hn-reddit-mcp 1.0.0 → 1.0.1

package/README.md

@@ -20,3 +20,22 @@ node dist/index.js
 ```
 
 Uses the official Hacker News Firebase API and the public Reddit JSON endpoint.
+
+<!-- paywall -->
+## Premium tools
+
+These tools need a license key:
+
+* `hn_search`
+* `reddit_search`
+
+Buy a key at https://mcp-marketplace.io/server/io-github-mrfentmen-hn-reddit-mcp and set it in your MCP client config:
+
+```json
+"env": { "MCP_LICENSE_KEY": "mcp_live_..." }
+```
+
+The key is checked against MCP Marketplace, cached for 24 hours, and keeps
+working offline once one check has succeeded. Every other tool on this server
+stays free.
+<!-- /paywall -->

package/dist/api.js

@@ -46,3 +46,98 @@ export async function redditTop(args) {
     const posts = parseRss(await res.text()).slice(0, limit);
     return posts.map((p, i) => `${i + 1}. ${p.title}\n   u/${p.author || "unknown"} | r/${sub}\n   ${p.link}`).join("\n\n") || "No posts found";
 }
+const hnTags = (v) => {
+    const value = String(v ?? "").trim().toLowerCase();
+    return ["story", "comment", "poll", "show_hn", "ask_hn", "front_page"].includes(value) ? value : "story";
+};
+const hnText = (html, max = 220) => String(html ?? "")
+    .replace(/<[^>]*>/g, " ")
+    .replace(/&#x([0-9a-f]+);/gi, (_, hex) => String.fromCodePoint(parseInt(hex, 16)))
+    .replace(/&#(\d+);/g, (_, dec) => String.fromCodePoint(Number(dec)))
+    .replace(/&gt;/g, ">")
+    .replace(/&lt;/g, "<")
+    .replace(/&quot;/g, '"')
+    .replace(/&#x27;/g, "'")
+    .replace(/&amp;/g, "&")
+    .replace(/\s+/g, " ")
+    .trim()
+    .slice(0, max);
+/** Reddit's Atom <name> already carries the /u/ prefix, so do not add it twice. */
+const redditUser = (author) => {
+    const name = author.trim().replace(/^\/?u\//i, "");
+    return name ? `u/${name}` : "u/unknown";
+};
+export async function hnSearch(args) {
+    const query = (args.query ?? "").trim();
+    if (!query)
+        throw new SocialError("Provide search terms");
+    const tag = hnTags(args.tag);
+    const perPage = Math.max(1, Math.min(args.hitsPerPage ?? 10, 30));
+    const page = Math.max(0, args.page ?? 0);
+    const params = new URLSearchParams({ query, tags: tag, hitsPerPage: String(perPage), page: String(page) });
+    const minPoints = Math.max(0, Math.min(args.minPoints ?? 0, 100000));
+    if (minPoints > 0)
+        params.set("numericFilters", `points>${minPoints}`);
+    const d = await get(`https://hn.algolia.com/api/v1/search?${params.toString()}`);
+    const hits = d.hits ?? [];
+    if (!hits.length)
+        return `No Hacker News ${tag} entries match "${query}"${minPoints ? ` with more than ${minPoints} points` : ""}.`;
+    return [
+        `Hacker News ${tag} search for "${query}" - ${d.nbHits ?? 0} matches, page ${(d.page ?? 0) + 1} of ${d.nbPages ?? 1}`,
+        ...hits.map((h, i) => [
+            `${i + 1}. ${h.title ?? (hnText(h.comment_text, 120) || "(untitled)")}`,
+            `   ${h.points ?? 0} pts | ${h.num_comments ?? 0} comments | by ${h.author ?? "unknown"} | ${h.created_at ?? "date not reported"}`,
+            `   https://news.ycombinator.com/item?id=${h.objectID ?? ""}${h.url ? ` -> ${h.url}` : ""}`,
+        ].join("\n")),
+    ].join("\n");
+}
+export async function hnComments(args) {
+    const id = Math.floor(args.id ?? 0);
+    if (!id)
+        throw new SocialError("Provide a Hacker News item id");
+    const maxDepth = Math.max(1, Math.min(args.depth ?? 2, 6));
+    const d = await get(`https://hn.algolia.com/api/v1/items/${id}`);
+    if (!d || d.title === undefined)
+        return `No Hacker News item ${id}.`;
+    const lines = [];
+    let shown = 0;
+    const walk = (nodes, level) => {
+        for (const node of nodes ?? []) {
+            if (shown >= 40)
+                return;
+            const text = hnText(node.text, 260);
+            if (text) {
+                lines.push(`${"  ".repeat(level)}- ${node.author ?? "unknown"}: ${text}`);
+                shown++;
+            }
+            if (level + 1 < maxDepth)
+                walk(node.children ?? [], level + 1);
+        }
+    };
