Litescrape
REMOTE · MCP.LITESCRAPE.COM · 2 COMPONENTS · SCANNED SEP 20
Google, Bing, DuckDuckGo and Google Maps search results, free without an API key.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security57
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation not fully verified: no authorisation is required to call this server, and 9 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe. See how to fix → View diagnostics → Unverified
- HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability57
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 3445 tokens (~382/item across 9 items; 9 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management17
- Stability observed for 5 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage99
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 97% of tool parameters carry a description.Partial
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 9 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 10 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
How do I install the Litescrape MCP server?
Litescrape is a hosted endpoint at https://mcp.litescrape.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · mcp.litescrape.com
claude mcp add --transport http com-litescrape-litescrape-mcp-server 'https://mcp.litescrape.com/mcp'
{
"mcpServers": {
"com-litescrape-litescrape-mcp-server": {
"url": "https://mcp.litescrape.com/mcp"
}
}
} {
"servers": {
"com-litescrape-litescrape-mcp-server": {
"type": "http",
"url": "https://mcp.litescrape.com/mcp"
}
}
} [mcp_servers.com-litescrape-litescrape-mcp-server] url = "https://mcp.litescrape.com/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"com-litescrape-litescrape-mcp-server": {
"type": "remote",
"url": "https://mcp.litescrape.com/mcp",
"enabled": true
}
}
} openclaw mcp add com-litescrape-litescrape-mcp-server --url 'https://mcp.litescrape.com/mcp' --transport streamable-http
mcp_servers:
com-litescrape-litescrape-mcp-server:
url: "https://mcp.litescrape.com/mcp" {
"McpServers": {
"com-litescrape-litescrape-mcp-server": {
"Transport": "http",
"Url": "https://mcp.litescrape.com/mcp"
}
}
} assistant mcp add com-litescrape-litescrape-mcp-server -t streamable-http -u 'https://mcp.litescrape.com/mcp'
{
"mcpServers": {
"com-litescrape-litescrape-mcp-server": {
"type": "http",
"url": "https://mcp.litescrape.com/mcp"
}
}
} The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 19 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 10 to 13. That category is still filling its 30-day observation window: 3 days of observed history at the previous scan, 4 at this one. The score rises as the window fills, whether or not the server changes.
- 17 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.
- 16 Sept 26 0
- Stability: unverified → 0.03 ▲ functional
- 15 Sept 26 61
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Sept 2026 · Probed https://mcp.litescrape.com/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=litescrape.com | CN=WE1,O=Google Trust Services,C=US | 1 Aug 2026 | 30 Oct 2026 | ECDSA 256 | ECDSA-SHA256 | f839c779450317bc0e3bbb0c9c820fbc |
| SANs: litescrape.com, *.litescrape.com | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of mcp.litescrape.com. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| com. | present | 19718 | 13 | Verified |
| litescrape.com. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://mcp.litescrape.com/mcp | Verified | 200 | |
| http (plaintext) | http://mcp.litescrape.com/mcp | HTTPS enforced | 308 | https://mcp.litescrape.com/mcp |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
bing_search Bing Search ~241
Fetch a Bing web search results page as JSON: organic_results plus the modules Bing served (answer_box, knowledge_graph, copilot_answer, ads, related_questions, inline_videos, top_stories and more). Free without an API key: 50 calls per network per day.
| Name | Type | Req | Description |
|---|---|---|---|
| cc | string | – | Two-letter country code; conflicts with mkt |
| device | string | – | Layout to request; default desktop |
| filters | string | – | Native Bing display or date filters |
| first | integer | – | One-based organic result offset for pagination; default 1 |
| lat | number | – | Latitude; supply together with lon |
| location | string | – | City-level search origin |
| lon | number | – | Longitude; supply together with lat |
| mkt | string | – | Market such as en-US; conflicts with cc |
| q | string | yes | Search query; Bing operators are preserved |
| result_groups | array | – | Return only these top-level result groups, e.g. ["organic_results", "knowledge_graph"]; omit for the complete response. search_metadata is always kept |
| safeSearch | string | – | Default moderate |
No output schema declared.
