open-webSearch MCP Server

Source-backed facts for citing this resource, derived directly from the registry — also available as plain text for AI assistants.

Canonical URL

https://heyclau.de/entry/mcp/open-websearch-mcp-server

Source URLs

https://raw.githubusercontent.com/Aas-ee/open-webSearch/main/README.md, https://github.com/Aas-ee/open-webSearch

Brand

open-webSearch

Brand domain

github.com

Safety notes

open-webSearch can send search queries to multiple public engines and fetch public web pages, GitHub READMEs, CSDN articles, Juejin articles, and other supported targets., Search and fetch results can be incomplete, stale, rate-limited, blocked, region-dependent, or affected by search-engine ranking and scraping protections., Respect each target site's terms and robots expectations; do not use the server for abusive scraping, credentialed browsing, paywall bypass, or personal-data harvesting., The optional local daemon exposes HTTP endpoints for local tooling; keep it bound to trusted local interfaces and do not treat it as a public internet API., Proxy settings, Playwright WebSocket/CDP endpoints, and reused browser sessions can route traffic or cookies through external systems; configure them deliberately., Leave TLS verification enabled unless a specific target has a broken certificate chain and the risk has been accepted.

Privacy notes

Search queries, fetched URLs, result titles, snippets, article content, proxy URLs, browser endpoints, and fetched page text can be exposed to MCP clients, logs, and model context., Live search engines and fetched websites may observe queries, IP address, proxy exit, browser fingerprints, cookies, timing, and request headers., Playwright fallback or CDP reuse can expose browser state, existing cookies, logged-in sessions, or verification state to fetched pages., The project includes public URL validation and private-network target protections, but operators should still avoid fetching internal, secret, or customer-specific URLs., Redact sensitive search terms and downloaded page content before sharing transcripts or logs.

Author

Aas-ee

Submitted by

oktofeesh1

Claim status

unclaimed

Last verified

2026-06-06

• Search queries, fetched URLs, result titles, snippets, article content, proxy URLs, browser endpoints, and fetched page text can be exposed to MCP clients, logs, and model context.
• Live search engines and fetched websites may observe queries, IP address, proxy exit, browser fingerprints, cookies, timing, and request headers.
• Playwright fallback or CDP reuse can expose browser state, existing cookies, logged-in sessions, or verification state to fetched pages.
• The project includes public URL validation and private-network target protections, but operators should still avoid fetching internal, secret, or customer-specific URLs.
• Redact sensitive search terms and downloaded page content before sharing transcripts or logs.

• Node.js 18 or newer for the published npm package.
• Review of search-engine terms, scraping limits, rate limits, and allowed use for the target websites.
• Optional proxy configuration only when live search or fetch traffic must route through an approved proxy.
• Optional Playwright or browser endpoint setup only when request-based search/fetch is insufficient.
• A decision about whether to use stdio-only MCP mode, CLI mode, or the local daemon mode.

Show that open-webSearch MCP Server is listed on HeyClaude. Paste this Markdown into your README — it renders the badge and links back to this page.

[![Listed on HeyClaude](https://heyclau.de/badge/mcp/open-websearch-mcp-server.svg)](https://heyclau.de/entry/mcp/open-websearch-mcp-server)

open-webSearch MCP Server side by side with 3 alternatives on trust, install, platform support, and disclosed safety notes — all from reviewed registry metadata.

