reddit-mcp-server 1.5.3 → 1.6.1

package/dist/index.js

@@ -3,6 +3,7 @@ import dotenv from "dotenv";
 import { FastMCP } from "fastmcp";
 import { Left, Option, Right, Try } from "functype";
 import { z } from "zod";
+import { XMLParser } from "fast-xml-parser";
 //#region src/client/errors.ts
 /**
 * Typed error channel for the Reddit client.
@@ -59,21 +60,6 @@ var NotFoundError = class extends RedditErrorBase {
 		this.name = "NotFoundError";
 	}
 };
-/**
-* Reddit refused the request at the network level rather than for this specific resource.
-*
-* Reddit 403s the unauthenticated JSON API from many IP ranges (datacenters, VPNs, flagged
-* addresses), answering with an HTML block page instead of JSON. A bare `HttpError(403)` reads
-* as "this subreddit is private", which sends people looking in the wrong place — the fix is to
-* supply OAuth credentials, which also raises the rate limit from ~10 to 60+ req/min.
-*/
-var NetworkBlockedError = class extends RedditErrorBase {
-	_tag = "NetworkBlockedError";
-	constructor(message) {
-		super(message);
-		this.name = "NetworkBlockedError";
-	}
-};
 /** Client-side input or safety-policy rejection (invalid sort, duplicate-content guard). */
 var ValidationError = class extends RedditErrorBase {
 	_tag = "ValidationError";
@@ -231,6 +217,100 @@ var ResponseCache = class {
 	}
 };
 //#endregion
+//#region src/client/rss-client.ts
+function contentText(content) {
+	if (content === void 0) return "";
+	if (typeof content === "string") return content;
+	return content["#text"] ?? "";
+}
+const parser = new XMLParser({
+	ignoreAttributes: false,
+	removeNSPrefix: true,
+	parseTagValue: false
+});
+function parseAtomFeed(xml) {
+	var _result$feed;
+	const entries = (_result$feed = parser.parse(xml).feed) === null || _result$feed === void 0 ? void 0 : _result$feed.entry;
+	if (!entries) return [];
+	return Array.isArray(entries) ? entries : [entries];
+}
+function decodeHtmlEntities(text) {
+	return text.replace(/&lt;/g, "<").replace(/&gt;/g, ">").replace(/&quot;/g, "\"").replace(/&#39;/g, "'").replace(/&#32;/g, " ").replace(/&amp;/g, "&");
+}
+function extractLinkUrl(contentHtml) {
+	const match = contentHtml.match(/href="([^"]+)">\[link\]/);
+	return (match === null || match === void 0 ? void 0 : match[1]) ? decodeHtmlEntities(match[1]) : void 0;
+}
+function extractSelfText(contentHtml) {
+	const match = contentHtml.match(/<!-- SC_OFF -->(.*?)<!-- SC_ON -->/s);
+	if (!match) return "";
+	return decodeHtmlEntities(match[1].replace(/<[^>]+>/g, "")).trim();
+}
+function atomEntryToRedditPost(entry) {
+	var _entry$link, _entry$author, _entry$category;
+	const permalink = ((_entry$link = entry.link) === null || _entry$link === void 0 ? void 0 : _entry$link["@_href"]) ?? "";
+	const contentHtml = contentText(entry.content);
+	const externalUrl = extractLinkUrl(contentHtml);
+	const isSelf = !externalUrl || externalUrl.includes("/comments/");
+	const author = (((_entry$author = entry.author) === null || _entry$author === void 0 ? void 0 : _entry$author.name) ?? "").replace(/^\/u\//, "");
+	const subreddit = ((_entry$category = entry.category) === null || _entry$category === void 0 ? void 0 : _entry$category["@_term"]) ?? "";
+	return {
+		id: (entry.id ?? "").replace(/^t3_/, ""),
+		title: entry.title ?? "",
+		author,
+		subreddit,
+		selftext: extractSelfText(contentHtml),
+		url: isSelf ? permalink : externalUrl ?? permalink,
+		score: 0,
+		upvoteRatio: 0,
+		numComments: 0,
+		createdUtc: Math.floor(new Date(entry.published ?? entry.updated ?? "").getTime() / 1e3),
+		over18: false,
+		edited: false,
+		isSelf,
+		permalink: permalink.replace("https://www.reddit.com", "")
+	};
+}
+const RSS_CACHE_TTL_MS = 6e4;
+var RssClient = class {
+	userAgent;
+	cache = /* @__PURE__ */ new Map();
+	constructor(userAgent) {
+		this.userAgent = userAgent;
+	}
+	async fetchSubredditPosts(subreddit, sort, timeFilter, limit, after) {
+		return (await Try.async(async () => {
+			const sub = normalizeSubreddit(subreddit);
+			const basePath = sub === "" ? "" : `/r/${sub}`;
+			const sortPath = sort === "hot" ? "" : `/${sort}`;
+			const params = new URLSearchParams();
+			if (timeFilter && (sort === "top" || sort === "controversial")) params.set("t", timeFilter);
+			if (limit !== void 0) params.set("limit", String(limit));
+			if (after !== void 0) params.set("after", after);
+			const url = `https://www.reddit.com${basePath}${sortPath}/.rss${params.size > 0 ? `?${params}` : ""}`;
+			const cached = this.cache.get(url);
+			if (cached && Date.now() < cached.expiresAt) return cached.page;
+			const response = await fetch(url, { headers: { "User-Agent": this.userAgent } });
+			if (response.status === 429) throw new HttpError(429, "RSS rate limit exceeded (~1 req/min for unauthenticated feeds). Try again shortly.");
+			if (!response.ok) throw new HttpError(response.status, `RSS feed request failed: ${response.status} ${response.statusText}`);
