Back to Home
AppsYogi-com icon

gsc-mcp-server

by AppsYogi-com

Overview

The GSC-MCP Server connects Google Search Console to Model Context Protocol (MCP) clients like Claude and Cursor, enabling AI agents to query GSC data and perform SEO-related tasks.

Installation

Run Command
npx -y @appsyogi/gsc-mcp-server run

Security Notes

The server stores OAuth refresh tokens. While it attempts to use the OS keychain via `keytar` (more secure), it explicitly falls back to storing these highly sensitive tokens *unencrypted* in a plain JSON file (`tokens.json`) if `keytar` is unavailable or fails. This is a critical security vulnerability. Additionally, `clientId` and `clientSecret` are stored in `config.json` on disk. There are no obvious `eval` or direct arbitrary command execution vulnerabilities, and API input is schema-validated via Zod, mitigating common injection risks. However, the unencrypted token storage fallback significantly lowers the security score.

Similar Servers

Stats

Interest Score0
Security Score3
Cost ClassMedium
Avg Tokens1500
Stars0
Forks0
Last Update2026-01-19

Tags

SEOGoogle Search ConsoleAI ToolsData AnalyticsMCP