DuckDuckGo MCP Server

Source-backed facts for citing this resource, derived directly from the registry — also available as plain text for AI assistants.

Canonical URL

https://heyclau.de/entry/mcp/duckduckgo-mcp-server

Source URLs

https://github.com/nickclyde/duckduckgo-mcp-server/blob/main/README.md, https://github.com/nickclyde/duckduckgo-mcp-server

Brand

DuckDuckGo MCP Server

Brand domain

github.com

Safety notes

DuckDuckGo MCP Server can search the web and fetch arbitrary webpages requested through the MCP client., Webpage content is untrusted external input and can contain prompt-injection text, misleading claims, malware links, or unsafe instructions., SafeSearch level and region defaults are administrator-controlled at startup, but search terms and per-search regions can still reveal user intent., The optional curl backend impersonates a browser-like TLS fingerprint for fetches, so review whether that behavior is appropriate for your environment., Respect site terms, robots expectations, rate limits, and organizational network policy before allowing broad fetching.

Privacy notes

Search queries, result URLs, snippets, fetched page text, region codes, SafeSearch settings, prompts, tool arguments, errors, and logs may be visible to the MCP client and model provider., Search activity can reveal research topics, health or legal questions, hiring plans, customers, incidents, competitive analysis, or internal project names., Avoid fetching authenticated, private, internal, customer, or confidential pages unless the data is approved for the current model session.

Author

Nick Clyde

Submitted by

oktofeesh1

Claim status

unclaimed

Last verified

2026-06-05

• Search queries, result URLs, snippets, fetched page text, region codes, SafeSearch settings, prompts, tool arguments, errors, and logs may be visible to the MCP client and model provider.
• Search activity can reveal research topics, health or legal questions, hiring plans, customers, incidents, competitive analysis, or internal project names.
• Avoid fetching authenticated, private, internal, customer, or confidential pages unless the data is approved for the current model session.

• Python 3.10 or newer available to the MCP client runtime.
• uvx available for package execution.
• Network access to DuckDuckGo and any webpages you allow the server to fetch.
• Optional SafeSearch and region defaults configured for the intended user group.
• Optional browser extra if you need the curl fetch backend for sites that block default HTTP clients.

Show that DuckDuckGo MCP Server is listed on HeyClaude. Paste this Markdown into your README — it renders the badge and links back to this page.

[![Listed on HeyClaude](https://heyclau.de/badge/mcp/duckduckgo-mcp-server.svg)](https://heyclau.de/entry/mcp/duckduckgo-mcp-server)

DuckDuckGo MCP Server side by side with 3 alternatives on trust, install, platform support, and disclosed safety notes — all from reviewed registry metadata.