Field	open-webSearch MCP Server No-key multi-engine MCP server, CLI, and local daemon for web search and public web content retrieval across engines such as Bing, DuckDuckGo, Brave, Exa, Baidu, CSDN, Juejin, Startpage, and Sogou. Open dossier	WebClaw MCP Server Local-first MCP server for web scraping, crawling, URL mapping, batch extraction, structured extraction, summarization, diffing, brand extraction, and optional hosted API fallback for bot-protected pages. Open dossier	Omnisearch MCP Server MCP server that unifies web search, AI answer, GitHub search, and web extraction providers including Tavily, Brave, Kagi, Exa, Linkup, Firecrawl, and GitHub behind four consolidated tools. Open dossier	Graphlit MCP Server MCP server for the Graphlit platform, enabling Claude to ingest, search, retrieve, organize, and operate on files, web pages, feeds, collections, conversations, memory, connectors, crawls, and RAG-ready project knowledge. Open dossier
Next steps	Open dossierCopy installCopy configAPI JSONOpen LLMMCP feedOpen sourceNewsletterClaim listing	Open dossierCopy installCopy configAPI JSONOpen LLMMCP feedOpen sourceNewsletterClaim listing	Open dossierCopy installCopy configAPI JSONOpen LLMMCP feedOpen sourceNewsletterClaim listing	Open dossierCopy installCopy configAPI JSONOpen LLMMCP feedOpen sourceNewsletterClaim listing
Trust	Review first	Review first	Review first	Review first
Review status	Not reviewed	Not reviewed	Not reviewed	Not reviewed
Package trust	Package not verified	Package not verified	Package not verified	Package not verified
Source provenance	Source-backed	Source-backed	Source-backed	Source-backed
Submitter	oktofeesh1	oktofeesh1	oktofeesh1	oktofeesh1
Install risk	Review first	Review first	Review first	Review first
Notes	Safety ✓ Privacy ✓	Safety ✓ Privacy ✓	Safety ✓ Privacy ✓	Safety ✓ Privacy ✓
Brand	—	WebClaw	—	Graphlit MCP Server
Category	mcp	mcp	mcp	mcp
Source	Source-backed	Source-backed	Source-backed	Source-backed
Author	Aas-ee	WebClaw	Scott Spence	Graphlit
Added	2026-06-06	2026-06-06	2026-06-06	2026-06-06
Platforms	Claude CodeCodexCursorClaude Desktop	Claude CodeClaude Desktop	Claude CodeClaude Desktop	Claude CodeClaude Desktop
Harness	Claude CodeCodexCursorClaude Desktop	Claude CodeClaude Desktop	Claude CodeClaude Desktop	Claude CodeClaude Desktop
Source repo	1.4k repo stars	—	—	—
Safety notes	✓open-webSearch can send search queries to multiple public engines and fetch public web pages, GitHub READMEs, CSDN articles, Juejin articles, and other supported targets. Search and fetch results can be incomplete, stale, rate-limited, blocked, region-dependent, or affected by search-engine ranking and scraping protections. Respect each target site's terms and robots expectations; do not use the server for abusive scraping, credentialed browsing, paywall bypass, or personal-data harvesting. The optional local daemon exposes HTTP endpoints for local tooling; keep it bound to trusted local interfaces and do not treat it as a public internet API. Proxy settings, Playwright WebSocket/CDP endpoints, and reused browser sessions can route traffic or cookies through external systems; configure them deliberately. Leave TLS verification enabled unless a specific target has a broken certificate chain and the risk has been accepted.	✓WebClaw MCP Server can scrape one URL, crawl same-origin links, map URLs, batch multiple URLs, extract structured data, summarize pages, compare snapshots, and extract brand metadata. Scraping, crawling, search, research, and hosted fallback can trigger target-site rate limits, bot protections, legal restrictions, or terms-of-service limits. The server validates public HTTP URLs and rejects private or internal destinations, but operators should still avoid fetching internal, secret, customer-specific, or credential-bearing URLs. Cookie-bearing requests, proxies, and browser profiles can expose authenticated sessions or route traffic through external infrastructure. Setting `WEBCLAW_API_KEY` enables hosted API fallback, which can send target URLs and page context to the WebClaw service. Structured extraction and summarization may use configured LLM providers; review provider data handling before enabling those tools with sensitive pages.	✓Omnisearch MCP Server can query multiple third-party search, AI answer, GitHub search, extraction, scraping, crawling, summarization, and content-processing providers. Firecrawl crawl, scrape, map, extract, and action modes can interact with websites and may trigger robots.txt, TOS, rate-limit, or authentication concerns. GitHub search depends on the configured token scope and can reveal private code, repositories, users, or organization metadata when a broad token is used. Large result mode can write response content to files; review where those files are stored before using it with private or regulated data. Require confirmation before crawling sites, extracting private URLs, using authenticated providers on sensitive targets, or running broad GitHub searches against private organizations.	✓Graphlit MCP Server can ingest files, web pages, messages, posts, emails, issues, text, memory, feeds, crawls, and connected SaaS data into a Graphlit project. Tools can create or delete contents, feeds, collections, conversations, specifications, and workflows, and can configure project defaults when explicitly requested. Web crawling, web search, screenshots, podcast search, feed scheduling, publishing, and connector operations may contact third-party services and process external content. Generated audio and image publishing can call configured model/provider services and consume credits or quota. Require confirmation before ingesting private repositories, emails, drive files, Slack/Teams/Discord data, customer documents, large crawls, generated media, deletion operations, or project configuration changes.