No examples provided.
duckduckgo_search DuckDuckGo Search ~204
Fetch ranked DuckDuckGo web results (organic_results with title, link, snippet) with region, safety and date controls. Free without an API key: 50 calls per network per day.
| Name | Type | Req | Description |
|---|---|---|---|
| df | string | – | Date filter: d, w, m, y, or YYYY-MM-DD..YYYY-MM-DD |
| kl | string | – | Region and language token such as us-en |
| m | integer | – | Result count 1-50; cannot be combined with search_assist |
| q | string | yes | Search query |
| result_groups | array | – | Return only these top-level result groups, e.g. ["organic_results", "knowledge_graph"]; omit for the complete response. search_metadata is always kept |
| safe | string | – | 1 strict, -1 moderate (default), -2 off |
| search_assist | boolean | – | Default true; cannot be combined with m |
| start | integer | – | Result offset |
No output schema declared.
No examples provided.
google_ai_mode Google AI Mode ~318
Ask Google AI Mode a question and return its generated answer (ordered text_blocks: paragraphs, headings, lists, tables, code) with the sources it cited (references). Set continuable to get a token for follow-up questions; image_url adds a picture to the prompt. Slow: answers are generated per request. Requires an API key.
| Name | Type | Req | Description |
|---|---|---|---|
| continuable | boolean | – | Return a subsequent_request_token so the conversation can continue |
| device | string | – | Layout to request; default desktop |
| gl | string | – | Two-letter country for localization, e.g. "us" |
| google_domain | string | – | Google domain such as google.co.uk; default google.com |
| hl | string | – | Language code such as "en" or "en-GB"; default en |
| image_url | string | – | Public http(s) image to include in the prompt; cannot combine with a token |
| location | string | – | Named search origin such as "Austin, Texas"; conflicts with uule and lat/lon |
| q | string | yes | The question to ask |
| result_groups | array | – | Return only these top-level result groups, e.g. ["organic_results", "knowledge_graph"]; omit for the complete response. search_metadata is always kept |
| subsequent_request_token | string | – | Token from a previous continuable answer; send with a new q. Expires after 30 minutes; cannot combine with image_url |
| uule | string | – | Pre-encoded Google location token; conflicts with location |
No output schema declared.
No examples provided.
google_ai_overview Google AI Overview ~502
Return only the AI Overview Google generates for a search (ai_overview with ordered text_blocks and cited references), or null when Google shows none. Accepts the google_search parameters. Requires an API key.
| Name | Type | Req | Description |
|---|---|---|---|
| as_qdr | string | – | Date range: d, w, m or y with an optional count, e.g. d7 for the past week |
| as_sitesearch | string | – | Restrict results to this hostname |
| cr | string | – | Country restrict such as countryUS|countryCA |
| device | string | – | Layout to request; default desktop |
| filter | string | – | 0 disables duplicate-content filtering |
| gl | string | – | Two-letter country for localization, e.g. "us" |
| google_domain | string | – | Google domain such as google.co.uk; default google.com |
| hl | string | – | Language code such as "en" or "en-GB"; default en |
| kgmid | string | – | Knowledge Graph machine ID such as /m/0k8z |
| lat | number | – | Latitude; supply together with lon |
| location | string | – | Named search origin such as "Austin, Texas"; conflicts with uule and lat/lon |
| lon | number | – | Longitude; supply together with lat |
| lr | string | – | Language restrict such as lang_en|lang_fr |
| ludocid | string | – | Google CID of a local entity, for a targeted lookup |
| nfpr | string | – | 1 disables spelling auto-correction |
| num | integer | – | Requested result count, 1-100; Google may return fewer |
| q | string | – | Search query; required unless ludocid or kgmid is supplied |
| radius | number | – | Radius in meters around the location or coordinates |
| result_groups | array | – | Return only these top-level result groups, e.g. ["organic_results", "knowledge_graph"]; omit for the complete response. search_metadata is always kept |
| safe | string | – | SafeSearch |
| start | integer | – | Result offset for pagination |
| tbm | string | – | Vertical: lcl local, vid videos, nws news, shop shopping, pts patents |
| tbs | string | – | Google search-filter string, e.g. qdr:w for the past week |
| uule | string | – | Pre-encoded Google location token; conflicts with location |
No output schema declared.
