Back to Home
gamzesirin icon

MCP-News-Server

by gamzesirin

Overview

An MCP-based server for aggregating, summarizing, and analyzing news from various Turkish news sources.

Installation

Run Command
npm start

Environment Variables

  • MCP_SERVER_NAME
  • MCP_SERVER_VERSION
  • RSS_FEEDS
  • CACHE_TTL
  • CACHE_CHECK_PERIOD
  • PORT

Security Notes

Critical Server-Side Request Forgery (SSRF) vulnerability in the `tam_icerik_al` MCP tool. If the server is exposed to untrusted MCP clients, it allows fetching arbitrary URLs, potentially leading to internal network reconnaissance or access to sensitive resources. The web server also uses `app.use(cors())`, enabling cross-origin requests from any domain, which reduces browser-enforced security measures. There is a lack of explicit input validation on URLs passed to web scraping functions.

Similar Servers

Stats

Interest Score21
Security Score3
Cost ClassLow
Stars4
Forks0
Last Update2025-12-26

Tags

News AggregationNLPSummarizationSentiment AnalysisTurkish News