freshrss-mcp

freshrss-mcpYour feed reader, spoken to

An MCP server for FreshRSS: list feeds, read and triage articles, manage subscriptions and categories — from Claude, Codex or any MCP client.

Get started
Tools reference
GitHub

  • Sixteen tools, no stream ids

    The Google Reader API speaks in stream identifiers and hexadecimal item tags. These tools take numeric feed ids, category and label names, ISO dates and decimal article ids, and hand back plain text instead of raw HTML.

  • Runs anywhere stdio does

    A single npx command, a Claude Desktop JSON block, a Codex TOML entry, or a multi-arch container image with an SBOM and build provenance.

  • Narrow it to a reading list

    FRESHRSS_READ_ONLY=true registers the read tools and nothing else. FRESHRSS_ALLOW_TOOLS cuts finer — essential for a curated seven, your own comma-separated list, or a whole family with list_* — and FRESHRSS_DENY_TOOLS subtracts. Whatever is filtered out does not exist on the protocol rather than failing when called, and a name that matches no tool stops the server at startup instead of quietly going missing.

  • Built for untrusted feeds

    Every article was written by a stranger on the internet, so responses are marked as data, feed URLs are stripped of credentials, and article text is capped per article and per response. The five irreversible tools ask a person first through MCP elicitation — a dialog the model cannot answer on its behalf — and fall back to a single-use token where the client cannot show one.

freshrss-mcp architectureAn MCP client speaks stdio to freshrss-mcp, which calls the Google Reader compatible API of FreshRSS over HTTPS using a GoogleLogin auth token; FreshRSS polls the subscribed feeds.MCP clientClaude, Codex, Inspectorfreshrss-mcp16 tools, zod-validatedFreshRSS/api/greader.phpFeedsRSS / Atom sourcesstdioHTTPSGoogleLoginasks a person · redaction · response budget
The server holds no state beyond cached auth tokens and short-lived approvals; FreshRSS remains the source of truth, and it is what polls the feeds.

See it run ​

Demo: listing the tools, the subscribed feeds and the newest article through the MCP Inspector CLI

Running it elsewhere ​

A client that cannot spawn a local process — ChatGPT connectors, Claude on the web, Cursor, LibreChat — cannot start freshrss-mcp the way Claude Code does. mcp-hub is the bridge: one container serves many stdio MCP servers over Streamable HTTP, with an OAuth 2.1 login behind a single password and long-lived tokens for the clients that cannot do OAuth. Its /hub endpoint puts every server behind six meta-tools, so one connector reaches all of them without N×tool schemas in the model's context, and it speaks both protocol revisions — a question this server asks travels through it to the person at the far end instead of ending at the gateway.

Its configuration is Claude Code's mcpServers format, so the entry you already have is the entry it takes: Through mcp-hub.

Released under the MIT License.

Copyright © 2026 Willi Thiel