+    walk(d.children ?? [], 1);
+    return [
+        `${d.title ?? `item ${id}`} (${d.points ?? 0} pts) by ${d.author ?? "unknown"}`,
+        d.url ?? `https://news.ycombinator.com/item?id=${id}`,
+        "",
+        lines.length ? `Comments (${shown} shown, depth ${maxDepth}):` : "No comment text at this depth.",
+        ...lines,
+    ].join("\n");
+}
+export async function redditSearch(args) {
+    const sub = (args.subreddit ?? "programming").trim().replace(/^\/?r\//i, "");
+    const query = (args.query ?? "").trim();
+    if (!sub)
+        throw new SocialError("Provide a subreddit name");
+    if (!query)
+        throw new SocialError("Provide search terms");
+    const limit = Math.max(1, Math.min(args.limit ?? 10, 25));
+    const url = `https://www.reddit.com/r/${encodeURIComponent(sub)}/search.rss?q=${encodeURIComponent(query)}&restrict_sr=1&sort=relevance&t=year`;
+    const res = await fetch(url, { headers: { "User-Agent": UA, Accept: "application/atom+xml" }, signal: AbortSignal.timeout(25000) });
+    if (!res.ok)
+        throw new SocialError(`Reddit error ${res.status}`);
+    const posts = parseRss(await res.text());
+    if (!posts.length)
+        return `No r/${sub} posts match "${query}".`;
+    return `r/${sub} posts matching "${query}" (${Math.min(posts.length, limit)} of ${posts.length} found):\n` +
+        posts.slice(0, limit).map((p, i) => `${i + 1}. ${hnText(p.title, 160)}\n   ${redditUser(p.author)} | ${p.link}`).join("\n\n");
+}

package/dist/license.js

@@ -0,0 +1,79 @@
+// Premium tools on this server need a license key bought from MCP Marketplace.
+// Buyers put the key in their MCP client config as MCP_LICENSE_KEY. Every tool
+// that is not listed in PREMIUM keeps working without a key.
+const SLUG = "hn-reddit-mcp";
+// Tools that need a key. Everything else is free.
+const PREMIUM = new Set([
+    "hn_search",
+    "reddit_search",
+]);
+const BUY_URL = `https://mcp-marketplace.io/server/io-github-mrfentmen-${SLUG}`;
+// The license check calls the marketplace's verify endpoint directly instead of
+// using @mcp_marketplace/license. That SDK sends no `apikey` header, so every
+// check it makes is rejected by Supabase before it reaches the function. The
+// publishable key below is public by design - it ships in mcp-marketplace.io's
+// own JavaScript and only ever reaches their licence check.
+const DEFAULT_VERIFY_URL = "https://virupvwhtkpkjsiskckg.supabase.co/functions/v1/verify-key";
+const PUBLISHABLE_KEY = "sb_publishable_BuqlW96Ke8C_zzJG-LQv1Q_YHi_r_4h";
+const OK_CACHE_MS = 60 * 60 * 1000;
+const BAD_CACHE_MS = 60 * 1000;
+const seen = new Map();
+const REASONS = {
+    missing_key: "no key is set",
+    invalid_format: "that key is not a valid MCP Marketplace key",
+    not_found: "that key was not found",
+    revoked: "that key has been revoked",
+    rotated: "that key was rotated, use your new one",
+    expired: "that key has expired, renew it",
+    rate_limited: "there were too many checks just now, try again shortly",
+    network_error: "the license server could not be reached",
+};
+function blocked(tool, reason) {
+    const why = REASONS[reason] ?? `the license server answered "${reason}"`;
+    return `"${tool}" needs a license key, but ${why}. ` +
+        `Set MCP_LICENSE_KEY in your MCP client config. Get a key: ${BUY_URL}`;
+}
+async function verify(key) {
+    const res = await fetch(process.env.MCP_LICENSE_VERIFY_URL || DEFAULT_VERIFY_URL, {
+        method: "POST",
+        headers: {
+            apikey: PUBLISHABLE_KEY,
+            Authorization: `Bearer ${PUBLISHABLE_KEY}`,
+            "Content-Type": "application/json",
+        },
+        body: JSON.stringify({ key, slug: SLUG }),
+        // an unusable key answers 400 with a JSON body, so read the body either way
+        signal: AbortSignal.timeout(15000),
+    });
+    const data = (await res.json());
+    if (typeof data?.valid !== "boolean")
+        return { valid: false, reason: "unexpected_response" };
+    return data;
+}
+/**
+ * Returns null when the caller may run the tool, or a short message telling
+ * them how to get a key.
