Back to Browse

Cerebrum MCP Server

Developer ToolsUse Caution4.4MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

Search the scientific literature and get a cited answer, plus the Trending in Science edition.

About

Search the scientific literature and get a cited answer, plus the Trending in Science edition.

Remote endpoints: streamable-http: https://askcerebrum.org/mcp

Security Report

4.4
Use Caution4.4High Risk

The visible portion of this Cerebrum frontend shows no data exfiltration, obfuscation, shell execution, or hardcoded secrets. The review is incomplete because the code is truncated and the backend Pages Functions (functions/api/search.js, auth and secret handling) were not provided, so server-side auth and secret handling could not be verified. Remaining concerns are low-severity: unverified backend controls, a version mismatch between the vendored Cargo crate and the npm dependency, and a client-side Zotero API key flow. Supply chain analysis found 7 known vulnerabilities in dependencies (0 critical, 4 high severity).

4 files analyzed · 12 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

local_storage

Check that this permission is expected for this type of plugin.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

Cerebrum

A scientific literature search engine at askcerebrum.org.

Ask a question. Cerebrum searches 14 open scholarly databases in parallel, then writes an answer whose citations link to papers you can open and check.

The count is not typed here — it is derived from SCHOLARLY_SOURCES in functions/lib/product.js, and npm run check fails the build if any copy in the repository disagrees with it.

Stack

  • Frontend: React + Vite, deployed as static site on Cloudflare Pages
  • Backend: Cloudflare Pages Functions (functions/api/search.js)
  • AI: OpenRouter free models (Gemini Flash, DeepSeek, Llama, Qwen, Mistral) + Pollinations legs + Cloudflare Workers AI fallback
  • Databases: see SCHOLARLY_SOURCES in functions/lib/product.js for the authoritative list
  • Animation: GSAP for choreography, OGL for the WebGL background. Both bundled; nothing is loaded from a CDN.

Deploy

npm install
npx wrangler login
npm run deploy

Then add secrets (once):

npx wrangler pages secret put OPENROUTER_KEY
npx wrangler pages secret put OPENALEX_KEY          # optional
npx wrangler pages secret put NCBI_API_KEY          # optional

Local development

npm install
cp dev.vars.example .dev.vars    # fill in your OPENROUTER_KEY
npm run dev

Cost

Everything runs on free tiers. Cloudflare Pages (100k requests/day), OpenRouter free models, and free scholarly APIs.

Built by

Vaticay

Reviews

No reviews yet

Be the first to review this server!