Agent Search MCP
Agent Search MCP provides free-first English/Chinese web search with inspectable evidence and content-fetch tools.
Search the web across 17 adapters (9 zero-key and 8 optional API engines), with bounded fallback, deduplication, confidence/relevance/source-count signals, and visible partial failures.
Run advanced searches with domain filters, language and confidence/source-count controls, waterfall search, and optional content enrichment;
time_rangeis deprecated and returnsUNSUPPORTED_FILTER.Extract any public URL as clean Markdown via Jina Reader, with SSRF protection and configurable truncation.
Fetch GitHub repository READMEs, CSDN articles, and Juejin articles.
Use
search_with_synthesisto gather structured multi-source evidence plus aprompt_hintfor agent-authored cited answers, without an external LLM call.Inspect execution metadata including engines searched, stop reason, quality gate, budgets, evidence truncation, cache/rate-limit info, and security notes.
Provides global web search as a paid fallback engine, with rate limits (2000 free queries/month).
Provides free global web search without an API key, used as a core engine for multi-source verification.
Provides free Chinese web search without an API key, enabling native Chinese language results.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@Agent Search MCP search for latest AI news"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
Agent Search MCP: Free-first Web Search with Inspectable Evidence
A Node.js MCP server and CLI for English and Chinese web search.
Agent Search MCP starts without an API key. It returns compact multi-source evidence, records provider failures, and bounds work with request and evidence budgets. Paid providers run only when policy and credentials allow.
中文文档 · Product page · Benchmarks · Architecture · CHANGELOG
Install
npx -y agent-search-mcpRequires Node.js >= 18.17. The default runtime does not require a browser, database, Python, or a search API account.
Connect an MCP client
Use this stdio configuration in MCP clients that accept mcpServers JSON,
including Claude Desktop, Cursor, VS Code, and Windsurf:
{
"mcpServers": {
"agent-search": {
"command": "npx",
"args": ["-y", "agent-search-mcp"]
}
}
}Claude Code and Codex can register the same npx -y agent-search-mcp stdio
command through their MCP settings.
Add the optional Agent Skill
After connecting the MCP server, Agent Skills-compatible clients can install the repository-owned routing guide:
npx skills add lennney/agent-search-mcp --skill agent-searchInvoke it with a request such as Use $agent-search to verify this claim with official sources. The Agent Search Skill
chooses one of four bounded paths: quick discovery, stricter verification,
Chinese-source search, or extraction of a selected URL. It checks that the
needed MCP tool exists and asks before any install or configuration change.
Installing the Skill does not start or configure the MCP server.
Example: inspect a bounded search result
After building the local package, run a CLI query without adding a provider key:
npm run build
fasm search "MCP server without an API key" --jsonThe response contract keeps result evidence, meta.execution, and
partialFailures separate. A provider timeout or challenge remains visible to
the agent instead of being converted into an unexplained empty result. This is
a contract example, not a live availability or search-quality benchmark.
After a global install, check the local runtime without making a search request:
npm install -g agent-search-mcp
fasm doctorRelated MCP server: websearch-skill
Why Agent Search MCP
Need | Product behavior |
Free web search | Zero-key sources work without an API account |
Provider cost control | Paid providers run only under an explicit routing policy |
Token cost control | Compact output and one evidence budget bound response size |
Multi-source evidence | Results retain provenance, relevance, provider-family count, and partial failures |
Chinese web search | Sogou and Baidu handle Chinese queries without a translation layer |
Lightweight self-hosting | Pure Node.js runtime with stdio, Streamable HTTP, and CLI access |
The difference from a plain multi-engine wrapper
Plain multi-engine aggregation | Agent Search MCP |
Returns N deduplicated results | Returns results plus the number of independent sources (provider families, not adapter names) |
A provider failure quietly drops some results | Every failure stays in |
Stops when the result count looks sufficient | Stops only after a quality gate (count, relevance, confidence, source coverage) and returns the |
Fixed-size output | One shared evidence budget bounds response tokens; compact text keeps provenance |
One adapter counts as one source | The same upstream through several adapters never inflates |
The one-minute offline demo replays these differences through the production evidence scorer and formatter:
Inspect the search evidence
Each JSON response includes one Search Evidence Packet. It answers the routing questions an agent needs before it uses a result:
Question | Response field |
Which adapters ran? |
|
Why did the router stop? |
|
Did the request hit a work limit? |
|
Was evidence truncated? |
|
Did an upstream provider fail? |
|
Do multiple adapters represent independent sources? |
|
Run the one-minute offline contract demo:
npm run demo:evidence
npm run demo:evidence -- --jsonIt replays three synthetic scenarios through the production evidence scorer, formatter, and MCP output helper: same-family adapter overlap, visible fallback failure, and a bounded quality-gate stop. It makes no live availability or search-quality claim and performs no network request.
