
Security News
npm Adopts OIDC for Trusted Publishing in CI/CD Workflows
npm now supports Trusted Publishing with OIDC, enabling secure package publishing directly from CI/CD workflows without relying on long-lived tokens.
mcp-newsapi
Advanced tools
A Model Context Protocol (MCP) server that exposes endpoints from the News API (https://newsapi.org) to search for and retrieve news articles. This server allows programmatic access to news data via the MCP protocol.
Clone the repository or ensure you are in the project directory.
Install dependencies:
npm install
Build the server:
npm run build
This will create a build
directory with the compiled JavaScript code.
Set your News API Key:
The server reads the API key from the NEWSAPI_KEY
environment variable. Set this variable in your environment before running the server.
Example (Bash/Zsh):
export NEWSAPI_KEY="YOUR_API_KEY"
Replace "YOUR_API_KEY"
with your actual News API key.
Directly:
Ensure the NEWSAPI_KEY
environment variable is set, then run:
node build/index.js
or, if you have a start script:
npm run start
Via MCP runner: Configure your MCP client to run the server using stdio transport. You will also need to configure the environment variable for the API key within your MCP runner's settings. Example MCP settings entry:
"mcp-newsapi": {
"transportType": "stdio",
"command": "node",
"args": [
"/path/to/mcp-newsapi/build/index.js"
],
"environment": {
"NEWSAPI_KEY": "YOUR_API_KEY"
}
// ... other optional settings ...
}
Replace "YOUR_API_KEY"
with your actual News API key.
The server exposes the following tools via MCP, corresponding to News API endpoints:
q
(string, required): Keywords or phrases to search for in the article title and body.sources
(string, optional): A comma-separated string of identifiers for the news sources or blogs you want headlines from.domains
(string, optional): A comma-separated string of domains (e.g. bbc.co.uk, techcrunch.com) to search within.excludeDomains
(string, optional): A comma-separated string of domains (e.g. bbc.co.uk, techcrunch.com) to exclude from the search.from
(string, optional): A date and optional time for the oldest article allowed. Format: YYYY-MM-DD or YYYY-MM-DDTHH:MM:SS (e.g. 2024-01-01 or 2024-01-01T10:00:00).to
(string, optional): A date and optional time for the newest article allowed. Format: YYYY-MM-DD or YYYY-MM-DDTHH:MM:SS.language
(string, optional): The 2-letter ISO 639-1 code of the language you want to get headlines for. Possible options: ar, de, en, es, fr, he, it, nl, no, pt, ru, sv, ud, zh. Default: all languages returned.sortBy
(enum: 'relevancy', 'popularity', 'publishedAt', optional): The order to sort the articles in. Possible options: relevancy, popularity, publishedAt. Default: relevancy.pageSize
(integer, optional, default 100): The number of results to return per page (request). 20 is the default, 100 is the maximum.page
(integer, optional, default 1): Use this to page through the results if the total results found is greater than the pageSize.status
, totalResults
, and an array of articles
with details like source, author, title, description, URL, image URL, published date, and content.q
(string, optional): Keywords or phrases to search for in the article title and body.sources
(string, optional): A comma-separated string of identifiers for the news sources or blogs you want headlines from.category
(enum: 'business', 'entertainment', 'general', 'health', 'science', 'sports', 'technology', optional): The category you want to get headlines for. Possible options: business, entertainment, general, health, science, sports, technology.language
(string, optional): The 2-letter ISO 639-1 code of the language you want to get headlines for. Possible options: ar, de, en, es, fr, he, it, nl, no, pt, ru, sv, ud, zh. Default: all languages returned.country
(string, optional): The 2-letter ISO 3166-1 country code of the country you want to get headlines for. Possible options: ae, ar, at, au, be, bg, br, ca, ch, cn, co, cu, cz, de, eg, fr, gb, gr, hk, hu, id, ie, il, in, it, jp, kr, lt, lv, ma, mx, my, ng, nl, no, nz, ph, pl, pt, ro, rs, ru, sa, se, sg, si, sk, th, tr, tw, ua, us, ve, za. Default: all countries returned.pageSize
(integer, optional, default 100): The number of results to return per page (request). 20 is the default, 100 is the maximum.page
(integer, optional, default 1): Use this to page through the results if the total results found is greater than the pageSize.status
, totalResults
, and an array of articles
with details like source, author, title, description, URL, image URL, published date, and content.The server attempts to provide meaningful error messages based on the News API response. If an API call fails, the tool will throw an error with details about the failure, including the News API error message and code if available.
To add more News API endpoints as tools, create a new TypeScript file in src/tools/
, define its input schema using Zod, implement the handler function to call the News API SDK, and export the tool definition. Then, import and register the new tool in src/tools/index.ts
.
FAQs
MCP Server for accessing News API endpoints.
The npm package mcp-newsapi receives a total of 3 weekly downloads. As such, mcp-newsapi popularity was classified as not popular.
We found that mcp-newsapi demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
npm now supports Trusted Publishing with OIDC, enabling secure package publishing directly from CI/CD workflows without relying on long-lived tokens.
Research
/Security News
A RubyGems malware campaign used 60 malicious packages posing as automation tools to steal credentials from social media and marketing tool users.
Security News
The CNA Scorecard ranks CVE issuers by data completeness, revealing major gaps in patch info and software identifiers across thousands of vulnerabilities.