+			const allItems = parseAtomFeed(await response.text()).map(atomEntryToRedditPost);
+			const cap = limit ?? 25;
+			const items = allItems.length > cap ? allItems.slice(0, cap) : allItems;
+			const afterCursor = allItems.length > items.length ? `t3_${items[items.length - 1].id}` : void 0;
+			const page = {
+				items,
+				source: "rss",
+				...afterCursor ? { after: afterCursor } : {}
+			};
+			this.cache.set(url, {
+				page,
+				expiresAt: Date.now() + RSS_CACHE_TTL_MS
+			});
+			return page;
+		})).toEither((error) => classifyRedditError(error, "RSS fetch"));
+	}
+};
+//#endregion
 //#region src/client/reddit-client.ts
 function listingCursor(data) {
 	const after = typeof data.after === "string" ? { after: data.after } : {};
@@ -240,10 +320,6 @@ function listingCursor(data) {
 		...before
 	};
 }
-function headerValue(response, name) {
-	const headers = response.headers;
-	return (headers === null || headers === void 0 ? void 0 : headers.get(name)) ?? "";
-}
 function parsePostData(post) {
 	return {
 		id: post.id,
@@ -264,6 +340,42 @@ function parsePostData(post) {
 		permalink: post.permalink
 	};
 }
+function parseSubredditSearchData(sub) {
+	return {
+		id: String(sub.id ?? sub.display_name),
+		title: `r/${sub.display_name} (${sub.subscribers.toLocaleString("en-US")} subscribers)${sub.title ? ` — ${sub.title}` : ""}`,
+		author: "",
+		subreddit: sub.display_name,
+		selftext: sub.public_description,
+		url: `https://reddit.com${sub.url}`,
+		score: sub.subscribers,
+		upvoteRatio: 1,
+		numComments: 0,
+		createdUtc: sub.created_utc,
+		over18: sub.over18,
+		edited: false,
+		isSelf: false,
+		permalink: sub.url
+	};
+}
+function parseUserSearchData(user) {
+	const karma = user.total_karma ?? user.link_karma + user.comment_karma;
+	return {
+		id: user.id,
+		title: `u/${user.name} (${karma.toLocaleString("en-US")} karma)`,
+		author: user.name,
+		subreddit: "",
+		url: `https://reddit.com/user/${user.name}`,
+		score: karma,
+		upvoteRatio: 1,
+		numComments: 0,
+		createdUtc: user.created_utc,
+		over18: false,
+		edited: false,
+		isSelf: false,
+		permalink: `/user/${user.name}`
+	};
+}
 var RedditClient = class {
 	clientId;
 	clientSecret;
@@ -277,6 +389,8 @@ var RedditClient = class {
 	botDisclosure;
 	cache;
 	retry;
+	rssClient;
+	usesRss;
 	accessToken;
 	tokenExpiry = 0;
 	authenticated = false;
@@ -309,6 +423,8 @@ var RedditClient = class {
 			baseDelayMs: 1e3,
 			maxDelayMs: 6e4
 		};
+		this.usesRss = this.authMode === "anonymous" || this.authMode === "auto" && !this.hasCredentials;
+		this.rssClient = new RssClient(this.userAgent);
 	}
 	determineBaseUrl() {
 		switch (this.authMode) {
@@ -338,7 +454,6 @@ var RedditClient = class {
 				...headers,
 				Authorization: await this.reauthorize()
 			}, path, 0) : first;
-			if (!requiresAuth && response.status === 403 && !headerValue(response, "content-type").includes("json")) throw new NetworkBlockedError("Reddit is blocking unauthenticated requests from this network (HTTP 403 with a block page). Set REDDIT_CLIENT_ID and REDDIT_CLIENT_SECRET to authenticate with OAuth, which also raises the rate limit from ~10 to 60+ requests/min. See https://www.reddit.com/prefs/apps to create an app.");
 			if (cacheable && response.ok) {
 				const text = await response.text();
 				this.cache.set(url, text, response.status);
@@ -394,10 +509,8 @@ var RedditClient = class {
 		return true;
 	}
 	validateWriteAccess() {
-		if (this.username === void 0 || this.password === void 0) {
-			if (this.authMode === "anonymous") throw new NotAuthenticatedError("Write operations not available in anonymous mode. Set REDDIT_USERNAME, REDDIT_PASSWORD and use 'auto' or 'authenticated' mode.");
-			throw new NotAuthenticatedError("Write operations require REDDIT_USERNAME and REDDIT_PASSWORD");
-		}
+		if (this.usesRss) throw new NotAuthenticatedError("Write operations require OAuth credentials (REDDIT_CLIENT_ID and REDDIT_CLIENT_SECRET) in addition to REDDIT_USERNAME and REDDIT_PASSWORD.");
+		if (this.username === void 0 || this.password === void 0) throw new NotAuthenticatedError("Write operations require REDDIT_USERNAME and REDDIT_PASSWORD");
 	}
 	async enforceWriteRateLimit() {
 		if (!this.safeMode.enabled || this.safeMode.writeDelayMs <= 0) return;
@@ -463,7 +576,11 @@ var RedditClient = class {
 		if (!this.botDisclosure.enabled || this.botDisclosure.footer === "") return content;
 		return `${content}${this.botDisclosure.footer}`;
 	}
+	requiresOAuthError(tool) {
+		return Left(new NotAuthenticatedError(`${tool} requires OAuth credentials (REDDIT_CLIENT_ID and REDDIT_CLIENT_SECRET). RSS fallback only supports browse_subreddit and get_top_posts.`));
+	}
 	async getUser(username) {
+		if (this.usesRss) return this.requiresOAuthError("get_user_info");
 		const context = `Failed to get user info for ${username}`;
 		return (await Try.async(async () => {
