Enterprise-grade web search MCP server with PII detection, prompt-injection screening, content scraping, and reranking capabilities. Returns LLM-ready markdown with full audit trail and compliance boundaries.
Single tool 'web_search' has a well-structured input schema with 5 parameters, all typed and described. Tool description is clear and actionable (145 chars). Parameters include enums (category, timeRange), numeric bounds (maxResults 1-20), and language codes. However, output schema is not documented in the visible code, the tool description mentions 'scraped and optionally reranked content with citations and source URLs' but no formal output structure is defined. Error handling and recovery guidance are absent. The tool follows verb_noun naming and accepts natural parameters (query, language codes) rather than opaque IDs, which is good. Missing: output schema documentation, error classification, and recovery hints.
Search the web and retrieve relevant content from result pages. Returns scraped and optionally reranked content with citations and source URLs. Content is checked for PII according to deployment policy.
Output schema not documented. Tool description mentions 'scraped content with citations and source URLs' but no formal JSON schema for the response is visible in code or docs. LLMs cannot plan downstream operations without knowing response structure.
No error handling or recovery guidance. Tool description does not explain what happens on network failure, invalid query, or PII detection. LLMs have no guidance on retry strategy or fallback actions.
PII filtering mentioned in description but not exposed as a parameter or configuration. Description states 'Content is checked for PII according to deployment policy' but no control or transparency mechanism is visible.
No pagination or result limiting guidance. maxResults caps at 20, but description does not explain what happens if query matches thousands of results or how to iterate through pages.
Inferred effective spec: <=2025-11-25.
| Scored | Grade | Overall | Spec posture | Rubric |
|---|---|---|---|---|
| 2026-09-23 | D | 59 | <=2025-11-25 | v2 |
STDIO transport only. Server is not remotely accessible and cannot be used by hosted MCP clients. This is a hard architectural limitation.