Verify signed AIFeed permissions, fetch token-budgeted markdown, and verify assets for AI agents.
MCPpedia last refreshed this data
io.github.denyn1/aifeed-mcp-server is an MCP server that verify signed AIFeed permissions, fetch token-budgeted markdown, and verify assets for AI agents. Its tool list has not been published yet over stdio and sse, requires no API key, and scores 82/100 on MCPpedia's security, maintenance and efficiency rubric.
Config is the same across clients - only the file and path differ.
{
"mcpServers": {
"io-github-denyn1-aifeed-mcp-server": {
"args": [
"-y",
"aifeed-mcp-server"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Verify signed AIFeed permissions, fetch token-budgeted markdown, and verify assets for AI agents.
This server supports HTTP transport. Be the first to test it - help the community know if it works.
Five weighted categories - click any category to see the underlying evidence.
No known CVEs.
Checked aifeed-mcp-server against OSV.dev.
Click any tool to inspect its schema.
Be the first to review
Have you used this server?
Share your experience - it helps other developers decide.
Sign in to write a review.
Others in ai-ml / writing
Codebase knowledge graph for AI agents — 162 languages, sub-ms queries, 99% fewer tokens.
An open-source AI agent that brings the power of Gemini directly into your terminal.
🛡️ BLA (Blind LLM Agents) — Adversarial defense shield that protects binaries, Electron apps, JS bundles, Python, and WebAssembly against AI reverse-engineering agents like REA. Poison -> Exhaust -> Hallucinate.
Open source device layer for AI agents: control mobile, web, TV, and desktop apps over MCP
MCP Security Weekly
Get CVE alerts and security updates for io.github.denyn1/aifeed-mcp-server and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
English · Bahasa Indonesia · 中文
Signed content permissions for the AI web.
Declare, sign, and revoke what AI agents may do with your content — and let agents prove it.
▶ Watch: How AIFeed stops web scraping waste
Website · Protocol flow · Benchmark · Complete guide · Paper (PDF)
Publisher side — sign what agents may do with your content:
npx aifeed keygen --out .aifeed # Ed25519 key pair
npx aifeed site build ./public --domain example.com \
--key .aifeed/aifeed-private.pem --llms --inject # manifest + page markdown + index
npx aifeed validate ./public --domain example.com # verify locally
Prefer zero config? npx aifeed init --domain example.com --dir ./site creates the keys,
a signed manifest, and the DNS/host setup guide in one step.
Agent side — verify any domain in 3 lines:
npm install @aifeed/verify
const { verifyRemote } = require('@aifeed/verify');
const out = await verifyRemote('example.com'); // discovery → signature → DNS anchor
console.log(out.result, out.anchor.status); // VERIFIED anchored
TypeScript: import { verifyRemote } from '@aifeed/verify';
Where to go next: Why AIFeed? · agent quickstart ·
publisher AI guide · Studio publisher app ·
npm: aifeed CLI ·
@aifeed/verify
AI agents now drive a large and growing share of web traffic, but the signals that say what they may do are unsigned text files. Anyone can edit them, nothing binds them to a domain, and there is no way to revoke them. The asymmetry is measurable:
robots.txt rules in a single half-year (one vendor).AIFeed replaces "please respect this file" with a cryptographically verifiable declaration, plus lean agent-ready content that cuts cost on both sides.
/.well-known/ai.json: per-use permissions
(training, retrieval, quote, …), crawl limits, license, revision.