Back to Browse

Sofya MCP Server

Developer ToolsModerate5.6MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

Web search, fetch, extract, and research for AI agents. Markdown output + AI-synthesized answers.

About

Web search, fetch, extract, and research for AI agents. Markdown output + AI-synthesized answers.

Remote endpoints: streamable-http: https://mcp.sofya.co/mcp

Security Report

5.6
Moderate5.6Moderate Risk

sofya-mcp is a thin, transparent stdio wrapper that forwards four read-only web tools (search, fetch, extract, research) to the Sofya REST API using a user-supplied API key from SOFYA_API_KEY or --api-key. No hardcoded credentials, shell execution, eval, or local file access were found, and network access is the expected permission for a web-tools server in the Developer Tools category. Minor observations are limited to the configurable base URL being able to redirect the bearer token and the lack of input validation on tool arguments before they are forwarded to the remote API. Supply chain analysis found 10 known vulnerabilities in dependencies (0 critical, 3 high severity).

3 files analyzed · 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

system_info

Check that this permission is expected for this type of plugin.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

sofya-mcp

Listed on mcpservers.org

MCP server for Sofya - web search, fetch, extract, and deep research for AI agents, exposed over the Model Context Protocol.

Use it either way:

  • Hosted (no install): connect your client to https://mcp.sofya.co/mcp (streamable HTTP). Sign in with OAuth, or send your API key as a Bearer token. This is the server listed in the MCP registry as co.sofya/sofya.
  • Local: build this repo and run it over stdio. It is a thin wrapper around the Sofya REST API with the four core tools.

Eligible GitHub accounts (a year or older) get free monthly credits; everyone else pays as they go.

Tools

ToolWhat it doesCost
searchSearch the web and get extracted page content (not just snippets). Supports news topic, domain filters, freshness, and an optional AI-synthesized answer.1-2 credits (+2 for include_answer)
fetchFetch up to 10 URLs as clean markdown. Also handles PDF, DOCX, XLSX, PPTX, EPUB, and more.1 credit / URL
extractFetch a page and pull specific information from it using AI.10 credits
researchDecompose a question into sub-queries, read many sources in parallel, and synthesize a cited report.50 credits
get_balanceShow the account's remaining credits. Hosted server only.free
buy_creditsReturn a payment link for a credit top-up. It does not charge anything. Hosted server only.free

search, fetch, extract, research and get_balance are read-only.

Hosted server (VS Code / Copilot and others)

Point your client at the hosted endpoint. Clients with OAuth support (Claude, VS Code, Cursor, Cline and others) only need the URL and will ask you to sign in. To use an API key instead, get one at sofya.co (keys look like sofya_live_...) and send it as a Bearer token:

VS Code / GitHub Copilot (.vscode/mcp.json):

{
  "servers": {
    "sofya": {
      "type": "http",
      "url": "https://mcp.sofya.co/mcp",
      "headers": { "Authorization": "Bearer sofya_live_..." }
    }
  }
}

Claude Code, as a plugin (signs in with OAuth; plugin files in plugins/sofya):

/plugin install sofya --marketplace sofya-co/sofya-mcp

Claude Code, with an API key:

claude mcp add --transport http sofya https://mcp.sofya.co/mcp --header "Authorization: Bearer sofya_live_..."

Cursor (~/.cursor/mcp.json):

{
  "mcpServers": {
    "sofya": {
      "url": "https://mcp.sofya.co/mcp",
      "headers": { "Authorization": "Bearer sofya_live_..." }
    }
  }
}

Cline:

cline mcp install sofya --transport http https://mcp.sofya.co/mcp

Or in cline_mcp_settings.json:

{
  "mcpServers": {
    "sofya": {
      "type": "streamableHttp",
      "url": "https://mcp.sofya.co/mcp",
      "headers": { "Authorization": "Bearer sofya_live_..." }
    }
  }
}

Then ask your agent things like "search for the latest Node.js LTS release notes", "fetch this PDF and summarize it", or "research how the EU AI Act treats open-weight models". Full API docs: sofya.co/docs.

Local server

Prerequisites

  • Node.js 18+
  • A Sofya API key - get one at sofya.co (keys look like sofya_live_...)

Build

git clone https://github.com/sofya-co/sofya-mcp.git
cd sofya-mcp
npm install          # also builds to build/index.js

Check it starts:

SOFYA_API_KEY=sofya_live_... node build/index.js

In the examples below, replace /path/to/sofya-mcp with the folder you cloned.

Configuration

Claude Code
claude mcp add sofya --env SOFYA_API_KEY=sofya_live_... -- node /path/to/sofya-mcp/build/index.js
Claude Desktop / Cursor / Windsurf / VS Code

Add this to your MCP config (e.g. claude_desktop_config.json, or .cursor/mcp.json):

{
  "mcpServers": {
    "sofya": {
      "command": "node",
      "args": ["/path/to/sofya-mcp/build/index.js"],
      "env": {
        "SOFYA_API_KEY": "sofya_live_..."
      }
    }
  }
}
Codex

Add it with the Codex CLI:

codex mcp add sofya --env SOFYA_API_KEY=sofya_live_... -- node /path/to/sofya-mcp/build/index.js

Or edit ~/.codex/config.toml directly. Note Codex puts environment variables in a nested [mcp_servers.<name>.env] table:

[mcp_servers.sofya]
command = "node"
args = ["/path/to/sofya-mcp/build/index.js"]

[mcp_servers.sofya.env]
SOFYA_API_KEY = "sofya_live_..."

Then run /mcp inside Codex to confirm the server is connected.

Environment variables

VariableRequiredDefaultDescription
SOFYA_API_KEYyes-Your Sofya API key (sofya_live_...; older ay_live_... keys still work).
SOFYA_BASE_URLnohttps://sofya.coOverride the Sofya API base URL.

CLI flags --api-key and --base-url take precedence over the env vars. Run node build/index.js --list-tools to print the tool schemas, or --help for options.

Development

npm run build        # compile TypeScript to build/
npm run watch        # recompile on change
npm run inspector    # debug with @modelcontextprotocol/inspector

The server is a single file, src/index.ts. Tool definitions mirror Sofya's hosted MCP server exactly (same names, parameters, and defaults).

License

MIT - see LICENSE.

Reviews

No reviews yet

Be the first to review this server!