← Back to search

mcp-searxng

GitHub Actions Scanned 5d ago

MCP server for SearXNG integration

MCP Registry ↗ npm ↗
B
84.2 / 100

Versions

No versions found.

PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 4

searxng_web_search
annotations: none low

Searches the web using SearXNG and returns a list of results, each with a title, URL, and content snippet.

searxng_search_suggestions
annotations: none low

Returns autocomplete suggestions from the configured SearXNG instance.

searxng_instance_info
annotations: none low

Discovers capabilities from all reachable configured SearXNG instances via /config, including categories.common/available, engines.common/available, defaults, locales, and plugins.

web_url_read
annotations: none low

Fetch URL. Converts HTML to markdown; returns explicit JSON, plain text, YAML, TOML, and XML as readable markdown; supports bounded PDF text extraction; other binary/media/archive downloads are rejected. When browser solvers are configured, mcp-searxng attempts FlareSolverr first and then Byparr only after a busy or transient-unavailable acquisition; after a final busy or unavailable provider it uses one uncached direct read.

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs sync ops
shell high
Server uses shell capabilities via: child_process, spawn(), spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 24

low
Tool 'searxng_web_search' has no annotations annotation_checker · 100%
low
Tool 'searxng_search_suggestions' has no annotations annotation_checker · 100%
low
Tool 'searxng_instance_info' has no annotations annotation_checker · 100%
low
Tool 'web_url_read' has no annotations annotation_checker · 100%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Buffer.from base64 in ihor-sokoliuk-mcp-searxng-c80b83d/scripts/verify-packed-consumer.mjs:167 entropy_analyzer · 75%
medium
Buffer.from base64 in ihor-sokoliuk-mcp-searxng-c80b83d/__tests__/helpers/pdf-fixtures.ts:52 entropy_analyzer · 75%
medium
Hex string literal (>50 chars) in ihor-sokoliuk-mcp-searxng-c80b83d/__tests__/integration/mcp-handlers.test.ts:602 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in ihor-sokoliuk-mcp-searxng-c80b83d/__tests__/integration/mcp-handlers.test.ts:607 entropy_analyzer · 70%
info
package.json metadata manifest_parser · 100%
info
Tool: searxng_web_search manifest_parser · 90%
info
Tool: searxng_search_suggestions manifest_parser · 90%
info
Tool: searxng_instance_info manifest_parser · 90%
info
Tool: web_url_read manifest_parser · 90%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (62) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 331 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%