Skip to main content
Glama
bocklabs

searxng-mcp-bridge

by bocklabs

SearXNG MCP Bridge Server

Release npm version License: MIT Node.js

An MCP (Model Context Protocol) server that bridges to a SearXNG metasearch engine instance. It exposes SearXNG search capabilities as MCP tools, allowing any MCP-compatible client (Claude Desktop, Cursor, opencode, etc.) to perform web searches through a self-hosted, privacy-respecting search engine.

Requirements

  • Node.js >=25.0.0 <26

  • A running SearXNG instance with JSON API enabled

Related MCP server: SearXNG MCP Server

Quick Start

1. Set up a SearXNG instance

docker run -d -p 8080:8080 --name searxng searxng/searxng

2. Run the MCP bridge

STDIO mode (default, for MCP clients like Claude Desktop):

npx -y @bocklabs/searxng-mcp-bridge

HTTP mode (for web/remote clients):

TRANSPORT=http PORT=3002 SEARXNG_INSTANCE_URL=http://localhost:8080 npx -y @bocklabs/searxng-mcp-bridge

Via CLI flag (alternative to env var):

SEARXNG_INSTANCE_URL=http://localhost:8080 npx -y @bocklabs/searxng-mcp-bridge --transport=http

3. Configure your MCP client

Claude Desktop (~/Library/Application Support/Claude/claude_desktop_config.json on macOS, %APPDATA%\Claude\claude_desktop_config.json on Windows):

{
  "mcpServers": {
    "searxng-bridge": {
      "command": "npx",
      "args": ["-y", "@bocklabs/searxng-mcp-bridge"],
      "env": {
        "SEARXNG_INSTANCE_URL": "http://localhost:8080"
      }
    }
  }
}

Cursor / VS Code (mcp_settings.json):

{
  "mcpServers": {
    "searxng-bridge": {
      "command": "npx",
      "args": ["-y", "@bocklabs/searxng-mcp-bridge"],
      "env": {
        "SEARXNG_INSTANCE_URL": "http://localhost:8080"
      },
      "disabled": false
    }
  }
}

MCP Tools

Perform a web search using the configured SearXNG instance.

Parameters:

Parameter

Type

Required

Description

query

string

Yes

The search query string

language

string

No

Language code for results (e.g., en-US, fr, de)

categories

string[]

No

Categories to search (e.g., ["general", "images", "news"])

time_range

string

No

Time range filter: day, week, month, year

safesearch

number

No

Safe search level: 0 (off), 1 (moderate), 2 (strict)

format

string

No

Result format: json (default) or html

max_results

number

No

Maximum number of results to return

Example response:

{
  "query": "test query",
  "number_of_results": 10,
  "results": [
    {
      "url": "https://example.com",
      "title": "Example Title",
      "content": "Snippet of the search result...",
      "engine": "google",
      "score": 1.0
    }
  ]
}

health_check

Check the health and connectivity status of the SearXNG instance and bridge server.

Parameters: None

Example response:

{
  "status": "healthy",
  "searxng_instance": "http://localhost:8080",
  "searxng_status": "healthy",
  "response_time_ms": 42,
  "cache_size": 3,
  "debug_mode": false,
  "version": "0.11.19",
  "timestamp": "2026-05-16T12:00:00.000Z"
}

Features

  • Search Tool -- Perform web searches with configurable language, categories, time range, safe search, and result limits

  • Health Check -- Monitor SearXNG connectivity, response time, cache size, and version

  • Dual Transport -- Supports both STDIO (default) and HTTP streaming transports

  • Response Caching -- 5-minute TTL cache with periodic cleanup to reduce duplicate requests

  • Retry Logic -- Automatic retry with exponential backoff (3 attempts) for transient failures

  • Startup Validation -- Validates SearXNG connection on launch with detailed error diagnostics

  • Session Management -- HTTP transport includes UUID-based session tracking via mcp-session-id headers

  • CORS Support -- Configurable origin whitelist with proper preflight handling

  • Rate Limiting -- Built-in protection (100 requests/minute per IP) in HTTP mode

  • Bearer Authentication -- Optional token-based auth for HTTP endpoints

  • Debug Logging -- Redacted logs that strip sensitive info (tokens, session IDs, URLs)

  • DNS Rebinding Protection -- Prevents DNS-based attacks in HTTP mode

  • Graceful Shutdown -- Proper cleanup of transports and HTTP server on SIGINT/SIGTERM

Configuration

Environment Variables

Variable

Required

Default

Description

SEARXNG_INSTANCE_URL

Yes

--

Full URL of the SearXNG instance (e.g., http://localhost:8080)

TRANSPORT

No

stdio

Transport protocol: stdio or http

PORT

No

3002

HTTP server port (when TRANSPORT=http)

HOST

No

127.0.0.1

Server bind address (use 0.0.0.0 for containers)

CORS_ORIGIN

No

localhost:3002 (dev) / * (prod)

Comma-separated allowed origins for CORS

MCP_HTTP_BEARER

No

--

Bearer token for HTTP endpoint authentication

SEARXNG_BRIDGE_DEBUG

No

false

Enable debug logging (true to enable)

CLI Flags

Flag

Description

--transport <stdio|http>

Transport mode (overrides TRANSPORT env var)

HTTP Transport

The HTTP transport implements the MCP Streamable HTTP specification (2025-03-26).

