Back to Home
syou6162 icon

termfeed

Verified Safe

by syou6162

Overview

A Model Context Protocol (MCP) server that exposes RSS feed data and article details from a terminal-based RSS reader to LLM agents.

Installation

Run Command
npx termfeed mcp-server

Environment Variables

  • TERMFEED_DB
  • XDG_DATA_HOME

Security Notes

The server uses `child_process.spawn` to open URLs in a browser, which is a common potential attack vector. While the implementation includes URL validation (`validateUrl`) and uses standard, relatively safe commands (`open -g`, `cmd /c start /min`, `xdg-open`) with `stdio: 'ignore', detached: true` options to prevent direct shell injection, a highly crafted malicious URL could potentially exploit vulnerabilities in the target browser or OS's URL handler. No direct `eval` or obvious hardcoded secrets were found. User input to tools is schema-validated (`zod`).

Similar Servers

Stats

Interest Score30
Security Score8
Cost ClassLow
Stars1
Forks0
Last Update2026-01-17

Tags

RSS readerTUICLILLM agentModel Context Protocol