Atlas / MCP servers / baranwang / mcp-trends-hub

mcp-trends-hubSAFE

mcp/baranwang/mcp-trends-hub

基于 Model Context Protocol (MCP) 协议的全网热点趋势一站式聚合服务

Verdict
SAFE
Grade
B
Trust score
89 /100
Exposed tools
21 21r · 0w · 0d
Transport
stdio
License
—
Stars
271
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://smithery.ai/server/@baranwang/mcp-trends-hub) [](https://www.npmjs.com/package/mcp-trends-hub)

基于 Model Context Protocol (MCP) 协议的全网热点趋势一站式聚合服务

示例效果

✨ 特性

  • 📊 一站式聚合 - 聚合全网热点资讯,20+ 优质数据源
  • 🔄 实时更新 - 保持与源站同步的最新热点数据
  • 🧩 MCP 协议支持 - 完全兼容 Model Context Protocol,轻松集成到 AI 应用
  • 🔌 易于扩展 - 简单配置即可添加自定义 RSS 源
  • 🎨 灵活定制 - 通过环境变量轻松调整返回字段

📋 环境要求

  • Node.js 22 或更新版本
  • VS Code、Cursor、Windsurf、Claude Desktop 或其他 MCP 客户端

🚀 快速开始

首先,在你的 MCP 客户端中安装 Trends Hub MCP 服务。

标准配置适用于大部分客户端:

{
"mcpServers": {
"trends-hub": {
"command": "npx",
"args": [
"-y",
"mcp-trends-hub"
]
}
}
}

Claude Desktop

参考 MCP 安装指南,使用上述标准配置。

配置文件位置:

  • macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
  • Windows: %APPDATA%\Claude\claude_desktop_config.json

Cursor

前往 Cursor Settings -> MCP -> Add new MCP Server。自定义名称,类型选择 command,命令填写 npx -y mcp-trends-hub。

VS Code

参考 MCP 安装指南,使用上述标准配置。

你也可以使用 VS Code CLI 安装:

code --add-mcp '{"name":"trends-hub","command":"npx","args":["-y","mcp-trends-hub"]}'

Windsurf

参考 Windsurf MCP 文档,使用上述标准配置。

Cline

参考 Configuring MCP Servers 文档。

在 `cline

Read from source at commit 4a18370a2806OBSERVED · 2026-10-12
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code
claude mcp add mcp-trends-hub -- npx -y [email protected]
claude-desktop
{
  "mcpServers": {
    "mcp-trends-hub": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ]
    }
  }
}
03

Exposed tools (21)

21 read · 0 write · 0 destructive.

