Back to Home
openpharma-org icon

pubmed-mcp

Verified Safe

by openpharma-org

Overview

Provides AI assistants and applications with search, metadata retrieval, and PDF access to PubMed's biomedical literature database.

Installation

Run Command
npx @openpharma-org/pubmed-mcp-server

Security Notes

The server primarily acts as a proxy to NCBI's official E-utilities API. It uses `axios` for network requests and `xml2js` for XML parsing. `xml2js` by default disables DTD parsing and external entity resolution, mitigating common XML-related vulnerabilities like XXE. There are no direct uses of `eval`, no hardcoded secrets, and no apparent obfuscation. The PDF download feature only provides a URL to NCBI's PMC, rather than serving files directly, which is a good security practice. The main risk is potential for abuse if not properly rate-limited at the application level by the end-user, as it can generate multiple requests to NCBI for a single search.

Similar Servers

Stats

Interest Score0
Security Score9
Cost ClassMedium
Avg Tokens15000
Stars0
Forks0
Last Update2025-12-22

Tags

PubMedBiomedicalLiterature SearchResearchMedical