Atlas / MCP servers / nickclyde / DuckDuckGo Search

DuckDuckGo SearchSAFE

Name: DuckDuckGo Search
Author: nickclyde

mcp/nickclyde/duckduckgo-search-3

MCP server by nickclyde · Audited 2026-09-24

A Model Context Protocol (MCP) server that provides web search capabilities through DuckDuckGo, with additional features for content fetching and parsing.

Verdict

SAFE

Grade

Trust score

89 /100

Exposed tools

3 3r · 0w · 0d

Transport

stdio · streamable-http

License

MIT

Stars

1,503

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://pypi.org/project/duckduckgo-mcp-server/) [](https://pypi.org/project/duckduckgo-mcp-server/) [](https://pypi.org/project/duckduckgo-mcp-server/)

A Model Context Protocol (MCP) server that provides web search capabilities through DuckDuckGo, with additional features for content fetching and parsing.

Quick Start

uvx duckduckgo-mcp-server

Features

Web Search: Search DuckDuckGo with advanced rate limiting and result formatting
Content Fetching: Retrieve and parse webpage content with intelligent text extraction
Long URL Shortening: Over-long result URLs become short ref:// tokens that fetch_content accepts directly, saving context
Rate Limiting: Built-in protection against rate limits for both search and content fetching
Error Handling: Comprehensive error handling and logging
LLM-Friendly Output: Results formatted specifically for large language model consumption

Installation

Install from PyPI using uv:

uv pip install duckduckgo-mcp-server

Usage

Running with Claude Desktop

Download Claude Desktop
Create or edit your Claude Desktop configuration:
On macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
On Windows: %APPDATA%\Claude\claude_desktop_config.json

Add the following configuration:

Basic Configuration (No SafeSearch, No Default Region):

{
"mcpServers": {
"ddg-search": {
"command": "uvx",
"args": ["duckduckgo-mcp-server"]
}
}
}

With SafeSearch and Region Configuration:

{
"mcpServers": {
"ddg-search": {
"command": "uvx",
"args": ["duckdu

Read from source at commit 1ca9b5a1444bOBSERVED · 2026-09-24

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code

claude mcp add duckduckgo-mcp-server -- uvx duckduckgo-mcp-server

claude-desktop

{
  "mcpServers": {
    "duckduckgo-mcp-server": {
      "command": "uvx",
      "args": [
        "duckduckgo-mcp-server"
      ]
    }
  }
}

Exposed tools (3)

3 read · 0 write · 0 destructive.

Tool	Risk	Description
`expand_link`	read	Expand a shortened ref://<id> link token from search results back into the full URL. Search results replace very long URLs with short ref:// tokens to save space. fetch_content accepts those tokens directly, so only call this when you need the real URL, for example to show or cite a link to the user
`fetch_content`	read	Fetch and extract the main text content from a webpage. Strips out navigation, headers, footers, scripts, and styles to return clean readable text. Use this after searching to read the full content of a specific result. Supports pagination for long pages via start_index and max_length. Repeated or p
`search`	read	Search the web using DuckDuckGo. Returns a list of results with titles, URLs, and snippets. Use this to find current information, research topics, or locate specific websites. For best results, use specific and descriptive search queries.

Trust audit

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	PASS
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: none-observed
Network: declared (10 observation(s))
Shell: none-observed
Dependencies: pinned
Secrets in source: none-found

Findings (10)

LOWNetwork egress · net.metadata_ip · CWE-200, CWE-319

README.md:287

> loopback, private (RFC1918), link-local (including the `169.254.169.254` cloud

Why it matters. cloud metadata endpoint: the classic SSRF credential grab

LOWNetwork egress · net.metadata_ip · CWE-200, CWE-319

SECURITY.md:34

`169.254.169.254` cloud metadata endpoint), reserved, multicast, and unspecified

Why it matters. cloud metadata endpoint: the classic SSRF credential grab

LOWNetwork egress · net.metadata_ip · CWE-200, CWE-319

src/duckduckgo_mcp_server/test_server.py:1286

self._assert_blocked("http://169.254.169.254/latest/meta-data/")

Why it matters. cloud metadata endpoint: the classic SSRF credential grab

LOWNetwork egress · net.metadata_ip · CWE-200, CWE-319

src/duckduckgo_mcp_server/test_server.py:1332

fetcher.fetch_and_parse("http://169.254.169.254/latest/meta-data/", DummyCtx())

Why it matters. cloud metadata endpoint: the classic SSRF credential grab