# freshcontext-mcp Context integrity for AI agents: evaluate freshness, confidence, provenance, and decision readiness. - **Type:** MCP server - **Trust:** 85/100 (A), scored on the package rubric - **Verification:** verified (build provenance) - **Version:** 0.5.2 - **Author:** io.github.PrinceGabriel-lgtm - **License:** Unknown - **npm:** freshcontext-mcp - **Endpoints:** streamable-http https://api.freshcontext.dev/mcp - **Source:** https://github.com/PrinceGabriel-lgtm/freshcontext-mcp - **Endpoint health:** reachable (last checked 2026-09-21T10:39:49.346Z, 1 sample) — uptime is not a security property and is not part of the trust score - **Compatible clients:** claude-code, cursor, copilot, chatgpt, gemini (basis: transport) ## Trust 85/100 (A), scored on the package rubric - Publisher verified: no - Build provenance: verified attestation - npm trusted publishing (OIDC): yes - Install scripts: nothing suspicious found - Prompt-injection scan: not run - Obfuscation scan: not run - Evidence age: 0 days ## Security scan - **Status:** clean - **Scanned:** 2026-09-21T10:39:31.594Z - **Version scanned:** 0.5.2 - **CVEs:** none found by OSV at scan time **Findings** - injection-shaped content (note) in the `extract_yc` tool: Links to undeclared domain: ycombinator.com - injection-shaped content (note) in the `extract_reddit` tool: Links to undeclared domain: reddit.com ## Tools 22 declared. Statically extracted from the shipped source — a floor on the surface, not a census. - `evaluate_context` — Evaluate caller-provided candidate context and return decision-ready output. This is the primary FreshContext judgment path: it does not fetch, crawl, scrape, b - `extract_github` — Extract real-time data from a GitHub repository — README, stars, forks, language, topics, last commit. Returns timestamped freshcontext. - `extract_scholar` — Extract research results from a Google Scholar search URL. Returns titles, authors, publication years, and snippets — all timestamped. - `extract_hackernews` — Extract top stories or search results from Hacker News. Accepts an HN/Algolia URL or a plain search query while preserving the url field for compatibility. - `extract_yc` — Scrape YC company listings. Use https://www.ycombinator.com/companies?query=KEYWORD to find startups in a space. Returns name, batch, tags, description per comp - `search_repos` — Search GitHub for repositories matching a keyword or topic. Returns top results by stars with activity signals. Use to find competitors, similar tools, or relat - `package_trends` — Look up npm and PyPI package metadata — version history, release cadence, last updated. Use to gauge ecosystem activity around a tool or dependency. Supports co - `extract_arxiv` — Search arXiv for research papers via the official API. Pass a topic, keyword, or full arXiv API URL. Returns titles, authors, publication dates, primary categor - `extract_finance` — No-key stock quote data via Stooq — close, open, high, low, volume, quote timestamp, and source. Accepts up to 5 comma-separated tickers. Returns timestamped fr - `extract_reddit` — Extract posts and community sentiment from Reddit via the public JSON API. Accepts a subreddit URL (https://www.reddit.com/r/MachineLearning/.json), a search UR - `extract_producthunt` — Recent Product Hunt launches by keyword or topic. Uses the Product Hunt GraphQL API (with HTML scrape fallback). Returns names, taglines, vote counts, comment c - `extract_landscape` — Composite intelligence tool. Given a project idea or keyword, simultaneously queries YC startups, GitHub repos, HN, Reddit, Product Hunt, and package registries - `search_jobs` — Search for real-time job listings with freshness badges on every result — so you never apply to a role that closed months ago. Sources: Remotive + RemoteOK + Th - `extract_changelog` — Extract update history from any product, repo, or package. Accepts a GitHub URL (uses Releases API), an npm package name, or any website URL (auto-discovers /ch - `extract_govcontracts` — Fetch US federal government contract awards from USASpending.gov. No API key required. Search by company name (e.g. 'Palantir'), keyword (e.g. 'AI infrastructur - `extract_gov_landscape` — Composite government intelligence tool. Given a company name, keyword, or NAICS code, simultaneously queries: (1) USASpending.gov for federal contract awards, ( - `extract_finance_landscape` — Composite financial intelligence tool for developers. Given one or more ticker symbols, simultaneously queries: (1) Stooq for no-key quote data, (2) Hacker News - `extract_sec_filings` — Fetch SEC 8-K filings for any public company from the SEC EDGAR full-text search API. 8-K filings are legally mandated disclosures of material corporate events - `extract_gdelt` — Fetch global news intelligence from the GDELT Project. GDELT monitors broadcast, print, and web news from every country in 100+ languages, updated every 15 minu - `extract_company_landscape` - `extract_gebiz` — Fetch Singapore Government procurement opportunities from GeBIZ via the data.gov.sg open API (Ministry of Finance official dataset). Returns open tenders, award - `extract_idea_landscape` ## Install **Verdict: install** — No blocking findings and no open coverage gaps — safe to install as configured. **Config** (claude-code): ```json "{\n \"mcpServers\": {\n \"freshcontext\": {\n \"command\": \"npx\",\n \"args\": [\n \"-y\",\n \"freshcontext-mcp\"\n ]\n }\n }\n}" ``` ## Blast radius Contained to extensive — no credential declaration found, from the publisher, the upstream registry, or the README. Known so far: runs locally and hosted; read-only tool surface. - Floor 17, ceiling 35 (tier: unknown) - `unknown` means the floor and ceiling land in different bands — not measured enough to name one. It does not mean low. - This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score. ## Machine-readable views of this entry - Signed JSON: https://forgeregistry.com/api/v1/packages/freshcontext-mcp - Install plan: https://forgeregistry.com/api/v1/packages/freshcontext-mcp/install-plan - Alternatives: https://forgeregistry.com/api/v1/alternatives/freshcontext-mcp - HTML page: https://forgeregistry.com/registry/freshcontext-mcp - MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan` ## About this document Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.