BBrave SearchAn MCP server implementation that integrates the Brave Search API, providing comprehensive search capabilities including web search, local business search, image search, video search, news search, and AI-powered summarization. This project supports both HTTP and STDIO transports, with HTTP as the default mode.

mcp-so:brave-search_Brave

View source
B
85/100

First Seen

Feb 18, 2026

Last Scanned

Feb 18, 2026

Findings

1

Score

85/100

HIGH 1

Findings (1)

HIGH
Inline code execution in MCP command
L58

Detects MCP servers using inline code execution via -e, -c, or eval flags

"args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "BRAVE_API_KEY"
FIX

Restrict MCP server permissions to the minimum required. Remove broad filesystem, network, or execution permissions and use scoped access controls (specific directories, specific tools).

FP?

Likely FP if the broad permissions are in a development/testing configuration that is clearly not intended for production use.