Atlas / MCP servers / jibaoproxyofficial-pixel / serpjet

serpjetSAFE

mcp/jibaoproxyofficial-pixel/serpjet-mcp

MCP server for SERPJET - Google Search API for AI agents. 1,000 free searches/month, no card.

Verdict
SAFE
Grade
B
Trust score
89 /100
Exposed tools
1 1r · 0w · 0d
Transport
stdio
License
—
Stars
0
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

Give your AI agent Google Search. 1,000 free searches/month — recurring, no credit card.

An MCP (Model Context Protocol) server for SERPJET — a Google SERP API that returns clean, structured JSON for 10 result types: web search, images, videos, news, shopping (with prices), maps, places, scholar, patents, and autocomplete.

Why SERPJET

  • 1,000 searches/month free, forever — quota resets monthly (not a one-time trial credit)
  • No credit card required — sign up with just an email
  • 10 result types in one tool, including Google Shopping with price fields
  • Country targeting via gl parameter (us, de, jp, ...)
  • Paid plans from $5, billed per successful request only

Quick start

  1. Get a free API key at serpjet.io/signup
  2. Add to your MCP client config:

Claude Desktop / Claude Code

{
"mcpServers": {
"serpjet": {
"command": "npx",
"args": ["-y", "serpjet-mcp"],
"env": {
"SERPJET_API_KEY": "sj_your_key_here"
}
}
}
}

Cursor / Windsurf

Same config shape — add the serpjet entry to your MCP settings with SERPJET_API_KEY in env.

Tool

google_search

Returns the raw SERPJET JSON response. Example — ask your agent:

"What does an Anker 20000mAh power bank cost right now in the US?"

The agent calls google_search with {"q": "anker 20000mah power bank", "type": "shopping", "gl": "us"} and gets back 40 offers with live prices and sellers.

Environment var

Read from source at commit 431b6aeea05bOBSERVED · 2026-10-12
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code (npm)
claude mcp add serpjet-mcp --env SERPJET_API_KEY=${SERPJET_API_KEY} -- npx -y [email protected]
03

Exposed tools (1)

1 read · 0 write · 0 destructive.

ToolRiskDescription
google_searchread
04

Trust audit

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codePASS
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
declared (1 observation(s))
Shell
none-observed
Dependencies
not all pinned
Secrets in source
none-found

Findings (2)

LOWInventory / provenance · inv.no_license · CWE-1104
Why it matters. no LICENSE file and no repo licence
Fix. add a licence
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
package.json
@modelcontextprotocol/sdk, zod, typescript, @types/node
Why it matters. 4 dependency range(s) float
Fix. pin exact versions or ship a lockfile

Gates applied: no_behavioural_pass, no_license.

Audited 2026-10-12 · audit v0.4.1 · source sha 431b6aeea05bfull audit observations/trust-audit/mcp-server/jibaoproxyofficial-pixel__serpjet-mcp.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-12431b6aeea05bSAFEB89first audit
06

Questions

What is the serpjet MCP server?

MCP server for SERPJET - Google Search API for AI agents. 1,000 free searches/month, no card.

What tools does serpjet expose?

1 in total: 1 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is serpjet safe to connect to an agent?

The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.

What credentials does serpjet need?

It reads SERPJET_API_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.

How does serpjet run?

It speaks stdio, so it runs as a local process your client starts. It is published on npm as serpjet-mcp at 0.1.1.

How current is this page?

The grade is for one exact copy of the source (431b6aeea05b), read on 2026-10-12. The repository is watched and re-audited when it changes.

Advertisement