free-web-mcp
This MCP server provides web search and page-fetching tools to retrieve online information.
web_search(query, max_results): Searches the web and returns matching results with titles, URLs, and snippets.
web_fetch(url, rendered): Fetches a single webpage and extracts its main readable content; optionally uses a headless browser when rendering is enabled.
web_search_and_fetch(query, rendered, max_results): Combines search and fetch — finds top results for a query, then fetches and extracts text from each result URL.
Provides web search through DuckDuckGo, returning titles, URLs, snippets, and sources for search results, and can optionally fetch the content of top results.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@free-web-mcpsearch for the latest MCP servers and summarize the top result"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
Free Web MCP — Verifiable Web Evidence Network
Give AI agents free web access, verify the evidence behind web-derived claims, and anchor evidence fingerprints on BNB Smart Chain (Testnet).
AI Agent → MCP → Web Search → Web Fetch → Claim Extraction → Evidence Collection
→ Cross Verification → Counter Evidence → Evidence Package → SHA-256
→ BSC Testnet (EvidenceRegistry) → DashboardLive demo (local): pnpm dev → http://localhost:3000
Don't trust this README? Every on-chain claim has a credential-free public proof — see docs/VERIFICATION.md.
What this project is
A monorepo with two halves:
Half | What | Stack |
Web evidence pipeline | claim extraction, source scoring, verification, counter-evidence directions, canonical SHA-256 hashing | Node 22 / TypeScript / pnpm |
Dashboard + API | live status board, evidence list/detail, statistics, one-click demo, Anchor Evidence (writes the hash on-chain) | Next.js 14 / React / Tailwind / better-sqlite3 |
MCP server | the 8-tool MCP server ( | Python 3.12 / FastMCP / DuckDuckGo |
Smart contract |
| Solidity 0.8.24 / Foundry / viem |
All evidence packages are persisted in SQLite (apps/web/data/evidence.db) and
can be anchored on-chain — the on-chain record stores only the SHA-256 hash
URI + version + submitter + timestamp, never the full content.
Related MCP server: qsearch
Milestones (computed live on the dashboard)
MCP Server · Web Search · Web Fetch · Evidence Engine · First Evidence · Blockchain Registry · First On-chain Record · Dashboard · Validator · VERI Test Token
Quick start
1. Install
# Node side
pnpm install
# Python side (MCP server)
cd apps/mcp-server && uv sync && cd ../..2. Run everything (3 terminals)
# Terminal 1 — Python MCP server (port 8765)
cd apps/mcp-server && uv run --no-sync free-web-mcp --transport http --host 127.0.0.1 --port 8765
# Terminal 2 — Next.js dashboard (port 3000)
pnpm dev
# Terminal 3 — local blockchain (Anvil, port 8545) — optional for anchoring
anvil --port 85453. See it work
Dashboard: http://localhost:3000 — System Online, live status probes, evidence statistics, Run Demo button (search → fetch → extract → verify → hash).
CLI demo:
pnpm demoprints the same pipeline.Evidence records: http://localhost:3000/evidence and
/evidence/EV-XXXXXX.Anchor on-chain (needs a contract): click Anchor Evidence on a detail page, confirm, and the hash is registered on the EvidenceRegistry.
Environment
Copy .env.example → .env.local (web) / .env (mcp-server). Key vars:
Var | Purpose |
| Chain RPC (Anvil |
| Deployed contract address (after |
| Server-side signer for anchoring (never in frontend/logs) |
| Where the dashboard finds the MCP server ( |
Private keys must never be committed, logged, or sent to the frontend. See SECURITY.md.
Smart contract (Phase 5)
cd contracts
forge build
forge test # 6 tests
# local Anvil
anvil --port 8545 &
forge script script/Deploy.s.sol:DeployEvidenceRegistry \
--rpc-url http://127.0.0.1:8545 --broadcast
# BSC Testnet (needs tBNB — never use a real key)
forge script script/Deploy.s.sol:DeployEvidenceRegistry \
--rpc-url https://data-seed-prebsc-1-s1.binance.org:8545 \
--private-key $PRIVATE_KEY --broadcastThe deployed address goes into .env.local as EVIDENCE_REGISTRY_ADDRESS.
The dashboard then flips Blockchain → CONNECTED and the Anchor button works.
