Delv
CommunityAbandoned· 11mo4.3by Vitor Pavinato

NCBI MCP Server

NCBI and PubMed literature search with caching, MeSH integration, related articles, and batch processing for life sciences.

C
Safety & Trust

Delv Safety Grade: C

Score 58/100 · assessed 2026-04-28

Maintainer45
Permissions85
Supply chain40
Transparency65
Incidents100

NCBI MCP Server provides read-only access to PubMed and NCBI databases for biomedical literature search. The server itself is low-risk from a permissions standpoint: it makes outbound API calls to NCBI's public endpoints and caches results locally, with no write operations beyond cache files. The main concerns are supply-chain related. Installation requires Poetry and manual setup rather than a standard package manager, and the maintainer appears to be a solo developer with limited GitHub activity. The repository is open source with reasonable documentation, but there's no published package on PyPI or npm, meaning users must clone and build. The NCBI API key requirement is standard for rate-limiting purposes and doesn't grant elevated privileges. No security incidents are known. Suitable for research workflows where you understand the manual installation process, but the supply-chain maturity is below production-grade tooling.

Lethal Trifecta (prompt-injection exposure)

TWO OF THREE
Private dataNo
Reads secrets, credentials, private files
Untrusted inputYes
Ingests web pages, PRs, issues, emails
External commsYes
Can send data outbound

Public papers, curated. Low-but-nonzero on the input axis.

Green flags

  • Read-only access to public NCBI/PubMed APIs, no destructive operations
  • Open source repository with clear README and usage examples
  • NCBI API key is optional and only for rate limit increases, not auth
  • Caching layer reduces API load and improves performance for repeat queries
  • Focused scope: literature search only, no shell or filesystem manipulation

Red flags

  • Solo maintainer with limited public GitHub activity and contribution history
  • No published package on PyPI or npm, requires manual clone-and-build
  • Poetry-only install increases setup complexity and dependency risk
  • Filesystem write for caching without documented cache location or size limits

Permissions requested

Outbound networkWrite filesRead env
Assessed by Delv Editorial using public metadata. Grades are advisory and update as the ecosystem changes. They do not replace your own review of permissions and code before granting an agent access to sensitive systems.

Install

poetry install
Env vars needed: NCBI_API_KEY

Review

NCBI MCP Server connects Claude to the National Center for Biotechnology Information's databases, primarily PubMed and the MeSH taxonomy. If you're writing grant proposals, literature reviews, or building tools for life sciences research, this is a direct line to the world's largest biomedical literature archive without leaving your editor. What makes this worth installing is the caching layer and batch processing. PubMed searches can be slow and repetitive, especially when you're iterating on search terms or pulling related articles. The server caches results locally, so you're not hammering NCBI's API every time you refine a query. Batch operations let you pull metadata for dozens of papers in one go, which is genuinely useful if you're building reference lists or comparing citation networks. The MeSH integration is solid: you can browse the controlled vocabulary tree, find term definitions, and map free-text concepts to official headings. I'd reach for this when building a systematic review pipeline or when I need Claude to suggest related papers based on a starting set. The quirks are real but manageable. You need an NCBI API key, which is free but requires registration. Without it, you're rate-limited to three requests per second, which will slow down batch jobs. The install uses Poetry, so if you're not already in that ecosystem, expect a few extra minutes of setup. The documentation assumes you know what MeSH is and why you'd want it; if you're not in biomedical research, the taxonomy features will feel opaque. Related article discovery works well for recent papers but can return sparse results for older or niche publications. This isn't for casual use. If you're not regularly searching PubMed or don't know what a MeSH heading is, you won't get much from it. But for computational biologists, medical writers, or anyone building research automation, it's a clean, focused tool that does one thing well. The caching alone saves enough time to justify the setup.
Verdict

Install this if you search PubMed more than once a week or need to automate literature reviews. Skip it if you're outside life sciences or only do occasional manual searches. The caching and batch processing make it worth the Poetry setup for anyone building research workflows.

Good at

  • Caching layer prevents redundant API calls when refining searches or revisiting queries.
  • Batch processing lets you pull metadata for multiple papers in one operation, useful for building reference lists.
  • MeSH taxonomy integration provides controlled vocabulary browsing and term mapping.
  • Related article discovery works well for finding connected research from a seed set.
  • Free NCBI API key removes rate limits and makes batch jobs practical.

Watch out

  • Requires NCBI API key registration, which adds a setup step even though it's free.
  • Poetry-based install may be unfamiliar if you're not already in that dependency ecosystem.
  • Documentation assumes biomedical research familiarity, so MeSH features feel opaque to outsiders.
  • Related article results can be sparse for older or niche publications.
  • Hosts beyond Claude Desktop need manual config adjustments.

Use cases

  • biomedical lit search
  • MeSH taxonomy browsing
  • related-work discovery
  • bulk NCBI ingestion

Getting started

1. Register for a free NCBI API key at https://www.ncbi.nlm.nih.gov/account/ and save it. 2. Run `poetry install` in the cloned repo directory to install dependencies. 3. Add the server to your Claude Desktop config with the NCBI_API_KEY environment variable pointing to your key. 4. Restart Claude Desktop and test with a simple PubMed search query to verify the connection. 5. Watch out for rate limits: without an API key, you're capped at three requests per second, which will bottleneck batch operations.

Works with

Claude DesktopClaude CodeCursor

Similar MCPs