Mmcp.market

Truesignal MCP server

by RudrenduPaul·io.github.RudrenduPaul/truesignal·v0.1.5
No reviews yet

Wraps the truesignal CLI as a single generic MCP tool for threat/connector status checks.

A92/100grade A
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
A92/100

full report

Adoption
New

0 stars12 downloads/wk

Reviews

Write one

Nobody has reviewed Truesignal yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Truesignal tools (1, 1 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • runwrite action

    Shells out to the installed `truesignal` CLI with `args` and returns its parsed JSON output.

Public scan report

scanner v0.1.9 · 2026-09-23 · same rubric, same numbers if you re-run it

no findings
  • Code scan17 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 11 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 92/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

What the publisher says

From the Truesignal repository's README, as published. We do not edit it. Read it on GitHub

<!-- mcp-name: io.github.RudrenduPaul/truesignal -->

TrueSignal

Install • Quickstart • Features • CLI Reference • MCP Server • Compare • FAQ

A personal OSINT/security intelligence feed with a no-fabrication guarantee verified by 22 automated tests: every connector's failure path returns real cached data or nothing, never an invented data point.

Install

TrueSignal ships as two independent, equally first-class packages -- pick whichever fits your toolchain, or install both:

npm (JS/TS CLI):

npx truesignal-cli init

truesignal-cli is published on npm (see the badge above). To build from source instead:

git clone https://github.com/RudrenduPaul/truesignal.git && cd truesignal && npm install && npm run build && node dist/cli.js init

Requires Node.js 18.17 or later. Both install paths verified working on 2026-08-03.

For repeat use, npm link after building gives you the truesignal command directly instead of typing node dist/cli.js.

pip (Python library + CLI):

pip install truesignal-cli

A genuine, independent Python port -- not a wrapper around the Node binary -- with the same five connectors, the same provenance-stamping guarantee, and the same init/feed/verify CLI surface. See python/README.md for the Python-specific quickstart. Both packages are maintained together; neither is deprecated in favor of the other.

$ truesignal init

truesignal connector status:

  [ready]        CISA Known Exploited Vulnerabilities (cisa-kev) -- no configuration needed
  [not configured] Cloudflare Radar (cloudflare-radar) -- set CLOUDFLARE_RADAR_API_TOKEN
  [not configured] Reddit (reddit) -- set REDDIT_CLIENT_ID, REDDIT_CLIENT_SECRET
  [not configured] Telegram (telegram) -- set TELEGRAM_BOT_TOKEN
  [ready]        GDELT (gdelt) -- no configuration needed

2/5 connectors ready.
Set the missing environment variables above to enable the rest. See .env.example.
Next: run "truesignal feed" to see your feed now.

$ truesignal feed --source cisa-kev

[live] cisa-kev: CVE-2023-4346: KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability -- https://nvd.nist.gov/vuln/detail/CVE-2023-4346 -- 1d ago
[live] cisa-kev: CVE-2026-46817: Oracle E-Business Suite Improper Privilege Management Vulnerability -- https://nvd.nist.gov/vuln/detail/CVE-2026-46817 -- 1d ago
[live] cisa-kev: CVE-2026-15410: SonicWall SMA1000 Appliances Code Injection Vulnerability -- https://nvd.nist.gov/vuln/detail/CVE-2026-15410 -- 2d ago

This is a real, unedited capture (npm run build && node dist/cli.js init && node dist/cli.js feed --source cisa-kev), against the live CISA-KEV catalog, on 2026-07-15. CVE ids, urls, and ages are real.

Features

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Install directly

claude mcp add truesignal -- uvx truesignal-cli
Add to Cursor

Truesignal: common questions

Is Truesignal MCP server safe?
Yes, by our scan: it is graded A (92/100). Read the Truesignal safety report
How do I install Truesignal?
It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does Truesignal need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Truesignal maintained?
The last commit was 12 days ago (2026-09-13). The latest release is v0.1.5.

More from RudrenduPaul →