mcp-web-engine 1.1.0__tar.gz

mcp_web_engine-1.1.0/.env.example

@@ -0,0 +1,10 @@
+# MCP Web Engine Environment Configuration Example
+API_KEY=sk_mcp_beta_example_key_change_me
+SEARXNG_URL=http://host.docker.internal:8082/search
+PORT=5050
+HOST=0.0.0.0
+RATE_LIMIT_PER_MINUTE=120
+DEFAULT_TIMEOUT_SEC=10.0
+MAX_PAYLOAD_BYTES=2097152
+LOG_LEVEL=INFO
+ENV=production

mcp_web_engine-1.1.0/.gitignore

@@ -0,0 +1,14 @@
+__pycache__/
+*.py[cod]
+*$py.class
+.env
+beta_keys.json
+.pytest_cache/
+*.log
+.coverage
+htmlcov/
+dist/
+build/
+*.egg-info/
+.vscode/
+.idea/

mcp_web_engine-1.1.0/CONTRIBUTING.md

@@ -0,0 +1,11 @@
+# Contributing to MCP Web Engine
+
+Thank you for helping improve MCP Web Engine!
+
+## Development Guidelines
+
+1. **Fork & Clone:** Clone your fork locally.
+2. **Virtual Environment:** Set up Python 3.11+ virtual environment (`python -m venv .venv && source .venv/bin/activate`).
+3. **Dependencies:** Install dependencies with `pip install -r requirements.txt`.
+4. **Security Rule:** Always ensure all SSRF validations pass (`validate_ssrf_url`).
+5. **Run Tests:** Ensure 100% of tests pass before submitting a PR (`pytest tests/test_suite.py`).

mcp_web_engine-1.1.0/Dockerfile

@@ -0,0 +1,29 @@
+FROM python:3.11-slim
+
+# Create non-root user
+RUN groupadd -g 1000 appgroup && \
+    useradd -u 1000 -g appgroup -s /bin/bash -m appuser
+
+WORKDIR /app
+
+# Install security updates & system dependencies
+RUN apt-get update && apt-get install -y --no-install-recommends \
+    build-essential \
+    libssl-dev \
+    curl \
+    && rm -rf /var/lib/apt/lists/*
+
+COPY requirements.txt .
+RUN pip install --no-cache-dir -r requirements.txt
+
+COPY --chown=appuser:appgroup . .
+
+# Switch to non-root user
+USER appuser
+
+EXPOSE 5000
+
+ENV PORT=5000
+ENV HOST=0.0.0.0
+
+CMD ["python", "main.py"]

mcp_web_engine-1.1.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 MCP Web Engine Contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