The default free_first policy never spends a configured API credential.
free_only blocks paid providers. quality_escalation can call one configured
paid provider after free evidence misses the quality gate, while paid_first
tries that provider before the free fallback.
Request budgets cap adapter attempts, elapsed time, and admitted results. The evidence budget caps query-relevant passages across the complete response. Compact mode keeps full detail for the first results and reduces later entries to source-preserving references.
Measured token reduction
The checked-in bilingual fixture measures formatting with a locked tokenizer:
Output | Average tokens per query | Savings vs normal |
Normal | 2396.0 | |
Compact | 1650.1 | 31.1% |
Compact+ | 1633.0 | 31.8% |
This fixture verifies output formatting and evidence-packet behavior. It does not measure live engine availability or search quality. See the benchmark method and limitations.
How the search router works
flowchart LR
A["AI agent"] --> M["MCP search tools"]
M --> P["Provider and request policy"]
P --> F["Zero-key sources"]
P --> O["Optional paid provider"]
F --> E["Deduplicate, rank, and preserve failures"]
O --> E
E --> B["Evidence and token budget"]
B --> R["Compact multi-source result"]The router evaluates each search batch against separate result, relevance,
confidence, and provider-family gates. It stops after the evidence passes those
gates and exposes the decision in meta.execution. Provider failures stay
visible in partialFailures, so an empty result cannot hide an upstream error.
The competitive landscape (2026-08-07) maps the crowded baseline and the product gaps. It records source dates and fixed commits for facts that can change. The 2026-08-10 update adds competitor activity since then: direct local competitors are dormant, and token-efficient evidence is becoming an industry-explicit lever. The earlier source-level product comparison contains the architecture-specific evidence.
Engines
The runtime registers 17 adapters: 9 zero-key adapters and 8 optional API adapters.
Engine | Access | Languages | Role |
DuckDuckGo | Zero-key | en | General Web Search |
Sogou Search | Zero-key | zh | Chinese Web Search |
Bing | Zero-key | en, zh | Multilingual Web Search |
Baidu | Zero-key | zh | Chinese Web Search |
Wikipedia | Zero-key | en, zh, ja, de, fr, es, auto | Encyclopedic references |
Startpage | Zero-key | en, auto | Privacy-oriented Web Search |
Yandex | Zero-key | ru, en, auto | Russian and international Web Search |
Mojeek | Zero-key | en, auto | Independent privacy-oriented index |
Wiby | Zero-key | en | Independent small-Web index |
Brave Search |
| en, zh | Optional commercial Web Search |
Tavily Search |
| en, zh | Optional agent-oriented Search |
Exa Search |
| en, zh | Optional neural Search |
Keenable Search |
| en, auto | Optional independent agent-oriented Search |
You.com Search |
| en, zh | Optional commercial Web Search |
Tencent Web Search API |
| zh | Optional official Chinese Web Search |
Bocha Web Search |
| zh, en | Optional Chinese-first AI Search |
Serper Google Search |
| en, zh, auto | Optional Google SERP Search |
Tools
Tool | Description | Best for |
| Multi-engine Web Search with bounded fallback | Quick facts and general discovery |
| Filtered waterfall search and optional enrichment | Domain policy and progressive verification |
| Extract a URL as clean Markdown | Reading complete source pages |
| Fetch a public GitHub repository README | Project documentation |
| Fetch a CSDN article | Chinese technical articles |
| Fetch a Juejin article | Chinese developer articles |
