RivalSearchMCP MCP Server

Findings (36)

• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• highHigh. Something risky that needs a close look before you install.
  dependencies issue

  Details are available to the maintainer after claiming this listing.
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  dnspython@2.8.0: 2 known vulnerabilities

  GHSA-45c3-73f7-pv4m, GHSA-45c3-73f7-pv4m

  requirements.txt
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  fsspec@2026.1.0: 2 known vulnerabilities

  PYSEC-2026-4217, PYSEC-2026-4217

  requirements.txt
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  lxml@6.0.2: 2 known vulnerabilities

  PYSEC-2026-87, PYSEC-2026-87

  requirements.txt
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  mcp@1.25.0: 14 known vulnerabilities

  PYSEC-2026-3481, PYSEC-2026-3482, PYSEC-2026-3483, GHSA-5h93-6whr-6q8j, GHSA-84m7-p3x7-pcfv +9 more

  requirements.txt
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  protego@0.6.0: 2 known vulnerabilities

  PYSEC-2026-3906, PYSEC-2026-3906

  requirements.txt
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  pypdf@6.6.0: 122 known vulnerabilities

  PYSEC-2026-1827, PYSEC-2026-3004, PYSEC-2026-3005, PYSEC-2026-3006, PYSEC-2026-3007 +117 more

  requirements.txt
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  python-multipart@0.0.21: 14 known vulnerabilities

  PYSEC-2026-1852, PYSEC-2026-3036, PYSEC-2026-3037, PYSEC-2026-3038, PYSEC-2026-3039 +9 more

  requirements.txt
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  soupsieve@2.8.2: 8 known vulnerabilities

  PYSEC-2026-3071, PYSEC-2026-3072, PYSEC-2026-4170, PYSEC-2026-4171, PYSEC-2026-3071 +3 more

  requirements.txt
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  starlette@0.52.1: 10 known vulnerabilities

  PYSEC-2026-161, PYSEC-2026-2280, PYSEC-2026-2281, PYSEC-2026-248, PYSEC-2026-249 +5 more

  requirements.txt
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  torch@2.9.1: 8 known vulnerabilities

  PYSEC-2026-139, PYSEC-2026-2286, GHSA-qfhq-4f3w-5fph, GHSA-rrmf-rvhw-rf47, PYSEC-2026-139 +3 more

  requirements.txt
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  urllib3@1.26.20: 14 known vulnerabilities

  PYSEC-2026-141, PYSEC-2026-1994, PYSEC-2026-1996, PYSEC-2026-1998, PYSEC-2026-1999 +9 more

  requirements.txt
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  filelock@3.28.0: 9 known vulnerabilities

  GHSA-567q-5qvw-pf92, GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g, GHSA-9vhv-jxww-xfm5, GHSA-cwqr-hh33-gh44 +4 more

  uv.lock
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  virtualenv@21.2.4: 19 known vulnerabilities

  PYSEC-2026-4011, PYSEC-2026-4012, PYSEC-2026-4013, PYSEC-2026-4014, GHSA-394h-qwmc-48pf +14 more

  uv.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  fastmcp@3.2.4: 2 known vulnerabilities

  GHSA-7xgj-8392-5q4r, GHSA-7xgj-8392-5q4r

  requirements.txt
• lowLow. Minor, or common in normal tools. Shown for information.
  filelock@3.20.3: 2 known vulnerabilities

  GHSA-69hj-f68j-2879, GHSA-8mx5-7m5m-r77g

  requirements.txt
• lowLow. Minor, or common in normal tools. Shown for information.
  idna@3.11.0: 1 known vulnerability

  PYSEC-2026-215

  requirements.txt
• lowLow. Minor, or common in normal tools. Shown for information.
  multidict@6.7.0: 2 known vulnerabilities

  PYSEC-2026-4244, PYSEC-2026-4244

  requirements.txt
• lowLow. Minor, or common in normal tools. Shown for information.
  opentelemetry-api@1.39.1: 2 known vulnerabilities

