io.github.PrinceGabriel-lgtm/freshcontext
NPM · FRESHCONTEXT-MCP · 2 COMPONENTS · SCANNED SEP 20
Freshness-aware AI retrieval with 21 MCP tools for timestamped, decay-ranked live signals.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security93
- No malware found by supply-chain analysis.Pass
- CVE check failed: a known medium-severity CVE affects stream-json 1.9.1, reached via apify > @crawlee/core > stream-json. A fixed version is available. View diagnostics → Fail
- No install/post-install scripts declared.Pass
- 76 of 265 dependencies flagged as unhealthy (1 deprecated). View diagnostics → Partial
Provenance & Transparency48
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 17 days ago).Pass
- Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability74
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 2941 tokens (~140/item across 21 items; 21 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management83
- Stability observed for 25 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage89
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 67% of tool parameters carry a description.Partial
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 21 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 21 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
How do I install the io.github.PrinceGabriel-lgtm/freshcontext MCP server?
io.github.PrinceGabriel-lgtm/freshcontext runs locally as an npm package, launched with npx -y freshcontext-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · freshcontext-mcp
claude mcp add princegabriel-lgtm-freshcontext -- npx -y freshcontext-mcp
{
"mcpServers": {
"princegabriel-lgtm-freshcontext": {
"command": "npx",
"args": [
"-y",
"freshcontext-mcp"
]
}
}
} {
"servers": {
"princegabriel-lgtm-freshcontext": {
"command": "npx",
"args": [
"-y",
"freshcontext-mcp"
]
}
}
} codex mcp add princegabriel-lgtm-freshcontext -- npx -y freshcontext-mcp
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"princegabriel-lgtm-freshcontext": {
"type": "local",
"command": [
"npx",
"-y",
"freshcontext-mcp"
],
"enabled": true
}
}
} openclaw mcp add princegabriel-lgtm-freshcontext --command npx --arg -y --arg freshcontext-mcp
mcp_servers:
princegabriel-lgtm-freshcontext:
command: "npx"
args: ["-y", "freshcontext-mcp"] {
"McpServers": {
"princegabriel-lgtm-freshcontext": {
"Transport": "stdio",
"Command": "npx",
"Arguments": [
"-y",
"freshcontext-mcp"
]
}
}
} assistant mcp add princegabriel-lgtm-freshcontext -t stdio -c npx -a -y freshcontext-mcp
{
"mcpServers": {
"princegabriel-lgtm-freshcontext": {
"command": "npx",
"args": [
"-y",
"freshcontext-mcp"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 20 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 80 to 83. That category is still filling its 30-day observation window: 24 days of observed history at the previous scan, 25 at this one. The score rises as the window fills, whether or not the server changes.
- 18 Sept 26 −3
- Stability: pass → 0.77 functional
- 17 Sept 26 0
- Stability: 0.97 → pass security
- 16 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
- 14 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 87 to 90. That category is still filling its 30-day observation window: 26 days of observed history at the previous scan, 27 at this one. The score rises as the window fills, whether or not the server changes.
- 12 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 80 to 83. That category is still filling its 30-day observation window: 24 days of observed history at the previous scan, 25 at this one. The score rises as the window fills, whether or not the server changes.
- 11 Sept 26 −3
- Stability: pass → 0.80 functional
- 10 Sept 26 0
- Stability: 0.97 → pass security
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Sept 2026 · Analysed npm/freshcontext-mcp@0.3.17
Provenance No attestation
The registry publishes no build provenance for this version, so there is nothing to verify.
| Result | No attestation |
|---|---|
| Ecosystem | npm |
Background: How many MCP packages publish verified provenance →
Vulnerabilities 1 finding
| ID | CVE | Severity | Vector | Fix available |
|---|---|---|---|---|
| GHSA-528h-pc64-c93x | CVE-2026-71429 | medium | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | yes |
Background: What a vulnerability scan can and cannot prove →
Dependencies 265 packages
| Packages resolved | 265 |
|---|---|
| Deprecated | 1 |
| Stale | 76 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
extract_arxiv ~86
Search arXiv for research papers via the official API. Pass a topic, keyword, or full arXiv API URL. Returns titles, authors, publication dates, primary category, and abstracts — all timestamped.
| Name | Type | Req | Description |
|---|---|---|---|
| max_length | number | – | – |
| url | string | yes | Search query e.g. 'temporal retrieval', or a full arXiv API URL |
No output schema declared.