| Search evidence with an LLM synthesis hint | Agent-authored answers from cited evidence |
Capability controls
Environment | Default | Purpose |
| all / none | Tool registration allowlist and denylist; deny wins |
| all / none | Engine execution allowlist and denylist; deny wins |
| free_first | Default routing: free_first, quality_escalation, paid_first, or free_only |
| brave,exa,tavily,keenable,youcom,tencent_wsa,bocha,serper | Selects the first configured optional provider; not a quality claim |
| 16 | Adapter-attempt budget |
| 30000 | End-to-end elapsed-time budget |
| 100 | Admitted raw-result budget |
| 1200 | Evidence-character budget |
search_with_synthesis uses the same canonical structuredContent evidence
packet as the primary search tools and adds prompt_hint; its text content is
only a compact compatibility view. Execution metadata distinguishes scheduled
adapters from retry-inclusive adapter attempts. http_requests is null until
all adapter transports can report it without false precision.
Wiby is a genuine zero-key source backed by its official JSON API and is used late in the free waterfall as an independent small-Web supplement. Optional providers require user credentials; any signup credit or trial quota is provider-controlled and is not treated as permanent free access.
All tools are read-only and idempotent. Search cancellation reaches rate-limit waits, retries, provider requests, and optional enrichment. Enrichment can improve a snippet but cannot increase source confidence or independent source count.
free_search_advanced.time_range remains in the compatibility schema. The
server returns UNSUPPORTED_FILTER before searching because the general web
providers do not share one enforceable recency contract.
Configuration
The generated capability table above lists the default request budgets. These settings cover the common deployment choices:
Goal | Environment variables |
Add an optional provider |
|
Choose spend policy |
|
Reduce response tokens |
|
Restrict tools or engines |
|
Use an explicit proxy |
|
Use a user-owned proxy pool |
|
Persist the exact-result cache |
|
Enable optional semantic processing |
|
Adding an API key does not authorize paid traffic. The routing policy controls
provider use. The default exact-result cache stays in memory; setting
SEARCH_CACHE_DIRECTORY opts into local persistence. Semantic processing is
the only optional feature that uses Python and Model2Vec.
Proxy pools select a deterministic first exit from the logical query and keep
multi-step provider requests sticky. Only a transport failure can move to the
next configured exit; a failed transport is cooled for 60 seconds. HTTP
responses, including 403, 429, and challenge pages, never trigger proxy
switching and continue through the provider's existing cooldown contract.
Engine-specific single-proxy variables take precedence over their pool. Proxy
credentials are never printed by fasm doctor.
HTTP deployment
HTTP mode requires HTTP_AUTH_TOKEN unless you set
HTTP_ALLOW_UNAUTHENTICATED=true. Browser requests with an Origin header must
match ALLOWED_ORIGINS. See the HTTP deployment guide
for TLS termination, token rotation, and reverse-proxy examples.
CLI
The package includes the fasm CLI:
fasm search "TypeScript MCP server"
fasm search "query" --count 5 --engines bing,baidu,youcom --json
fasm extract "https://example.com"
fasm extract "https://example.com" --json
fasm doctor
fasm doctor --json
HTTP_AUTH_TOKEN=change-me MODE=http npx agent-search-mcpfasm doctor reads local configuration without network probes and never prints
credential or proxy values.