  GHSA-xcq7-p3pf-p88h, GHSA-xcq7-p3pf-p88h

  requirements.txt
• lowLow. Minor, or common in normal tools. Shown for information.
  pydantic-settings@2.12.0: 2 known vulnerabilities

  GHSA-4xgf-cpjx-pc3j, GHSA-4xgf-cpjx-pc3j

  requirements.txt
• lowLow. Minor, or common in normal tools. Shown for information.
  pygments@2.19.2: 2 known vulnerabilities

  PYSEC-2026-2987, PYSEC-2026-2987

  requirements.txt
• lowLow. Minor, or common in normal tools. Shown for information.
  python-dotenv@1.2.1: 2 known vulnerabilities

  PYSEC-2026-2270, PYSEC-2026-2270

  requirements.txt
• lowLow. Minor, or common in normal tools. Shown for information.
  requests@2.32.5: 2 known vulnerabilities

  PYSEC-2026-2275, PYSEC-2026-2275

  requirements.txt
• lowLow. Minor, or common in normal tools. Shown for information.
  setuptools@82.0.1: 2 known vulnerabilities

  PYSEC-2026-3447, GHSA-xmj3-9gf7-h52w

  requirements.txt
• lowLow. Minor, or common in normal tools. Shown for information.
  idna@3.11: 1 known vulnerability

  PYSEC-2026-215

  uv.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  pytest@9.0.2: 1 known vulnerability

  PYSEC-2026-1845

  uv.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  setuptools@80.9.0: 2 known vulnerabilities

  PYSEC-2026-3447, GHSA-xmj3-9gf7-h52w

  uv.lock
• lowLow. Minor, or common in normal tools. Shown for information.
  No manifest declaring network access and environment variables (agent.json)
• lowLow. Minor, or common in normal tools. Shown for information.
  Contacted these domains while starting up (no manifest to compare against)

  pypi.org

Network activity

Tools exposed (9)

• web_search

  Concurrent multi-engine web search across DuckDuckGo, Bing, Yahoo, Mojeek, and Wikipedia. Results are deduplicated and merged; failures on any single engine do not block the others.

• map_website

  Map and explore websites with different modes for different use cases.

• content_operations

  One tool for every URL/content-level operation. Pick `operation`, provide whichever of `url`, `urls`, `content` that operation needs, and leave the rest defaulted. Parameter annotations above (visible in the MCP schema) state which operation each parameter applies to. Quick map of operation -> requ

• research_topic

  End-to-end deterministic research workflow. One tool, two modes: topic - open-ended search + fetch + extract entity - unified cross-source profile of a named entity Both modes auto-attach per-result quality scores and an aggregate confidence signal so callers can calibrate trust.

• scientific_research

  Scientific research tool for academic papers and datasets. Supports two operations: - academic_search: Search for academic papers across multiple sources - dataset_discovery: Discover datasets from various repositories Sources for academic_search (all keyless, queried concurrently): - openalex

• social_search

  Search across social platforms and communities for discussions and content. Supported platforms (no authentication required): - reddit Reddit (JSON API) - hackernews Hacker News (Algolia-powered full-text search) - devto Dev.to (tag lookup + recent-articles filter) - produ

• news_aggregation

  Aggregate news from multiple keyless sources concurrently. Sources queried in parallel (all verified working, no authentication required): - Google News RSS (search, with `when:` freshness operator) - Bing News RSS (search, with age filter; uses curl subprocess because Bing rejects httpx's

• github_search

  Search GitHub repositories without authentication. Searches public GitHub repositories using the public API. No authentication token required.

• document_analysis

  Download and analyze documents of multiple types with OCR support. Supports: PDF, Word (.docx), Text (.txt, .md), Images (.jpg, .png) with OCR. Extracts text content and metadata without requiring authentication. Automatically uses OCR for scanned PDFs and images.