 			const response = (await this.makeRequest(`/user/${normalizeUsername(username)}/about.json`)).orThrow();
@@ -512,6 +629,7 @@ var RedditClient = class {
 		})).toEither((error) => classifyRedditError(error, context));
 	}
 	async getMyOverview(options = {}) {
+		if (this.usesRss) return this.requiresOAuthError("get_my_overview");
 		if (this.username === void 0) return Left(new NotAuthenticatedError("Fetching your overview requires REDDIT_USERNAME"));
 		const { limit = 25, after } = options;
 		const params = new URLSearchParams({ limit: limit.toString() });
@@ -519,6 +637,7 @@ var RedditClient = class {
 		return this.getUserContent(`/user/${encodeURIComponent(this.username)}/overview.json?${params}`, "Failed to get your overview");
 	}
 	async getMySaved(options = {}) {
+		if (this.usesRss) return this.requiresOAuthError("get_my_saved");
 		if (this.username === void 0) return Left(new NotAuthenticatedError("Fetching saved content requires REDDIT_USERNAME"));
 		const { limit = 25, after } = options;
 		const params = new URLSearchParams({ limit: limit.toString() });
@@ -526,6 +645,7 @@ var RedditClient = class {
 		return this.getUserContent(`/user/${encodeURIComponent(this.username)}/saved.json?${params}`, "Failed to get saved content");
 	}
 	async getMe() {
+		if (this.usesRss) return this.requiresOAuthError("get_me");
 		if (this.username === void 0) return Left(new NotAuthenticatedError("Fetching your account requires REDDIT_USERNAME"));
 		const context = "Failed to get authenticated user info";
 		return (await Try.async(async () => {
@@ -547,6 +667,7 @@ var RedditClient = class {
 		})).toEither((error) => classifyRedditError(error, context));
 	}
 	async getSubredditInfo(subredditName) {
+		if (this.usesRss) return this.requiresOAuthError("get_subreddit_info");
 		const context = `Failed to get subreddit info for ${subredditName}`;
 		return (await Try.async(async () => {
 			const response = (await this.makeRequest(`/r/${normalizeSubreddit(subredditName)}/about.json`)).orThrow();
@@ -567,6 +688,7 @@ var RedditClient = class {
 		})).toEither((error) => classifyRedditError(error, context));
 	}
 	async getSubredditRules(subreddit) {
+		if (this.usesRss) return this.requiresOAuthError("get_subreddit_rules");
 		const context = `Failed to get rules for r/${subreddit}`;
 		return (await Try.async(async () => {
 			const response = (await this.makeRequest(`/r/${normalizeSubreddit(subreddit)}/about/rules.json`)).orThrow();
@@ -582,6 +704,7 @@ var RedditClient = class {
 		})).toEither((error) => classifyRedditError(error, context));
 	}
 	async getPostFlairs(subreddit) {
+		if (this.usesRss) return this.requiresOAuthError("get_post_flairs");
 		const context = `Failed to get post flairs for r/${subreddit}`;
 		return (await Try.async(async () => {
 			const response = (await this.makeRequest(`/r/${normalizeSubreddit(subreddit)}/api/link_flair_v2.json`)).orThrow();
@@ -595,6 +718,7 @@ var RedditClient = class {
 		})).toEither((error) => classifyRedditError(error, context));
 	}
 	async getTopPosts(subreddit, timeFilter = "week", limit = 10, after) {
+		if (this.usesRss) return this.rssClient.fetchSubredditPosts(subreddit, "top", timeFilter, limit, after);
 		const params = new URLSearchParams({
 			t: timeFilter,
 			limit: limit.toString()
@@ -622,6 +746,7 @@ var RedditClient = class {
 			"controversial"
 		];
 		if (!validSorts.includes(sort)) return Left(new ValidationError(`Invalid sort "${sort}". Valid options are: ${validSorts.join(", ")}`));
+		if (this.usesRss) return this.rssClient.fetchSubredditPosts(subreddit, sort, timeFilter, limit, after);
 		const params = new URLSearchParams({ limit: limit.toString() });
 		if (sort === "top" || sort === "controversial") params.set("t", timeFilter);
 		if (after !== void 0) params.set("after", after);
@@ -640,6 +765,7 @@ var RedditClient = class {
 		})).toEither((error) => classifyRedditError(error, context));
 	}
 	async getPost(postId, subreddit) {
+		if (this.usesRss) return this.requiresOAuthError("get_reddit_post");
 		const context = `Failed to get post with ID ${postId}`;
 		return (await Try.async(async () => {
 			const id = normalizeThingId(postId);
@@ -653,6 +779,7 @@ var RedditClient = class {
 		})).toEither((error) => classifyRedditError(error, context));
 	}
 	async getTrendingSubreddits(limit = 5) {
+		if (this.usesRss) return this.requiresOAuthError("get_trending_subreddits");
 		const params = new URLSearchParams({ limit: limit.toString() });
 		const context = `Failed to get trending subreddits`;
 		return (await Try.async(async () => {
@@ -799,7 +926,30 @@ var RedditClient = class {
 	async editComment(thingId, newText) {
 		return this.editThing(thingId, newText, "t1");
 	}
+	async setSaved(thingId, saved, category) {
+		return (await Try.async(async () => {
+			this.validateWriteAccess();
+			const fullThingId = normalizeFullname(thingId, "t3");
+			const params = new URLSearchParams();
+			params.append("id", fullThingId);