mcp_web_engine-1.1.0/PKG-INFO

@@ -0,0 +1,163 @@
+Metadata-Version: 2.5
+Name: mcp-web-engine
+Version: 1.1.0
+Summary: Privacy-First, Self-Hostable & SSRF-Hardened MCP Server & Web Engine for AI Agents
+Project-URL: Homepage, https://github.com/Arbolencio/mcp-web-engine
+Project-URL: Repository, https://github.com/Arbolencio/mcp-web-engine.git
+Author: Arbolencio
+License-Expression: MIT
+License-File: LICENSE
+Keywords: ai-agent,mcp,mcp-server,searxng,ssrf-protection,turbollm,web-scraper,web-search
+Requires-Python: >=3.9
+Requires-Dist: beautifulsoup4>=4.12.0
+Requires-Dist: curl-cffi>=0.6.0
+Requires-Dist: fastapi>=0.109.0
+Requires-Dist: html2text>=2024.1.14
+Requires-Dist: pydantic-settings>=2.1.0
+Requires-Dist: pydantic>=2.5.0
+Requires-Dist: sse-starlette>=2.0.0
+Requires-Dist: uvicorn>=0.27.0
+Description-Content-Type: text/markdown
+
+# 🌐 MCP Web Engine & Search Gateway
+
+> **Privacy-First, Self-Hostable & SSRF-Hardened MCP Server & Web Engine for AI Agents**
+> **MCP Specification 2026-07-28 Pure Stateless Core & Stdio / HTTP Dual Mode**
+
+[![PyPI Version](https://img.shields.io/badge/pypi-v1.0.5-blue.svg)](https://pypi.org/project/mcp-web-engine/)
+[![npm Version](https://img.shields.io/badge/npm-v1.0.5-red.svg)](https://www.npmjs.com/package/mcp-web-engine)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
+
+---
+
+## ⚡ Instant Quickstart with `uvx` (Recommended for AI Agents)
+
+AI agents (Claude Desktop, Cursor, Windsurf, TurboLLM, Hermes Agent) can run `mcp-web-engine` in an isolated ephemeral environment with **zero configuration**:
+
+```bash
+# Run stdio MCP server in an isolated environment (10ms startup, 0% system contamination)
+uvx mcp-web-engine
+```
+
+Or run via Git repository:
+```bash
+uvx --from git+https://github.com/Arbolencio/mcp-web-engine mcp-web-engine
+```
+
+---
+
+## 📌 What it does & Why it exists
+
+`mcp-web-engine` is a high-performance Model Context Protocol (MCP) server implementing the **MCP Specification 2026-07-28 Pure Stateless Core**. It provides AI Agents with secure, private, and SSRF-hardened access to multi-engine web search, raw content fetching, and clean HTML-to-Markdown extraction.
+
+### Key Capabilities & Architecture
+- **Dual Execution Mode:**
+  - **Stdio Mode (Default):** Runs JSON-RPC over `stdin`/`stdout` for direct LLM client integration (`uvx mcp-web-engine`).
+  - **HTTP/SSE Server Mode:** Runs FastAPI/Uvicorn server (`mcp-web-engine --serve`).
+- **Pure Stateless Core (Spec 2026-07-28):** Zero sessions, zero state, zero initialize handshake required. Every request is completely independent.
+- **Protocol Methods:** Implements `server/discover`, `tools/list`, and `tools/call` with standard JSON-RPC 2.0.
+- **Zero Third-Party Tracking:** Powered by an internal SearXNG meta-search engine aggregating 70+ sources with DuckDuckGo fallback.
+- **Automatic URL Normalization:** Handled transparently by `normalize_searxng_url()` — any provided `SEARXNG_URL` variation (`http://127.0.0.1:8082`, `http://127.0.0.1:8082/`, `http://127.0.0.1:8082/search`) automatically appends `/search` if missing.
+- **SSRF Hardened:** Pre-request DNS resolution checks prevent agents from accessing internal networks (`localhost`, `127.0.0.1`, `192.168.x.x`, `169.254.169.254`). Step-by-step HTTP 301/302 redirect re-validation.
