RssSAFE
MCP RSS is a Model Context Protocol (MCP) server for interacting with RSS feeds.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://mseep.ai/app/buhe-mcp-rss)
MCP RSS is a Model Context Protocol (MCP) server for interacting with RSS feeds.
Features
- Parse OPML files to import RSS feed subscriptions
- Automatically fetch and update articles from RSS feeds
- Expose RSS content through MCP API
- Mark articles as favorites
- Filter articles by source and status
Installation
Prerequisites
- Node.js (v14 or higher)
- MySQL database
Setup MySQL
docker run -itd --name mysql-test -p 3306:3306 -e MYSQL_ROOT_PASSWORD=123456 mysql
Install MCP
This MCP uses stdio for communication. Fill in `` npx mcp_rss `` in the command, fill in the configuration that needs to be customized in the environment variable, and at least use your own opml file.
Use in claude desktop
{
"command": "npx",
"args": [
"mcp_rss"
],
"env": {
"OPML_FILE_PATH": "/PATH/YOUR_FEED_FILE.opml"
}
}
Configuration
Set the following environment variables to configure MCP RSS:
Configuration Options
MCP API Reference
The MCP RSS server exposes the following API methods:
get_content
Get articles from subscribed RSS feeds.
Parameters:
84d616b0bc81OBSERVED · 2026-10-08Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add mcp_rss --env DB_PASSWORD=${DB_PASSWORD} -- npx -y [email protected]{
"mcpServers": {
"mcp_rss": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"DB_PASSWORD": "${DB_PASSWORD}"
}
}
}
}Exposed tools (3)
2 read · 1 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
get_content | read | Get articles by subscribing to RSS, status has only two values: normal, favorite, source is empty to indicate all sources, Sort by article time, with the latest at the front. |
get_sources | read | All sources of the article, the result is in array form. If you want to use the source parameter of get_content, which values should be used, call it first |
set_tag | write | Set article tag, status has only two values: normal, favorite, articleId is article id |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | WARN |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (2)
description: "All sources of the article, the result is in array form. If you want to use the source parameter of get_content, which values should be used, call it first",
@modelcontextprotocol/sdk, dotenv, fast-xml-parser, mysql2, node-cron, rss-parser, typeorm, @types/node
Gates applied: no_behavioural_pass.
84d616b0bc81full audit observations/trust-audit/mcp-server/buhe__rss.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-08 | 84d616b0bc81 | SAFE | B | 89 | first audit |
Questions
What is the Rss MCP server?
MCP RSS is a Model Context Protocol (MCP) server for interacting with RSS feeds.
What tools does Rss expose?
3 in total: 2 read-only, 1 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Rss safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does Rss need?
It reads DB_PASSWORD from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does Rss run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as mcp_rss at 1.0.6.
How current is this page?
The grade is for one exact copy of the source (84d616b0bc81), read on 2026-10-08. The repository is watched and re-audited when it changes.