Gsearch Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Gsearch Mcp (Plugin) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
<div align="center">
>
### 🚨 Disclaimer 🚨
>
This is just a heads-up. We haven't seen any bans from GSearch use.
>
Not affiliated with Google. Uses the same public OAuth client and API as the Antigravity CLI.
>
<img src="news.png" alt="GSearch - Free Google Search MCP" style="height: 300px;" />
Give Claude Code, Codex CLI, Cursor, Otherside, and other AI tools real-time web search powered by Google Search grounding. Single binary, zero runtime dependencies.
</div>
curl -fsSL https://raw.githubusercontent.com/daanielcruz/gsearch-mcp/main/install.sh | bashOr build from source:
git clone https://github.com/daanielcruz/gsearch-mcp && cd gsearch-mcp
make build && ./gsearch-installerThe installer downloads the binary and configures Claude Code, Codex, Cursor and Otherside automatically (if available).
Claude Code / Codex CLI / Cursor / Otherside / Others
| MCP (stdio)
gsearch-server (Go binary)
| OAuth2
Google Code Assist API
| googleSearch grounding
Answer with [1][2][3] source linksWhen an AI tool calls google_search, GSearch returns a grounded answer with inline citations:
The current time in Sao Paulo is 08:13 AM.[1][2]
Sao Paulo observes Brasilia Time (BRT), UTC-3.[3]
Sources:
[1] [Time in Sao Paulo](https://...)
[2] [World Clock](https://...)
[3] [Time Zone Info](https://...)GSearch uses the same Google Search grounding API as Antigravity CLI through its public OAuth client, or the Gemini API with an API key. Limits, availability, and billing depend on the selected authentication method and Google account.
The official Gemini CLI states that free and Google One accounts migrated to Antigravity CLI on June 18, 2026, so GSearch now signs in through Antigravity's public OAuth client. Existing Gemini CLI credentials remain readable.
Rate limits are generous for normal usage. The server retries automatically with dynamic backoff on rapid bursts.
Two options:
localhost loopback callback. Credentials are stored in ~/.gsearch/oauth_creds.json.GEMINI_API_KEY / GSEARCH_API_KEY. This skips OAuth and does not require a project. Google sign-in always takes precedence: when OAuth credentials exist, these variables are ignored.Antigravity sign-in resolves the Code Assist project automatically (SMS verification may be required on first use). If the account requires a user-defined project, the installer accepts an existing Project ID and retries. It does not create projects or enable billing. The default backend is daily-cloudcode-pa.googleapis.com; set GSEARCH_ANTIGRAVITY_HOST=prod to use cloudcode-pa.googleapis.com.
The installer configures everything automatically. For manual setup, add to your MCP client config:
{
"mcpServers": {
"gsearch": {
"command": "npx",
"args": ["-y", "@daanielcruz/gsearch-mcp"]
}
}
}Works with Claude Code (~/.claude.json), Cursor (~/.cursor/mcp.json), Otherside (~/.otherside/.mcp.json), and other MCP-compatible tools.
For Codex CLI (~/.codex/config.toml):
[mcp_servers.gsearch]
command = 'npx'
args = ['-y', '@daanielcruz/gsearch-mcp']Set GSEARCH_PROJECT env var only if auto-detection fails.
MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.