Agent Search Pro MCP Server

Agent Search Pro is a well-architected x402 payment-gated web search MCP server with thoughtful security design around payment flows and telemetry. However, several code quality issues and a credential handling gap reduce confidence. The server properly isolates paid operations behind cryptographic payment verification, implements structured telemetry with wallet pseudonymization, and scopes permissions appropriately to its stated purpose. The main concerns are: (1) the Serper API key is passed over HTTPS to an external service without additional per-request authentication, (2) error messages in payment flows may leak partial facilitator responses, and (3) broad exception handling in critical paths masks real errors. These are not critical vulnerabilities but reflect operational security gaps typical of experimental revenue systems. Supply chain analysis found 8 known vulnerabilities in dependencies (0 critical, 1 high severity).

7 files analyzed · 16 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.