Back to Browse

Forumport MCP Server

Developer ToolsModerate6.1MCP RegistryLocal
Free

Server data from the Official MCP Registry

Reddit subreddits, posts, comments and users as MCP tools.

About

Reddit subreddits, posts, comments and users as MCP tools.

Security Report

6.1
Moderate6.1Moderate Risk

forumport is a token-only Reddit MCP server that sends REDDIT_ACCESS_TOKEN as a Bearer header to the Reddit API, with no exfiltration, shell execution, or hardcoded secrets found. The main concern is that REDDIT_API_BASE_URL can redirect the bearer token to any host, and the write tools (submit_post, create_comment) act on the user's account. Permissions match the stated Reddit client purpose, so the score remains in the good range. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 2 high severity). Package verification found 1 issue.

8 files analyzed · 8 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

REDDIT_ACCESS_TOKENRequired

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-cloudcorprecords-forumport": {
      "env": {
        "REDDIT_ACCESS_TOKEN": "your-reddit-access-token-here"
      },
      "args": [
        "-y",
        "@reneturcios/forumport"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

forumport

Reddit as MCP tools, talking to the Reddit API. forumport is a clean-room rebuild of the core surface of the Reddit MCP server, under a new name: fresh code, no copied branding.

Auth model — TOKEN-ENV ONLY: tools take REDDIT_ACCESS_TOKEN directly and send it as Authorization: Bearer against https://oauth.reddit.com. The OAuth app flow (REDDIT_CLIENT_ID/REDDIT_CLIENT_SECRET + script/password grant + refresh) is NOT reproduced.

Tools (core subset, 12)

get_subreddit_hot, get_subreddit_new, get_subreddit_top, search_posts, get_post, get_post_comments, get_subreddit_about, search_subreddits, get_user_profile, get_user_posts, submit_post, create_comment.

Not in this subset: OAuth app authorization/token/refresh flow, private messages and inbox, moderation tools, wiki, flair management, awards/gold, multireddits/collections, user settings/preferences, subreddit settings/admin, live threads, media upload, voting and save/hide/report writes beyond submit/comment, account creation.

Setup

Create a Reddit access token and set it:

export REDDIT_ACCESS_TOKEN=...

Optionally override the API base with REDDIT_API_BASE_URL (default https://oauth.reddit.com) and the User-Agent with REDDIT_USER_AGENT (default forumport/0.1.0 (MCP rebuild)). Every request carries the token as a Bearer header and a User-Agent header. Without the token, every tool call fails with an error naming the missing variable.

CLI

npx @reneturcios/forumport get_subreddit_hot '{"subreddit":"node","limit":10}'
npx @reneturcios/forumport mcp        # stdio MCP server

Each tool name is a subcommand taking one JSON object argument.

MCP client config

{
  "mcpServers": {
    "forumport": {
      "command": "npx",
      "args": ["-y", "@reneturcios/forumport", "mcp"],
      "env": { "REDDIT_ACCESS_TOKEN": "..." }
    }
  }
}

Docker

docker run -i -e REDDIT_ACCESS_TOKEN ghcr.io/cloudcorprecords/forumport

Development

npm install
npm run build
npm test

License

MIT

Reviews

No reviews yet

Be the first to review this server!