+- **Zero `--break-system-packages`:** Executed 100% in sandboxed virtual environments created on-the-fly by `uv` or `venv`.
+
+---
+
+## 🔌 Integration Guides
+
+### 1. TurboLLM / Local MCP Catalog
+```typescript
+{
+  id: 'mcp-web-engine',
+  name: 'MCP Web Engine',
+  cat: 'Search',
+  desc: 'Privacy-first, self-hostable & SSRF-hardened web search engine and scraper for AI agents.',
+  cmd: 'uvx mcp-web-engine==1.1.0',
+  uvx: true,
+  argNote: 'Requires a running SearXNG instance. No query leaves the host unless ALLOW_DDG_FALLBACK is enabled.',
+  envs: [
+    { key: 'SEARXNG_URL', desc: 'SearXNG meta-search endpoint (default: http://127.0.0.1:8082/search)', required: true },
+  ],
+}
+```
+
+### 2. Claude Desktop (`claude_desktop_config.json`)
+```json
+{
+  "mcpServers": {
+    "mcp-web-engine": {
+      "command": "uvx",
+      "args": ["mcp-web-engine"],
+      "env": {
+        "SEARXNG_URL": "http://127.0.0.1:8082/search"
+      }
+    }
+  }
+}
+```
+
+### 3. Cursor / Windsurf / Hermes Agent
+```json
+{
+  "mcpServers": {
+    "mcp-web-engine": {
+      "command": "uvx",
+      "args": ["mcp-web-engine"]
+    }
+  }
+}
+```
+
+---
+
+## 🛠️ Provided MCP Tools
+
+| Tool Name | Parameters | Description |
+|---|---|---|
+| `web_search` | `query` (str), `limit` (int, default: 10) | Multi-engine meta-search via SearXNG returning structured JSON results |
+| `fetch_url` | `url` (str), `max_bytes` (int, optional) | Fetches raw web content after strict SSRF security validation |
+| `extract_markdown` | `url` (str), `max_bytes` (int, optional) | Scrapes a webpage and converts HTML into clean, LLM-optimized Markdown |
+
+---
+
+## ⚙️ Configuration & Environment Variables
+
+| Variable | Required | Default | Description |
+|---|---|---|---|
+| `SEARXNG_URL` | **Yes** | `http://127.0.0.1:8082/search` | SearXNG meta-search endpoint (Auto-normalizes trailing slashes and missing `/search`) |
+| `ALLOW_DDG_FALLBACK` | No | `false` | **Privacy switch.** When `false` (default), a SearXNG failure returns `SEARXNG_UNAVAILABLE` instead of quietly querying DuckDuckGo. Set to `true` only if you accept that queries leave your host on failure. |
+| `PORT` | No | `5050` | HTTP/SSE server port (Used only when running in `--serve` mode) |
+| `HOST` | No | `0.0.0.0` | HTTP/SSE server binding host |
+| `API_KEY` | No | `""` | Optional authentication key for HTTP endpoints |
+
+---
+
+## 🛠️ Development & Building
+
+```bash
+# Clone Repository
+git clone https://github.com/Arbolencio/mcp-web-engine.git
+cd mcp-web-engine
+
+# Build Wheel for PyPI
+python3 -m build --wheel
+
+# Run locally in stdio mode via uv
+uv run python -m mcp_web_engine.main
+
+# Run locally in HTTP server mode via uv
+uv run python -m mcp_web_engine.main --serve
+```
+
+---
+
+## 🛡️ Security & Environment Isolation
+
+- **SSRF Hardening:** Blocks `localhost`, loopbacks, private subnets (`10.0.0.0/8`, `192.168.0.0/16`, `172.16.0.0/12`), percent-encoding bypasses (`%31%32%37...`), and re-validates `Location` headers on HTTP redirects step-by-step.
+- **Zero Package Pollution:** Execution via `uvx` or `bin/cli.js` never modifies global site-packages or uses dangerous flags like `--break-system-packages`.
+
+---
+
+## 📄 License
+
+MIT License © 2026 MCP Web Engine Contributors.

