
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
一个基于模型上下文协议(MCP)的Reddit服务器,提供浏览、搜索和阅读Reddit内容的功能。这个实现使用JavaScript/Node.js编写,可以通过npx直接运行。
在开始之前,请确保您具备以下条件:
http://localhost:8080
client_id
(应用名称下的字符串)和client_secret
您可以通过npx直接使用此包,无需全局安装:
# 设置环境变量
export REDDIT_CLIENT_ID=your_client_id
export REDDIT_CLIENT_SECRET=your_client_secret
# 运行MCP服务器
npx reddit-mcp
或者,您可以在当前目录中创建一个.env
文件:
REDDIT_CLIENT_ID=your_client_id
REDDIT_CLIENT_SECRET=your_client_secret
然后运行:
npx reddit-mcp
要在Claude Desktop中使用此服务器:
按照这里的说明打开您的Claude Desktop配置文件。
将以下内容添加到文件中:
"mcpServers": {
"reddit": {
"command": "npx",
"args": ["-y", "reddit-mcp"],
"env": {
"REDDIT_CLIENT_ID": "your_client_id",
"REDDIT_CLIENT_SECRET": "your_client_secret"
}
}
}
服务器提供以下工具:
名称 | 描述 |
---|---|
get_comment | 获取评论 |
get_comments_by_submission | 获取帖子的评论 |
get_submission | 获取帖子 |
get_subreddit | 按名称获取subreddit |
search_posts | 在subreddit中搜索帖子 |
search_subreddits | 按名称或描述搜索subreddits |
此包使用MIT许可证。
如果您想修改或扩展此MCP服务器:
npm install
npm start
FAQs
Reddit MCP Server - 浏览 Reddit 的模型上下文协议服务器
The npm package reddit-mcp receives a total of 10 weekly downloads. As such, reddit-mcp popularity was classified as not popular.
We found that reddit-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.