No examples provided.
extract_changelog ~157
Extract update history from any product, repo, or package. Accepts a GitHub URL (uses Releases API), an npm package name, or any website URL (auto-discovers /changelog, /releases, /CHANGELOG.md). Returns version numbers, release dates, and entry content — all timestamped. Use this to check if a tool is actively maintained, when a feature shipped, or how fast a team moves.
| Name | Type | Req | Description |
|---|---|---|---|
| max_length | number | – | Max content length |
| url | string | yes | GitHub repo URL (https://github.com/owner/repo), npm package name (e.g. 'freshcontext-mcp'), or any website URL (https://example.com). Auto-discovers changelog paths. |
No output schema declared.
No examples provided.
extract_company_landscape ~266
Composite company intelligence tool. The most complete single-call company analysis available. Simultaneously queries 5 unique sources: (1) SEC EDGAR for 8-K material event filings — what the company legally just disclosed, (2) USASpending.gov for federal contract footprint — who is giving them government money, (3) GDELT for global news intelligence — what the world is saying about them right now, (4) their product changelog — are they actually shipping, (5) Stooq quote data — what the market is pricing in. Returns a unified 5-source timestamped report. Unique: this combination is not available in any other MCP server.
| Name | Type | Req | Description |
|---|---|---|---|
| company | string | yes | Company name e.g. 'Palantir', 'Anthropic', 'OpenAI' |
| github_url | string | – | Optional GitHub repo or org URL e.g. 'https://github.com/palantir'. Improves changelog accuracy. |
| max_length | number | – | – |
| min_freshness_score | number | – | Filter sections below this freshness_score (0–100). E.g. 70 = only recently retrieved data. |
| ticker | string | – | Stock ticker for finance data e.g. 'PLTR'. Leave blank for private companies. |
No output schema declared.
No examples provided.
extract_finance ~92
No-key stock quote data via Stooq — close, open, high, low, volume, quote timestamp, and source. Accepts up to 5 comma-separated tickers. Returns timestamped freshcontext only for successful observations.
| Name | Type | Req | Description |
|---|---|---|---|
| max_length | number | – | – |
| url | string | yes | Ticker symbol(s) e.g. 'AAPL' or 'MSFT,GOOG,PLTR' |
No output schema declared.
No examples provided.
extract_finance_landscape ~278
Composite financial intelligence tool for developers. Given one or more ticker symbols, simultaneously queries: (1) Stooq for no-key quote data, (2) Hacker News for developer community sentiment, (3) Reddit for investor and tech community discussion, (4) GitHub for repo ecosystem activity around the company's tech, and (5) their product changelog for release velocity as a company health signal. Answers: What's the price? What are developers saying? Is the company actually shipping? Returns a unified 5-source timestamped report.
| Name | Type | Req | Description |
|---|---|---|---|
| company_name | string | – | Company name for HN/Reddit/GitHub searches e.g. 'Palantir'. If omitted, derived from the ticker. |
| github_query | string | – | GitHub search query or repo URL for the company's tech ecosystem e.g. 'palantir' or 'https://github.com/palantir/foundry'. If omitted, uses company_name. |
| max_length | number | – | – |
| min_freshness_score | number | – | Filter sections below this freshness_score (0–100). E.g. 70 = only recently retrieved data. |
| tickers | string | yes | One or more ticker symbols e.g. 'PLTR' or 'PLTR,MSFT,GOOG'. Up to 5 tickers. |
No output schema declared.
No examples provided.
extract_gdelt ~139
Fetch global news intelligence from the GDELT Project. GDELT monitors broadcast, print, and web news from every country in 100+ languages, updated every 15 minutes. Returns articles with title, source domain, country of origin, language, and publication date — covering news worldwide that Western sources miss. Free, no auth. Pass any company name, topic, or keyword. Unique: not available in any other MCP server.
| Name | Type | Req | Description |
|---|---|---|---|
| max_length | number | – | – |
| url | string | yes | Query: company name, topic, or keyword e.g. 'Palantir', 'artificial intelligence', 'MCP server' |
No output schema declared.
No examples provided.
extract_gebiz ~151
Fetch Singapore Government procurement opportunities from GeBIZ via the data.gov.sg open API (Ministry of Finance official dataset). Returns open tenders, awarded contracts, agencies, amounts, and closing dates. Search by keyword (e.g. 'software', 'AI', 'data analytics'), agency name (e.g. 'GovTech', 'MOH'), or leave blank for all recent tenders. Free, no auth. Unique: not available in any other MCP server.
| Name | Type | Req | Description |
|---|---|---|---|
| max_length | number | – | – |
| url | string | yes | Search keyword, agency name, or leave empty for all recent tenders. E.g. 'artificial intelligence', 'GovTech', 'cybersecurity' |
No output schema declared.
No examples provided.
extract_github ~72
Extract real-time data from a GitHub repository — README, stars, forks, language, topics, last commit. Returns timestamped freshcontext.
| Name | Type | Req | Description |
|---|---|---|---|
| max_length | number | – | Max content length |
| url | string | yes | Full GitHub repo URL e.g. https://github.com/owner/repo |
No output schema declared.