mcp_web_engine-1.1.0/README.md

@@ -0,0 +1,142 @@
+# 🌐 MCP Web Engine & Search Gateway
+
+> **Privacy-First, Self-Hostable & SSRF-Hardened MCP Server & Web Engine for AI Agents**
+> **MCP Specification 2026-07-28 Pure Stateless Core & Stdio / HTTP Dual Mode**
+
+[![PyPI Version](https://img.shields.io/badge/pypi-v1.0.5-blue.svg)](https://pypi.org/project/mcp-web-engine/)
+[![npm Version](https://img.shields.io/badge/npm-v1.0.5-red.svg)](https://www.npmjs.com/package/mcp-web-engine)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
+
+---
+
+## ⚡ Instant Quickstart with `uvx` (Recommended for AI Agents)
+
+AI agents (Claude Desktop, Cursor, Windsurf, TurboLLM, Hermes Agent) can run `mcp-web-engine` in an isolated ephemeral environment with **zero configuration**:
+
+```bash
+# Run stdio MCP server in an isolated environment (10ms startup, 0% system contamination)
+uvx mcp-web-engine
+```
+
+Or run via Git repository:
+```bash
+uvx --from git+https://github.com/Arbolencio/mcp-web-engine mcp-web-engine
+```
+
+---
+
+## 📌 What it does & Why it exists
+
+`mcp-web-engine` is a high-performance Model Context Protocol (MCP) server implementing the **MCP Specification 2026-07-28 Pure Stateless Core**. It provides AI Agents with secure, private, and SSRF-hardened access to multi-engine web search, raw content fetching, and clean HTML-to-Markdown extraction.
+
+### Key Capabilities & Architecture
+- **Dual Execution Mode:**
+  - **Stdio Mode (Default):** Runs JSON-RPC over `stdin`/`stdout` for direct LLM client integration (`uvx mcp-web-engine`).
+  - **HTTP/SSE Server Mode:** Runs FastAPI/Uvicorn server (`mcp-web-engine --serve`).
+- **Pure Stateless Core (Spec 2026-07-28):** Zero sessions, zero state, zero initialize handshake required. Every request is completely independent.
+- **Protocol Methods:** Implements `server/discover`, `tools/list`, and `tools/call` with standard JSON-RPC 2.0.
+- **Zero Third-Party Tracking:** Powered by an internal SearXNG meta-search engine aggregating 70+ sources with DuckDuckGo fallback.
+- **Automatic URL Normalization:** Handled transparently by `normalize_searxng_url()` — any provided `SEARXNG_URL` variation (`http://127.0.0.1:8082`, `http://127.0.0.1:8082/`, `http://127.0.0.1:8082/search`) automatically appends `/search` if missing.
+- **SSRF Hardened:** Pre-request DNS resolution checks prevent agents from accessing internal networks (`localhost`, `127.0.0.1`, `192.168.x.x`, `169.254.169.254`). Step-by-step HTTP 301/302 redirect re-validation.
+- **Zero `--break-system-packages`:** Executed 100% in sandboxed virtual environments created on-the-fly by `uv` or `venv`.
+
+---
+
+## 🔌 Integration Guides
+
+### 1. TurboLLM / Local MCP Catalog
+```typescript
+{
+  id: 'mcp-web-engine',
+  name: 'MCP Web Engine',
+  cat: 'Search',
+  desc: 'Privacy-first, self-hostable & SSRF-hardened web search engine and scraper for AI agents.',
