MCP Scanner

freshcontext-mcp

https://api.freshcontext.dev/mcp · scanned 2026-10-17

1 of 22 tools can change data, send it out or run code. That's normal for a useful server, and it's where an approval step helps.

45/ 100 · heuristic risk · Medium

22 tools · 1 flagged

  • Runs code or commands1
  • Moves money0
  • Touches credentials0
  • Deletes0
  • Sends data out12
  • Exports data18
  • Writes or changes0
  • evaluate_context45 · Medium

    Runs code or commands

    Evaluate caller-provided candidate context and return decision-ready output. This is the primary FreshContext judgment path: it does not fetch, crawl, scrape, browse, read folders, or call adapters.

    • Name contains “evaluate” → runs code or commands
  • extract_arxiv23 · Low

    Sends data out · Exports data

    Search arXiv for research papers via the official API. Pass a topic or full arXiv API URL. Returns titles, authors, dates, abstracts.

    • Name contains “extract” → exports data
    • Input field “url” → sends data out
    • Server annotation openWorldHint → sends data out
  • extract_changelog23 · Low

    Sends data out · Exports data

    Update history for any product. Accepts a GitHub repo URL or an npm package name. Returns version numbers, release dates, and entries.

    • Name contains “extract” → exports data
    • Input field “url” → sends data out
    • Server annotation openWorldHint → sends data out
  • extract_finance23 · Low

    Sends data out · Exports data

    No-key stock quote data via Stooq. Accepts comma-separated ticker symbols and returns quote/OHLC/volume observations with timestamps.

    • Name contains “extract” → exports data
    • Input field “url” → sends data out
    • Server annotation openWorldHint → sends data out
  • extract_gdelt23 · Low

    Sends data out · Exports data

    Global news intelligence from GDELT. Monitors news from every country in 100+ languages, updated every 15 minutes. Returns articles with source country, language, date.

    • Name contains “extract” → exports data
    • Input field “url” → sends data out
    • Server annotation openWorldHint → sends data out
  • extract_gebiz23 · Low

    Sends data out · Exports data

    Singapore Government procurement opportunities (GeBIZ via data.gov.sg). Search by keyword, agency name, or empty for all recent tenders.

    • Name contains “extract” → exports data
    • Input field “url” → sends data out
    • Server annotation openWorldHint → sends data out
  • extract_github23 · Low

    Sends data out · Exports data

    Extract real-time data from a GitHub repository — README, stars, forks, last commit, topics. Returns timestamped freshcontext.

    • Name contains “extract” → exports data
    • Input field “url” → sends data out
    • Server annotation openWorldHint → sends data out
  • extract_govcontracts23 · Low

    Sends data out · Exports data

    US federal contract awards from USASpending.gov. Search by company name (e.g. 'Palantir'), keyword, or NAICS code. Returns amounts, dates, agencies.

    • Name contains “extract” → exports data
    • Input field “url” → sends data out
    • Server annotation openWorldHint → sends data out
  • extract_hackernews23 · Low

    Sends data out · Exports data

    Extract top stories or search results from Hacker News. The url field accepts an HN/Algolia URL or a plain search query.

    • Name contains “extract” → exports data
    • Input field “url” → sends data out
    • Server annotation openWorldHint → sends data out
  • extract_producthunt23 · Low

    Sends data out · Exports data

    Extract recent Product Hunt launches by keyword/topic search or a PH URL. Returns name, tagline, votes, comment count, topics, and launch date per result.

    • Name contains “extract” → exports data
    • Input field “url” → sends data out
    • Server annotation openWorldHint → sends data out
  • extract_reddit23 · Low

    Sends data out · Exports data

    Extract recent posts from a subreddit (e.g. 'r/MachineLearning') or a Reddit search/listing URL. Returns title, subreddit, author, score, comment count, and post date per result.

    • Name contains “extract” → exports data
    • Input field “url” → sends data out
    • Server annotation openWorldHint → sends data out
  • extract_scholar23 · Low

    Sends data out · Exports data

    Extract research results (title, authors, year, snippet) from a Google Scholar search URL. Scholar exposes only the publication year, not an exact date, so freshness confidence is capped at medium.

    • Name contains “extract” → exports data
    • Input field “url” → sends data out
    • Server annotation openWorldHint → sends data out
  • extract_sec_filings23 · Low

    Sends data out · Exports data

    SEC 8-K filings via EDGAR full-text search. 8-K = legally mandated material event disclosures (CEO changes, M&A, breaches). Pass company name, ticker, or keyword.

    • Name contains “extract” → exports data
    • Input field “url” → sends data out
    • Server annotation openWorldHint → sends data out
  • extract_company_landscape13 · Low

    Exports data

    Most complete single-call company intelligence: SEC 8-K filings + USASpending federal contracts + GDELT global news + product changelog + Stooq quote data. 5 unique sources.

    • Name contains “extract” → exports data
  • extract_finance_landscape13 · Low

    Exports data

    Composite financial intelligence: Stooq quote data + HN sentiment + Reddit discussion + GitHub ecosystem + product changelog. 5-source unified report.

    • Name contains “extract” → exports data
  • extract_gov_landscape13 · Low

    Exports data

    Composite government intelligence: federal contract awards (USASpending) + dev community awareness (HN) + GitHub repo activity + product release velocity (changelog). 4-source unified report.

    • Name contains “extract” → exports data
  • extract_idea_landscape13 · Low

    Exports data

    Idea validation composite: HN pain signals + YC funded competitors + GitHub crowding + jobs market signal + npm/PyPI ecosystem + Product Hunt launches. 6 sources.

    • Name contains “extract” → exports data
  • extract_landscape13 · Low

    Exports data

    Composite tool. Queries GitHub + HN + npm simultaneously. Returns a unified landscape report with each source's own freshness.

    • Name contains “extract” → exports data
  • extract_yc13 · Low

    Exports data

    Withdrawn in 0.5.3 pending review of source terms. Returns an error; kept so existing clients get a clear answer.

    • Name contains “extract” → exports data
  • package_trends0 · Low

    npm and PyPI package metadata — version history, release cadence, last updated.

  • search_jobs0 · Low

    Search for real-time job listings with freshness badges on every result. Sources: Remotive + HN Who is Hiring.

  • search_repos0 · Low

    Search GitHub for repositories matching a keyword. Returns top results by stars.

Vulnify checks each tool call before it runs: ALLOW, REVIEW or BLOCK, with the reason logged.

Badge for your README

Scanned by Vulnify
Markdown
[![Scanned by Vulnify](https://api.vulnify.io/public/mcp-scanner/servers/api-freshcontext-dev-mcp.svg)](https://www.vulnify.io/scanner/api-freshcontext-dev-mcp?utm_source=badge&utm_medium=readme&utm_campaign=scanner-badge)

Automated heuristic result, scanned on 2026-10-17. It is based only on the tool names, descriptions, schemas and annotations this server publishes; no tool was called. It is not a security audit or certification, and not an endorsement of or accusation against the server or its operator. A high score is not a vulnerability finding, and a low score does not mean the server is safe. Vulnify is not affiliated with this server or its operator; names and marks belong to their owners. Server owner? Write to security@vulnify.io from an address at the server's domain to remove or correct this page, or scan it again to update it. We reply within 5 business days.

To exclude your server (and its subdomains) from the scanner and remove its public page, write to security@vulnify.io from an address at its domain. We process requests within 5 business days: the page stops being shown and its stored result is deleted. To fix an error instead, tell us what's wrong or scan the server again.