Server data from the Official MCP Registry
Read public Reddit without OAuth; post, comment, vote, and subscribe with OAuth. By UnClick.
Read public Reddit without OAuth; post, comment, vote, and subscribe with OAuth. By UnClick.
This MCP server exposes 450+ API endpoints across 178+ tools with a highly permissive architecture. Critical issues include: (1) Credential exposure via environment variables without secure storage guidance, (2) Unauthenticated tool discovery and invocation through hidden endpoints (`unclick_call`, `unclick_search`, `unclick_browse`), (3) No per-tool authentication or authorization boundaries—once the single API key is compromised, all 450+ endpoints become accessible, (4) Excessive permissions including arbitrary HTTP requests, shell execution potential, and broad network access that far exceed typical MCP server scope, and (5) Lack of input validation examples and error handling in the truncated tool definitions. The server's design prioritizes breadth over security. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue (1 critical, 0 high severity).
4 files analyzed · 19 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Unverified package source
We couldn't verify that the installable package matches the reviewed source code. Proceed with caution.
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-malamutemayhem-reddit": {
"args": [
"-y",
"unclick"
],
"command": "npx"
}
}
}From the project's GitHub README.
The app store for AI agents. unclick.world
450+ callable endpoints across 178+ tools, available to any MCP-compatible AI client. New tools ship to the API continuously. Your agent picks them up automatically; no package update is needed.
Using the latest GitHub release (no npm account required):
{
"mcpServers": {
"unclick": {
"command": "npx",
"args": ["-y", "https://github.com/malamutemayhem/unclick/releases/latest/download/unclick.tgz"]
}
}
}
Add this to your claude_desktop_config.json (or equivalent for Cursor, Windsurf, etc).
Or install globally from GitHub:
npm install -g https://github.com/malamutemayhem/unclick/releases/latest/download/unclick.tgz
This repo follows the AGENTS.md fence rules for agent work.
For local web development:
npm run dev
For the API workspace:
npm run dev:api
Run the main test suite:
npm test
Run the production build check:
npm run build
This repository is licensed under the MIT License. See LICENSE.
Gives your agent access to a growing catalog of tools across developer utilities, social media, e-commerce, finance, messaging, media, security, and more. You don't need to install separate packages for each integration. One server provides access to everything in the catalog.
UnClick exposes a small direct surface for daily agent workflows, plus hidden internal discovery tools for the full catalog.
| Tool group | Tools |
|---|---|
| Memory session protocol | load_memory, save_fact, search_memory, save_identity, save_session |
| Signals and Fishbowl coordination | check_signals, read_messages, post_message, create_todo, list_todos, update_todo, complete_todo, create_idea, list_ideas, vote_on_idea, promote_idea_to_todo |
| Hidden internal catalog tools | unclick_search, unclick_browse, unclick_tool_info, unclick_call |
The agent starts with memory, uses direct Fishbowl tools for coordination, and can still call the hidden catalog tools by name when it needs dynamic endpoint discovery.
get_startup_context -> load_memory, write_session_summary -> save_session, add_fact -> save_fact, set_business_context -> save_identity.ListTools and are called through unclick_call with endpoint_id: "memory.<op>" (for example memory.manage_decay, memory.store_code, memory.log_conversation, memory.supersede_fact, memory.upsert_library_doc).Set your key as an environment variable:
UNCLICK_API_KEY=your_key_here
Or pass it via the MCP config:
{
"mcpServers": {
"unclick": {
"command": "npx",
"args": ["-y", "https://github.com/malamutemayhem/unclick/releases/latest/download/unclick.tgz"],
"env": {
"UNCLICK_API_KEY": "your_key_here"
}
}
}
}
Full catalog, docs, and API keys at unclick.world.
Be the first to review this server!
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
by mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.
by Microsoft · Content & Media
Convert files (PDF, Word, Excel, images, audio) to Markdown for LLM consumption