+  cmd: 'uvx mcp-web-engine==1.1.0',
+  uvx: true,
+  argNote: 'Requires a running SearXNG instance. No query leaves the host unless ALLOW_DDG_FALLBACK is enabled.',
+  envs: [
+    { key: 'SEARXNG_URL', desc: 'SearXNG meta-search endpoint (default: http://127.0.0.1:8082/search)', required: true },
+  ],
+}
+```
+
+### 2. Claude Desktop (`claude_desktop_config.json`)
+```json
+{
+  "mcpServers": {
+    "mcp-web-engine": {
+      "command": "uvx",
+      "args": ["mcp-web-engine"],
+      "env": {
+        "SEARXNG_URL": "http://127.0.0.1:8082/search"
+      }
+    }
+  }
+}
+```
+
+### 3. Cursor / Windsurf / Hermes Agent
+```json
+{
+  "mcpServers": {
+    "mcp-web-engine": {
+      "command": "uvx",
+      "args": ["mcp-web-engine"]
+    }
+  }
+}
+```
+
+---
+
+## 🛠️ Provided MCP Tools
+
+| Tool Name | Parameters | Description |
+|---|---|---|
+| `web_search` | `query` (str), `limit` (int, default: 10) | Multi-engine meta-search via SearXNG returning structured JSON results |
+| `fetch_url` | `url` (str), `max_bytes` (int, optional) | Fetches raw web content after strict SSRF security validation |
+| `extract_markdown` | `url` (str), `max_bytes` (int, optional) | Scrapes a webpage and converts HTML into clean, LLM-optimized Markdown |
+
+---
+
+## ⚙️ Configuration & Environment Variables
+
+| Variable | Required | Default | Description |
+|---|---|---|---|
+| `SEARXNG_URL` | **Yes** | `http://127.0.0.1:8082/search` | SearXNG meta-search endpoint (Auto-normalizes trailing slashes and missing `/search`) |
+| `ALLOW_DDG_FALLBACK` | No | `false` | **Privacy switch.** When `false` (default), a SearXNG failure returns `SEARXNG_UNAVAILABLE` instead of quietly querying DuckDuckGo. Set to `true` only if you accept that queries leave your host on failure. |
+| `PORT` | No | `5050` | HTTP/SSE server port (Used only when running in `--serve` mode) |
+| `HOST` | No | `0.0.0.0` | HTTP/SSE server binding host |
+| `API_KEY` | No | `""` | Optional authentication key for HTTP endpoints |
+
+---
+
+## 🛠️ Development & Building
+
+```bash
+# Clone Repository
+git clone https://github.com/Arbolencio/mcp-web-engine.git
+cd mcp-web-engine
+
+# Build Wheel for PyPI
+python3 -m build --wheel
+
+# Run locally in stdio mode via uv
+uv run python -m mcp_web_engine.main
+
+# Run locally in HTTP server mode via uv
+uv run python -m mcp_web_engine.main --serve
+```
+
+---
+
+## 🛡️ Security & Environment Isolation
+
+- **SSRF Hardening:** Blocks `localhost`, loopbacks, private subnets (`10.0.0.0/8`, `192.168.0.0/16`, `172.16.0.0/12`), percent-encoding bypasses (`%31%32%37...`), and re-validates `Location` headers on HTTP redirects step-by-step.
+- **Zero Package Pollution:** Execution via `uvx` or `bin/cli.js` never modifies global site-packages or uses dangerous flags like `--break-system-packages`.
+
+---
+
+## 📄 License
+
+MIT License © 2026 MCP Web Engine Contributors.

