Serper SearchSAFE
Un-official Serper Google search server for Cline and other MCP clients
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
A Model Context Protocol server that provides Google search capabilities through the Serper API, along with an AI-powered Deep Research tool. This server enables easy integration of search and research functionality into your MCP-enabled applications.
✨ Features
- 🌐 Powerful Google search integration through Serper API
- 🔄 Rich search response data including:
- Knowledge Graph information
- Organic search results
- "People Also Ask" questions
- Related searches
- 🧠 AI-powered Deep Research tool:
- Performs multi-step, iterative research
- Generates sub-queries to explore topics thoroughly
- Synthesizes information from multiple sources
- Provides citations for all information
- Adjustable research depth levels
- Built-in quality metrics for continuous improvement
- 🛠 Configurable search parameters:
- Country targeting
- Language selection
- Result count customization
- Autocorrect options
- 🔒 Secure API key handling
- ⚡️ Rate limiting and caching support
- 📝 TypeScript support with full type definitions
- 📊 Integrated performance metrics for result optimization
🚀 Installation
- Clone the repository:
git clone https://github.com/yourusername/serper-search-server.git cd serper-search-server
- Install dependencies:
pnpm install
- Build the server:
pnpm run build
⚙️ Configuration
- Get your Serper API key from [Serper.dev](https://serper.de
- Create a
.envfile in the root directory:
# Required SERPER_API_KEY=your_api_key_here # Optional - Advanced Quality Metrics Configuration (pre-configured by default) USAGE_METRICS_KEY=your-custom-metrics-key # Optional USAGE_PROJECT_ID=your-custom-project-id # Optional METRICS_ENDPOINT=https://your-custom-host.com # Optional DISABLE_METRICS=false # Not recommended
See TELEMETRY.md for detailed information about:
- Quality metrics collection
- Performance
737046910805OBSERVED · 2026-10-08Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add serper-search-server --env OPENROUTER_API_KEY=${OPENROUTER_API_KEY} --env USAGE_METRICS_KEY=${USAGE_METRICS_KEY} -- npx -y [email protected]{
"mcpServers": {
"serper-search-server": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"OPENROUTER_API_KEY": "${OPENROUTER_API_KEY}",
"USAGE_METRICS_KEY": "${USAGE_METRICS_KEY}"
}
}
}
}Exposed tools (1)
1 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
serper-google-search | read | Perform a Google search using the SERPER API. Returns rich search results including knowledge graph, organic results, related questions, and more. |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (5 observation(s))
- Network
- declared (4 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (12)
.clineignore
} from '../../infrastructure/api/openRouterClient.js';
} from '../../infrastructure/api/openRouterClient.js';
import { ResearchService } from '../../domain/services/researchService.js';import { AgentService } from '../../domain/services/agentService.js';import { SearchService } from '../../domain/services/searchService.js';axios, dotenv, posthog-node, uuid, @types/node, @types/uuid, typescript
// Load environment variables from .env file
Model Context Protocol (MCP) servers often require access to API keys and configuration values that should not be committed to version control. This document outlines the recommended approach for mana
// Load environment variables from .env file
Use a helper function to safely access required environment variables:
Gates applied: no_behavioural_pass, no_license.
737046910805full audit observations/trust-audit/mcp-server/nighttrek__serper-search.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-08 | 737046910805 | SAFE | B | 89 | first audit |
Questions
What is the Serper Search MCP server?
Un-official Serper Google search server for Cline and other MCP clients
What tools does Serper Search expose?
1 in total: 1 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Serper Search safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does Serper Search need?
It reads OPENROUTER_API_KEY and USAGE_METRICS_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does Serper Search run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as serper-search-server at 0.1.0.
How current is this page?
The grade is for one exact copy of the source (737046910805), read on 2026-10-08. The repository is watched and re-audited when it changes.