+			if (saved && category !== void 0) params.append("category", category);
+			const response = (await this.makeRequest(saved ? "/api/save" : "/api/unsave", {
+				method: "POST",
+				headers: { "Content-Type": "application/x-www-form-urlencoded" },
+				body: params.toString()
+			})).orThrow();
+			if (!response.ok) throw new HttpError(response.status, `Failed to ${saved ? "save" : "unsave"}: HTTP ${response.status}`);
+			return true;
+		})).toEither((error) => classifyRedditError(error));
+	}
+	async saveContent(thingId, category) {
+		return this.setSaved(thingId, true, category);
+	}
+	async unsaveContent(thingId) {
+		return this.setSaved(thingId, false);
+	}
 	async searchReddit(query, options = {}) {
+		if (this.usesRss) return this.requiresOAuthError("search_reddit");
 		const { subreddit, sort = "relevance", timeFilter = "all", limit = 25, type = "link", after, before } = options;
 		const params = new URLSearchParams({
 			q: query,
@@ -818,12 +968,18 @@ var RedditClient = class {
 			if (!response.ok) throw new HttpError(response.status, `Failed to search Reddit: HTTP ${response.status}`);
 			const json = await response.json();
 			return {
-				items: json.data.children.filter((child) => child.kind === "t3").map((child) => parsePostData(child.data)),
+				items: json.data.children.flatMap((child) => {
+					if (child.kind === "t3") return [parsePostData(child.data)];
+					if (child.kind === "t5") return [parseSubredditSearchData(child.data)];
+					if (child.kind === "t2") return [parseUserSearchData(child.data)];
+					return [];
+				}),
 				...listingCursor(json.data)
 			};
 		})).toEither((error) => classifyRedditError(error, context));
 	}
 	async getPostComments(postId, subreddit, options = {}) {
+		if (this.usesRss) return this.requiresOAuthError("get_post_comments");
 		const { sort = "best", limit = 100 } = options;
 		const params = new URLSearchParams({
 			sort,
@@ -863,6 +1019,7 @@ var RedditClient = class {
 		})).toEither((error) => classifyRedditError(error, context));
 	}
 	async getMoreComments(linkId, commentIds) {
+		if (this.usesRss) return this.requiresOAuthError("get_more_comments");
 		const context = `Failed to expand comments for ${linkId}`;
 		return (await Try.async(async () => {
 			var _json$json$data4;
@@ -893,6 +1050,7 @@ var RedditClient = class {
 		})).toEither((error) => classifyRedditError(error, context));
 	}
 	async getUserPosts(username, options = {}) {
+		if (this.usesRss) return this.requiresOAuthError("get_user_posts");
 		const { sort = "new", timeFilter = "all", limit = 25, after } = options;
 		const params = new URLSearchParams({
 			sort,
@@ -912,6 +1070,7 @@ var RedditClient = class {
 		})).toEither((error) => classifyRedditError(error, context));
 	}
 	async getUserComments(username, options = {}) {
+		if (this.usesRss) return this.requiresOAuthError("get_user_comments");
 		const { sort = "new", timeFilter = "all", limit = 25, after } = options;
 		const params = new URLSearchParams({
 			sort,
@@ -1085,7 +1244,7 @@ function formatSubredditInfo(subreddit) {
 //#endregion
 //#region src/index.ts
 dotenv.config({ quiet: true });
-const VERSION = "1.5.3";
+const VERSION = "1.6.1";
 function validateUserAgent(userAgent, username) {
 	if (!/^[\w-]+:[\w-]+:[\d.]+ \(by \/u\/\w+\)$/.test(userAgent)) {
 		console.error("[Warning] User-Agent does not follow Reddit's recommended format");
@@ -1136,6 +1295,19 @@ function buildSafeModeConfig(safeMode) {
 function unwrapClient() {
 	return getRedditClient().orThrow(/* @__PURE__ */ new Error("Reddit client not initialized"));
 }
+function rssDisclaimer(source) {
+	return source === "rss" ? "\n\n> **RSS mode** — scores, comment counts, and upvote ratios are unavailable. Set REDDIT_CLIENT_ID and REDDIT_CLIENT_SECRET for full data." : "";
+}
+function formatPostSummary(post, index, source) {
+	const statsLines = source === "rss" ? [] : [`- Score: ${post.stats.score.toLocaleString()} (${(post.stats.upvoteRatio * 100).toFixed(1)}% upvoted)`, `- Comments: ${post.stats.comments.toLocaleString()}`];
+	return [
+		`### ${index + 1}. ${post.title}`,
+		`- Author: u/${post.author}`,
+		...statsLines,
+		`- Posted: ${post.metadata.posted}`,
+		`- Link: ${post.links.shortLink}`
+	].join("\n");
+}
 function nextPageHint(after) {
 	return Option(after).fold(() => "", (cursor) => `\n\n---\nMore results available — call again with after="${cursor}" for the next page.`);
 }
@@ -1208,9 +1380,12 @@ async function setupRedditClient() {
 	});
 	console.error("[Setup] Reddit client initialized");
 	console.error(`[Setup] Authentication mode: ${authMode}`);
+	if (authMode === "anonymous") console.error("[Warning] REDDIT_AUTH_MODE=anonymous is deprecated; it is now an alias for auto without credentials.");
 	if (authMode === "anonymous" || !hasCredentials) {
-		console.error("[Setup] Using anonymous Reddit API (~10 req/min)");
-		console.error("[Setup] No authentication required - ready to use!");
