Simple PubMedSAFE
MCP server for searching and querying PubMed medical papers/research database
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://mseep.ai/app/andybrandt-mcp-simple-pubmed)
[](https://archestra.ai/mcp-catalog/andybrandt__mcp-simple-pubmed) [](https://smithery.ai/server/mcp-simple-pubmed)
An MCP server that provides access to PubMed articles through the Entrez API.
Features
Tools
- Search PubMed - Search the database using keywords, MeSH terms, author names, date ranges, and Boolean operators
- Get Full Text - Download full text when available (for open access articles in PubMed Central)
- Access Abstracts - Retrieve article abstracts and metadata via resource URIs
Prompts (New in v0.1.14)
MCP Prompts help you construct effective PubMed searches:
- Systematic Review Search - Generate comprehensive search strategies with MeSH terms, synonyms, and date filters for systematic reviews
- PICO Search - Build clinical question searches using the PICO framework (Population, Intervention, Comparison, Outcome)
- Author Search - Find all publications by a specific author with proper name formatting
These prompts guide the AI to build optimized PubMed queries, making it easier to conduct thorough literature searches.
Notes
Please note that the tool returns XML-ized version of full text. It is however more useful for AIs than a "human readable" text would have been as it gives them additional information about document's structure. At least, this is what Claude 3.5 Sonnet said he prefers.
Please also note that inability of this tool and possibly other tools to deliver a paper's full text may not be due to the fact that it is not
104f6e75bca4OBSERVED · 2026-10-06Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add mcp-simple-pubmed --env PUBMED_API_KEY=${PUBMED_API_KEY} -- uvx mcp-simple-pubmed{
"mcpServers": {
"mcp-simple-pubmed": {
"command": "uvx",
"args": [
"mcp-simple-pubmed"
],
"env": {
"PUBMED_API_KEY": "${PUBMED_API_KEY}"
}
}
}
}Exposed tools (2)
2 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
get_paper_fulltext | read | Get full text of a PubMed article using its ID. |
search_pubmed | read | Search PubMed for medical and life sciences research articles. |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (0)
No findings outside the package's declared scope.
Gates applied: no_behavioural_pass.
104f6e75bca4full audit observations/trust-audit/mcp-server/andybrandt__simple-pubmed.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-06 | 104f6e75bca4 | SAFE | B | 89 | first audit |
Questions
What is the Simple PubMed MCP server?
MCP server for searching and querying PubMed medical papers/research database
What tools does Simple PubMed expose?
2 in total: 2 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Simple PubMed safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does Simple PubMed need?
It reads PUBMED_API_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How current is this page?
The grade is for one exact copy of the source (104f6e75bca4), read on 2026-10-06. The repository is watched and re-audited when it changes.