SearchAPISAFE
SearchAPI MCP for Google searches
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://opensource.org/licenses/MIT) [](https://www.python.org/downloads/) [](https://github.com/jlowin/fastmcp)
A production-ready Model Context Protocol (MCP) server providing comprehensive search capabilities through SearchAPI.io. Enable AI assistants to search Google, Maps, Flights, Hotels, and more with built-in caching, retry logic, and circuit breakers.
一个基于 Model Context Protocol (MCP) 的生产级搜索服务器,通过 SearchAPI.io 提供全面的搜索功能。使 AI 助手能够搜索 Google、地图、航班、酒店等,内置缓存、重试逻辑和熔断器。
Features • Quick Start • Installation • Configuration • Available Tools
Features
🔍 Search Engines
- Google Search - Web results, knowledge graph, answer boxes, related questions
- Google Videos - Video search with filtering by duration, source, and upload time
- Google AI Mode - AI-generated overviews with cited sources and structured content
- Google Maps - Places, businesses, reviews, and location details
- Google Maps Place - Detailed information for specific locations (hours, photos, amenities)
- Google Events - Find concerts, conferences, festivals, and local activities
- Google Flights - Flight search with comprehensive filtering and price calendars
- Google Flights Location Search - Airport code lookup and autocomplete
- Google Travel Explore - Discover destinations and travel inspiration
- Google Hotels - Accommodation search with amenities, ratings, and price filters
🏗️ Production-Ready Architecture
- Connection Pooling - Efficient HTTP connection management with httpx
- Response Caching - Configurable TTL-based caching with LRU eviction
- Retry Logic - Exponential backoff for trans
278147d964e8OBSERVED · 2026-10-07Exposed tools (15)
15 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
get_current_time | read | 获取当前系统时间和旅行日期建议 |
health_check | read | |
search_google | read | 搜索Google搜索结果,包括有机结果、知识图谱、回答框、相关问题、广告等 |
search_google_ai_mode | read | |
search_google_events | read | |
search_google_flights | read | 搜索Google航班信息 |
search_google_flights_calendar | read | 查询Google航班日历价格 |
search_google_flights_location_search | read | |
search_google_hotels | read | 搜索Google酒店信息 |
search_google_hotels_property | read | 查询Google酒店详细信息 |
search_google_maps | read | 搜索Google地图上的地点或服务 |
search_google_maps_place | read | |
search_google_maps_reviews | read | 搜索Google地图上的评论数据 |
search_google_travel_explore | read | |
search_google_videos | read | 搜索Google视频结果,根据设备类型返回视频列表、视频轮播或短视频 |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (5 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (5)
return hashlib.md5(sorted_params.encode()).hexdigest()
print(f"API Key: {api_key[:8]}...{api_key[-4:]}")print(f"API Key: {api_key[:8]}...{api_key[-4:]}")httpx, fastmcp, python-dotenv, pydantic, pydantic-settings, anyio
curl -LsSf https://astral.sh/uv/install.sh | sh
Gates applied: no_behavioural_pass.
278147d964e8full audit observations/trust-audit/mcp-server/rmmargt__searchapi-1.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-07 | 278147d964e8 | SAFE | B | 89 | first audit |
Questions
What is the SearchAPI MCP server?
SearchAPI MCP for Google searches
What tools does SearchAPI expose?
15 in total: 15 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is SearchAPI safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does SearchAPI need?
It reads SEARCHAPI_API_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How current is this page?
The grade is for one exact copy of the source (278147d964e8), read on 2026-10-07. The repository is watched and re-audited when it changes.