Documentation and evidence
Document | Contents |
Routing, evidence, provider families, and configuration | |
Competitor activity through 2026-08-10, positioning, and improvement priorities | |
Baseline competitors, expectations, and product gaps snapshot | |
Source-level review of Agent search products | |
Token fixture, live-run scope, and quality evaluation method | |
Provider policy, budgets, and migration notes | |
Pre-expansion packed-install matrix and limitations | |
Isolated protocol experiment and remaining gates |
Companion: Slim Guard
Agent Search controls retrieval work and compresses search evidence. mcp-slim-guard sits between an agent and MCP servers to handle tool-schema compression and security policy.
npm install -g mcp-slim-guardDevelopment
git clone https://github.com/lennney/agent-search-mcp.git
cd agent-search-mcp
npm install
npm run build
npm test
npm run dev # stdio mode
npm run dev:http # HTTP mode (port 3000)The stable package supports Node.js 18, 20, and 22. The isolated MCP 2026 experiment requires Node.js 20 or newer.
License
Based on open-websearch by Aas-ee.
If Agent Search MCP helps your agent, star the repository so other developers can find the project.
Available Tools
7 toolsfetch_csdn_articleARead-onlyIdempotent
Fetch content from a CSDN blog article.
Best for: Chinese developer blog content on CSDN. Not recommended for: Other Chinese sites — use free_extract instead.
@readOnly true @idempotent true — makes outbound HTTP requests to the CSDN article URL.
Inputs: url (required).
fetch_github_readmeARead-onlyIdempotent
Fetch README content from a GitHub repository.
Best for: Getting project documentation quickly. Not recommended for: Non-GitHub URLs — use free_extract instead.
@readOnly true @idempotent true — makes outbound HTTP requests to raw.githubusercontent.com.
Inputs: url (required).
fetch_juejin_articleARead-onlyIdempotent
Fetch content from a Juejin article.
Best for: Chinese developer articles on Juejin. Not recommended for: Non-Juejin content — use free_extract instead.
@readOnly true @idempotent true — makes outbound HTTP requests to juejin.cn API.
Inputs: url (required).
free_extractARead-onlyIdempotent
Extract full content from a URL. Returns clean markdown text.
Best for: Reading a specific page found in search results to get full context. Not recommended for: Bulk extraction — use free_search first to find relevant pages.
Behavior: Makes an outbound HTTP request to Jina Reader (r.jina.ai) which fetches and converts the page to markdown. Has SSRF protection: blocks private IPs, localhost, and metadata endpoints. 10s request timeout — pages exceeding this will fail with a timeout error. HTTP errors (4xx, 5xx) are returned as structured error responses.
Inputs: url (required), max_length.
free_searchARead-onlyIdempotent
Search the web with an explicit adapter set and bounded fallback.
Best for: Quick fact-finding, general search, when date/domain filters are not needed. Not recommended for: Filtered or verified-only results — use free_search_advanced. For full page content — use free_extract.
Twelve adapters are selectable; the default request uses DuckDuckGo + Sogou only. Adapters that share one upstream family are tried sequentially on failure and never double-count as corroboration. Explicitly requested optional API adapters run only when credentials are present and the free basket is short or below the quality gate. Results are deduplicated and include separate confidence, relevance, and source-count signals.
@readOnly true @idempotent true — makes outbound HTTP requests to configured search engines. Injection detection and SSRF protection active.
Inputs: query (required), limit, engines. Returns: meta, query, engines, results, +5 more
free_search_advancedARead-onlyIdempotent
Advanced search with filters and quality control.
Best for: Domain filtering, high-confidence only, Chinese content. Not recommended for: Simple queries — use free_search instead.
@readOnly true @idempotent true — runs waterfall progressive search across policy-allowed engines. Makes outbound HTTP requests to search engines and optionally to Jina Reader for content enrichment.
Inputs: query (required), count, enrich, language, +9 more. Returns: meta, query, engines, results, +5 more
search_with_synthesisARead-onlyIdempotent
Deep search with waterfall multi-engine verification. Returns structured results plus a prompt_hint for the agent to synthesize its own answer. No external LLM call or model API key is required; search and enrichment still make outbound network requests.