Privacy notes	✓Search queries, fetched URLs, result titles, snippets, article content, proxy URLs, browser endpoints, and fetched page text can be exposed to MCP clients, logs, and model context. Live search engines and fetched websites may observe queries, IP address, proxy exit, browser fingerprints, cookies, timing, and request headers. Playwright fallback or CDP reuse can expose browser state, existing cookies, logged-in sessions, or verification state to fetched pages. The project includes public URL validation and private-network target protections, but operators should still avoid fetching internal, secret, or customer-specific URLs. Redact sensitive search terms and downloaded page content before sharing transcripts or logs.	✓URLs, fetched page content, crawl results, extracted structured data, snapshots, brand metadata, cookies, proxy settings, API keys, and LLM prompts can be exposed to the MCP client. Crawled pages may include personal data, customer content, non-public links, access tokens embedded in URLs, or site-specific identifiers. Diff snapshots and exported JSON can preserve page content longer than expected; store and delete them according to the workflow's retention needs. Hosted fallback, proxy providers, search/research APIs, and LLM providers may observe target URLs, headers, cookies, prompts, and extracted content when enabled. Redact sensitive URLs and extracted data before sharing MCP transcripts, crawl results, logs, or generated RAG context.	✓Provider API keys, GitHub tokens, search queries, URLs, extracted page content, crawled site maps, scraped text, summaries, AI answers, GitHub search results, and large-result files can be exposed to the MCP client. Search and extraction providers may log queries, URLs, source content, account identifiers, usage metadata, and generated responses according to their own policies. Web extraction can capture personal data, paywalled content, internal URLs, or proprietary documents if supplied by the user or available to an authenticated provider. GitHub search output may include repository names, code snippets, file paths, commit metadata, and organization details. Keep provider credentials in local MCP configuration only, and avoid sharing transcripts that contain private queries, URLs, source text, or tokens.	✓Graphlit environment IDs, organization IDs, JWT secrets, project IDs, resource IDs, connector tokens, URLs, files, emails, messages, issues, transcripts, screenshots, memories, conversations, usage records, and retrieved sources can be exposed to the MCP client. Ingested documents may be extracted to Markdown; audio and video may be transcribed; images and pages may be described or screenshot. Connected services such as Slack, Discord, Google Drive, Microsoft 365, GitHub, Jira, Linear, Notion, Dropbox, Box, Reddit, and Twitter/X can expose private workspace content. Usage records can include request, response, variables, token counts, bytes, units, and credit charges for project operations. Keep Graphlit secrets in local MCP client configuration only, and review retention, deletion, and connector policies before ingesting regulated or customer data.
Prerequisites	Node.js 18 or newer for the published npm package. Review of search-engine terms, scraping limits, rate limits, and allowed use for the target websites. Optional proxy configuration only when live search or fetch traffic must route through an approved proxy. Optional Playwright or browser endpoint setup only when request-based search/fetch is insufficient.	Node.js for the `create-webclaw` installer, or Rust/Cargo when building the MCP binary from source. Review of AGPL-3.0 obligations before redistributing or operating modified server versions. Review of target-site terms, robots expectations, rate limits, and scraping permissions. Optional `WEBCLAW_API_KEY` only when hosted API fallback is acceptable for bot-protected or JavaScript-heavy pages.	Node.js 22 or newer for the published npm package. At least one provider API key for Tavily, Kagi, Brave Search, GitHub, Exa, Linkup, or Firecrawl. Optional `FIRECRAWL_BASE_URL` when using a self-hosted Firecrawl instance. Optional `OMNISEARCH_LARGE_RESULT_MODE` choice for file or inline handling of large results.	Active Graphlit platform account and project access. Graphlit organization ID, environment ID, and JWT secret from the Graphlit API settings dashboard. Node.js 18 or newer for the npm stdio server. Review of which files, URLs, feeds, SaaS connectors, memories, conversations, collections, and web crawls Claude may create or query.
Install	npx -y open-websearch@latest Copy install	npx create-webclaw Copy install	npx mcp-omnisearch Copy install	npx -y graphlit-mcp-server Copy install
Config	{ "mcpServers": { "open-websearch": { "command": "npx", "args": [ "-y", "open-websearch@latest" ], "env": { "MODE": "stdio", "DEFAULT_SEARCH_ENGINE": "duckduckgo", "ALLOWED_SEARCH_ENGINES": "duckduckgo,startpage,bing", "NPM_CONFIG_IGNORE_SCRIPTS": "true" }, "type": "stdio" } } } Copy config	Manual-only setup: npx create-webclaw Copy config	{ "mcpServers": { "omnisearch": { "command": "npx", "args": [ "mcp-omnisearch" ], "env": { "TAVILY_API_KEY": "your-tavily-key", "KAGI_API_KEY": "your-kagi-key", "BRAVE_API_KEY": "your-brave-key", "GITHUB_API_KEY": "your-github-token", "EXA_API_KEY": "your-exa-key", "LINKUP_API_KEY": "your-linkup-key", "FIRECRAWL_API_KEY": "your-firecrawl-key" }, "type": "stdio" } } } Copy config	{ "mcpServers": { "graphlit": { "command": "npx", "args": [ "-y", "graphlit-mcp-server" ], "env": { "GRAPHLIT_ORGANIZATION_ID": "your-organization-id", "GRAPHLIT_ENVIRONMENT_ID": "your-environment-id", "GRAPHLIT_JWT_SECRET": "your-jwt-secret" }, "type": "stdio" } } } Copy config
Citations	Source repositorygithub.com 2026-07-21T07:17:01+00:00 Documentationraw.githubusercontent.com Submitted by oktofeesh12026-06-06 Source methodology →	Source repositorygithub.com 2026-07-21T07:17:01+00:00 Documentationraw.githubusercontent.com Submitted by oktofeesh12026-06-06 Source methodology →	Source repositorygithub.com 2026-07-21T07:17:01+00:00 Documentationraw.githubusercontent.com Submitted by oktofeesh12026-06-06 Source methodology →	Source repositorygithub.com 2026-07-21T07:17:01+00:00 Documentationraw.githubusercontent.com Submitted by oktofeesh12026-06-06 Source methodology →
Claim	Unclaimed	Unclaimed	Unclaimed	Unclaimed

Source-backed guides for putting this to work.