THRONE
See report Verify server

registry / record

@modelcontextprotocol/server-brave-search

npm / sealed 2026-06-12 / No. e0968b21

> throne registry @modelcontextprotocol/server-brave-search sealed
This server runs. It just needs your API keythe server installs and starts, then exits asking for an API key — Error: BRAVE_API_KEY environment variable is required
receiptsealed evidence
scan id
e0968b2167a040d0ba1f7093042ccccf
target
@modelcontextprotocol/server-brave-search
sealed at
2026-06-12 06:53:15Z
evidence hash
sha256:ffd3a00fee5ed2197e3ca16f99b9ccd914196978e63b05b21fd6882c513611a1
01connectFAIL0ms

server never launched: server process exited with code 1 before the MCP handshake — stderr: Error: BRAVE_API_KEY environment variable is required

02discoverSKIPPED0ms

not run — server never launched

03validate_schemasSKIPPED0ms

not run — server never launched

04smoke_test_toolsSKIPPED0ms

not run — server never launched

05error_handlingSKIPPED0ms

not run — server never launched

06streamingSKIPPED0ms

not run — server never launched

07resource_lifecycleSKIPPED0ms

not run — server never launched

08concurrent_callsSKIPPED0ms

not run — server never launched

09reconnectSKIPPED0ms

not run — server never launched

01connectFAIL0ms

server never launched: server process exited with code 1 before the MCP handshake — stderr: Error: BRAVE_API_KEY environment variable is required

02discoverSKIPPED0ms

not run — server never launched

03validate_schemasSKIPPED0ms

not run — server never launched

04smoke_test_toolsSKIPPED0ms

not run — server never launched

05error_handlingSKIPPED0ms

not run — server never launched

06streamingSKIPPED0ms

not run — server never launched

07resource_lifecycleSKIPPED0ms

not run — server never launched

08concurrent_callsSKIPPED0ms

not run — server never launched

09reconnectSKIPPED0ms

not run — server never launched

chatgpt desktopemulation profile pending real-traffic captureCOMING SOON
SECURITY: REVIEW / 2 finding(s) / review material, not a verdict
LOWTHR-INSTALL-03 / Install-time script execution (npm lifecycle)

"prepare" runs on git-dependency installs and local dev (not registry installs): 'npm run build'

package/package.json
LOWTHR-NET-05 / Hardcoded outbound endpoints

1 non-local endpoint host(s) referenced in code — verify each is expected for this server's purpose: api.search.brave.com (package/dist/index.js:109)

package/dist/index.js:109
VERDICT: NEEDS YOUR API KEYSANDBOXED RUN — submitted server executed in a disposable microVM — compatibility not assessable: needs credentials: the server installs and starts, then exits asking for an API key — Error: BRAVE_API_KEY environment variable is required / security: review — 2 finding(s), 0 highsealed by THRONE / No. e0968b21 / 2026-06-12
executed in a disposable microVM, created for this scan and destroyed after it. nothing outlives a run.

maintainer of this server? challenge this record: hello@usethrone.dev. tell us what we got wrong and we re-run it in the open.

this page renders the stored record of a real run. nothing on it is asserted without the execution that proved it.