ai.seltz/seltz-ai-seltz-mcp

7.0

Provides AI assistants with access to Seltz's powerful Web Search capabilities.

streamable-httpai-ml developer-tools search

Installation

Claude Desktop config (remote)

{
  "mcpServers": {
    "ai-seltz-seltz-ai-seltz-mcp": {
      "type": "streamable-http",
      "url": "https://mcp.seltz.ai/mcp"
    }
  }
}

Cursor config

{
  "mcpServers": {
    "ai-seltz-seltz-ai-seltz-mcp": {
      "url": "https://mcp.seltz.ai/mcp"
    }
  }
}

Security Report

Score Breakdown

Description10

Permissions10

Behavior4

Stability--

Findings (6)

high

vague-description

Vague and Overly Broad Description

The description claims to provide 'powerful Web Search capabilities' but lacks specificity about what operations are actually supported, what data is accessed, or what the actual scope of functionality is.

high

network-access

Remote HTTP Endpoint Without Authentication Details

Server uses streamable-http transport with a remote URL (https://mcp.seltz.ai/mcp), meaning it accepts connections from the internet. No authentication mechanism is documented.

high

excessive-scope

Undefined Tool Capabilities

While the server reports 0 tools in metadata, the description suggests it provides 'Web Search capabilities.' This discrepancy is concerning—either the metadata is incomplete or the description is misleading.

medium

vague-description

No Source Code or Repository

No repository URL is provided, making it impossible to audit the actual implementation, verify security practices, or understand the true scope of the server.

medium

data-exfiltration

Web Search Data Handling Unclear

A web search server could potentially exfiltrate user queries, search results, or other sensitive data. No privacy policy, data retention policy, or logging practices are documented.

info

vague-description

Semantic Analysis Summary

This server presents moderate-to-high risk due to its remote HTTP endpoint without documented authentication, vague description lacking technical specifics, and absence of source code for verification. The discrepancy between claiming web search capabilities while reporting zero tools is concerning and suggests either incomplete metadata or misleading marketing. Recommend requiring authentication, obtaining source code, and clarifying actual capabilities before deployment.

Last scanned 1h ago

Details

Version: 1.0.0
Transport: streamable-http
Capabilities