No examples provided.
google_maps Google Maps ~489
Search Google Maps for places (local_results with name, address, rating, reviews, hours, phone, website, coordinates) or fetch one exact place (place_results) by place_id, data_cid or data sequence. Filter by price, rating and opening hours. Free without an API key: 50 calls per network per day.
| Name | Type | Req | Description |
|---|---|---|---|
| data | string | – | Exact place by Google Maps data sequence |
| data_cid | string | – | Exact place by decimal Google CID |
| gl | string | – | Two-letter country for localization, e.g. "us" |
| google_domain | string | – | Google domain such as google.co.uk; default google.com |
| hl | string | – | Language code such as "en" or "en-GB"; default en |
| lat | number | – | Latitude; supply together with lon |
| ll | string | – | Viewport as @lat,lon,14z or @lat,lon,5000m |
| location | string | – | Named search origin such as "Austin, Texas"; conflicts with uule and lat/lon |
| lon | number | – | Longitude; supply together with lat |
| m | number | – | Radius in meters; use with location or lat/lon |
| max_price | integer | – | Price level upper bound |
| min_price | integer | – | Price level lower bound |
| min_rating | string | – | Minimum rating preference |
| nearby | boolean | – | Restrict results to places near the viewport |
| open_at_hour | integer | – | Hour 0-23; requires open_on_day |
| open_on_day | string | – | – |
| open_state | string | – | Open now, or open 24 hours; cannot combine with open_on_day |
| place_id | string | – | Exact place by Google place ID |
| q | string | – | Search text; required for type=search |
| result_groups | array | – | Return only these top-level result groups, e.g. ["organic_results", "knowledge_graph"]; omit for the complete response. search_metadata is always kept |
| start | integer | – | Native Maps result offset |
| type | string | – | search (default) for a query, or place for one exact place identified by place_id, data_cid or data |
| z | number | – | Zoom 3-30; use with location or lat/lon |
No output schema declared.
No examples provided.
google_reviews Google Reviews ~347
Return the Google Maps reviews of one place (reviews with rating, snippet, author, date, likes, owner response, guided details and dining subratings) plus place_info. Identify the place by place_id or data_id from a google_maps result. Sort, filter by topic or text, and follow pagination.next_page_token for more. Requires an API key.
| Name | Type | Req | Description |
|---|---|---|---|
| data_id | string | – | Google data ID such as 0x89c2...:0x...; exactly one of place_id and data_id |
| gl | string | – | Two-letter country for localization, e.g. "us" |
| hl | string | – | Language code such as "en" or "en-GB"; default en |
| next_page_token | string | – | pagination.next_page_token from the previous response; keep the same place, sort and filters |
| num | integer | – | Reviews to return: 1-100 on a first unfiltered request (default 8), 1-20 with topic_id, query or next_page_token (default 10) |
| place_id | string | – | Google place ID such as ChIJ...; exactly one of place_id and data_id |
| query | string | – | Keep reviews mentioning this text; conflicts with topic_id |
| result_groups | array | – | Return only these top-level result groups, e.g. ["organic_results", "knowledge_graph"]; omit for the complete response. search_metadata is always kept |
| sort_by | string | – | Order: qualityScore (most relevant, default), newestFirst, ratingHigh, ratingLow |
| topic_id | string | – | Keep reviews on one Google review topic; conflicts with query |
No output schema declared.
No examples provided.
google_search Google Search ~577
Fetch a first-party Google Search results page as JSON: organic_results plus whichever modules Google served (knowledge_graph, answer_box, ai_overview, ads, related_questions, related_searches, local_results, top_stories, inline_videos and more). Supports localization, verticals (news, videos, local, shopping, patents), date filters and site restriction. Free without an API key: 25 calls per network per day.