Live deployment (BSC Testnet)
Contract |
|
Network | BSC Testnet (chainId 97) |
Deploy TX | |
Anchor TX (EV-000006) | |
Verify |
|
MCP tools (Python server)
Tool | Description |
| DuckDuckGo search; each result has |
| Fetch + extract main text; returns |
| Search then fetch Top-N in one call |
| Classify outgoing links primary/secondary/tertiary |
| Split text into claims, classify fact/event/number/date/relationship/opinion/inference |
| Generate counter-evidence search directions |
| Build + persist an evidence package via the dashboard API |
| Fetch a persisted evidence package |
All errors return {success:false, error:{type, message}} with a stable
type (INVALID_URL, FETCH_FAILED, TIMEOUT, HTTP_ERROR, PARSER_ERROR,
SEARCH_FAILED, RATE_LIMITED, CONTENT_TOO_LARGE, RENDER_FAILED,
RENDER_TIMEOUT, INTERNAL_ERROR).
Architecture
┌─────────────┐ ┌───────────────────────────────┐
│ MCP Clients │──▶│ apps/mcp-server (Python) │
│ Cursor / │ │ 8 tools, error-wrapped │
│ Claude / │ └───────────────┬───────────────┘
│ ChatGPT │ │ MCP_SERVER_URL
└─────────────┘ ▼
┌─────────────────────────────────────────────────┐
│ apps/web (Next.js dashboard + API) │
│ /api/evidence create/list/stats │
│ /api/evidence/[id] detail │
│ /api/demo/run one-click demo pipeline │
│ /api/anchor/[id] on-chain write (confirm req) │
│ SQLite: apps/web/data/evidence.db │
└──────────────┬────────────────┬─────────────────┘
│ │
▼ ▼
┌──────────────────────┐ ┌─────────────────────────┐
│ packages/evidence │ │ packages/blockchain │
│ claims / engine / │ │ viem client for │
│ canonical SHA-256 │ │ EvidenceRegistry │
└──────────────────────┘ └────────────┬────────────┘
▼
EvidenceRegistry.sol (contracts/)
BSC Testnet (97) or Anvil (31337)Layering rule: MCP tools never touch storage or chain directly — they call the dashboard API; the dashboard owns SQLite + the on-chain signer.
Testing
# Python (44 + SSRF tests)
cd apps/mcp-server && uv run pytest -q
# Node (evidence engine 15, blockchain, web db 6)
pnpm -r test
# Type checks
pnpm -r typecheck
cd apps/mcp-server && uv run mypyCI runs all of the above on every push — see .github/workflows/ci.yml.
Security
See SECURITY.md — SSRF protection, private-key handling, threat model, what is and isn't logged. Key points:
WebClientrejects private/local/link-local addresses (SSRF, spec §30).Rate limits on
/api/demo/runand/api/anchor.On-chain writes require explicit
{confirm: true}and are signed only by the server-side wallet fromWALLET_PRIVATE_KEY.No real funds, no mainnet, no promises of exchange listing. Testnet only.
Roadmap
v0.3 (done): dashboard + evidence engine + SQLite + 8 MCP tools + EvidenceRegistry contract (BSC Testnet:
0xD4F1…85D7) + demo mode + SSRF/rate limits.v0.4 (done): VERI Test Token (BEP-20, testnet:
0x4FF8…50Da) + validator votes & rewards + multi-provider search aggregation + BNB Greenfield evidence publishing (§27, content-addressed) + ERC-8004 agent identity (§28, registered on the official BSC Testnet registry, agentId 2006) + Playwright e2e.Next (watchlist): ERC-8004 reputation feedback writing (needs a second non-owner wallet — the registry blocks self-feedback); agent payments (§29) gated on B402/x402 BSC facilitator self-service; BNB Greenfield mainnet when ready.
License
MIT — see LICENSE.
Available Tools
3 toolsweb_fetchB
Fetch a webpage and extract its main readable content.
Set rendered=True to drive a headless browser (requires RENDER_ENABLED=true).
| Name | Required | Description | Default |
|---|---|---|---|
| url | Yes | ||
| rendered | No |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full transparency burden. It usefully discloses that rendered=True drives a headless browser and requires RENDER_ENABLED=true, going beyond the schema. However, it does not explain the default non-rendered behavior, failure modes, or other behavioral constraints.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two short sentences with the main purpose front-loaded and the optional rendering mode stated compactly. Every sentence earns its place and there is no filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple two-parameter fetch tool with an output schema, the description covers the core behavior and the one non-obvious mode. It is slightly incomplete in that it omits explicit sibling routing and default-mode behavior, but it is sufficient for basic invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate. It adds real meaning for rendered by explaining the headless-browser behavior and the RENDER_ENABLED requirement, but the url parameter is only implicitly covered by 'Fetch a webpage' and gets no format or constraint detail.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific verb ('Fetch') and resource ('a webpage') and adds the key value extra ('extract its main readable content'), making the core purpose clear. It does not explicitly differentiate from the sibling web_search_and_fetch, which may also involve fetching pages.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives no guidance about when to use this tool instead of web_search or web_search_and_fetch. The rendered=True note is a configuration instruction, not a usage-selection guideline, and no alternatives or exclusions are mentioned.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
web_searchB
Search the web and return a list of results (title/url/snippet).
