Back to Browse
Free
Server data from the Official MCP Registry
Read-only access to VR.org's live VR, AR, and XR news, editorial, deals, and buyer guides.
About
Read-only access to VR.org's live VR, AR, and XR news, editorial, deals, and buyer guides.
Security Report
5.2
Moderate5.2Moderate RiskThis is a well-designed read-only MCP server for VR.org content aggregation with strong security fundamentals. The codebase demonstrates good input validation, output sanitization, and rate limiting practices. No authentication is required (appropriate for a read-only public API), and all network operations are confined to VR.org's public endpoints. Minor code quality observations around error handling don't materially impact security. Supply chain analysis found 4 known vulnerabilities in dependencies (2 critical, 2 high severity). Package verification found 1 issue.
7 files analyzed · 9 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
Permissions Required
This plugin requests these system permissions. Most are normal for its category.
What You'll Need
Set these up before or after installing:
Optional base URL override. Defaults to https://vr.org. Only useful for pointing at a staging copy of the site.
Environment variable: VR_ORG_BASE_URL
How to Install
Add this to your MCP configuration file:
{
"mcpServers": {
"org-vr-vr-mcp": {
"env": {
"VR_ORG_BASE_URL": "your-vr-org-base-url-here"
},
"args": [
"-y",
"vr-org-mcp"
],
"command": "npx"
}
}
}Documentation
View on GitHubFrom the project's GitHub README.
vr-org-mcp
Read-only Model Context Protocol server for VR.org, a dedicated VR / AR / XR news publication and aggregator.
It gives any MCP-compatible agent (Claude Desktop, Claude Code, Cursor, Continue, and others) one-call access to live VR, AR, and XR news, VR.org's original editorial, curated headset deals, buyer-guide answers, and top-game and top-app lists.
Ten tools. Zero keys. Zero writes. Zero payments.
Install
Run it directly with npx (no global install needed):
npx vr-org-mcp
Claude Desktop
Add to your claude_desktop_config.json:
{
"mcpServers": {
"vr-org": {
"command": "npx",
"args": ["-y", "vr-org-mcp"]
}
}
}
Claude Code
claude mcp add vr-org -- npx -y vr-org-mcp
Tools
| Tool | What it returns |
|---|---|
search_vr_news | Latest VR / AR / XR headlines from the live feed, with optional category filter and keyword match |
get_vr_trending | Topics currently trending across the feed |
list_vr_originals | Summaries of VR.org's own editorial articles, newest first |
get_vr_article | Metadata and canonical URL for one original by slug |
get_vr_deals | Curated product picks with prices, badges, and retailer links |
compare_vr_headsets | Side-by-side of two headsets (partial names accepted) |
get_top_vr_games | Current ranked top VR games list |
get_top_vr_apps | Current ranked top VR apps and utilities list |
list_vr_sources | The news sources VR.org aggregates, with counts |
vr_explain | Canonical short answer plus pillar-page link for a common question |
How it works
Every tool composes VR.org's public JSON API (https://vr.org/api/*) into a single agent-friendly response. The server is a thin proxy: it holds no secrets, writes nothing, and cannot move money.
Threat model
VR.org's editorial is controlled, but the live feed also carries third-party RSS headlines. To keep a malicious or compromised upstream headline from manipulating the calling model, every tool output is:
- Sanitized. Control characters and zero-width / direction-override characters are stripped from every string.
- Capped. Serialized responses are limited to 50 KB so a large payload cannot flood the agent's context window.
Inputs are validated before any outbound request, and errors are returned as structured, non-echoing objects rather than raw stack traces.
Configuration
| Env var | Default | Purpose |
|---|---|---|
VR_ORG_BASE_URL | https://vr.org | Override the base URL (only useful for staging) |
VR_ORG_UA_SUFFIX | (none) | Optional suffix appended to the outbound User-Agent |
Development
npm install
npm run dev # run from source over stdio
npm run build # compile to dist/
npm test # run the offline test suite
npm run typecheck # type-check without emitting
License
MIT. A VR.org project.
Reviews
No reviews yet
Be the first to review this server!
More Developer Tools MCP Servers
Fetch
Freeby Modelcontextprotocol · Developer Tools
Web content fetching and conversion for efficient LLM usage
80.0K
Stars
5
Installs
5.3
Security
No ratings yet
Local
Git
Freeby Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
80.0K
Stars
6
Installs
6.5
Security
No ratings yet
Local
Toleno
Freeby Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
137
Stars
532
Installs
8.0
Security
4.8
Local