| Name | Type | Req | Description |
|---|---|---|---|
| as_qdr | string | – | Date range: d, w, m or y with an optional count, e.g. d7 for the past week |
| as_sitesearch | string | – | Restrict results to this hostname |
| cr | string | – | Country restrict such as countryUS|countryCA |
| device | string | – | Layout to request; default desktop |
| fast_mode | boolean | – | true returns only organic_results (faster and smaller); skips AI Overview, Knowledge Graph, ads and every other module |
| filter | string | – | 0 disables duplicate-content filtering |
| gl | string | – | Two-letter country for localization, e.g. "us" |
| google_domain | string | – | Google domain such as google.co.uk; default google.com |
| hl | string | – | Language code such as "en" or "en-GB"; default en |
| kgmid | string | – | Knowledge Graph machine ID such as /m/0k8z |
| lat | number | – | Latitude; supply together with lon |
| location | string | – | Named search origin such as "Austin, Texas"; conflicts with uule and lat/lon |
| lon | number | – | Longitude; supply together with lat |
| lr | string | – | Language restrict such as lang_en|lang_fr |
| ludocid | string | – | Google CID of a local entity, for a targeted lookup |
| nfpr | string | – | 1 disables spelling auto-correction |
| num | integer | – | Requested result count, 1-100; Google may return fewer |
| q | string | – | Search query; required unless ludocid or kgmid is supplied |
| radius | number | – | Radius in meters around the location or coordinates |
| result_groups | array | – | Return only these top-level result groups, e.g. ["organic_results", "knowledge_graph"]; omit for the complete response. search_metadata is always kept |
| safe | string | – | SafeSearch |
| start | integer | – | Result offset for pagination |
| tbm | string | – | Vertical: lcl local, vid videos, nws news, shop shopping, pts patents |
| tbs | string | – | Google search-filter string, e.g. qdr:w for the past week |
| uule | string | – | Pre-encoded Google location token; conflicts with location |
No output schema declared.
No examples provided.
google_shopping Google Shopping ~357
Search Google Shopping and return the product grid (shopping_results with title, price, source, rating, thumbnail), category blocks, sponsored listings and the refinement chips Google renders (filters). Price bounds, sale, shipping and small business refinements are mutually exclusive; sort_by combines with one of them. Requires an API key.
| Name | Type | Req | Description |
|---|---|---|---|
| device | string | – | Layout to request; default desktop |
| free_shipping | boolean | – | – |
| gl | string | – | Two-letter country for localization, e.g. "us" |
| google_domain | string | – | Google domain such as google.co.uk; default google.com |
| hl | string | – | Language code such as "en" or "en-GB"; default en |
| location | string | – | Named search origin such as "Austin, Texas"; conflicts with uule and lat/lon |
| max_price | number | – | Upper price bound |
| min_price | number | – | Lower price bound |
| num | integer | – | Product count, 1-100 |
| on_sale | boolean | – | – |
| q | string | – | Product query; required unless shoprs is supplied |
| result_groups | array | – | Return only these top-level result groups, e.g. ["organic_results", "knowledge_graph"]; omit for the complete response. search_metadata is always kept |
| shoprs | string | – | Refinement token from a previous response's filters |
| small_business | boolean | – | – |
| sort_by | string | – | 1 price low to high, 2 price high to low, 3 rating, 4 relevance |
| start | integer | – | Result offset |
| uule | string | – | Pre-encoded Google location token; conflicts with location |
No output schema declared.
No examples provided.
search Web search ~205
Search the web through Google and return ranked organic results (title, link, snippet) as JSON. Fast mode: no Knowledge Graph, ads or AI modules; use google_search for the full results page. Free without an API key (shares the google_search allowance).
| Name | Type | Req | Description |
|---|---|---|---|
| gl | string | – | Two-letter country for localization, e.g. "us" |
| hl | string | – | Language code such as "en" or "en-GB"; default en |
| location | string | – | Named search origin such as "Austin, Texas"; conflicts with uule and lat/lon |
| num | integer | – | Requested result count, 1-100; Google may return fewer |
| q | string | yes | What to search for |
| result_groups | array | – | Return only these top-level result groups, e.g. ["organic_results", "knowledge_graph"]; omit for the complete response. search_metadata is always kept |
| start | integer | – | Result offset for pagination |
No output schema declared.
No examples provided.
What is the Litescrape MCP server?
Litescrape is an MCP server listed in the public MCP registry as com.litescrape/litescrape-mcp-server. Google, Bing, DuckDuckGo and Google Maps search results, free without an API key. This page covers its hosted endpoint (https://mcp.litescrape.com/mcp).
Is the Litescrape MCP server safe to use?
Litescrape scores 63 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the Litescrape MCP server expose?
Litescrape exposes 9 tools: search, google_search, bing_search, duckduckgo_search, google_maps, and 4 more. Their descriptions and schemas cost roughly 3,240 tokens of context every time the server is loaded.
Does the Litescrape MCP server require authentication?
No. We connected to Litescrape without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the Litescrape MCP server still maintained?
Litescrape is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.