Back to Browse

Google Search Console MCP Server

Developer ToolsModerate5.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Google Search Console: SEO audits, performance queries, URL inspection, indexing checks.

About

Google Search Console: SEO audits, performance queries, URL inspection, indexing checks.

Security Report

5.2
Moderate5.2Moderate Risk

This is a well-designed Google Search Console MCP server with strong security fundamentals. The server implements read-only OAuth with narrowly scoped permissions (webmasters.readonly), proper token storage with secure file permissions (0600), and no network calls outside Google's API. Authentication is comprehensive with multiple fallback methods (OAuth, service account, ADC). A few minor quality improvements around error handling and logging clarity are recommended, but no security vulnerabilities were identified. Supply chain analysis found 10 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.

3 files analyzed · 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

What You'll Need

Set these up before or after installing:

OAuth client ID from a Desktop app credential in Google Cloud Console.Optional

Environment variable: GSC_CLIENT_ID

OAuth client secret paired with GSC_CLIENT_ID.Required

Environment variable: GSC_CLIENT_SECRET

OAuth refresh token, from `mcp-google-search-console auth`.Required

Environment variable: GSC_REFRESH_TOKEN

Path to a service account JSON key, as an alternative to OAuth.Optional

Environment variable: GSC_SERVICE_ACCOUNT_FILE

Language of the generated HTML audit report: en or it. Defaults to en.Optional

Environment variable: GSC_REPORT_LANGUAGE

Default freshness of the data: all (includes today's partial data) or final.Optional

Environment variable: GSC_DATA_STATE

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-acamolese-google-search-console-mcp": {
      "env": {
        "GSC_CLIENT_ID": "your-gsc-client-id-here",
        "GSC_DATA_STATE": "your-gsc-data-state-here",
        "GSC_CLIENT_SECRET": "your-gsc-client-secret-here",
        "GSC_REFRESH_TOKEN": "your-gsc-refresh-token-here",
        "GSC_REPORT_LANGUAGE": "your-gsc-report-language-here",
        "GSC_SERVICE_ACCOUNT_FILE": "your-gsc-service-account-file-here"
      },
      "args": [
        "mcp-google-search-console"
      ],
      "command": "uvx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!