+		console.error("[Setup] RSS fallback mode — no OAuth credentials detected.");
+		console.error("[Setup] Only browse_subreddit and get_top_posts are available (~1 req/min, no engagement metrics).");
+		console.error("[Setup] Set REDDIT_CLIENT_ID and REDDIT_CLIENT_SECRET for full API access (100 req/min).");
+		console.error("[Setup] See: https://www.reddit.com/wiki/api");
 	} else {
 		console.error("[Setup] Testing Reddit API connection...");
 		if (!await client.checkAuthentication()) {
@@ -1252,6 +1427,7 @@ Available capabilities:
 - Search Reddit content across posts and subreddits
 - Create posts and reply to posts/comments (with authentication)
 - Edit your own posts and comments (with authentication)
+- Save or unsave posts and comments (with authentication)
 - Delete your own posts and comments (with authentication)
 - Analyze engagement metrics and community insights
 
@@ -1308,7 +1484,7 @@ Ready to handle Reddit API requests!`);
 });
 server.addTool({
 	name: "get_user_info",
-	description: "Get a public profile for any Reddit user: comment/post/total karma, account age and status flags, plus a short activity analysis and engagement tips. Read-only; works in anonymous mode. Returns profile stats only — use get_user_posts / get_user_comments for their actual content. Use get_me instead for your own authenticated account; do NOT expect private fields here, as only public data is returned.",
+	description: "Get a public profile for any Reddit user: comment/post/total karma, account age and status flags, plus a short activity analysis and engagement tips. Read-only; requires OAuth credentials. Returns profile stats only — use get_user_posts / get_user_comments for their actual content. Use get_me instead for your own authenticated account; do NOT expect private fields here, as only public data is returned.",
 	annotations: {
 		title: "Get User Info",
 		readOnlyHint: true,
@@ -1342,7 +1518,7 @@ server.addTool({
 });
 server.addTool({
 	name: "get_me",
-	description: "Get the authenticated user's own profile (karma, account age, status flags). Read-only, but requires user credentials (REDDIT_USERNAME/REDDIT_PASSWORD) and fails in anonymous mode. Use this instead of get_user_info when you need the current account rather than an arbitrary user. Do NOT use it to look up other users — it always returns the logged-in account.",
+	description: "Get the authenticated user's own profile (karma, account age, status flags). Read-only, but requires user credentials (REDDIT_USERNAME/REDDIT_PASSWORD) and fails without user credentials. Use this instead of get_user_info when you need the current account rather than an arbitrary user. Do NOT use it to look up other users — it always returns the logged-in account.",
 	annotations: {
 		title: "Get My Account",
 		readOnlyHint: true,
@@ -1412,7 +1588,7 @@ server.addTool({
 });
 server.addTool({
 	name: "get_user_posts",
-	description: "Get posts submitted by a specific user, with sort (new/hot/top) and time filter. Read-only; works anonymously. Returns a page of posts (title, subreddit, score, upvote ratio, comment count, permalink) plus an `after` cursor for paging. Use get_user_comments for their comments, or get_user_info for karma/profile stats. Do NOT use this to search a subreddit — use search_reddit or browse_subreddit.",
+	description: "Get posts submitted by a specific user, with sort (new/hot/top) and time filter. Read-only; requires OAuth credentials. Returns a page of posts (title, subreddit, score, upvote ratio, comment count, permalink) plus an `after` cursor for paging. Use get_user_comments for their comments, or get_user_info for karma/profile stats. Do NOT use this to search a subreddit — use search_reddit or browse_subreddit.",
 	annotations: {
 		title: "Get User Posts",
 		readOnlyHint: true,
@@ -1464,7 +1640,7 @@ ${postSummaries}${nextPageHint(page.after)}`;
 });
 server.addTool({
 	name: "get_user_comments",
-	description: "Get comments made by a specific user, with sort (new/hot/top) and time filter. Read-only; works anonymously. Returns a page of comments (subreddit, parent post title, body excerpt, score, permalink) plus an `after` cursor. Use get_user_posts for their submissions, or get_user_info for karma/profile stats. Do NOT use this to read one post's thread — use get_post_comments.",
+	description: "Get comments made by a specific user, with sort (new/hot/top) and time filter. Read-only; requires OAuth credentials. Returns a page of comments (subreddit, parent post title, body excerpt, score, permalink) plus an `after` cursor. Use get_user_posts for their submissions, or get_user_info for karma/profile stats. Do NOT use this to read one post's thread — use get_post_comments.",
 	annotations: {
 		title: "Get User Comments",
 		readOnlyHint: true,
@@ -1519,7 +1695,7 @@ ${commentSummaries}${nextPageHint(page.after)}`;
 });
 server.addTool({
 	name: "get_reddit_post",