mcp_web_engine-1.1.0/SECURITY.md

@@ -0,0 +1,14 @@
+# Security Policy
+
+## Reporting Vulnerabilities
+
+If you discover a security vulnerability (such as a potential SSRF bypass, authentication flaw, or denial of service), please **DO NOT** open a public issue.
+
+Instead, please report it privately to the maintainers with a proof of concept.
+
+## Security Features
+
+- **SSRF Protection:** Pre-request DNS resolution verification blocking private subnets (`127.0.0.0/8`, `10.0.0.0/8`, `172.16.0.0/12`, `192.168.0.0/16`, `169.254.169.254`, IPv6 loopbacks, and percent-encoded IP bypasses).
+- **Step-by-Step Redirect Re-Validation:** All HTTP 301/302 redirects are validated against SSRF prior to following.
+- **Authentication:** All MCP tool endpoints require Bearer API key authorization.
+- **Docker Hardening:** Runs under non-root UID 1000 with `no-new-privileges:true`.

mcp_web_engine-1.1.0/bin/cli.js

@@ -0,0 +1,90 @@
+#!/usr/bin/env node
+
+/**
+ * MCP Web Engine CLI Entry Point (npm / npx fallback)
+ * Spawns MCP Web Engine in an ISOLATED Python environment without polluting global system packages.
+ * 
+ * Recommended execution for AI agents:
+ *   uvx mcp-web-engine
+ */
+
+const { spawn, execSync } = require('child_process');
+const path = require('path');
+const fs = require('fs');
+const os = require('os');
+
+const reqTxt = path.join(__dirname, '..', 'requirements.txt');
+
+function forwardChild(child) {
+  child.on('error', (err) => {
+    console.error('[mcp-web-engine] Failed to start process:', err.message);
+    process.exit(1);
+  });
+  child.on('exit', (code, signal) => {
+    if (signal) {
+      process.exit(128 + (signal === 'SIGINT' ? 2 : 15));
+    }
+    process.exit(code ?? 0);
+  });
+}
+
+// 1. Try running with 'uv' if available (fastest, cleanest, isolated)
+function tryUv() {
+  try {
+    execSync('uv --version', { stdio: 'ignore' });
+    const repoRoot = path.join(__dirname, '..');
+    const child = spawn('uv', ['run', '--directory', repoRoot, 'python', '-m', 'mcp_web_engine.main', ...process.argv.slice(2)], {
+      stdio: 'inherit',
+      env: process.env
+    });
+    forwardChild(child);
+    return true;
+  } catch (e) {
+    return false;
+  }
+}
+
+// 2. Fallback to dedicated isolated virtualenv in user cache dir (~/.cache/mcp-web-engine/venv)
+function runInIsolatedVenv() {
+  const cacheDir = process.env.XDG_CACHE_HOME || path.join(os.homedir(), '.cache');
+  const venvDir = path.join(cacheDir, 'mcp-web-engine', 'venv');
+  const venvPython = process.platform === 'win32' 
+    ? path.join(venvDir, 'Scripts', 'python.exe')
+    : path.join(venvDir, 'bin', 'python');
+  const venvPip = process.platform === 'win32'
+    ? path.join(venvDir, 'Scripts', 'pip.exe')
+    : path.join(venvDir, 'bin', 'pip');
+
+  function findSystemPython() {
+    for (const cmd of ['python3', 'python']) {
+      try {
+        execSync(`${cmd} --version`, { stdio: 'ignore' });
+        return cmd;
+      } catch (e) {}
+    }
+    throw new Error('Python 3 is required but was not found on PATH.');
+  }
+
+  // Ensure isolated venv exists and has requirements installed
+  if (!fs.existsSync(venvPython)) {
+    console.log('[mcp-web-engine] Creating isolated Python venv at:', venvDir);
+    const sysPython = findSystemPython();
+    fs.mkdirSync(path.dirname(venvDir), { recursive: true });
+    execSync(`${sysPython} -m venv "${venvDir}"`, { stdio: 'inherit' });
+    console.log('[mcp-web-engine] Installing dependencies into isolated venv...');
+    execSync(`"${venvPip}" install -r "${reqTxt}"`, { stdio: 'inherit' });
+  }
+
+  const repoRoot = path.join(__dirname, '..');
+  const env = { ...process.env, PYTHONPATH: path.join(repoRoot, 'src') };
+
+  const child = spawn(venvPython, ['-m', 'mcp_web_engine.main', ...process.argv.slice(2)], {
+    stdio: 'inherit',
+    env: env
+  });
+  forwardChild(child);
+}
+
+if (!tryUv()) {
+  runInIsolatedVenv();
+}

mcp_web_engine-1.1.0/config.py

@@ -0,0 +1,24 @@
+"""
+Centralized Configuration Module (Pydantic Settings / Environment Variables)
+"""
+from pydantic import Field
+from pydantic_settings import BaseSettings, SettingsConfigDict
+
+class Settings(BaseSettings):
+    model_config = SettingsConfigDict(env_file=".env", env_file_encoding="utf-8")
+
+    API_KEY: str = Field(default="sk_mcp_dev_key_12345", description="Bearer API key for authentication")
+    SEARXNG_URL: str = Field(default="http://127.0.0.1:8082/search", description="Internal SearXNG URL")
+    PORT: int = Field(default=5050, description="Service listening port")
+    HOST: str = Field(default="0.0.0.0", description="Service listening host")
+    
+    # Rate Limiting & Limits
+    RATE_LIMIT_PER_MINUTE: int = Field(default=120, description="Max requests per minute per API key")
+    DEFAULT_TIMEOUT_SEC: float = Field(default=10.0, description="Default HTTP request timeout in seconds")
+    MAX_PAYLOAD_BYTES: int = Field(default=2 * 1024 * 1024, description="Max payload size limit (2 MB)")
+    
+    # Environment & Logging
+    ENV: str = Field(default="production", description="Environment (development/production)")
+    LOG_LEVEL: str = Field(default="INFO", description="Log level")
+
+settings = Settings()

