🎩 You're Invited:Meet the Socket team at Black Hat in Las Vegas, August 3-6.RSVP
Sign In

vr-org-mcp

Package Overview
Dependencies
Maintainers
1
Versions
7
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

vr-org-mcp

Read-only MCP server for VR.org. Gives AI agents one-call access to live VR, AR, and XR news, original editorial with full article text, the events calendar, headset deals, buyer guides, and top-game and top-app lists.

latest
Source
npmnpm
Version
0.3.2
Version published
Weekly downloads
47
-41.25%
Maintainers
1
Weekly downloads
 
Created
Source

vr-org-mcp

Read-only Model Context Protocol server for VR.org, a dedicated VR / AR / XR news publication and aggregator.

It gives any MCP-compatible agent (Claude Desktop, Claude Code, Cursor, Continue, and others) one-call access to live VR, AR, and XR news, VR.org's original editorial (including full article text), the VR/AR/XR events calendar, curated headset deals, buyer-guide answers, and top-game and top-app lists.

Eleven tools, five resources, and three prompts. Zero keys. Zero writes. Zero payments.

Install

Run it directly with npx (no global install needed):

npx vr-org-mcp

Claude Desktop

Add to your claude_desktop_config.json:

{
  "mcpServers": {
    "vr-org": {
      "command": "npx",
      "args": ["-y", "vr-org-mcp"]
    }
  }
}

Claude Code

claude mcp add vr-org -- npx -y vr-org-mcp

Cursor

Add to .cursor/mcp.json:

{
  "mcpServers": {
    "vr-org": {
      "command": "npx",
      "args": ["-y", "vr-org-mcp"]
    }
  }
}

Hosted remote endpoint (no install)

VR.org also runs the same tools as a remote server over MCP's streamable-HTTP transport, so web clients (ChatGPT connectors, Claude.ai connectors) can use it with no local install:

https://vr.org/mcp

Tools

ToolWhat it returns
search_vr_newsLatest VR / AR / XR headlines from the live feed, with optional category filter and keyword match
get_vr_trendingTopics currently trending across the feed
list_vr_originalsSummaries of VR.org's own editorial articles, newest first
get_vr_articleFull content of one original by slug: metadata, canonical URL, and the article body HTML
get_vr_eventsUpcoming VR / AR / XR industry events (conferences, expos, launches), soonest first
get_vr_dealsCurated product picks with prices, badges, and retailer links
compare_vr_headsetsSide-by-side of two headsets (partial names accepted)
get_top_vr_gamesCurrent ranked top VR games list
get_top_vr_appsCurrent ranked top VR apps and utilities list
list_vr_sourcesThe news sources VR.org aggregates, with counts
vr_explainCanonical short answer plus pillar-page link for a common question

Resources

Browsable MCP resources an app can attach as context:

ResourceContents
vrorg://news/latestLatest aggregated VR / AR / XR headlines
vrorg://originals/latestIndex of VR.org's newest original articles
vrorg://events/upcomingUpcoming VR / AR / XR industry events
vrorg://guidesVR.org's canonical pillar-guide answers in one doc
vrorg://article/{slug}Full HTML body of any original article (resource template)

Prompts

PromptWhat it does
recommend_a_headsetRecommends a headset from VR.org's picks given a budget and use case
this_week_in_vrDrafts a weekly VR / AR / XR roundup from the feed and originals
explain_vr_topicExplains a VR topic grounded in VR.org's canonical answer

How it works

Every tool composes VR.org's public JSON API (https://vr.org/api/*) into a single agent-friendly response. The server is a thin proxy: it holds no secrets, writes nothing, and cannot move money.

Threat model

VR.org's editorial is controlled, but the live feed also carries third-party RSS headlines. To keep a malicious or compromised upstream headline from manipulating the calling model, every tool output is:

  • Sanitized. Control characters and zero-width / direction-override characters are stripped from every string.
  • Capped. Serialized responses are limited to 50 KB so a large payload cannot flood the agent's context window.

Inputs are validated before any outbound request and every free-text parameter is length-capped at the schema layer. Errors are returned as structured, non-echoing objects rather than raw stack traces; on the rare path where an error string reaches the caller it runs through the same output scrub as a tool result, with any credential-shaped substring redacted and the text capped, and is flagged with isError.

Configuration

The API base URL is fixed to https://vr.org in source and cannot be overridden, so the server can only ever talk to VR.org.

Env varDefaultPurpose
VR_ORG_UA_SUFFIX(none)Optional suffix appended to the outbound User-Agent

Development

npm install
npm run dev        # run from source over stdio
npm run build      # compile to dist/
npm test           # run the offline test suite
npm run typecheck  # type-check without emitting

Changelog

0.3.2

Error-path hardening: tool errors now pass through the same output scrub as tool results, with secrets redacted and error text capped. All free-text parameters gain schema-level max lengths. No behavior change for valid inputs.

License

MIT. A VR.org project.

Keywords

mcp

FAQs

Package last updated on 06 Jul 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts