
Security News
GitHub to Block pull_request_target Workflows by Default Starting December 2
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.
review-miner-mcp
Advanced tools
MCP server that mines App Store and Steam reviews so your AI can find what users hate about competitors. No API keys.
Find out what users hate about your competitors. An MCP server that mines public App Store and Steam reviews so Claude (or any MCP client) can turn thousands of complaints into product opportunities.
No API keys. No scraping. One line to install.
You: What do users hate about the top health & fitness apps in Turkey?
Claude: [review_top_apps → review_compare_apps]
• Strava: the most upvoted complaints ask for Turkish. "I was going to buy
Premium but I'm deleting it because there is no Turkish support."
• OKOK (smart scale): 61% of recent reviews are negative. You have to watch
ads before the app shows your own weight.
• MAC+: login and verification-code errors ("hata veriyor") dominate.
• HUAWEI Health: can't log in after switching phones or after updates.
Summarized from real tool output: Turkish App Store, 1 Oct 2026, 150 recent reviews per app.

| You want to know | Without it | With review-miner |
|---|---|---|
| Why an app's rating dropped | Scroll reviews by hand | rating_by_version shows which update broke it |
| What a whole category fails at | Read 5 apps × 500 reviews | One call compares them side by side |
| Whether an idea has demand | Guess | Real complaints, with quotes and counts |
flowchart LR
C[Claude / MCP client] -->|tool call| S[review-miner-mcp]
S --> A[Apple iTunes Search + RSS]
S --> T[Steam Store + Web API]
S --> X[Stats: rating mix, per-version rating,<br/>top complaint phrases]
X -->|compact summary + best review samples| C
The server does the cheap, deterministic part (fetching, counting, phrase extraction). The model does the interpretation. Only the most helpful review texts are returned, so your context window is not flooded.
Requires uv.
Claude Code
claude mcp add review-miner -- uvx --from git+https://github.com/alialtunar/review-miner-mcp review-miner-mcp
Claude Desktop / Cursor (claude_desktop_config.json / .cursor/mcp.json)
{
"mcpServers": {
"review-miner": {
"command": "uvx",
"args": ["--from", "git+https://github.com/alialtunar/review-miner-mcp", "review-miner-mcp"]
}
}
}
| Tool | What it does |
|---|---|
review_top_apps | Current top charts: App Store by category (free / paid / grossing) or Steam weekly top sellers / most played / new releases |
review_search_apps | Find an app or game and get its ID |
review_fetch | Recent reviews for one app: rating mix, rating per version, top complaint phrases, most helpful texts |
review_compare_apps | 2–8 competitors side by side, App Store and Steam mixed |
Prompts: find_opportunities (category → product gaps), competitor_teardown (one app, love vs hate).
Every tool supports country (e.g. tr, de, us) and response_format (markdown / json).
english, turkish, all...).uv sync --extra dev
uv run pytest # offline tests with mocked APIs
uv run python scripts/smoke_live.py # live check against Apple and Steam
npx @modelcontextprotocol/inspector uv run review-miner-mcp # click-through UI
uv run --with rich python scripts/demo.py finance tr # terminal demo (vhs docs/demo.tape records the GIF)
MIT © Ali Altunar
FAQs
MCP server that mines App Store and Steam reviews so your AI can find what users hate about competitors. No API keys.
We found that review-miner-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.

Security News
/Application Security
A practical guide to securing GitHub Actions against supply chain attacks, covering malicious pull requests, credential theft, dependency risks, and release pipelines.

Security News
Composer 2.11 adds dependency cooldowns, joining package managers that delay new releases to reduce supply chain risks while allowing urgent security updates.