Skills/npm/reddit-mcp-server

reddit-mcp-server@2.0.2

VERIFIED

Publisher claims: "A Model Context Protocol (MCP) server for Reddit with full read AND write operations - create posts, reply, edit, and delete content." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher jordanburke · publishing for 543 daysInstalls 8,538Last detonated 1 h ago
$claude mcp add reddit-mcp-server -- npx -y reddit-mcp-server
WatchReport an issue

Coverage

Server started and answered tools/list.
Tested
MCP initialize and tools/list · every tool description, for hidden instructions · every file read, file written and host contacted by what ran
Not tested
what the tools do when called with real credentials

Before you give it your token

It will ask for
no credential variables read in the code
Where it talks to
reddit.com, photon-reddit.com, reddithelp.com (its own)Also redd.it — not the publisher's domain; check what for before connecting.
What the honeypot saw
no credential files read · no network
What we could not test
what the tools do when called with real credentials

Connect it under the guard; read the third-party hosts first. The code names redd.it as well as its own vendor. The guard pins the network to the hosts the honeypot saw.

$vet-skills run --net declared -- npx -y reddit-mcp-server

Never paste a credential into a chat, a ticket or a report, including ours. How the guard holds it.

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (2 scenarios) on 2026-11-15 and scored it 85/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 45 s · 2 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
24sprocessdependency install exit 0
44sclaimed25 tools: test_reddit_mcp_server, get_user_info, get_me, get_my_overview, get_my_saved, get_user_posts, get_user_comments, get_reddit_post, get_top_posts, browse_subreddit, get_subreddit_info, get_subreddit_rules, get_post_flairs, get_trending_subreddits, search_reddit, create_post, reply_to_post, delete_post, delete_comment, edit_post, edit_comment, save_content, unsave_content, get_post_comments, get_more_comments
44stools0c1bd75da63a936b
44stoolsda5bb0074f315723
44stools56315e3af2156aee
44stoolse43cdfe947abcc7a
44stools7e2f1802c3f37461
44stoolsad1806cfbf72aae0
44stoolsf57072a2257c151e
44stools6fa13912b8a5839a
44stoolsece81cd3f9407adc
44stools0f2f07e11bc3bc1d
44stools90f57bc8a294abec
44stoolsb353daf3ba3c6035
44stools25e70fbac7cfb822
44stoolsbb6ce024255c31a2
44stools638bc8c943de1890
44stools5f6a5ceb5b269527
44stoolsa058c6a33b3c684b
44stools507499503cb3223b
44stools57da95d77872926d
44stoolsf02ba492fdc5ef39
44stoolsd211f8f4995f913c
44stoolsf3e91e52ce718707
44stools0d3dd634dc1c48cf
44stools1ebbf4fd4ae895cc
44stools46217d9100efa02d
44sprocessscript backend runs setup only
44sprocessno install scripts to re-run

Static findings

MEDIUM
npx invocation of non-well-known packagedist/index.js:2630 · npx invocation of non-well-known package — may execute untrusted codeconsole.error("[Setup] Or run as HTTP: TRANSPORT_TYPE=httpStream npx reddit-mcp-server");Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
MCP server using network transport (SSE/HTTP)dist/index.js:1706 · MCP server using network transport (SSE/HTTP) — data sent over networkfooter: botDisclosureMode === "auto" ? readEnv("REDDIT_BOT_FOOTER").orElse("\n\n---\n^(🤖 I am a bot | Built with) [^reddit-mcp-server](https://github.com/jordanburke/reddit-mcp-server)") : ""Fix: Namespace tool names and keep tool descriptions literal; no instructions to the agent inside them.
AST04
MEDIUM
File type combined with upload actiondist/index.js:1115 · File type combined with upload action — agent may exfiltrate local data filesconst response = (await this.makeRequest(`/api/info.json?id=t3_${normalizeThingId(postId)}`)).orThrow();Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
MEDIUM
npx invocation of non-well-known packagedist/index.js:2629 · npx invocation of non-well-known package — may execute untrusted codeconsole.error("[Setup] Test interactively: npx @modelcontextprotocol/inspector npx reddit-mcp-server");Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagedist/bin.js:21 · npx invocation of non-well-known package — may execute untrusted codeTest interactively: npx @modelcontextprotocol/inspector npx reddit-mcp-serverFix: Pin versions and sources; vendor anything fetched at install time.
AST06
HIGH
Access to sensitive file pathsdist/index.js:1370 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files* dotenv turns a `KEY=` line into an empty string, so a copied `.env.example` wouldFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
npx invocation of non-well-known packagepackage.json:41 · npx invocation of non-well-known package — may execute untrusted code"start": "pnpm build && npx reddit-mcp-server",Fix: Pin versions and sources; vendor anything fetched at install time.
AST06
MEDIUM
npx invocation of non-well-known packagedist/bin.js:22 · npx invocation of non-well-known package — may execute untrusted codeRun as HTTP: TRANSPORT_TYPE=httpStream npx reddit-mcp-serverFix: Pin versions and sources; vendor anything fetched at install time.
AST06

Cost to the agent

Instructions loaded
≈72 tok
1 file · 9 in bundle
Tool list per prompt
≈6,116 tok
25 tools · 245 per tool
Handshake
1702 ms
launch to tools/list, stdio
Undocumented tools
0
description under 20 chars · avg 435

Tokens estimated at four characters each. The tool list is re-read by the agent on every turn, so it is the number to compare between servers that do the same job: ranked across the index.

Known vulnerabilities

No advisories in OSV for reddit-mcp-server@2.0.2 as of 43 min ago. This is the package itself, not its dependencies.