Our grade: 4 checks
Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.
Community rating
- 5 4
- 4 0
- 3 1
- 2 0
- 1 0
Trust in production
- Trust it - 80%
- With caveats - 20%
- Wouldn't - 0%
100% would recommend this server
How reviewers scored it
- Setup & docs 4.6
- Auth experience 3.6
- Reliability 4.8
- Maintainer responsiveness 4.6
Why it got an A
Official server from Tavily, hosted over HTTPS or run locally over stdio, very active, with no advisories on record. Its extract, crawl and map tools fetch any URL the model asks for on Tavily's servers, so page text can carry instructions into your agent. Biggest deduction: the setup its docs show first puts your API key in the URL, where it can end up in logs. OAuth is available but optional and maps to an account-wide key.
How to connect
// ~/.cursor/mcp.json (OAuth, sign in to Tavily when prompted)
{
"mcpServers": {
"tavily": {
"url": "https://mcp.tavily.com/mcp/"
}
}
}claude mcp add --transport http tavily https://mcp.tavily.com/mcp// claude_desktop_config.json
{
"mcpServers": {
"tavily-mcp": {
"command": "npx",
"args": ["-y", "tavily-mcp@latest"],
"env": {
"TAVILY_API_KEY": "tvly-YOUR_API_KEY-here"
}
}
}
}Is Tavily MCP safe?
Is Tavily MCP safe to use?
Tavily MCP grades A (strong public trust signals). Login is optional, so check that it is turned on in your setup.
Does Tavily MCP have known vulnerabilities?
Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.
Does Tavily MCP support authentication?
Optionally. It can run with a login, but it does not require one, so turn it on.
Alternatives in Search & Retrieval
- A Exa MCPOfficial hosted Exa server for web search, page fetching, and multi-step research.
- A Perplexity MCP ServerOfficial Perplexity server for web search, quick answers, reasoning, and deep research through the Perplexity API.
- B Firecrawl MCP ServerOfficial Firecrawl server to search the web, scrape and crawl sites, parse documents, and interact with pages in a cloud browser.
- B LawDB MCP ServerHosted server to search German and EU legislation and German, European and international case law, and fetch full texts and single provisions with stable citations.
- B Panda Public Funding ToolsCommunity stdio server with 10 tools, each running one of the author's paid Apify Actors on your account, for US grants, contracts, SAM.gov bids, SBIR/STTR topics, SEC financials, clinical trials, the Federal Register, recalls, VINs and EU tenders.
Embed this badge
[](https://trustedmcp.io/servers/tavily-mcp)<a href="https://trustedmcp.io/servers/tavily-mcp"><img src="https://trustedmcp.io/badge/tavily-mcp.svg" alt="TrustedMCP grade A" height="80"></a>Community reviews
Our team uses it every day
Installed it on a Friday, it was part of my workflow by Monday. Auth is optional, which is convenient locally. I turned it on before sharing it with the team. Updates land regularly, and nothing broke when I upgraded.
Used for Competitive research
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Surprisingly polished
Tried it on a side project first, then rolled it out at work. Filed an issue and got a reply within two days. Nice that it supports both stdio and HTTP, I use stdio locally and HTTP for the shared agent. Would recommend without hesitation.
Used for Technical research while coding
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Exactly what I needed from Tavily
Of the Tavily integrations I tried, this one is the most predictable. The API key sits in the config file, so I made a dedicated key with minimal permissions. Happy to run it in production.
Used for Finding recent sources for articles
- Setup & docs 5/5
- Auth experience 4/5
- Reliability 5/5
- Maintainer responsiveness 4/5
Earned a permanent spot in my config
Been running this for about a month now. Out of the box it runs without sign-in, so remember to enable auth before exposing it anywhere. The OAuth flow worked first time in Claude Code. Easy recommendation.
Used for Fact-checking drafts
- Setup & docs 5/5
- Auth experience 3/5
- Reliability 5/5
- Maintainer responsiveness 5/5
Good, but read the permissions first
Mostly reliable, with the odd timeout. Out of the box it runs without sign-in, so remember to enable auth before exposing it anywhere. The OAuth flow worked first time in Claude Code. I would use it in prod, but only with a human approving writes.
Used for Collecting references for reports
- Setup & docs 3/5
- Auth experience 3/5
- Reliability 4/5
- Maintainer responsiveness 4/5
Write a review
Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.