Substack Article Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Substack Article Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
MCP server for Substack — read articles, comments, feed, and subscriptions from Cursor, Claude Desktop, Claude Code, or any MCP client. Public content works without authentication; log in for premium/paywalled articles and personalized features.
Choose your AI client:
One command — logs in and configures Cursor automatically:
npx -y substack-article-mcp install --cursorRestart Cursor after installation.
One command — logs in and adds the MCP globally:
npx -y substack-article-mcp install --claude-codeDownload the .mcpb extension from the Releases page and double-click to install.
Optional: After installing, go to Extensions > Substack Articles > Settings and paste your Substack cookie to unlock paid articles, subscriptions, and your feed. Leave it empty for public-only access.
Ask from chat — the app starts the server automatically:
Authentication is optional. Public tools (list_articles, get_article, search_articles, get_comments) work without any credentials as long as you specify a subdomain.
Log in to unlock:
list_subscriptions — see all newsletters you followget_feed — your personalized reader feedget_inbox — chronological inbox from all subscriptionsThe server checks for credentials in this priority order:
.mcpb extension (set automatically from the optional cookie field in settings)login or install commandSubstack cookies expire every few weeks. When tools start returning auth errors:
npx -y substack-article-mcp login in your terminalsubstack.sid (and substack.lli for paid articles)substack.sid=YOUR_VALUE; substack.lli=YOUR_LLI_VALUE| Command | Description |
|---|---|
npx -y substack-article-mcp install --cursor | Log in + add MCP to Cursor |
npx -y substack-article-mcp install --claude-code | Log in + add MCP to Claude Code |
npx -y substack-article-mcp login | Refresh credentials (Chrome login flow) |
npx -y substack-article-mcp login --manual '<cookie>' | Paste cookies directly |
npx -y substack-article-mcp login --check | Check auth status and cookie age |
npx -y substack-article-mcp --help | Show help |
npx -y substack-article-mcp --version | Show version |
Do not run npx -y substack-article-mcp with no arguments in your terminal. That starts the MCP stdio server and your terminal will appear stuck. Your AI client starts it automatically.| Tool | Auth Required | Description |
|---|---|---|
substack_auth_status | No | Check auth status, cookie age, and get refresh guidance |
list_articles | No* | List published articles with metadata and engagement stats |
get_article | No* | Full article as markdown. Accepts slug or numeric post ID |
search_articles | No* | Search articles by keyword |
get_comments | No* | Full comment tree with replies and reactions |
list_subscriptions | Yes | All newsletters you subscribe to (paid, comped, free) |
get_feed | Yes | Personalized reader feed from subscribed newsletters |
get_inbox | Yes | Chronological inbox with pagination |
\ Requires a subdomain parameter if not authenticated. Auth is needed for paid/premium content.*
All content tools accept an optional subdomain parameter to read any newsletter (e.g., subdomain: "platformer").
get_article and get_comments also accept numeric post IDs (e.g., 184929446). When using an ID, the publication is auto-detected.
login command uses a dedicated Chrome profile in ~/.substack-article-mcp/chrome-profile/ — completely separate from your regular Chromelogin / install commands only — not needed for Claude Desktop)Uses Substack's internal APIs. Use for personal/experimental purposes. Not affiliated with Substack.
MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.