Our grade: 4 checks
Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.
Community rating
- 5 2
- 4 2
- 3 3
- 2 0
- 1 0
Trust in production
- Trust it - 43%
- With caveats - 57%
- Wouldn't - 0%
86% would recommend this server
How reviewers scored it
- Setup & docs 3.7
- Auth experience 3.6
- Reliability 3.7
- Maintainer responsiveness 4.3
Why it got a C
SerpApi's own MIT-licensed server, very active, with no advisories on record. One search tool reaches every SerpApi engine, so it is also the maintained way to search Google Patents (engine google_patents) and pull a full patent record (google_patents_details). Every search uses your SerpApi plan's credits (250 a month free). The hosted server at mcp.serpapi.com also answers on plain http:// with no redirect, so check the URL starts with https. Biggest deduction: the only sign-in is your account-wide SerpApi API key, with no scopes or OAuth, and the URL form puts that key in the address, where it can land in logs; use the Authorization header instead.
How to connect
// ~/.cursor/mcp.json (the README's "Install in Cursor" config)
{ "mcpServers": { "serpapi-mcp": { "type": "http",
"url": "https://mcp.serpapi.com/mcp",
"headers": { "Authorization": "Bearer YOUR_SERPAPI_API_KEY" } } } }// .vscode/mcp.json (the README's "Install in VS Code" config)
{ "servers": { "serpapi-mcp": { "type": "http",
"url": "https://mcp.serpapi.com/mcp",
"headers": { "Authorization": "Bearer YOUR_SERPAPI_API_KEY" } } } }claude mcp add --transport http serpapi https://mcp.serpapi.com/mcp --header "Authorization: Bearer YOUR_SERPAPI_API_KEY"// claude_desktop_config.json (hosted; or install the .mcpb bundle from the latest release)
{
"mcpServers": {
"serpapi": {
"type": "http",
"url": "https://mcp.serpapi.com/YOUR_SERPAPI_API_KEY/mcp"
}
}
}Is SerpApi MCP Server safe?
Is SerpApi MCP Server safe to use?
SerpApi MCP Server grades C (usable with care). Login is required, but access is coarse: one sign-in or key covers more than your agent needs, so grant the narrowest account you can. It shells out to helper programs or serves HTTP without enforced TLS, so keep it local and isolated.
Does SerpApi MCP Server have known vulnerabilities?
Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.
Does SerpApi MCP Server support authentication?
Yes. It requires a login, so access can be tied to a person or a scoped key.
Alternatives in Search & Retrieval
- A Exa MCPOfficial hosted Exa server for web search, page fetching, and multi-step research.
- A Perplexity MCP ServerOfficial Perplexity server for web search, quick answers, reasoning, and deep research through the Perplexity API.
- A Tavily MCPOfficial Tavily server for web search, page extraction, site mapping, crawling, and research.
- B Firecrawl MCP ServerOfficial Firecrawl server to search the web, scrape and crawl sites, parse documents, and interact with pages in a cloud browser.
- B LawDB MCP ServerHosted server to search German and EU legislation and German, European and international case law, and fetch full texts and single provisions with stable citations.
Embed this badge
[](https://trustedmcp.io/servers/serpapi-mcp)<a href="https://trustedmcp.io/servers/serpapi-mcp"><img src="https://trustedmcp.io/badge/serpapi-mcp.svg" alt="TrustedMCP grade C" height="80"></a>Community reviews
Good, but read the permissions first
It does the job, but it took some tweaking. Nice to use something maintained by SerpApi rather than a random fork. Recommended, with sensible guardrails.
Used for Technical research while coding
- Setup & docs 4/5
- Auth experience 3/5
- Reliability 3/5
- Maintainer responsiveness 4/5
Set it up once, forgot about it
Simple to set up in Cursor, simple to reason about. I like that access goes through a proper sign-in instead of a long-lived secret on disk. Filed an issue and got a reply within two days.
Used for Fact-checking drafts
- Setup & docs 4/5
- Auth experience 4/5
- Reliability 3/5
- Maintainer responsiveness 4/5
Worth the five minutes to set up
Set this up for our team after comparing a few options. Scoped the token to just what the agent needs and it respected that.
Used for Competitive research
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 5/5
Mixed feelings after two weeks
Some tools are great, a couple feel half finished. Gave it its own API key so I can revoke it without breaking anything else.
Used for Grounding answers with live results
- Setup & docs 2/5
- Auth experience 4/5
- Reliability 3/5
- Maintainer responsiveness 5/5
Solid and well behaved
Started with it as an experiment, now it is a fixture. Releases come often and the changelog is clear. Auth is handled properly, and revoking access later was one click. The OAuth flow worked first time in Claude Code. Fine in production if you sandbox it.
Used for Finding recent sources for articles
- Setup & docs 3/5
- Auth experience 4/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Useful, with a few rough edges
Works well enough for what I need. Sign-in flow was painless and I never had to paste a key into a config file. Updates land regularly, and nothing broke when I upgraded.
Used for Collecting references for reports
- Setup & docs 3/5
- Auth experience 2/5
- Reliability 4/5
- Maintainer responsiveness 3/5
Recommended it to two teams already
Been running this for about a month now. Nice that it supports both stdio and HTTP, I use stdio locally and HTTP for the shared agent. You can tell it is actively maintained, the rough edges keep getting fixed. Auth is handled properly, and revoking access later was one click. Would recommend without hesitation.
Used for Research agent for market questions
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Write a review
Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.