mcp_web_engine-1.1.0/docker-compose.yml

@@ -0,0 +1,27 @@
+version: '3.8'
+
+services:
+  mcp-web-engine:
+    build:
+      context: .
+      dockerfile: Dockerfile
+    container_name: mcp_web_engine
+    ports:
+      - "5050:5050"
+    extra_hosts:
+      - "host.docker.internal:host-gateway"
+    environment:
+      - API_KEY=sk_mcp_dev_key_12345
+      - SEARXNG_URL=http://host.docker.internal:8082/search
+      - PORT=5050
+      - HOST=0.0.0.0
+      - RATE_LIMIT_PER_MINUTE=120
+      - LOG_LEVEL=INFO
+    restart: unless-stopped
+    security_opt:
+      - no-new-privileges:true
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:5050/health"]
+      interval: 15s
+      timeout: 5s
+      retries: 3

mcp_web_engine-1.1.0/docs/ONBOARDING.md

@@ -0,0 +1,70 @@
+# 🚀 Guía de Onboarding Beta Pública — MCP Web Engine
+
+> **Guía rápida de 1 página para conectar tu cliente MCP (Claude Desktop, Cursor, Windsurf, Inspector) al endpoint HTTPS público en < 3 minutos.**
+
+---
+
+## 🌐 Endpoint Público de Producción HTTPS (Cloudflare Managed Tunnel)
+
+- **Endpoint MCP 2026-07-28:** `https://ultimate-ignored-over-light.trycloudflare.com/v1/mcp`
+- **Health Check:** `https://ultimate-ignored-over-light.trycloudflare.com/health`
+
+---
+
+## 🔑 Paso 1: Obtén tu Beta Key
+
+Contacta con el administrador para recibir tu clave personal e independiente de acceso Beta (formato `sk_mcp_beta_...`).
+Cada clave Beta cuenta con un límite de **10,000 peticiones** y una tasa máxima de **120 req/minuto**.
+
+---
+
+## ⚙️ Paso 2: Configura tu Cliente MCP
+
+### A. Configuración en Cursor / Windsurf / MCP Inspector (Conexión Directa HTTPS)
+1. Abre los ajustes de **MCP / Custom Tools** en tu IDE.
+2. Añade un nuevo servidor con la siguiente URL:
+   - **URL:** `https://ultimate-ignored-over-light.trycloudflare.com/v1/mcp`
+3. Añade la cabecera HTTP de autenticación:
+   - **Header Name:** `Authorization`
+   - **Header Value:** `Bearer sk_mcp_beta_TU_CLAVE_AQUÍ`
+
+---
+
+### B. Configuración en Claude Desktop (vía puente stdio `mcp-remote`)
+Abre tu archivo `claude_desktop_config.json` y añade:
+
+```json
+{
+  "mcpServers": {
+    "mcp-web-engine": {
+      "command": "npx",
+      "args": [
+        "-y",
+        "mcp-remote",
+        "https://ultimate-ignored-over-light.trycloudflare.com/v1/mcp",
+        "--header",
+        "Authorization: Bearer sk_mcp_beta_TU_CLAVE_AQUÍ"
+      ]
+    }
+  }
+}
+```
+
+---
+
+## 🧪 Paso 3: Prueba tu Primera Invocación MCP
+
+Una vez conectado, pídele a tu modelo/asistente:
+
+> *"Busca los últimos avances del protocolo MCP en 2026 y extrae un resumen en Markdown."*
+
+Tu asistente ejecutará de forma transparente:
+1. `web_search(query="MCP protocol 2026 advancements")`
+2. `extract_markdown(url="https://...")`
+
+---
+
+## 🔒 Privacidad y Seguridad
+
+- **Zero Tracking:** No almacenamos tus consultas de búsqueda ni el contenido descargado.
+- **Protección Anti-SSRF:** La infraestructura bloquea el acceso accidental o malicioso a redes privadas locales.

mcp_web_engine-1.1.0/docs/OUTREACH_PHASE_1.md

@@ -0,0 +1,3 @@
+# 📩 PLAN DE ADQUISICIÓN — FASE 1
+
+> **Nota:** El usuario gestiona el contacto directo con los beta testers. Las issues automáticas creadas fueron eliminadas por completo de GitHub.