-	description: "Get a single post by subreddit + post id: title, author, self-text or link content, score, upvote ratio, comment count, flair/flags, and an engagement analysis. Read-only; works anonymously. Returns the post only — use get_post_comments for its comment thread. Do NOT use this to list a subreddit's posts (use browse_subreddit / get_top_posts) or to find posts by keyword (use search_reddit).",
+	description: "Get a single post by subreddit + post id: title, author, self-text or link content, score, upvote ratio, comment count, flair/flags, and an engagement analysis. Read-only; requires OAuth credentials. Returns the post only — use get_post_comments for its comment thread. Do NOT use this to list a subreddit's posts (use browse_subreddit / get_top_posts) or to find posts by keyword (use search_reddit).",
 	annotations: {
 		title: "Get Reddit Post",
 		readOnlyHint: true,
@@ -1568,7 +1744,7 @@ ${formattedPost.bestTimeToEngage}`;
 });
 server.addTool({
 	name: "get_top_posts",
-	description: "Get the top-scoring posts from a subreddit — or from the authenticated home feed if no subreddit is given — within a time window (hour…all). Read-only; works anonymously. Returns a page of posts (title, author, score, upvote ratio, comments, link) plus an `after` cursor. This is a shortcut for the 'top' sort; use browse_subreddit for hot/new/rising/controversial, or search_reddit to find posts by keyword.",
+	description: "Get the top-scoring posts from a subreddit — or from the authenticated home feed if no subreddit is given — within a time window (hour…all). Read-only; works without credentials via RSS fallback (titles and links only, no scores or comment counts). Returns a page of posts plus an `after` cursor. This is a shortcut for the 'top' sort; use browse_subreddit for hot/new/rising/controversial, or search_reddit to find posts by keyword.",
 	annotations: {
 		title: "Get Top Posts",
 		readOnlyHint: true,
@@ -1593,21 +1769,16 @@ server.addTool({
 		}, (page) => {
 			const posts = page.items;
 			if (posts.length === 0) return `No posts found in ${Option(args.subreddit).fold(() => "home feed", (sr) => `r/${sr}`)} for the specified time period.`;
-			const postSummaries = posts.map(formatPostInfo).map((post, index) => `### ${index + 1}. ${post.title}
-- Author: u/${post.author}
-- Score: ${post.stats.score.toLocaleString()} (${(post.stats.upvoteRatio * 100).toFixed(1)}% upvoted)
-- Comments: ${post.stats.comments.toLocaleString()}
-- Posted: ${post.metadata.posted}
-- Link: ${post.links.shortLink}`).join("\n\n");
+			const postSummaries = posts.map(formatPostInfo).map((post, index) => formatPostSummary(post, index, page.source)).join("\n\n");
 			return `# Top Posts from ${Option(args.subreddit).fold(() => "Home Feed", (sr) => `r/${sr}`)} (${args.time_filter})
 
-${postSummaries}${nextPageHint(page.after)}`;
+${postSummaries}${nextPageHint(page.after)}${rssDisclaimer(page.source)}`;
 		});
 	}
 });
 server.addTool({
 	name: "browse_subreddit",
-	description: "Browse a subreddit — or the authenticated home feed when no subreddit is given — by sort order: hot, new, top, rising, or controversial. Read-only; works anonymously. `time_filter` applies only to the top and controversial sorts. Returns a page of posts (title, author, score, upvote ratio, comments, link) plus an `after` cursor. Use get_top_posts as a shortcut for the top sort, or search_reddit to find posts by keyword rather than by feed order.",
+	description: "Browse a subreddit — or the authenticated home feed when no subreddit is given — by sort order: hot, new, top, rising, or controversial. Read-only; works without credentials via RSS fallback (titles and links only, no scores or comment counts). `time_filter` applies only to the top and controversial sorts. Returns a page of posts plus an `after` cursor. Use get_top_posts as a shortcut for the top sort, or search_reddit to find posts by keyword rather than by feed order.",
 	annotations: {
 		title: "Browse Subreddit",
 		readOnlyHint: true,
@@ -1640,23 +1811,18 @@ server.addTool({
 			const posts = page.items;
 			const location = Option(args.subreddit).fold(() => "home feed", (sr) => `r/${sr}`);
 			if (posts.length === 0) return `No posts found in ${location}.`;
-			const postSummaries = posts.map(formatPostInfo).map((post, index) => `### ${index + 1}. ${post.title}
-- Author: u/${post.author}
-- Score: ${post.stats.score.toLocaleString()} (${(post.stats.upvoteRatio * 100).toFixed(1)}% upvoted)
-- Comments: ${post.stats.comments.toLocaleString()}
-- Posted: ${post.metadata.posted}
-- Link: ${post.links.shortLink}`).join("\n\n");
+			const postSummaries = posts.map(formatPostInfo).map((post, index) => formatPostSummary(post, index, page.source)).join("\n\n");
 			const timeSuffix = args.sort === "top" || args.sort === "controversial" ? `, ${args.time_filter}` : "";
 			const heading = location === "home feed" ? "Home Feed" : location;