ToolRiskDescription
get_36kr_trendingread获取 36 氪热榜,提供创业、商业、科技领域的热门资讯,包含投融资动态、新兴产业分析和商业模式创新信息
get_9to5mac_newsread获取 9to5Mac 苹果相关新闻,包含苹果产品发布、iOS 更新、Mac 硬件、应用推荐及苹果公司动态的英文资讯
get_bbc_newsread获取 BBC 新闻,提供全球新闻、英国新闻、商业、政治、健康、教育、科技、娱乐等资讯
get_bilibili_rankread获取哔哩哔哩视频排行榜,包含全站、动画、音乐、游戏等多个分区的热门视频,反映当下年轻人的内容消费趋势
get_douban_rankread获取豆瓣实时热门榜单,提供当前热门的图书、电影、电视剧、综艺等作品信息,包含评分和热度数据
get_douyin_trendingread获取抖音热搜榜单,展示当下最热门的社会话题、娱乐事件、网络热点和流行趋势
get_gcores_newread获取机核网游戏相关资讯,包含电子游戏评测、玩家文化、游戏开发和游戏周边产品的深度内容
get_ifanr_newsread获取爱范儿科技快讯,包含最新的科技产品、数码设备、互联网动态等前沿科技资讯
get_infoq_newsread获取 InfoQ 技术资讯,包含软件开发、架构设计、云计算、AI等企业级技术内容和前沿开发者动态
get_juejin_article_rankread获取掘金文章榜,包含前端开发、后端技术、人工智能、移动开发及技术架构等领域的高质量中文技术文章和教程
get_netease_news_trendingread获取网易新闻热点榜,包含时政要闻、社会事件、财经资讯、科技动态及娱乐体育的全方位中文新闻资讯
get_nytimes_newsread获取纽约时报新闻,包含国际政治、经济金融、社会文化、科学技术及艺术评论的高质量英文或中文国际新闻资讯
get_smzdm_rankread获取什么值得买热门,包含商品推荐、优惠信息、购物攻略、产品评测及消费经验分享的实用中文消费类资讯
get_sspai_rankread获取少数派热榜,包含数码产品评测、软件应用推荐、生活方式指南及效率工作技巧的优质中文科技生活类内容
get_tencent_news_trendingread获取腾讯新闻热点榜,包含国内外时事、社会热点、财经资讯、娱乐动态及体育赛事的综合性中文新闻资讯
get_thepaper_trendingread获取澎湃新闻热榜,包含时政要闻、财经动态、社会事件、文化教育及深度报道的高质量中文新闻资讯
get_theverge_newsread获取 The Verge 新闻,包含科技创新、数码产品评测、互联网趋势及科技公司动态的英文科技资讯
get_toutiao_trendingread获取今日头条热榜,包含时政要闻、社会事件、国际新闻、科技发展及娱乐八卦等多领域的热门中文资讯
get_weibo_trendingread获取微博热搜榜,包含时事热点、社会现象、娱乐新闻、明星动态及网络热议话题的实时热门中文资讯
get_weread_rankread获取微信读书排行榜,包含热门小说、畅销书籍、新书推荐及各类文学作品的阅读数据和排名信息
get_zhihu_trendingread获取知乎热榜,包含时事热点、社会话题、科技动态、娱乐八卦等多领域的热门问答和讨论的中文资讯
04

Trust audit

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codePASS
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
declared (1 observation(s))
Network
declared (1 observation(s))
Shell
none-observed
Dependencies
not all pinned
Secrets in source
none-found

Findings (5)

LOWInventory / provenance · inv.no_license · CWE-1104
Why it matters. no LICENSE file and no repo licence
Fix. add a licence
LOWInsecure crypto · crypto.weak_hash · CWE-327, CWE-338
src/tools/bilibili.ts:60
const wbiSign = createHash("md5")
LOWInsecure crypto · crypto.weak_hash · CWE-327, CWE-338
src/tools/weread.ts:22
const hash = crypto.createHash("md5");
LOWInsecure crypto · crypto.weak_hash · CWE-327, CWE-338
src/tools/weread.ts:67
const finalHash = crypto.createHash("md5");
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
package.json
@modelcontextprotocol/sdk, axios, dayjs, es-toolkit, fast-xml-parser, zod, @biomejs/biome, @changesets/cli
Why it matters. 13 dependency range(s) float
Fix. pin exact versions or ship a lockfile

Gates applied: no_behavioural_pass, no_license.

Audited 2026-10-12 · audit v0.4.1 · source sha 4a18370a2806full audit observations/trust-audit/mcp-server/baranwang__mcp-trends-hub.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-124a18370a2806SAFEB89first audit
06

Questions

What is the mcp-trends-hub MCP server?

基于 Model Context Protocol (MCP) 协议的全网热点趋势一站式聚合服务

What tools does mcp-trends-hub expose?

21 in total: 21 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is mcp-trends-hub safe to connect to an agent?

The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.

What credentials does mcp-trends-hub need?

No credential environment variables were found in its source, so it appears to need none.

How does mcp-trends-hub run?

It speaks stdio, so it runs as a local process your client starts. It is published on npm as mcp-trends-hub at 1.7.0.

How current is this page?

The grade is for one exact copy of the source (4a18370a2806), read on 2026-10-12. The repository is watched and re-audited when it changes.

Advertisement