Atlas / MCP servers / 6551team / OpenNews

OpenNewsSAFE

mcp/6551team/opennews

News Aggregation · AI Ratings · Trading Signals · Real-time Updates

Verdict
SAFE
Grade
B
Trust score
89 /100
Exposed tools
24 24r · 0w · 0d
Transport
—
License
MIT
Stars
2,375
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

OpenNews MCP Server 85+ Real-time Data Sources · 6 Engine Categories · AI Ratings · Trading Signals

English | 中文 | 日本語 | 한국어

Quick Install

First, get your API Token at [https://6551.io/mcp](https://6551.io/mcp).

Claude Code

claude mcp add opennews \
-e OPENNEWS_TOKEN= \
-- uv --directory /path/to/opennews-mcp run opennews-mcp
Replace /path/to/opennews-mcp with your local project path, and `` with your API token.

OpenClaw

export OPENNEWS_TOKEN=""
cp -r openclaw-skill/opennews ~/.openclaw/skills/

Let AI Review and Install

Not sure if this MCP is safe? Send the following prompt to your AI assistant to review the source code before installing:

Copy the prompt below and paste it to your AI assistant (replace `` and `` with actual values):
Please help me review and install the opennews-mcp MCP server. The project is at .

Steps:
1. Review the security of the following files:
- src/opennews_mcp/api_client.py — Confirm it only connects to ai.6551.io, no data sent elsewhere
- src/opennews_mcp/config.py — Confirm token is only read from local config.json or env vars, not hardcoded or leaked
- src/opennews_mcp/tools/*.py — Confirm all tools only do API queries, no file writes, command execution, or dangerous operations
- pyproject.toml — Confirm dependencies are only mcp, httpx, websockets, no suspicious packages
2. Tell me your conclusion: Safe / Risky / Problematic, and the specific reasons
3. If safe, help me install (Token from https://6551.io/mcp):
claude mcp add opennews -e OPENNEWS_TOKEN= -- uv --directory  run opennews-mcp

Data Sources — 85+ Sources Across 6 Categor

Read from source at commit 45a07e5ffb02OBSERVED · 2026-09-23
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code
claude mcp add opennews --env OPENNEWS_TOKEN=${OPENNEWS_TOKEN} -- npx -y [email protected]
claude-desktop
{
  "mcpServers": {
    "opennews": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "OPENNEWS_TOKEN": "${OPENNEWS_TOKEN}"
      }
    }
  }
}
03

Exposed tools (24)

24 read · 0 write · 0 destructive.

ToolRiskDescription
get_company_inforeadResolve one exact issuer and return its report and financial-item catalog.
get_company_report_textreadRead one issuer-bound report using an exact company selector and stable report ID.
get_crypto_holding_changesreadQuery on-chain holdings changes between adjacent wallet snapshots.
get_crypto_holdingsreadQuery visible on-chain holdings evidence for an institution or wallet address.
get_high_score_newsreadGet highly-rated market news and signals by AI score, sorted by score descending.
get_hot_newsreadGet hot market news and tweets by category.
get_institution_stock_holdingsreadQuery SEC Form 13F institution stock holding disclosures.
get_key_market_eventsreadQuery important macro and focus-company earnings event dates.
get_latest_newsreadGet the most recent market-moving news and signals, newest first.
get_news_by_enginereadGet market news or signal items filtered by engine type.
get_news_by_signalreadGet market news filtered by AI trading signal type.
get_news_by_sourcereadGet market news or signal items from a specific source/category.
get_news_categoriesreadGet all available free market news categories and subcategories.
get_news_sourcesreadGet all available market news source categories and their metadata.
get_politician_stock_activityreadQuery official U.S. House PTR stock transaction disclosures.
get_strategy_hitsreadGet triggered event history for a strategy ID.
get_strategy_listreadGet the authenticated user
list_institution_managersreadList staged SEC Form 13F managers without returning holdings.
list_news_typesreadList all available market news type codes for filtering.
search_companiesreadResolve an exact identifier or return explicit company ambiguity candidates.
search_newsreadSearch real-time financial market news by keyword in text content.
search_news_advancedreadAdvanced financial market news search with multiple filters.
search_news_by_coinreadSearch news and market signals related to a specific digital asset coin/token.
subscribe_latest_newsreadSubscribe to real-time financial market news updates via WebSocket.
04

Trust audit

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codePASS
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
declared (5 observation(s))
Shell
none-observed
Dependencies
pinned
Secrets in source
none-found

Findings (1)

LOWPrompt injection · prompt.authority_framing · CWE-94, CWE-1427
openclaw-skill/opennews/SKILL.md:504
- **Primary API**: Get your token at https://6551.io/mcp for full access to 85+ sources with advanced search

Gates applied: no_behavioural_pass.

Audited 2026-09-23 · audit v0.4.1 · source sha 45a07e5ffb02full audit observations/trust-audit/mcp-server/6551team__opennews.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-09-2345a07e5ffb02SAFEB89source changed, verdict held
06

Questions

What is the OpenNews MCP server?

News Aggregation · AI Ratings · Trading Signals · Real-time Updates

What tools does OpenNews expose?

24 in total: 24 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is OpenNews safe to connect to an agent?

The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.

What credentials does OpenNews need?

It reads OPENNEWS_TOKEN from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.

How current is this page?

The grade is for one exact copy of the source (45a07e5ffb02), read on 2026-09-23. The repository is watched and re-audited when it changes.

Advertisement