 			return `# ${args.sort} posts from ${heading} (${args.sort}${timeSuffix})
 
-${postSummaries}${nextPageHint(page.after)}`;
+${postSummaries}${nextPageHint(page.after)}${rssDisclaimer(page.source)}`;
 		});
 	}
 });
 server.addTool({
 	name: "get_subreddit_info",
-	description: "Get a subreddit's profile: title, description, subscriber and active-user counts, creation date, flags, wiki/link URLs, plus a community analysis and posting tips. Read-only; works anonymously. Returns metadata about the community itself — use browse_subreddit / get_top_posts for its posts, or get_subreddit_rules for its posting rules. Do NOT use this to find subreddits by topic — use search_reddit with type='sr'.",
+	description: "Get a subreddit's profile: title, description, subscriber and active-user counts, creation date, flags, wiki/link URLs, plus a community analysis and posting tips. Read-only; requires OAuth credentials. Returns metadata about the community itself — use browse_subreddit / get_top_posts for its posts, or get_subreddit_rules for its posting rules. Do NOT use this to find subreddits by topic — use search_reddit with type='sr'.",
 	annotations: {
 		title: "Get Subreddit Info",
 		readOnlyHint: true,
@@ -1700,7 +1866,7 @@ ${formattedSubreddit.description.full}
 });
 server.addTool({
 	name: "get_subreddit_rules",
-	description: "Get a subreddit's posting rules (each rule's name, what it applies to, and its description). Read-only; works anonymously. Returns the rules list, or a note when the subreddit lists none. Call this before create_post to check requirements and avoid auto-removal. For available post flairs use get_post_flairs instead.",
+	description: "Get a subreddit's posting rules (each rule's name, what it applies to, and its description). Read-only; requires OAuth credentials. Returns the rules list, or a note when the subreddit lists none. Call this before create_post to check requirements and avoid auto-removal. For available post flairs use get_post_flairs instead.",
 	annotations: {
 		title: "Get Subreddit Rules",
 		readOnlyHint: true,
@@ -1725,7 +1891,7 @@ ${ruleList}`;
 });
 server.addTool({
 	name: "get_post_flairs",
-	description: "List a subreddit's selectable link flairs (flair text + flair_id) for use with create_post. Read-only, but requires user credentials; many subreddits expose flairs only to members, so this can 403 or return empty anonymously. Pass a returned flair_id (and flair_text for text-editable flairs) to create_post. For the subreddit's posting rules use get_subreddit_rules instead.",
+	description: "List a subreddit's selectable link flairs (flair text + flair_id) for use with create_post. Read-only, but requires user credentials; many subreddits expose flairs only to members, so this can 403 or return empty without credentials. Pass a returned flair_id (and flair_text for text-editable flairs) to create_post. For the subreddit's posting rules use get_subreddit_rules instead.",
 	annotations: {
 		title: "Get Post Flairs",
 		readOnlyHint: true,
@@ -1751,7 +1917,7 @@ Pass the desired \`flair_id\` to \`create_post\`.`;
 });
 server.addTool({
 	name: "get_trending_subreddits",
-	description: "Get the subreddits Reddit is currently featuring as trending/popular. Read-only, no parameters; works anonymously. Returns a list of subreddit names that changes through the day (cached briefly server-side). To find subreddits by keyword instead of by trend, use search_reddit with type='sr'.",
+	description: "Get the subreddits Reddit is currently featuring as trending/popular. Read-only, no parameters; requires OAuth credentials. Returns a list of subreddit names that changes through the day (cached briefly server-side). To find subreddits by keyword instead of by trend, use search_reddit with type='sr'.",
 	annotations: {
 		title: "Get Trending Subreddits",
 		readOnlyHint: true,
@@ -1768,7 +1934,7 @@ ${trendingSubreddits.map((subreddit, index) => `${index + 1}. r/${subreddit}`).j
 });
 server.addTool({
 	name: "search_reddit",
-	description: "Search Reddit for posts — or subreddits/users via `type` — optionally scoped to one subreddit, with sort and time filters. Read-only; works anonymously. Returns a page of results (title, subreddit, author, score, comments, link) plus an `after` cursor for paging. Use this to find content by keyword; use browse_subreddit / get_top_posts to list a known subreddit's feed instead.",
+	description: "Search Reddit for posts — or subreddits/users via `type` — optionally scoped to one subreddit, with sort and time filters. Read-only; requires OAuth credentials. Returns a page of results (title, subreddit, author, score, comments, link) plus an `after` cursor for paging. Use this to find content by keyword; use browse_subreddit / get_top_posts to list a known subreddit's feed instead.",
 	annotations: {
 		title: "Search Reddit",
 		readOnlyHint: true,
@@ -2005,9 +2171,54 @@ The comment ${args.thing_id} has been updated with your new content.
