SSMCP
Verified Safeby antonsokolskyy
Overview
Model Context Protocol (MCP) server providing web search with content extraction and YouTube subtitle retrieval for AI models lacking built-in browsing capabilities.
Installation
docker compose up -dEnvironment Variables
- SEARXNG_SEARCH_URL
- OAUTH_ENABLED
- OAUTH_JWKS_URL
- OAUTH_CLIENT_ID
- OAUTH_ISSUER
Security Notes
The server uses `httpx` for external requests and `pydantic-settings` for configuration, reducing risks of hardcoded secrets. OAuth authentication is implemented using standard JWT validation (JWKS, issuer, audience, expiration, subject), which is generally secure when configured with trusted identity providers. However, the reliance on external tools like `Crawl4AI` (headless Chromium) and `yt-dlp` for arbitrary web content introduces a significant attack surface. Specifically, `Crawl4AI`'s `ignore_https_errors=True` setting weakens HTTPS certificate validation, making connections vulnerable to Man-in-the-Middle (MITM) attacks. While explicit warnings are provided for `cookies.txt` permissions, the inherent risk of processing untrusted web content via browser automation remains.
Similar Servers
mcp-omnisearch
Provides a unified interface for various search, AI response, content processing, and enhancement tools via Model Context Protocol (MCP).
yt-dlp-mcp
Integrate video platform capabilities like search, metadata extraction, and content download into AI agents using yt-dlp.
mcp-server
A Model Context Protocol (MCP) server that integrates with SerpApi to provide comprehensive search engine results and data extraction to an LLM.
webscraping-ai-mcp-server
Integrates with WebScraping.AI to provide LLM-powered web data extraction, including question answering, structured data extraction, and HTML/text retrieval, with advanced features like JavaScript rendering and proxy management.