unseenet-mcp
OfficialThis server does not currently have a deployable release on Glama. Follow the repository's setup instructions to install and configure it for your MCP client, including any required credentials and local dependencies.
Pre-alpha. Nothing is stable yet, and Unseenet has not had a security review. Do not rely on it to protect anyone yet.
What it is
An MCP server for Unseenet: lets an LLM client such as Claude Desktop read groups and threads, search and - only when you allow it - post, as you.
Status: the read-only tools work; posting (#3) does not exist yet.
It is just another client. Like the TUI and the web client it is built only on the public core library of unseenet/unseenet; the user interface happens to be a language model instead of a person.
This repo is a thin layer that maps
Sessioncalls to MCP tools. What the client library lacks (e.g. search) goes into unseenet/unseenet (#139), not here.Runs locally, on your own machine. Never on a node.
Reads with a key of its own, made the first time and kept in its state folder - not your vault, your passphrase or your keys. With it, it reads every open group; private and closed groups are not reachable.
Related MCP server: Universal Agent Forum
How it works
Safety rules
Read-only by default. Posting is a separate tool that must be switched on, and every post is confirmed by you.
No key material. No tool exports keys, opens the vault for writing or changes identities.
Network content is untrusted. Posts are returned to the model as quoted data, marked as such - a post can contain text written to steer the model (prompt injection).
Content leaves Tor if your model is in the cloud. Unseenet carries everything over onion services, but what the MCP server hands to a cloud LLM goes to that provider. That is your choice to make; use a local model if it matters.
Tools
All read-only. Each one marks what it returns as content from the network.
Tool | Does |
| everything since the last call: new posts in |
| groups the nodes carry, by pattern ( |
| newest threads in a group |
| a whole thread |
| search the watched groups, or the ones you name - locally, so no node learns what you look for |
| the councils: members, hearings and their state, latest log entries |
| the nodes that have announced themselves |
| not yet (#3): off by default, every post confirmed |
"What's new" counts by article number, so it is exact even though dates are rounded. The first call only sets the starting point.
Running it
pipx install git+https://github.com/unseenet/unseenet-mcp.gitIn Claude Desktop, claude_desktop_config.json:
{
"mcpServers": {
"unseenet": {
"command": "unseenet-mcp",
"env": { "UNSEENET_MCP_TOR": "127.0.0.1:9050" }
}
}
}Then ask "anything new in Unseenet?".
Setting | What it does |
| use a running Tor ( |
| read from this node first ( |
| the groups "what's new" watches, full IDs, comma-separated |
| where its key and "seen so far" live (default |
| log level, to stderr (default |
Versions and releases
Not released yet: it is being planned. When it is, it follows the Unseenet conventions.
Part of Unseenet
Repository | What it is |
The protocol (UN-RFCs), the core library, the node and the command-line client | |
The terminal client | |
The graphical client - in a window, booted, or in a browser | |
Builds the portable clients, Terminal and Graphical, with Tor inside | |
Builds the bootable images, Terminal and Graphical | |
The site unseenet.org | |
Web entrances: the graphical client in an ordinary browser | |
Gateways to other networks: Usenet, Nostr, Matrix | |
Bots that keep channels filled with current content | |
The bot that answers questions in | |
Automatic spam reports and content labels that readers may choose to follow | |
Statistics for the network | |
An MCP server, so a language model can read and post as you (planning) | |
Demo people, feeds and sites, made with the command-line client |
License
Apache License 2.0. The Unseenet logo: CC BY 4.0.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
This server cannot be deployed
Maintenance
Related MCP Connectors
Web search, data extraction and controlled browser automation for AI assistants via OAuth.
Remote streamable-HTTP MCP server running on a single Cloudflare Worker. Your assistant gets live Airbnb, Amazon, Booking.com, Google Flights, Maps and Reddit data, social search on X, Instagram and TikTok, the Meta Ad Library, and image/video generation without any keys. Connect your own accounts to let it send WhatsApp or Telegram messages, work an IMAP inbox, manage Meta Ads campaigns and publish to X and LinkedIn. OAuth 2.1 with PKCE; stored credentials are AES-256-GCM encrypted.
Give AI agents their own email inboxes: list, read and send mail via scoped, revocable OAuth grants.
Enable Large Language Model clients to interact seamlessly with any MediaWiki wiki. Perform action…
Related MCP Servers
- AlicenseNot gradedqualityBmaintenanceEnables LLM clients to securely read and write Frappe/ERPNext data under a real user's permissions, with audited calls and granular access control.1AGPL 3.0
- AlicenseNot gradedqualityBmaintenanceEnables AI agents to read public forum threads, start discussions, and post replies via HTTP and JSON, with optional authenticated write access.MIT
- AlicenseBqualityBmaintenanceEnables compatible LLM clients to handle authorized professional-network workflows via OAuth, retrieve basic profiles, draft profile changes and posts, and publish posts only after explicit approval.11MIT
- AlicenseAqualityBmaintenanceEnables LLM agents to read Mattermost channels, threads, direct messages, mentions and unread counts, and to search posts, all without any write access. Authenticates with browser session cookies instead of personal access tokens, so it works on servers where PATs are disabled or a proxy strips the Authorization header.1555 PyPIMIT