
Threat Research
/Security News
Searchjacked: Hidden Browser Extensions Hijack Searches for 13 Million Users
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.
@gleanwork/local-mcp-server
Advanced tools
Note: We recommend using the remote MCP server integrated directly in Glean instead of this local MCP server. The remote server provides a more seamless experience with automatic updates, better performance, and simplified configuration. This local MCP server is primarily intended for experimental and testing purposes.
The Glean MCP Server is a Model Context Protocol (MCP) server that provides seamless integration with Glean's enterprise knowledge.
Search Glean's content index using the Glean Search API. This tool allows you to query Glean's content index with various filtering and configuration options.
Interact with Glean's AI assistant using the Glean Chat API. This tool allows you to have conversational interactions with Glean's AI, including support for message history, citations, and various configuration options.
Search Glean's People directory to find employee information.
Read documents from Glean by providing document IDs or URLs. This tool allows you to retrieve the full content of specific documents for detailed analysis or reference.
To configure this MCP server in your MCP client (such as Claude Desktop, Windsurf, Cursor, etc.), run @gleanwork/configure-mcp-server passing in your client, token and instance.
# Configure for Cursor
npx @gleanwork/configure-mcp-server --client cursor --token your_api_token --instance instance_name
# Configure for Claude Desktop
npx @gleanwork/configure-mcp-server --client claude --token your_api_token --instance instance_name
For more details see: @gleanwork/configure-mcp-server.
To manually configure an MCP client (such as Claude Desktop, Windsurf, Cursor, etc.), add the following configuration to your MCP client settings:
{
"mcpServers": {
"glean": {
"command": "npx",
"args": ["-y", "@gleanwork/local-mcp-server"],
"env": {
"GLEAN_INSTANCE": "<glean instance name>",
"GLEAN_API_TOKEN": "<glean api token>"
}
}
}
}
Replace the environment variable values with your actual Glean credentials.
As an alternative to npx, you can run the Glean MCP server in a Docker container. This provides isolation and consistent runtime environments.
Multi-architecture Docker images are published to GitHub Container Registry and work on both Intel/AMD (amd64) and Apple Silicon (arm64) systems.
docker pull ghcr.io/gleanwork/local-mcp-server:latest
Configure your MCP client to use the Docker image. Most MCP clients support passing environment variables via the env block:
{
"mcpServers": {
"glean": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/gleanwork/local-mcp-server:latest"
],
"env": {
"GLEAN_INSTANCE": "your-instance",
"GLEAN_API_TOKEN": "your-token"
}
}
}
}
If your MCP client doesn't pass the env block to Docker, use -e flags in the args instead:
{
"mcpServers": {
"glean": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"GLEAN_INSTANCE=your-instance",
"-e",
"GLEAN_API_TOKEN=your-token",
"ghcr.io/gleanwork/local-mcp-server:latest"
]
}
}
}
Important: The -i flag is required for stdio transport communication.
GLEAN_INSTANCE (required): Your Glean instance nameGLEAN_API_TOKEN (required): Your Glean API tokenContainer exits immediately:
docker logs <container-id>-i flag is present in the argsPermission or authentication errors:
GLEAN_API_TOKEN is validGLEAN_INSTANCE matches your Glean deploymentMCP client can't connect:
docker command is in your PATHEnvironment variables not being passed:
-e flags in args instead of the env block (see alternative configuration above)For standalone deployment scenarios, a docker-compose example is available in examples/docker-compose.yaml. This demonstrates how to run the MCP server with Docker Compose, including resource limits and security options.
Note: Most MCP clients manage container lifecycle directly, so docker-compose is primarily useful for testing or custom deployment scenarios.
Since MCP servers communicate over stdio, debugging can be challenging. We recommend using the MCP Inspector, which is available as a package script:
npm run inspector
The Inspector will provide a URL to access debugging tools in your browser.
Please see CONTRIBUTING.md for development setup and guidelines.
MIT License - see the LICENSE file for details
FAQs
MCP server for Glean API integration
The npm package @gleanwork/local-mcp-server receives a total of 0 weekly downloads. As such, @gleanwork/local-mcp-server popularity was classified as not popular.
We found that @gleanwork/local-mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 8 open source maintainers collaborating on the project.

Threat Research
/Security News
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.

Threat Research
Malicious Firefox extensions mimic Phantom, Jupiter, and Bitget wallets to steal recovery phrases and private keys, with one fetching its payload remotely.

Product
Socket Threat Intel now shows which malware campaigns were blocked or detected in your organization, with links to scans and Firewall events.