x-reader

MCP server · GitHub · ★ 984 · graded 2026-10-23Source linked

Universal content reader MCP Server for 10+ platforms

No outside reports on file

x-reader expands what Claude can read, which is powerful but risky—malicious files or websites can trick AI systems, and file access must be tightly limited to prevent exposing secrets.

Based on public adoption and transparency signals as of Oct 23, 2026. Our opinion, not a code audit or security guarantee.

Was this verdict for X Reader helpful?

What it can access

Local filesNo local folder access notedLOW
Command executionNo shell command runner notedLOW
Network reachConnects to outside service APINOTED
CredentialsNo API token requiredLOW
Package sourceGitHub (runesleo/x-reader)PUBLIC

Inferred from this listing’s public package details and description. Check the project’s source before installing.

Install

No npm or PyPI package is listed. Install from source: github.com/runesleo/x-reader ↗

All setup options ↓

Check this skill Watch it in my stack Compare README badge View project

Everything known

We found nothing about this project in the sources we read (last checked 2026-10-30). That does not mean it has no problems.

0 incidents · 0 advisories · 0 news articles · 0 community threads · checked 2026-10-30

Popularity grade: C (from public signals such as stars and downloads, not a code review). Graded 2026-10-23.

Sources we read: OSV, GitHub Advisory Database, CISA Known Exploited Vulnerabilities, 44 security news feeds and our incident library. Last checked 2026-10-30.

Check a specific version →

About X Reader

x-reader is an MCP server that lets Claude read and extract content from multiple platforms and file types. It aims to handle 10+ different content sources, letting you process documents, web pages, or other data formats through a single interface.

Who it’s for

Developers who want Claude to read various file types and web content without writing separate code for each format. Teams building AI workflows that need to ingest content from multiple sources.

Alternatives

Claude's native file upload: Use Claude's built-in ability to read PDFs and images in conversations
Existing MCP servers: Look for platform-specific MCP servers (e.g., for Google Docs, Notion, or Slack)
Custom scripts: Write simple Python or Node.js scripts to extract and format specific content types

Setup

Check these steps against the project’s own instructions before running anything.

Follow the project's README for detailed installation. Typically:

git clone https://github.com/runesleo/x-reader
cd x-reader
npm install

Then configure in your Claude Desktop mcpServers config based on the project's documentation.

Why this grade

CC — Moderate risk signals

Signal-based grade (3/7 points): well starred on GitHub, public source code. This reflects adoption and transparency, not a code review.

Popularity and upkeep

33/100

GitHub stars: 984
Listing last refreshed: 2026-10-29

These are public popularity signals, not a maintenance check. Look at the repository’s commit history and open issues.

Risks to watch for

File access: The tool can read any file type it supports on the system where it runs, potentially exposing sensitive documents if permissions aren't restricted
Web content tricks: Malicious websites could embed misleading content, fake data, or instructions that the AI might follow or believe
Embedding attacks: PDFs, images, or other files could contain hidden text or code designed to fool the AI into harmful actions
Data leakage: Content processed by the tool could be logged, cached, or sent to external services depending on configuration
Parser exploits: Vulnerabilities in the underlying libraries that parse different formats could allow attackers to execute code

How to lower the risk

Least-privilege permissions

Run the MCP server with minimal file system access; only allow directories you need
Never give it read access to folders holding passwords, keys, or private data

Network isolation

Disable web-fetching features if you don't need them
Use a firewall to block outbound connections from the server

Monitoring

Log which files and URLs the tool accesses
Review logs regularly for unexpected activity

Red flags to watch for

If Claude suddenly follows instructions from file content, the tool may be vulnerable to prompt injection
Unusual file access patterns or attempts to read restricted directories

Questions

How do I install X Reader?

X Reader does not publish a standalone npm or PyPI package. Clone or follow the setup instructions in its source repository at github.com/runesleo/x-reader.

Are there security reports about X Reader?

No reports found for this package in our research (last checked 2026-10-30). X Reader currently holds Grade C (Moderate risk signals) based on public adoption and transparency signals. Key risk areas to watch include file access, web content tricks, embedding attacks.

Is X Reader actively maintained?

X Reader has 984 GitHub stars. Our directory data was last refreshed on 2026-10-29. Check recent commit activity, release tags, and open issues at github.com/runesleo/x-reader before pinning it in production.

What are alternatives to X Reader?

Notable alternatives to X Reader include Claude's native file upload (Use Claude's built-in ability to read PDFs and images in conversations), Existing MCP servers (Look for platform-specific MCP servers (e.g., for Google Docs, Notion, or Slack)), Custom scripts (Write simple Python or Node.js scripts to extract and format specific content types). You can also compare X Reader side by side with other MCP servers in the Related tools section on this page.

Maintain or use X Reader? Show its live grade in your GitHub README, docs site, or run a check from the terminal before you install.

GitHub README Markdown:

markdown

[![AgentArmorHQ Risk Grade for X Reader](https://agentarmorhq.com/api/badge/runesleo-x-reader)](https://agentarmorhq.com/skills/runesleo-x-reader)

HTML embed:

html

<a href="https://agentarmorhq.com/skills/runesleo-x-reader"><img src="https://agentarmorhq.com/api/badge/runesleo-x-reader" alt="AgentArmorHQ Risk Grade for X Reader" height="20" /></a>

Terminal check:

terminal

curl -fsSL https://agentarmorhq.com/api/cli | node --input-type=module - check "runesleo-x-reader"

Share with your security lead

Need sign-off to use x-reader? Copy this note for Slack, a ticket or a pull request.

### AgentArmorHQ Security Review Memo: x-reader
- **Listing URL:** https://agentarmorhq.com/skills/runesleo-x-reader
- **Type:** App connector
- **Risk Grade:** Grade C (Moderate risk signals)
- **Outside Security Advisories on File:** 0
- **Public Adoption:** 984 GitHub stars

#### Permission & Blast-Radius Signals
- **Local files:** No local folder access noted
- **Command execution:** No shell command runner noted
- **Network reach:** Connects to outside service API
- **Credentials:** No API token required
- **Package source:** GitHub (runesleo/x-reader)

#### Recommended Hardened Setup
- **Source Repo:** https://github.com/runesleo/x-reader
- **Controls:** Pin an exact version in `.mcp.json`, scope access to a single workspace folder, and use a least-privilege read-only token where supported.

_Based on public adoption and transparency signals as of Oct 23, 2026. Our opinion, not a code audit or security guarantee._

Key facts

Type: App connector
Publisher: runesleo
Source code: github.com/runesleo/x-reader
Est. context load: ~700 tokens / turn (~4 tool schemas, 0.35% of 200k context)
Popularity: 984 GitHub stars
Last updated: 2026-10-29
Last graded: 2026-10-23

Community

Discussions for X Reader

Ask questions or share configuration tips. Governed by our Community Rules & Terms.

No posts match this filter yet.

Be the first to ask a question or share a working tip.

Was this listing for X Reader helpful?

Check before you install, in Claude

Your assistant answers Block, Review or No known issues for any package before it installs it.

Get this check inside Claude