| Name | Required | Description | Default |
|---|---|---|---|
| query | Yes | ||
| max_results | No |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and does state the output format and surface-level behavior. However, it omits non-obvious traits such as rate limits, network/API dependencies, or the fact that it will not fetch page contents.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
One short, front-loaded sentence that conveys the action, target, and result format with no filler. It is appropriately concise for such a simple tool.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The output schema likely covers return values, so the description does not need to restate them, but it still leaves out usage routing and parameter context. For an agent deciding between web_search and its siblings, the description is minimally sufficient rather than complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema has 0% description coverage on parameters, and the description does not compensate by explaining `query` semantics or how `max_results` affects behavior. The parameter names are self-explanatory, but no additional meaning is added.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a clear verb ('Search'), a resource ('the web'), and the return shape (list of title/url/snippet). It does not explicitly call out siblings like web_search_and_fetch, but the focus on returning a result list helps separate it from fetching page content.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided about when to choose this tool over web_search_and_fetch or web_fetch, and no exclusions or prerequisites are mentioned. The 'list of results' phrasing only weakly implies it is for search metadata rather than full-page retrieval.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
web_search_and_fetchA
Search the web, then fetch and extract text from each result URL.
Set rendered=True to drive a headless browser (requires RENDER_ENABLED=true).
| Name | Required | Description | Default |
|---|---|---|---|
| query | Yes | ||
| rendered | No | ||
| max_results | No |
Output Schema
| Name | Required | Description |
|---|---|---|
No output parameters | ||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full behavioral disclosure burden. It does disclose that rendered=True drives a headless browser and requires RENDER_ENABLED=true, and that it fetches from each result URL. However, it omits potential issues like rate limits, latency, fetch failures, or how many URLs are actually processed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two concise sentences with the core operation front-loaded and the conditional rendered caveat placed after. Every sentence earns its place and there is no redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The output schema covers return shape, so that omission is acceptable. However, for a compound tool with no annotations, the description leaves meaningful gaps around max_results behavior, fetch error handling, and operational implications of fetching multiple URLs.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, and the description only explains the rendered parameter. The query and max_results parameters receive no semantic explanation beyond their names, and max_results in particular is non-obvious regarding how it limits the fetch stage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description states a specific compound action: search the web, then fetch and extract text from each result URL. This clearly distinguishes it from the sibling tools web_search and web_fetch, which each cover only one stage of the workflow.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies this tool is for combined search-and-fetch workflows, but it never explicitly names the sibling tools or states when to prefer a single-stage tool instead. The usage guidance is left mostly to inference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
3 tool updates
v0.1.0- First observed
web_fetch - First observed
web_search - First observed
web_search_and_fetch
TDQS
Scored across 3 tools
Each tool has a clearly distinct purpose: web_search returns results, web_fetch retrieves a single page, and web_search_and_fetch explicitly combines both. There is no meaningful overlap between the three.
All tool names follow the consistent web_<action> pattern using lowercase snake_case. The names clearly indicate their operation, including the compound web_search_and_fetch.
Three tools is a reasonable, well-scoped size for a simple web retrieval server. Each tool earns its place, and the combined search-and-fetch adds convenience without bloating the surface.
The core search-and-fetch workflow is fully covered, with an optional rendered mode for JavaScript-heavy pages. A minor gap is lack of a tool for raw HTML or structured page extraction, but most basic browsing needs are addressed.
Maintenance
Related MCP Connectors
Scrape, crawl and search the web for AI agents via MCP.
Web MCP: scrape/crawl sites, web search, brand assets, app stores, YouTube, Reddit, Hacker News.
Stealth web browser for agents: search, fetch, click, download and type in persistent MCP sessions.
Live AI-native web search with citations. One tool for every MCP client. Flat per-request pricing.
Related MCP Servers
- AlicenseAqualityBmaintenanceEnables AI agents to perform multi-engine web search, fetch web pages, and extract clean Markdown content via MCP, with no API keys required.392 PyPI8MIT
- AlicenseNot gradedqualityBmaintenanceEnables AI agents to perform web searches with full content retrieval and multi-engine provenance, including trust scoring and local corpus persistence, via MCP integration.5 npm2Apache 2.0
- AlicenseNot gradedqualityAmaintenanceEnables AI agents to perform live web searches across 9 engines, scrape web pages into clean formats, and run agentic research with citations via MCP.222 PyPI2MIT
- AlicenseBqualityBmaintenanceEnables AI agents to perform web searches and extract full-text content from web pages via standard MCP tools, with fallback search and semantic reranking.22MIT