No examples provided.
extract_gov_landscape ~267
Composite government intelligence tool. Given a company name, keyword, or NAICS code, simultaneously queries: (1) USASpending.gov for federal contract awards, (2) GitHub for the company's repo activity, (3) Hacker News for developer community awareness, and (4) their product changelog for release velocity. Answers: Who is winning government contracts in this space? Are they actually building? Does the dev community know about them? Returns a unified 4-source timestamped report. Unique — not available in any other MCP server.
| Name | Type | Req | Description |
|---|---|---|---|
| github_url | string | – | Optional GitHub repo URL for the company (e.g. 'https://github.com/palantir/palantir-java-format'). If omitted, GitHub and changelog sections use the query as a search term. |
| max_length | number | – | – |
| min_freshness_score | number | – | Filter sections below this freshness_score (0–100). E.g. 70 = only recently retrieved data. |
| query | string | yes | Company name (e.g. 'Palantir'), keyword (e.g. 'artificial intelligence'), or NAICS code (e.g. '541511'). For GitHub and changelog sections, also optionally provide a GitHub URL. |
No output schema declared.
No examples provided.
extract_govcontracts ~171
Fetch US federal government contract awards from USASpending.gov. No API key required. Search by company name (e.g. 'Palantir'), keyword (e.g. 'AI infrastructure'), or NAICS code (e.g. '541511'). Returns award amounts, dates, awarding agency, NAICS code, and contract descriptions — all timestamped. Use this to find buying intent signals (a company that just won a $5M DoD contract is actively hiring and spending), competitive intelligence, or GTM targeting.
| Name | Type | Req | Description |
|---|---|---|---|
| max_length | number | – | Max content length |
| url | string | yes | Company name (e.g. 'Cloudflare'), keyword (e.g. 'machine learning'), NAICS code (e.g. '541511'), or direct USASpending API URL. |
No output schema declared.
No examples provided.
extract_hackernews ~87
Extract top stories or search results from Hacker News. Accepts an HN/Algolia URL or a plain search query while preserving the url field for compatibility.
| Name | Type | Req | Description |
|---|---|---|---|
| max_length | number | – | – |
| url | string | yes | HN URL e.g. https://news.ycombinator.com/news, Algolia API URL, or search query e.g. 'browser agents' |
No output schema declared.
No examples provided.
extract_idea_landscape ~235
Idea validation composite tool for developers and founders. Given a project idea or keyword, simultaneously queries 6 sources to answer: Is this problem real? Is the market crowded? Is there funding? Are companies hiring? What just launched? Sources: (1) Hacker News — what developers are actively complaining about and discussing, (2) YC companies — who has already received funding in this space, (3) GitHub repos — how crowded the open source landscape is, (4) Job listings — hiring signal showing real company spend around this problem, (5) npm/PyPI package trends — ecosystem adoption and velocity, (6) Product Hunt — what just launched and how it was received. Returns a unified 6-source idea validation report.
| Name | Type | Req | Description |
|---|---|---|---|
| idea | string | yes | Your idea, problem space, or keyword. E.g. 'data freshness for AI agents', 'procurement intelligence', 'developer observability' |
| max_length | number | – | – |
| min_freshness_score | number | – | Filter sections below this freshness_score (0–100). E.g. 70 = only recently retrieved data. |
No output schema declared.
No examples provided.
extract_landscape ~101
Composite intelligence tool. Given a project idea or keyword, simultaneously queries YC startups, GitHub repos, HN, Reddit, Product Hunt, and package registries to answer: Who is building this? Is it funded? What's getting traction? Returns a unified 6-source timestamped landscape report.
| Name | Type | Req | Description |
|---|---|---|---|
| max_length | number | – | – |
| topic | string | yes | Your project idea or keyword e.g. 'mcp server' or 'cashflow prediction' |
No output schema declared.
No examples provided.
extract_producthunt ~85
Recent Product Hunt launches by keyword or topic. Uses the Product Hunt GraphQL API (with HTML scrape fallback). Returns names, taglines, vote counts, comment counts, topics, and launch dates — all timestamped.
| Name | Type | Req | Description |
|---|---|---|---|
| max_length | number | – | – |
| url | string | yes | Search query e.g. 'mcp ai agents' or a Product Hunt topic URL |
No output schema declared.
No examples provided.
extract_reddit ~100
Extract posts and community sentiment from Reddit via the public JSON API. Accepts a subreddit URL (https://www.reddit.com/r/MachineLearning/.json), a search URL, or a subreddit shorthand ('r/MachineLearning'). Returns titles, authors, scores, comment counts, and per-post timestamps.
| Name | Type | Req | Description |
|---|---|---|---|
| max_length | number | – | – |
| url | string | yes | Subreddit URL, search URL, or 'r/<subreddit>' shorthand |
No output schema declared.
