Cursor Search Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Cursor Search Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Expose Cursor's semantic code search through MCP.
Cursor must index the repo. Open it in Cursor and wait for indexing to finish.
git clone https://github.com/philipk19238/cursor-search-mcp.git
cd cursor-search-mcp
uv pip install -e .cursor-search-mcp
# or
fastmcp run src/cursor_search_mcp/server.pyclaude mcp add cursor-search -- \
env CURSOR_WORKSPACE_PATH=/path/to/your/repo \
uv run --directory /path/to/cursor-search-mcp cursor-search-mcpOr add to ~/.claude.json:
{
"mcpServers": {
"cursor-search": {
"command": "env",
"args": [
"CURSOR_WORKSPACE_PATH=/path/to/your/repo",
"uv", "run", "--directory", "/path/to/cursor-search-mcp",
"cursor-search-mcp"
]
}
}
}codex mcp add cursor-search -- \
env CURSOR_WORKSPACE_PATH=/path/to/your/repo \
uv run --directory /path/to/cursor-search-mcp cursor-search-mcpOr add to ~/.codex/config.toml:
[mcp_servers.cursor-search]
command = "env"
args = [
"CURSOR_WORKSPACE_PATH=/path/to/your/repo",
"uv", "run", "--directory", "/path/to/cursor-search-mcp",
"cursor-search-mcp"
]Add to opencode.json:
{
"mcp": {
"cursor-search": {
"type": "local",
"command": "env",
"args": [
"CURSOR_WORKSPACE_PATH=/path/to/your/repo",
"uv", "run", "--directory", "/path/to/cursor-search-mcp",
"cursor-search-mcp"
],
"enabled": true
}
}
}CURSOR_REPO_NAME / CURSOR_REPO_OWNERCURSOR_WORKSPACE_PATHCURSOR_ACCESS_TOKENCURSOR_CONFIG_PATHCURSOR_VERSIONIf the server is launched outside the repo, set CURSOR_WORKSPACE_PATH to the indexed workspace root. Startup fails if the workspace is not indexed.
codebase_search: semantic search in the indexensure_codebase_indexed: trigger index creationrefresh_repo_info: refresh repo detectionlist_indexed_repos: show locally indexed reposBased on reverse engineering work from:
Unofficial project; Cursor may change the API.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.