brave/brave-search-mcp-server

Item: brave/brave-search-mcp-server
Rating: 99
Author: M8ven

Visit https://brave.com/search/api/ for a free API key. Search the web, local businesses, images,…

→ brave/brave-search-mcp-server · listed on official

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Official npm PulseMCP mcp.so mcp.so

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 1 credential: BRAVE_API_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

🔐 secretBRAVE_API_KEY— Your Brave Search API key (required unless BRAVE_API_KEY_FILE is set)

configBRAVE_API_KEY_FILE— BRAVE_API_KEY: Your Brave Search API key (required unless is set)

configBRAVE_MCP_ALLOWED_HOSTS

configBRAVE_MCP_ALLOWED_ORIGINS

configBRAVE_MCP_DISABLED_TOOLS— When used, specifies a space-separated blacklist for supported tools

configBRAVE_MCP_ENABLED_TOOLS— When used, specifies a space-separated whitelist for supported tools

configBRAVE_MCP_HOST

configBRAVE_MCP_LOG_LEVEL— Desired logging level("debug", "info", "notice", "warning", "error", "critical", "alert", or "emergency", default: "info")

configBRAVE_MCP_PORT— HTTP server port (default: 8080)

configBRAVE_MCP_STATELESS— HTTP stateless mode (default: "true"). When running on Amazon Bedrock Agentcore, set to "true".

configBRAVE_MCP_TRANSPORT— Transport mode ("http" or "stdio", default: "stdio")

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/brave-brave-search-mcp-server-1izryb)](https://m8ven.ai/mcp/brave-brave-search-mcp-server-1izryb)

commit: 76106c83f9d57319478b540374ba261061d26c3e

code hash: cd6a798f6c8f10c7f0966c97fd841f7338c04d8170fc6116194089c57360f53a

verified: 7/26/2026, 8:53:42 AM

view raw JSON →