 **Note**: An "edited" marker will appear on your comment to show it has been modified.`);
 	}
 });
+server.addTool({
+	name: "save_content",
+	description: "Save a post or comment to your account (a private bookmark, listed by get_my_saved). Mutating but idempotent — saving an already-saved item is a no-op. Requires REDDIT_USERNAME and REDDIT_PASSWORD; works on any post/comment you can see, not just your own. Accepts a full thing id (t3_ for a post, t1_ for a comment) — a bare id is treated as a post. Use unsave_content to undo.",
+	annotations: {
+		title: "Save Post or Comment",
+		readOnlyHint: false,
+		destructiveHint: false,
+		idempotentHint: true,
+		openWorldHint: true
+	},
+	parameters: z.object({
+		thing_id: z.string().describe("The post or comment to save: a full thing id 't3_<id>' (post) or 't1_<id>' (comment). A bare id is treated as a post."),
+		category: z.string().optional().describe("Optional save category to file this under (Reddit Premium feature; ignored on other accounts).")
+	}),
+	execute: async (args) => {
+		const client = unwrapClient();
+		if (process.env.REDDIT_USERNAME === void 0 || process.env.REDDIT_PASSWORD === void 0) throw new Error("User authentication required. Please set REDDIT_USERNAME and REDDIT_PASSWORD environment variables.");
+		return (await client.saveContent(args.thing_id, args.category)).fold((err) => {
+			throw new Error(`Failed to save content: ${err.message}`);
+		}, () => `# Content Saved Successfully
+
+${args.thing_id} has been saved to your account. Use get_my_saved to view your saved items.`);
+	}
+});
+server.addTool({
+	name: "unsave_content",
+	description: "Remove a post or comment from your saved items (undoes save_content). Mutating but idempotent — unsaving an item that isn't saved is a no-op. Requires REDDIT_USERNAME and REDDIT_PASSWORD. Accepts a full thing id (t3_ for a post, t1_ for a comment) — a bare id is treated as a post.",
+	annotations: {
+		title: "Unsave Post or Comment",
+		readOnlyHint: false,
+		destructiveHint: false,
+		idempotentHint: true,
+		openWorldHint: true
+	},
+	parameters: z.object({ thing_id: z.string().describe("The post or comment to unsave: a full thing id 't3_<id>' (post) or 't1_<id>' (comment). A bare id is treated as a post.") }),
+	execute: async (args) => {
+		const client = unwrapClient();
+		if (process.env.REDDIT_USERNAME === void 0 || process.env.REDDIT_PASSWORD === void 0) throw new Error("User authentication required. Please set REDDIT_USERNAME and REDDIT_PASSWORD environment variables.");
+		return (await client.unsaveContent(args.thing_id)).fold((err) => {
+			throw new Error(`Failed to unsave content: ${err.message}`);
+		}, () => `# Content Unsaved Successfully
+
+${args.thing_id} has been removed from your saved items.`);
+	}
+});
 server.addTool({
 	name: "get_post_comments",
-	description: "Get the comment thread for a post (by post id + subreddit), sorted best/top/new/controversial/old/qa. Read-only; works anonymously. Returns the post header plus threaded comments (author, OP/edited badges, score, body, nesting depth) up to `limit`. Long threads are truncated with 'load more' stubs — expand those with get_more_comments. Use get_reddit_post for just the post body, not the thread.",
+	description: "Get the comment thread for a post (by post id + subreddit), sorted best/top/new/controversial/old/qa. Read-only; requires OAuth credentials. Returns the post header plus threaded comments (author, OP/edited badges, score, body, nesting depth) up to `limit`. Long threads are truncated with 'load more' stubs — expand those with get_more_comments. Use get_reddit_post for just the post body, not the thread.",
 	annotations: {
 		title: "Get Post Comments",
 		readOnlyHint: true,
@@ -2060,7 +2271,7 @@ ${comment.body}
 });
 server.addTool({
 	name: "get_more_comments",
-	description: "Expand truncated 'load more comments' stubs in a thread. Read-only; works anonymously. Pass the post's link id and the comment ids from a 'more' node (surfaced by get_post_comments) to fetch those hidden comments; returns the expanded comments (author, body excerpt, score, link). Call get_post_comments first to obtain the thread and its 'more' node ids — do NOT invent ids.",
+	description: "Expand truncated 'load more comments' stubs in a thread. Read-only; requires OAuth credentials. Pass the post's link id and the comment ids from a 'more' node (surfaced by get_post_comments) to fetch those hidden comments; returns the expanded comments (author, body excerpt, score, link). Call get_post_comments first to obtain the thread and its 'more' node ids — do NOT invent ids.",
 	annotations: {
 		title: "Get More Comments",
 		readOnlyHint: true,