io.github.AceAtDev/odysseus-web-mcp is an MCP server that secure MCP server for public web search and URL fetching. Its tool list has not been published yet over stdio and sse, requires no API key, and scores 81/100 on MCPpedia's security, maintenance and efficiency rubric.
Config is the same across clients - only the file and path differ.
{
"mcpServers": {
"io-github-aceatdev-odysseus-web-mcp": {
"args": [
"-y",
"odysseus-web-mcp"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Secure MCP server for public web search and URL fetching.
Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.
npx -y 'odysseus-web-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Five weighted categories - click any category to see the underlying evidence.
No known CVEs.
Checked odysseus-web-mcp against OSV.dev.
Click any tool to inspect its schema.
Be the first to review
Have you used this server?
Share your experience - it helps other developers decide.
Sign in to write a review.
Others in search
Open-source web scraper for AI agents with scrape, crawl, and map tools
MCP server for advanced web search using Tavily
MCP server for enterprise local codebase indexing, semantic search, and code dependency graphs.
The official MCP server implementation for the Perplexity API Platform
MCP Security Weekly
Get CVE alerts and security updates for io.github.AceAtDev/odysseus-web-mcp and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
Odysseus Web MCP is a standalone Model Context Protocol (MCP) server for safe public-web search and URL fetching. It runs locally over stdio and gives MCP-compatible AI assistants two retrieval tools: web_search to discover sources and web_fetch to retrieve and extract public URLs.
Built for clients such as Claude Code, Cursor, and Codex, it combines search-provider fallback, readable HTML/PDF/text extraction, optional JavaScript rendering, and SSRF protections including DNS validation and redirect rechecks.


Requirements: Python 3.11+ and uv.
# after downloading/extracting this folder (or cloning your copy)
cd odysseus-web-mcp
uv venv .venv
uv pip install -e '.[dev]'
./run-web-mcp.sh
The server communicates over stdio, so it does not open a web port and does not need to be installed into your host application's Python environment. Register the absolute launcher path in your MCP client:
{
"name": "odysseus-web-mcp",
"command": "/absolute/path/to/odysseus-web-mcp/run-web-mcp.sh",
"args": [],
"cwd": "/absolute/path/to/odysseus-web-mcp"
}
The launcher automatically uses the package's .venv. State defaults to
~/.local/share/odysseus-web-mcp; set WEB_MCP_DATA_DIR to place it
elsewhere. No API key is required for the default fallback path, though Brave,
Tavily, and Serper keys can be added when you want those providers.
web_searchUse it to discover sources for a focused question. It accepts one to three queries plus optional mode, vertical, and freshness controls.
{
"queries": "Model Context Protocol Python SDK",
"mode": "discovery",
"vertical": "general"
}
The response contains ranked URLs, titles, snippets, provider attempts,
cache state, a plain-text display projection, and an evidence_id. A host can
take any returned URL directly into web_fetch.
web_fetchUse it to read a known public URL or a bounded batch of URLs.
{
"url": "https://example.com",
"focus": "the page's purpose",
"render": "auto"
}
It returns extracted text, title and document kind, content quality, link
discovery, redirect history, HTTP status, truncation/continuation metadata,
and an evidence_id. Private and special-use destinations are rejected before
transport by default.
An agent normally uses the tools as a two-step retrieval loop: search first, then fetch the source it wants to inspect. The payloads below show the shape of a real MCP interaction; IDs and result text are abbreviated for readability.
{
"name": "web_search",
"arguments": {
"queries": "official Model Context Protocol architecture",
"mode": "grounding",
"vertical": "general"
}
}
The MCP returns a text content block containing structured JSON:
{
"status": "ok",
"query": "official Model Context Protocol architecture",
"sources": [
{
"title": "Architecture - Model Context Protocol",
"url": "https://modelcontextprotocol.io/docs/concepts/architecture",
"snippet": "Understand the architecture and communication model...",
"provider": "duckduckgo",
"relevance_score": 1.0
}
],
"provider_attempts": {
"searxng": "empty",
"d
... [View full README on GitHub](https://github.com/aceatdev/odysseus-web-mcp#readme)