Field	DuckDuckGo MCP Server MCP server that gives Claude DuckDuckGo web search plus webpage content fetching and parsing tools. Open dossier	Exa MCP Server Web search and web fetch MCP server that connects AI assistants to Exa's hosted search, crawling, code search, and research capabilities. Open dossier	open-webSearch MCP Server No-key multi-engine MCP server, CLI, and local daemon for web search and public web content retrieval across engines such as Bing, DuckDuckGo, Brave, Exa, Baidu, CSDN, Juejin, Startpage, and Sogou. Open dossier	Kagi MCP Server Official Kagi MCP server that gives Claude web, news, video, podcast, image, and page-extraction tools backed by the Kagi Search and Extract APIs. Open dossier
Next steps	Open dossierCopy installCopy configAPI JSONOpen LLMMCP feedOpen sourceNewsletterClaim listing	Open dossierCopy installCopy configAPI JSONOpen LLMMCP feedOpen sourceNewsletterClaim listing	Open dossierCopy installCopy configAPI JSONOpen LLMMCP feedOpen sourceNewsletterClaim listing	Open dossierCopy installCopy configAPI JSONOpen LLMMCP feedOpen sourceNewsletterClaim listing
Trust	Review first	Review first	Review first	Review first
Review status	Not reviewed	Not reviewed	Not reviewed	Not reviewed
Package trust	Package not verified	Package not verified	Package not verified	Package not verified
Source provenance	Source-backed	Source-backed	Source-backed	Source-backed
Submitter	oktofeesh1	oktofeesh1	oktofeesh1	oktofeesh1
Install risk	Review first	Review first	Review first	Review first
Notes	Safety ✓ Privacy ✓	Safety ✓ Privacy ✓	Safety ✓ Privacy ✓	Safety ✓ Privacy ✓
Brand	—	Exa	—	Kagi MCP Server
Category	mcp	mcp	mcp	mcp
Source	Source-backed	Source-backed	Source-backed	Source-backed
Author	Nick Clyde	Exa Labs	Aas-ee	Kagi Search
Added	2026-06-05	2026-06-05	2026-06-06	2026-06-06
Platforms	Claude CodeCodexCursorClaude Desktop	Claude CodeClaude Desktop	Claude CodeClaude Desktop	Claude CodeClaude Desktop
Harness	Claude CodeCodexCursorClaude Desktop	Claude CodeClaude Desktop	Claude CodeClaude Desktop	Claude CodeClaude Desktop
Source repo	—	—	—	—
Safety notes	✓DuckDuckGo MCP Server can search the web and fetch arbitrary webpages requested through the MCP client. Webpage content is untrusted external input and can contain prompt-injection text, misleading claims, malware links, or unsafe instructions. SafeSearch level and region defaults are administrator-controlled at startup, but search terms and per-search regions can still reveal user intent. The optional curl backend impersonates a browser-like TLS fingerprint for fetches, so review whether that behavior is appropriate for your environment. Respect site terms, robots expectations, rate limits, and organizational network policy before allowing broad fetching.	✓Web search and fetch results may be incomplete, stale, biased, or adversarial; verify important claims against primary sources. Fetching pages can retrieve untrusted web content that may contain prompt injection or malicious instructions. Advanced search filters and domain targeting should be reviewed when used for compliance, hiring, due diligence, or security research. Protect Exa API keys and avoid placing real keys in shared config files, screenshots, logs, or prompts.	✓open-webSearch can send search queries to multiple public engines and fetch public web pages, GitHub READMEs, CSDN articles, Juejin articles, and other supported targets. Search and fetch results can be incomplete, stale, rate-limited, blocked, region-dependent, or affected by search-engine ranking and scraping protections. Respect each target site's terms and robots expectations; do not use the server for abusive scraping, credentialed browsing, paywall bypass, or personal-data harvesting. The optional local daemon exposes HTTP endpoints for local tooling; keep it bound to trusted local interfaces and do not treat it as a public internet API. Proxy settings, Playwright WebSocket/CDP endpoints, and reused browser sessions can route traffic or cookies through external systems; configure them deliberately. Leave TLS verification enabled unless a specific target has a broken certificate chain and the risk has been accepted.	✓Kagi MCP sends search queries, page URLs, filters, date ranges, lens IDs, and extraction requests to the Kagi API. Search and extraction calls can consume Kagi API quota or create API costs, especially when using high limits or inline page extraction. The `kagi_extract` tool fetches public page content as markdown; do not ask it to retrieve private, paywalled, or terms-restricted content unless you have permission. In HTTP mode, clients provide Kagi API keys through bearer tokens; expose the endpoint only behind trusted transport, access controls, and log redaction. The server supports configurable timeouts, retries, and hidden search parameters; tune these before giving broad agent access to current-web workflows.
