mcp-newswire-comSAFE
Newswire.com MCP — press releases from Newswire's public newsroom feed.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Live press releases from Newswire.com's public newsroom RSS feed — headline, publish time and sub-headline excerpt, newest first, for the 50 most recent releases. Newswire.com is an Issuer Direct wire, sibling to ACCESS Newswire, and carries a large share of the same releases.
Part of Pipeworx — an MCP gateway connecting AI agents to 1683+ live data sources.
Tools
newswire_com_latest_releases(since_hours?, limit?)— the current rolling
window of releases, newest first (up to 50). newest_item_at tells a caller whether the feed is quiet or stalled.
newswire_com_search_releases(query, limit?)— keyword/company match over
headline and excerpt, within the current window only.
newswire_com_get_release(url)— one specific release, matched by the URL
a prior call returned. Fails clearly (not silently empty) if the release has scrolled out of the current window.
Auth
Keyless. No account, no clickthrough terms. newswire.com/robots.txt disallows only the per-tag feeds and asks for Crawl-delay: 5; the gateway's per-call result cache keeps polling well below that.
Data sources
- — the newsroom "Press Releases"
channel. Measured 2026-09-22: 50 items spanning roughly a day.
Every call re-fetches this same rolling 50-item window live — it is not an archive. search_releases only ever searches what is currently in the window and get_release can miss something that has already fallen out of it (the tool says so explicitly rather than returning an empty result).
This feed carries no issuer field — the company name lives only in the headline or sub-headline — so issuer is null on every row rather than a guess parsed out of the headline.
The /feeds index page lists ~650 per-beat feeds (/newsroom/rss/beat/) and two "custom" feeds; every beat probed returned a bare nginx 404 and both custom feeds return HTTP 410 Gone (2026-09-22
748563a91292OBSERVED · 2026-10-11Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add mcp-newswire-com -- npx -y @pipeworx/[email protected]
{
"mcpServers": {
"mcp-newswire-com": {
"command": "npx",
"args": [
"-y",
"@pipeworx/[email protected]"
]
}
}
}Exposed tools (3)
3 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
newswire_com_get_release | read | Fetch one specific Newswire.com release by its URL (source: newswire.com), as returned by |
newswire_com_latest_releases | read | Latest press releases from Newswire.com |
newswire_com_search_releases | read | Keyword/company search over Newswire.com |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (1 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (1)
@modelcontextprotocol/sdk, tsx, typescript, @cloudflare/workers-types
Gates applied: no_behavioural_pass.
748563a91292full audit observations/trust-audit/mcp-server/pipeworx-io__mcp-newswire-com.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-11 | 748563a91292 | SAFE | B | 89 | first audit |
Questions
What is the mcp-newswire-com MCP server?
Newswire.com MCP — press releases from Newswire's public newsroom feed.
What tools does mcp-newswire-com expose?
3 in total: 3 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is mcp-newswire-com safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does mcp-newswire-com need?
No credential environment variables were found in its source, so it appears to need none.
How does mcp-newswire-com run?
It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as @pipeworx/mcp-newswire-com at 0.1.1.
How current is this page?
The grade is for one exact copy of the source (748563a91292), read on 2026-10-11. The repository is watched and re-audited when it changes.