iceland-news-mcp
by olibuijr
Overview
An MCP server that fetches and provides structured access to the latest Icelandic news from various RSS sources, integrated with a voice-activated AI assistant for news summaries and search.
Installation
node dist/index.jsEnvironment Variables
- GOOGLE_API_KEY
Security Notes
A critical security flaw exists where the `GOOGLE_API_KEY` is fetched by the client-side SvelteKit app via a server endpoint (`/api/google/api-key`). This directly exposes the API key to the browser, making it vulnerable to interception and misuse. Additionally, the Whisper STT service listens on `0.0.0.0` and enables CORS for all origins (`*`), exposing it widely on the local network without restriction. Hardcoded local IP addresses for the Whisper service within the web UI (`http://192.168.8.191:7000` and `:7050`) make deployment brittle and suggest network configuration assumptions. No `eval` or direct system command injection vulnerabilities were found in the provided server-side code.
Similar Servers
fastmcp
A TypeScript framework for building Model Context Protocol (MCP) servers, simplifying server component configuration, connection handling, and defining tools, resources, and prompts to handle client sessions.
mcp-server-typescript
This server acts as a Model Context Protocol (MCP) gateway, enabling AI assistants to interact with DataForSEO APIs for various SEO data, including keyword research, SERP analysis, backlink monitoring, and on-page optimization.
miniflux-mcp
An MCP server that provides tools to interact with a Miniflux RSS reader instance, enabling management of feeds, entries, categories, and users.
youdotcom-mcp-server
Provides AI agents with real-time web access for search, AI-powered answers, and content extraction via the Model Context Protocol.