Privacy notes	✓Search queries, result URLs, snippets, fetched page text, region codes, SafeSearch settings, prompts, tool arguments, errors, and logs may be visible to the MCP client and model provider. Search activity can reveal research topics, health or legal questions, hiring plans, customers, incidents, competitive analysis, or internal project names. Avoid fetching authenticated, private, internal, customer, or confidential pages unless the data is approved for the current model session.	✓Search queries, fetched URLs, tool parameters, page contents, API keys, and surrounding prompts may be sent to Exa and the MCP client. Research topics can reveal product plans, customers, vulnerabilities, hiring activity, legal matters, or personal interests. Review Exa's current data handling, account, and rate-limit policies before using it with proprietary or regulated workflows.	✓Search queries, fetched URLs, result titles, snippets, article content, proxy URLs, browser endpoints, and fetched page text can be exposed to MCP clients, logs, and model context. Live search engines and fetched websites may observe queries, IP address, proxy exit, browser fingerprints, cookies, timing, and request headers. Playwright fallback or CDP reuse can expose browser state, existing cookies, logged-in sessions, or verification state to fetched pages. The project includes public URL validation and private-network target protections, but operators should still avoid fetching internal, secret, or customer-specific URLs. Redact sensitive search terms and downloaded page content before sharing transcripts or logs.	✓Kagi receives search queries, requested URLs, search filters, result domains, lens IDs, extraction targets, API keys, and request metadata. MCP clients and logs may store user questions, result snippets, extracted markdown, trace IDs, and error bodies returned by the Kagi API. Hosted HTTP deployments can process keys for multiple users; avoid server, proxy, and platform logs that record `Authorization` headers. Extracted pages may include personal data, copyrighted text, internal URLs, or sensitive context if the user provides those URLs.
Prerequisites	Python 3.10 or newer available to the MCP client runtime. uvx available for package execution. Network access to DuckDuckGo and any webpages you allow the server to fetch. Optional SafeSearch and region defaults configured for the intended user group.	MCP client with hosted or remote MCP support, or mcp-remote for clients that need a stdio bridge. Exa API key for higher limits, production usage, or npm-package configuration. Network access to the Exa hosted MCP endpoint and target webpages.	Node.js 18 or newer for the published npm package. Review of search-engine terms, scraping limits, rate limits, and allowed use for the target websites. Optional proxy configuration only when live search or fetch traffic must route through an approved proxy. Optional Playwright or browser endpoint setup only when request-based search/fetch is insufficient.	Python 3.12 and uv for the recommended `uvx kagimcp` install path. A Kagi API key stored in `KAGI_API_KEY` for local stdio use. Review of Kagi API billing, rate limits, search workflows, extraction behavior, and any client logs that may capture query text. Optional HTTP deployment review if exposing the streamable HTTP transport to multiple users.
Install	uvx duckduckgo-mcp-server Copy install	npx -y mcp-remote https://mcp.exa.ai/mcp Copy install	npx -y open-websearch@latest Copy install	uvx kagimcp Copy install
Config	{ "mcpServers": { "ddg-search": { "command": "uvx", "args": ["duckduckgo-mcp-server"] } } } Copy config	{ "mcpServers": { "exa": { "url": "https://mcp.exa.ai/mcp" } } } Copy config	{ "mcpServers": { "open-websearch": { "command": "npx", "args": [ "-y", "open-websearch@latest" ], "env": { "MODE": "stdio", "DEFAULT_SEARCH_ENGINE": "duckduckgo", "ALLOWED_SEARCH_ENGINES": "duckduckgo,startpage,bing", "NPM_CONFIG_IGNORE_SCRIPTS": "true" }, "type": "stdio" } } } Copy config	Manual-only setup: uvx kagimcp Copy config
Citations	Source repositorygithub.com 2026-07-21T05:19:43+00:00 Documentationgithub.com Submitted by oktofeesh12026-06-05 Source methodology →	Source repositorygithub.com 2026-07-21T05:19:43+00:00 Documentationexa.ai Submitted by oktofeesh12026-06-05 Source methodology →	Source repositorygithub.com 2026-07-21T05:19:43+00:00 Documentationraw.githubusercontent.com Submitted by oktofeesh12026-06-06 Source methodology →	Source repositorygithub.com 2026-07-21T05:19:43+00:00 Documentationraw.githubusercontent.com Submitted by oktofeesh12026-06-06 Source methodology →
Claim	Unclaimed	Unclaimed	Unclaimed	Unclaimed

Source-backed guides for putting this to work.