Deep Research
BLOCKgrade F · trust 57/100Use any LLMs (Large Language Models) for Deep Research. Support SSE API and MCP server.
anthropicdeep researchdeep research apideepresearchdeepseekgeminigrokmcp serverOverview
From the repository's own README, as read at the audited commit.
<div align="center"><h1>Deep Research</h1>[](https://opensource.org/licenses/MIT)[](https://ai.google.dev/)[](https://nextjs.org/)[](https://tailwindcss.com/)[](https://ui.shadcn.com/)[](https://vercel.com/new/clone?repository-url=https%3A%2F%2Fgithub.com%2Fu14app%2Fdeep-research&project-name=deep-research&repository-name=deep-research)[](./docs/How-to-deploy-to-Cloudflare-Pages.md)[](https://research.u14.app/)[](https://deepwiki.com/u14app/deep-research)</div>**Lightning-Fast Deep Research Report**Deep Research uses a variety of powerful AI models to generate in-depth research reports in just a few minutes. It leverages advanced "Thinking" and "Task" models, combined with an internet connection, to provide fast and insightful analysis on a variety of topics. **Your privacy is paramount - all data is processed and stored locally.**## ✨ Features- **R
Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add deep-research --env ACCESS_PASSWORD=${ACCESS_PASSWORD} --env ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY} --env ATLASCLOUD_API_KEY=${ATLASCLOUD_API_KEY} --env AZURE_API_KEY=${AZURE_API_KEY} -- npx -y [email protected]{
"mcpServers": {
"deep-research": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"ACCESS_PASSWORD": "${ACCESS_PASSWORD}",
"ANTHROPIC_API_KEY": "${ANTHROPIC_API_KEY}",
"ATLASCLOUD_API_KEY": "${ATLASCLOUD_API_KEY}",
"AZURE_API_KEY": "${AZURE_API_KEY}"
}
}
}
}Exposed tools (5) 3 read · 2 write · 0 destructive
| Tool | Risk | Description |
|---|---|---|
deep-research | read | |
generate-SERP-query | read | |
search-task | read | |
write-final-report | write | |
write-research-plan | write |
Details
- Source
- u14app/deep-research
- npm
deep-research@0.11.1- Transports
- sse · streamable-http
- Credentials it reads
ACCESS_PASSWORDANTHROPIC_API_KEYATLASCLOUD_API_KEYAZURE_API_KEYBOCHA_API_KEYCRW_API_KEYDEEPSEEK_API_KEYEXA_API_KEYFIRECRAWL_API_KEYGOOGLE_GENERATIVE_AI_API_KEYGOOGLE_PRIVATE_KEYGOOGLE_PRIVATE_KEY_ID- License
- MIT
- Stars
- 4,684 · pushed 87d ago
Trust audit
Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | FAIL |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (1 observation(s))
- Network
- declared (8 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- found
Findings (18)
const pemHeader = "-----BEGIN PRIVATE KEY-----";
// AI provider, Possible values include: google, openai, anthropic, deepseek, atlascloud, xai, mistral, azure, openrouter, openaicompatible, pollinations, ollama
// Search provider, Possible values include: model, tavily, firecrawl, crw, exa, bocha, searxng
# Possible values include: google, openai, anthropic, deepseek, atlascloud, xai, mistral, azure, openrouter, openaicompatible, pollinations, ollama
# Possible values include: model, tavily, firecrawl, crw, exa, bocha, searxng
// AI provider, Possible values include: google, openai, anthropic, deepseek, xai, mistral, azure, openrouter, openaicompatible, pollinations, ollama
# (Optional) Server-side Ollama API Proxy URL. Default, `http://0.0.0.0:11434`
# (Optional) Server-side Searxng API Proxy URL. Default, `http://0.0.0.0:8080`
process.env.OLLAMA_API_BASE_URL || "http://0.0.0.0:11434";
.node-version
} from "../../utils";
"url": "http://127.0.0.1:3000/api/mcp",
"url": "http://127.0.0.1:3000/api/mcp",
@ai-sdk/anthropic, @ai-sdk/azure, @ai-sdk/deepseek, @ai-sdk/google, @ai-sdk/google-vertex, @ai-sdk/mistral, @ai-sdk/openai, @ai-sdk/openai-compatible
// If you set an access password
// If you set an access password
// If you set an access password
public/scripts/pdf.worker.min.mjs
Gates applied: critical_finding, no_behavioural_pass.
Audited 2026-09-14 · audit v0.4.0 · source sha ecca09b0af1d · full audit: observations/trust-audit/mcp-server/u14app__deep-research-8.json · Report an issue or request a re-scan
Audit history
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-09-14 | ecca09b0af1d | BLOCK | F | 57 | first audit |
Alternatives
Other servers in the same categories, safer ones first.
Questions
What is the Deep Research MCP server?
Use any LLMs (Large Language Models) for Deep Research. Support SSE API and MCP server.
What tools does Deep Research expose?
5 in total: 3 read-only, 2 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Deep Research safe to connect to an agent?
No — not without reading the findings first. The audit graded it F (57/100) and found 6 critical or high issues in the source. Each one is listed on this page with the file and line it is on.
What credentials does Deep Research need?
It reads ACCESS_PASSWORD, ANTHROPIC_API_KEY, ATLASCLOUD_API_KEY, AZURE_API_KEY, BOCHA_API_KEY, CRW_API_KEY, DEEPSEEK_API_KEY, EXA_API_KEY, FIRECRAWL_API_KEY, GOOGLE_GENERATIVE_AI_API_KEY, GOOGLE_PRIVATE_KEY and GOOGLE_PRIVATE_KEY_ID from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does Deep Research run?
It speaks sse and streamable-http, so it runs as a service you connect to over the network. It is published on npm as deep-research at 0.11.1.
How current is this page?
The grade is for one exact copy of the source (ecca09b0af1d), read on 2026-09-14. The repository is watched and re-audited when it changes.
Provenance: OBSERVED · read 2026-09-14 · job trust-audit-2026-09-14