grok-search
Provides AI-driven web search, page fetching, and site mapping with real xAI citations, enabling LLM clients to access up-to-date external information.
Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.
How we verified
Verified is a snapshot. Live keeps it current, and builds your track record.
⚡ Connect GitHub → continuous verification on every pushwhy connect →Who stands behind it
zhehaosun717
Source: Glama
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
GROK_API_URLGrok API 地址（OpenAI 兼容格式），显式设置时覆盖 GuDa 派生值GROK_API_KEYGrok API 密钥，显式设置时覆盖 GuDa 派生值GROK_DEBUG调试模式GROK_RETRY_MAX_ATTEMPTS最大重试次数GROK_RETRY_MULTIPLIER重试退避乘数GROK_RETRY_MAX_WAIT重试最大等待秒数GROK_SEARCH_MODEGROK_X_SEARCHGROK_WEB_SEARCHGUDA_BASE_URLGuDa 服务基础地址GUDA_API_KEYGuDa 用户只需配置 即可享受完整服务，所有 API 地址自动派生：TAVILY_ENABLED是否启用 TavilyTAVILY_API_URLTavily API 地址TAVILY_API_KEYTavily API 密钥（用于 web_fetch / web_map）FIRECRAWL_API_URLFirecrawl API 地址FIRECRAWL_API_KEYFirecrawl API 密钥（Tavily 失败时托底）GROK_LOG_LEVEL日志级别GROK_LOG_DIR日志目录GROK_MODEL默认模型（设置后优先于 ~/.config/grok-search/config.json）Tool annotations
No tools have read-only/destructive annotations
Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.
All four hints declared on every tool
13/13 tools missing one or more hints — web_search (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); get_sources (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); web_fetch (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +10 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.
For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.
Descriptions match behaviour
1 tool describes read intent but its handler mutates — toggle_builtin_tools (line 725: with open(settings_path, 'w', encoding='utf-8') as f:)
Rename the tool, rewrite the description, or move the side-effect into a separate clearly-named tool.
Tool test coverage
Only 2/13 tools referenced in tests (15%)
Write tests that reference each tool by name so every tool has at least one test.
Tool description accuracy
toggle_builtin_tools: description implies read-only but handler writes/deletes/executes
Update tool descriptions to accurately reflect all capabilities — especially write, delete, or execute operations.
Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.
[](https://m8ven.ai/mcp/zhehaosun717/sunami-grok-search)?variant=verified from the URL.Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.
https://m8ven.ai/api/mcp/tool-check