Lurk MCP server
by ProgenyAlpha·
io.github.ProgenyAlpha/lurk·v1.0.2·2 starsReddit reader for LLMs — full comment trees, 94% fewer tokens, one binary
D54/100grade D
Adoption
New
2 stars
Reviews
Write oneNobody has reviewed Lurk yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Lurk tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it
1 high2 medium
- Code scan3 source files scanned3/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 38 days ago12/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Findings (3)
- mediumnpm install lifecycle script present
install.script - mediumnpm install lifecycle script present
install.scriptpackage.json: …rk": "bin/lurk" }, "scripts": { "postinstall": "node postinstall.js" }, "files": [… - highShell command built from a string (injection risk)
exec.shell-concatpostinstall.js: …) => p.replace(/'/g, "''"); try { execSync( `powershell -NoProfile -NonInteractive -Command "Expand-Archive -Force -LiteralPath '${esc(tmp)}' -DestinationPath '${esc(destDir)}'"`, { stdio: "pipe" …
Overall 54/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON
How Lurk compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 54/100
- higher than 10% of 48,273 servers
- GitHub stars
- 2
- more than 75% of 28,534 servers
Install Lurk in Claude Code, Cursor or VS Code
Runs npx -y reddit-lurker on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add lurk -- npx -y reddit-lurker
Lurk: common questions
- Is Lurk MCP server safe?
- Not recommended: it is graded D (54/100). Read the Lurk safety report
- How do I install Lurk?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Lurk need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Lurk maintained?
- The last commit was 73 days ago (2026-08-21). The latest release is v1.0.2.
- What can I use instead of Lurk?
- Servers from other publishers that do the same job: Codebase Memory MCP server, Trace MCP server and Honcho MCP server.
- How does Lurk compare with other MCP servers?
- safety score 54/100 (higher than 10% of 48,273 servers); github stars 2 (more than 75% of 28,534 servers). Full comparison.
Alternatives to Lurk
Same job from other publishers: the closest match first, then the best rated.
- Codebase MemoryCodebase knowledge graph for AI agents — 162 languages, sub-ms queries, 99% fewer tokens.not reviewedWidely usedC
TraceCode graph MCP: 81 languages, 91 frameworks, 72.7% fewer PR-review tokens, comprehension at paritynot reviewedEstablishedA- HonchoMemory that reasons: continual learning for stateful agents. Better context, fewer tokens.not reviewedEstablishedA