No examples provided.
extract_scholar ~68
Extract research results from a Google Scholar search URL. Returns titles, authors, publication years, and snippets — all timestamped.
| Name | Type | Req | Description |
|---|---|---|---|
| max_length | number | – | – |
| url | string | yes | Google Scholar search URL e.g. https://scholar.google.com/scholar?q=... |
No output schema declared.
No examples provided.
extract_sec_filings ~130
Fetch SEC 8-K filings for any public company from the SEC EDGAR full-text search API. 8-K filings are legally mandated disclosures of material corporate events — CEO changes, acquisitions, data breaches, major contracts, regulatory actions — filed within 4 business days. Free, no auth, real-time. Pass a company name, ticker, or keyword. Unique: not available in any other MCP server.
| Name | Type | Req | Description |
|---|---|---|---|
| max_length | number | – | – |
| url | string | yes | Company name, ticker, or keyword e.g. 'Palantir', 'PLTR', 'artificial intelligence' |
No output schema declared.
No examples provided.
extract_yc ~87
Scrape YC company listings. Use https://www.ycombinator.com/companies?query=KEYWORD to find startups in a space. Returns name, batch, tags, description per company with freshness timestamp.
| Name | Type | Req | Description |
|---|---|---|---|
| max_length | number | – | – |
| url | string | yes | YC companies URL e.g. https://www.ycombinator.com/companies?query=mcp |
No output schema declared.
No examples provided.
package_trends ~82
Look up npm and PyPI package metadata — version history, release cadence, last updated. Use to gauge ecosystem activity around a tool or dependency. Supports comma-separated list of packages.
| Name | Type | Req | Description |
|---|---|---|---|
| max_length | number | – | – |
| packages | string | yes | Package name(s) e.g. 'langchain' or 'npm:zod,pypi:fastapi' |
No output schema declared.
No examples provided.
search_jobs ~213
Search for real-time job listings with freshness badges on every result — so you never apply to a role that closed months ago. Sources: Remotive + RemoteOK + The Muse + HN 'Who is Hiring'. Supports location filtering, remote-only mode, keyword spotting (e.g. FIFO), and max age filtering. Returns timestamped freshcontext sorted freshest first.
| Name | Type | Req | Description |
|---|---|---|---|
| keywords | array | – | Keywords to highlight in results e.g. ['FIFO', 'underground', 'contract'] |
| location | string | – | Country, city, or 'remote' / 'worldwide' e.g. 'South Africa', 'Australia', 'remote' |
| max_age_days | number | – | Hide listings older than N days (default 60, use 7 for very fresh only) |
| max_length | number | – | – |
| query | string | yes | Job search query e.g. 'typescript', 'mining engineer', 'FIFO operator', 'data analyst' |
| remote_only | boolean | – | Only return remote-friendly listings |
No output schema declared.
No examples provided.
search_repos ~74
Search GitHub for repositories matching a keyword or topic. Returns top results by stars with activity signals. Use to find competitors, similar tools, or related projects.
| Name | Type | Req | Description |
|---|---|---|---|
| max_length | number | – | – |
| query | string | yes | Search query e.g. 'mcp server typescript' or 'cashflow prediction python' |
No output schema declared.
No examples provided.
What is the io.github.PrinceGabriel-lgtm/freshcontext MCP server?
io.github.PrinceGabriel-lgtm/freshcontext is an MCP server listed in the public MCP registry as io.github.PrinceGabriel-lgtm/freshcontext. Freshness-aware AI retrieval with 21 MCP tools for timestamped, decay-ranked live signals. This page covers its npm package (freshcontext-mcp).
Is the io.github.PrinceGabriel-lgtm/freshcontext MCP server safe to use?
io.github.PrinceGabriel-lgtm/freshcontext scores 80 out of 100 on VerifyMCP. We recorded 1 known advisory against it as of 20 September 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.PrinceGabriel-lgtm/freshcontext MCP server expose?
io.github.PrinceGabriel-lgtm/freshcontext exposes 21 tools: extract_github, extract_scholar, extract_hackernews, extract_yc, search_repos, and 16 more. Their descriptions and schemas cost roughly 2,941 tokens of context every time the server is loaded.
Is the io.github.PrinceGabriel-lgtm/freshcontext MCP server still maintained?
io.github.PrinceGabriel-lgtm/freshcontext is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the io.github.PrinceGabriel-lgtm/freshcontext MCP server under?
io.github.PrinceGabriel-lgtm/freshcontext declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.