Endpoints:

Method

Path

Description

POST

/mcp

Send MCP JSON-RPC requests; initialize new sessions

GET

/mcp

Server-Sent Events stream for notifications

DELETE

/mcp

Terminate sessions

OPTIONS

/mcp

CORS preflight requests

GET

/healthz

Health check (returns { "status": "ok", "version": "..." })

Initialize and search via HTTP:

# 1. Initialize a session
curl -X POST http://localhost:3002/mcp \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"initialize","params":{"protocolVersion":"2025-03-26","capabilities":{},"clientInfo":{"name":"test","version":"1.0.0"}}}'

# 2. List tools (use mcp-session-id from step 1 response)
curl -X POST http://localhost:3002/mcp \
  -H "Content-Type: application/json" \
  -H "mcp-session-id: <session-id>" \
  -d '{"jsonrpc":"2.0","id":2,"method":"tools/list","params":{}}'

# 3. Perform a search
curl -X POST http://localhost:3002/mcp \
  -H "Content-Type: application/json" \
  -H "mcp-session-id: <session-id>" \
  -d '{"jsonrpc":"2.0","id":3,"method":"tools/call","params":{"name":"search","arguments":{"query":"hello world"}}}'

Docker

The Dockerfile is based on node:25-alpine and exposes port 8081.

# Build
docker build -t searxng-mcp-bridge .

# Run in STDIO mode (default)
docker run -d \
  -e SEARXNG_INSTANCE_URL=http://host.docker.internal:8080 \
  searxng-mcp-bridge

# Run in HTTP mode
docker run -d -p 8081:8081 \
  -e TRANSPORT=http \
  -e PORT=8081 \
  -e HOST=0.0.0.0 \
  -e SEARXNG_INSTANCE_URL=http://host.docker.internal:8080 \
  searxng-mcp-bridge

Note: Use HOST=0.0.0.0 when running inside containers to allow external connections.

Development

npm install          # Install dependencies
npm run dev          # Run with tsx (TypeScript execution, no build step)
npm run build        # Compile TypeScript to JavaScript
npm test             # Run tests
npm run test:coverage # Run tests and generate LCOV coverage
npm run watch        # Watch for changes and rebuild automatically
npm run start        # Run the compiled server (stdio mode)
npm run start:http   # Run the compiled server (HTTP mode on port 3002)
npm run inspector    # Run MCP inspector for interactive testing

Release scripts:

npm run release:patch   # Bump patch version (0.11.x)
npm run release:minor   # Bump minor version (0.x.0)
npm run release:major   # Bump major version (x.0.0)

Releases are automated via release-please with Renovate for dependency management.

Contributing

  1. Fork the repository

  2. Create a feature branch: git checkout -b feat/your-feature

  3. Make your changes following existing code style

  4. Ensure npm run test:coverage and npm run build pass

  5. Open a pull request using the PR template

Bug reports and feature requests are welcome via GitHub Issues.

Available Tools

2 tools
health_checkA

Check the health and connectivity status of the SearxNG bridge

NameRequiredDescriptionDefault

No parameters

TDQS

A3.7/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full behavioral burden. It implies a read-only diagnostic check, which is appropriate for a health check, but it does not explicitly state what is returned, whether it requires authentication, or whether it has side effects. For a zero-parameter tool this is acceptable, but more context would improve transparency.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, front-loaded sentence with no wasted words. It immediately conveys the tool's purpose and scope, and every clause earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's simplicity (zero parameters, no output schema) the description is nearly complete. It states the health and connectivity check, which is sufficient for invocation. It could mention return values or typical use cases, but those are minor gaps for such a straightforward tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool has zero parameters, so there are no parameter semantics to document. Per the scoring rules, zero parameters default to a baseline of 4. The description does not need to compensate for missing schema details.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb+resource: "Check the health and connectivity status of the SearxNG bridge." This clearly distinguishes it from the sibling tool "search," which performs searches rather than diagnostics. It could name the sibling explicitly, but the purpose is unmistakable.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Usage is implied by the diagnostic nature of the tool: an agent would call it to verify connectivity before or after using the SearxNG bridge. However, the description does not explicitly state when to use it, when not to, or mention the sibling search tool as an alternative. The guidance is adequate but relies on inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 2 tool updatesv0.12.18
    • First observedhealth_check
    • First observedsearch

TDQS

A3.6/5.0

Scored across 2 tools

Disambiguation5/5

search and health_check have clearly distinct purposes: one performs searches, the other reports connectivity/health. There is no realistic overlap that would cause an agent to misselect between them.

Naming Consistency4/5

Both names use snake_case, which is consistent. However, search is a bare verb while health_check is a verb/noun-style check name, so the pattern is mostly but not perfectly consistent.

Tool Count4/5

Two tools is slightly thin in general, but the server is narrowly scoped as a SearxNG bridge. search and health_check both earn their place and cover the essential surface without bloat.

Completeness4/5

The core lifecycle for this bridge is covered: perform a search and verify health/connectivity. Minor optional gaps might include exposing advanced search parameters or instance/engine metadata, but nothing essential is missing.

Maintenance

ActivityActive
ResponsivenessUnresponsive

Related MCP Connectors

Related MCP Servers

  • A
    license
    A
    quality
    D
    maintenance
    Integrates with SearXNG metasearch engine to provide powerful web search capabilities across multiple search engines with filtering options for categories, languages, time ranges, and safe search levels. Enables comprehensive web searches, autocomplete suggestions, and search engine configuration access through MCP-compatible applications.
    4
    1
    MIT
  • A
    license
    B
    quality
    B
    maintenance
    An MCP server that integrates with the SearXNG API to provide comprehensive web search capabilities with features like time filtering, language selection, and safe search. It also enables users to fetch and convert web content from specific URLs into markdown format.
    2
    21 npm
    4
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables privacy-focused web search via SearXNG for MCP clients, allowing users to perform searches with customizable parameters through natural language.
    221 npm
    MIT
  • F
    license
    Not graded
    quality
    D
    maintenance
    Provides a free web search tool to MCP clients by connecting to a self-hosted SearXNG metasearch instance, enabling users to search the web with customizable parameters like categories and time range.
    -