← Back to search

io.github.cyanheads/hn-mcp-server

cyanheads streamable_http Scanned 8d ago

MCP server for Hacker News — feeds, threads, users, and search via Firebase and Algolia APIs

MCP Registry ↗
? Not scanned yet

Versions

0.5.13latest
Jul 28, 2026
0.5.12
Jul 28, 2026
0.5.11
Jun 20, 2026
0.5.10
Jun 12, 2026
0.5.9
Jun 4, 2026
+ show 24 moreshow less
0.5.8
Jun 2, 2026
0.5.7
May 30, 2026
0.5.6
May 29, 2026
0.5.5
May 23, 2026
0.5.4
May 23, 2026
0.5.3
May 22, 2026
0.5.2
May 16, 2026
0.5.1
May 11, 2026
0.5.0
May 11, 2026
0.4.3
May 11, 2026
0.4.2
May 6, 2026
0.4.1
May 6, 2026
0.4.0
Apr 24, 2026
0.3.0
Apr 21, 2026
0.2.0
Apr 20, 2026
0.1.9
Mar 30, 2026
0.1.8
Mar 28, 2026
0.1.7
Mar 28, 2026
0.1.6
Mar 28, 2026
0.1.5
Mar 23, 2026
0.1.4
Mar 23, 2026
0.1.3
Mar 22, 2026
0.1.2
Mar 22, 2026
0.1.1
Mar 22, 2026

Tools 0

No tools indexed yet.

Permissions 2

shell high
Server uses shell capabilities via: child_process, spawn(), spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 9

info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
info
package.json metadata manifest_parser · 100%
info
Required env vars (5) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 12 components sbom_generator · 100%
high
Hardcoded Password found in cyanheads-hn-mcp-server-8d2d156/skills/api-utils/references/security.md secret_scanner · 65%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%