+ *
+ * A good key is remembered for an hour, so a busy session does not hit the
+ * license server on every call and keeps working through a brief outage.
+ */
+export async function premiumRequired(tool) {
+    if (!PREMIUM.has(tool))
+        return null;
+    const key = process.env.MCP_LICENSE_KEY;
+    if (!key)
+        return blocked(tool, "missing_key");
+    const hit = seen.get(key);
+    if (hit && Date.now() - hit.at < (hit.valid ? OK_CACHE_MS : BAD_CACHE_MS)) {
+        return hit.valid ? null : blocked(tool, hit.reason ?? "invalid");
+    }
+    let result;
+    try {
+        result = await verify(key);
+    }
+    catch {
+        result = { valid: false, reason: "network_error" };
+    }
+    seen.set(key, { ...result, at: Date.now() });
+    return result.valid ? null : blocked(tool, result.reason ?? "invalid");
+}

package/dist/server.js

@@ -2,7 +2,8 @@ import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { z } from "zod";
 import { hnItem } from "./api.js";
 import { hnTop } from "./api.js";
-import { redditTop } from "./api.js";
+import { redditTop, hnSearch, hnComments, redditSearch } from "./api.js";
+import { premiumRequired } from "./license.js";
 const text = (value) => ({ content: [{ type: "text", text: value }] });
 const textError = (t) => ({ content: [{ type: "text", text: t }], isError: true });
 const READ_ONLY = { readOnlyHint: true, openWorldHint: true };
@@ -48,5 +49,54 @@ export function createServer() {
             return textError(error(e));
         }
     });
+    server.registerTool("hn_search", {
+        title: "HN search",
+        description: "Full-text search Hacker News through the Algolia index: match title, points, comment count, author and date, with an optional minimum score.",
+        inputSchema: z.object({ query: z.string().min(1).max(200), tag: z.string().default("story").describe("story, comment, poll, show_hn, ask_hn or front_page"), minPoints: z.number().int().min(0).default(0), hitsPerPage: z.number().int().min(1).max(30).default(10), page: z.number().int().min(0).max(50).default(0) }),
+        annotations: READ_ONLY,
+    }, async (args) => {
+        // ---- paywall: hn_search ----
+        const paywallMessage = await premiumRequired("hn_search");
+        if (paywallMessage)
+            return { content: [{ type: "text", text: paywallMessage }], isError: true };
+        // ---- paywall: end ----
+        try {
+            return text(await hnSearch(args));
+        }
+        catch (e) {
+            return textError(error(e));
+        }
+    });
+    server.registerTool("hn_comments", {
+        title: "HN comments",
+        description: "The comment tree under one Hacker News story, with each comment's author, indented by reply depth.",
+        inputSchema: z.object({ id: z.number().int().min(1), depth: z.number().int().min(1).max(6).default(2) }),
+        annotations: READ_ONLY,
+    }, async (args) => {
+        try {
+            return text(await hnComments(args));
+        }
+        catch (e) {
+            return textError(error(e));
+        }
+    });
+    server.registerTool("reddit_search", {
+        title: "Reddit search",
+        description: "Search one subreddit's posts by keyword over the last year via Reddit's Atom feed, with the poster and permalink.",
+        inputSchema: z.object({ subreddit: z.string().min(1).max(60), query: z.string().min(1).max(200), limit: z.number().int().min(1).max(25).default(10) }),
+        annotations: READ_ONLY,
+    }, async (args) => {
+        // ---- paywall: reddit_search ----
+        const paywallMessage = await premiumRequired("reddit_search");
+        if (paywallMessage)
+            return { content: [{ type: "text", text: paywallMessage }], isError: true };
+        // ---- paywall: end ----
+        try {
+            return text(await redditSearch(args));
+        }
+        catch (e) {
+            return textError(error(e));
+        }
+    });
     return server;
 }

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "1.0.0",
+  "version": "1.0.1",
   "type": "module",
   "repository": {
     "type": "git",