Brave Search MCP Server

PassAudited by ClawScan on May 1, 2026.

Overview

This appears to be a coherent Brave Search integration, but using it means running an external npm/GitHub MCP server and giving it a Brave API key.

Before installing, confirm the npm package and GitHub repository are genuinely controlled by Brave, consider pinning a known version, use a dedicated Brave API key, and avoid sending sensitive search terms or precise locations unless you are comfortable sharing them with Brave Search.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence

ASI04: Agentic Supply Chain Vulnerabilities

What this means

Installing or running the package executes code supplied outside this skill artifact.

Why it was flagged

The setup uses external npm/GitHub sources and does not pin a version. This is normal for an MCP server install, but users should verify the package and repository provenance before running it.

Skill content

npm install -g @brave/brave-search-mcp-server ... npx ... @brave/brave-search-mcp-server ... git clone https://github.com/brave/brave-search-mcp-server

Recommendation

Verify that the npm package and GitHub repository are Brave-controlled, and consider pinning a trusted version instead of relying on the latest package.

NoteHigh Confidence

ASI03: Identity and Privilege Abuse

What this means

The configured server can use the user's Brave Search API quota and any permissions associated with that key.

Why it was flagged

The MCP configuration expects a Brave API key. That is purpose-aligned for Brave Search, but it grants access to the user's API quota/account and is not declared in the registry metadata.

Skill content

"env": { "BRAVE_API_KEY": "YOUR_API_KEY_HERE" }

Recommendation

Use a dedicated Brave API key with the least necessary access, store it only in the MCP environment, and monitor usage or revoke it if no longer needed.

NoteHigh Confidence

ASI07: Insecure Inter-Agent Communication

What this means

Sensitive search terms or precise locations included in prompts may be shared with Brave's API.

Why it was flagged

The skill sends search queries, and potentially locations for local search, to an external search API. This is the core purpose of the tool but is still a data-sharing boundary users should notice.

Skill content

Provides comprehensive search capabilities ... Brave Search API ... `location` (optional) - City, address, coordinates

Recommendation

Avoid putting private personal, business, or precise location details into searches unless you intend to send them to the Brave Search API.