Best for: Complex queries needing multi-source verification and LLM synthesis. Not recommended for: Simple fact-finding — use free_search instead.
@readOnly true @idempotent true — runs waterfall search across free+paid engines with content enrichment.
Inputs: query (required), count, language, min_confidence, +1 more.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
TDQS
Scored across 7 tools
Each tool has a clearly distinct purpose: specialized fetchers for popular developer sites (CSDN, GitHub, Juejin), general search with two levels (free_search and free_search_advanced), a content extraction tool (free_extract), and a synthesis search (search_with_synthesis). Descriptions include explicit differentiation, eliminating ambiguity.
Names consistently use snake_case with a verb_noun structure (e.g., fetch_csdn_article, free_search). Minor inconsistency: 'search_with_synthesis' is more descriptive but still follows the pattern. The 'free_' prefix is used for search-related tools, and 'fetch_' for site-specific fetchers, maintaining a logical grouping.
Seven tools is well-scoped for a search and content extraction server. It covers basic and advanced search, synthesis, general content extraction, and three site-specific fetchers. No tool feels redundant or missing; each earns its place.
The tool surface appears complete for its purpose: it provides search (basic, advanced, synthesis), general page extraction, and specialized fetchers for common developer resources. There are no obvious gaps like missing domain filters (advanced search has them) or search result management.
Maintenance
Related MCP Connectors
Free web search for AI agents. No API key required. Hosted MCP in active development.
Multi-engine search for AI agents. Trust scoring, local corpus, MCP-native. Self-hostable, BYOK.
Your agent needs the open web — searched by more than one engine, and read as clean markdown rather than raw HTML. **What you can ask for** • "Search this question with two providers and tell me where they disagree." • "Scrape these 40 URLs into markdown, in one batch." • "Crawl this documentation site and give me every page." • "Do deep research on this topic and cite the sources." • "Find the academic papers behind this claim." **How to use it** Point any MCP client at https://mcp.aisa.one/search/mcp and sign in with OAuth — there is no key to create or paste. 30 tools across several independent providers: Tavily and Exa search, answers, contents and agent runs; Firecrawl scrape, batch scrape, crawl, map and search; Perplexity Sonar, Sonar Pro, reasoning and deep research; Oxylabs AI search and LLM jobs; OpenAI and Anthropic web search; and scholarly search. **Why this rather than the source** Several independent indexes behind one account, because one engine's blind spot is not visible from inside it. **It is also a door to the rest** The same login reaches 26 sources and 580+ operations. Find the page here, then ask the same agent who links to it or how much traffic it gets — without adding a second server. **What it costs** Finding and inspecting an operation is free. Running one is billed per call at API prices, with no seat and no monthly minimum, and every call takes max_price_usd so an agent cannot overspend by accident. **Where else it reaches** https://mcp.aisa.one/seo-serp/mcp for the Google results page itself, https://mcp.aisa.one/seo-serp-other-engines/mcp for Bing, Baidu and Naver.
Web search & fetch MCP for AI agents: 12 engines, one key, flat $15/mo at ransack.tools.
Related MCP Servers
- AlicenseAqualityFmaintenanceFree multi-source web search server for AI agents, with confidence scoring and token optimization.3178 npmApache 2.0
- AlicenseAqualityDmaintenanceEnables AI agents to perform multi-engine web search, fetch web pages, and extract clean Markdown content via MCP, with no API keys required.358 PyPI8MIT
- AlicenseAqualityBmaintenanceFree self-hosted web search for AI agents with multi-engine parallel search, semantic re-ranking, and native China network support. Zero API keys.2160 PyPI27MIT
- AlicenseAqualityBmaintenanceA Grok-first multi-source search MCP for AI agents that integrates Grok, Tavily, AnySearch, and Firecrawl to provide unified search results, cross-verification, and web content fetching.4MIT