Back to Home
Stellarhold170NT icon

news-mcp-server

Verified Safe

by Stellarhold170NT

Overview

Enables AI agents to interact with VnExpress for news search, latest headlines, and article content extraction.

Installation

Run Command
npx -y news-mcp-server-vnexpress --stdio

Security Notes

The `news_reader` tool allows fetching content from any URL provided as input, validated only as a general URL via `z.string().url()`. While the tool is intended for VnExpress articles, there is no explicit domain validation in the code. This lack of domain restriction could theoretically lead to Server-Side Request Forgery (SSRF) if a malicious actor or a misconfigured AI agent provides an arbitrary internal or external URL, potentially exposing internal network resources or other services. No 'eval' or obvious malicious patterns were found. Hardcoded secrets are not present. Network risks are inherent to web scraping, but generally handled by direct requests.

Similar Servers

Stats

Interest Score0
Security Score7
Cost ClassMedium
Avg Tokens3000
Stars0
Forks0
Last Update2025-12-14

Tags

NewsWeb ScrapingRSSVnExpressAI Agent