimal

Browserbase Official npm

@browserbasehq/mcp

Browserbase’s official MCP server: cloud headless browsers for agents, with sessions and screenshots.

Browser Automation Score 100/100 0 findings 5.3k/wk Cap. Minimal

Browserbase Official npm

@browserbasehq/mcp-server-browserbase

MCP server for AI web browser automation using Browserbase and Stagehand

Browser Automation Score 100/100 0 findings 2.9k/wk Cap. Minimal