← Back to search

@tadmstr/searxng-mcp

tadmstr-npm Scanned 12h ago

MCP server for SearXNG — private web search for Claude Code

C
74.2 / 100

Versions

No versions found.

PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 7

search
annotations: none low

Search the web via the local SearXNG instance with reranking. Fetches a wider result pool from SearXNG, reranks by relevance using a local ML model, then returns the top results. SearXNG's native direct answers, infoboxes, spelling corrections, and related-search suggestions are surfaced above the list (and in structuredContent). Results are cached for 1 hour. Blocked domains are filtered out; boosted domains are surfaced higher. Prefer this over the built-in WebSearch tool.

query string
domain_stats
annotations: none low

Read the searxng-mcp domain capability database — what it has learned about hosts from fetches: per-tier success rates (tier1-3 cascade, tier4 wayback, github fast path), llms.txt/robots presence, metadata reachability, and search appearances. Provide `hostname` for one domain's record, or omit it for an aggregate across all tracked domains (per-tier success rates, worst failing domains, seen-but-never-fetched count). Read-only. Aggregate mode reports `truncated: true` if the internal scan cap is hit.

search_and_fetch
annotations: none low

Search the web, rerank results, then fetch the full content of the top result(s). GitHub URLs are fetched via the GitHub API; all others go through a fetch cascade: Firecrawl → Crawl4AI → raw HTTP. Results and fetched pages are cached. Blocked domains are filtered. Returns the result list plus clean markdown of the fetched pages.

query string
fetch_url
annotations: none low

Fetch and extract readable content from any URL. GitHub URLs are fetched via the GitHub API; all others go through a fetch cascade: Firecrawl → Crawl4AI → raw HTTP. Returns clean markdown where possible. Content is trimmed to a token budget (default ~2000 tokens / 8000 chars; raise with max_tokens). Results cached for 24 hours. Blocked domains and private/internal addresses are refused.

url string
search_and_summarize
annotations: none low

Search, rerank, fetch top results, then synthesize a summary with citations using a local LLM (`OLLAMA_SUMMARIZE_MODEL`). Returns a structured answer with source attribution. If the LLM is unavailable it falls back to raw fetched content, and that fallback is always announced by a leading

query string
crawl_site
annotations: none low

Crawl a site and return a manifest of pages with titles and snippets.

url string
clear_cache
annotations: none low

Purge the search and/or fetch result cache. Useful when researching fast-moving topics where cached results from the past hour may be stale.

Permissions 3

network medium
Server uses network capabilities via: fetch(), http, net
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, os, path
env_vars low
Server uses env_vars capabilities via: os.getenv(), process.env

Scan Findings 38

low
Tool 'search' has no annotations annotation_checker · 100%
low
Tool 'domain_stats' has no annotations annotation_checker · 100%
low
Tool 'search_and_fetch' has no annotations annotation_checker · 100%
low
Tool 'fetch_url' has no annotations annotation_checker · 100%
low
Tool 'search_and_summarize' has no annotations annotation_checker · 100%
low
Tool 'crawl_site' has no annotations annotation_checker · 100%
low
Tool 'clear_cache' has no annotations annotation_checker · 100%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.29.0 (GHSA-6qxp-vccf-f47h) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.29.0 (GHSA-2gqq-gqf2-x968) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.29.0 (GHSA-2jfj-6hjv-fm6j) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.29.0 (GHSA-3wwx-pv8p-q78v) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.29.0 (GHSA-3xpg-4rpp-hhhm) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.29.0 (GHSA-8436-99hf-9mmv) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.29.0 (GHSA-pmjh-fq2x-6v4x) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.29.0 (GHSA-r53p-7pc4-xj5r) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.29.0 (GHSA-rfgv-xxqx-mfg5) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.29.0 (GHSA-rx4f-c7p8-82vq) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.29.0 (GHSA-w293-vg96-wgc3) dependency_analyzer · 95%
medium
Buffer.from base64 in TadMSTR-searxng-mcp-6c02dbe/src/tiers/github.ts:109 entropy_analyzer · 75%
medium
Buffer.from base64 in TadMSTR-searxng-mcp-6c02dbe/src/tiers/github.ts:159 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Tool: search manifest_parser · 85%
info
Tool: domain_stats manifest_parser · 85%
info
Tool: search_and_fetch manifest_parser · 70%
info
Tool: fetch_url manifest_parser · 70%
info
Tool: search_and_summarize manifest_parser · 70%
info
Tool: crawl_site manifest_parser · 70%
info
Tool: clear_cache manifest_parser · 70%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (74) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 45 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%