truesignal
About
MCP server wrapping the truesignal CLI for threat/connector status checks.
Details
- Author
- rudrendupaul
- Categories
- Developer Tools
Jump to
Setup
Install truesignal in your MCP client (Claude Desktop, Cursor, Windsurf, and others).
Repository: https://github.com/rudrendupaul/truesignal
Follow the installation instructions in the repository README, then restart your MCP client.
What is TrueSignal, and why does it exist
TrueSignal is a self-hosted command-line tool that pulls OSINT and security-relevant items from five official APIs (CISA-KEV, Cloudflare Radar, Reddit, Telegram, GDELT) and stamps every item with a real source URL, a real upstream timestamp, and an explicitliveorfallbacklabel.
It exists because Crucix -- a comparable, widely-starred open-source personal intelligence dashboard -- has five open, unfixed GitHub issues, as of 2026-08-03, documenting exactly the failure mode TrueSignal is built to make structurally impossible: synthetic map coordinates generated withMath.random()(](https://github.com/RudrenduPaul/truesignal/blob/HEAD/benchmarks/)#112), stale air-traffic data silently replayed as current (#113), article timestamps rewritten to the current clock (#115), and ToS-violating scraped fallbacks for Telegram (#110) and Reddit (#108). One of Crucix's own users asked for source links because its briefings "feel low-trust" (#75).
TrueSignal's answer to that failure mode is structural: every connector's failure path is required, by a CI-enforced test suite, to return either a real cached item honestly labeledfallbackwith its real age, or nothing at all. There is no third path where data is invented. In exchange, TrueSignal covers a deliberately narrower surface than Crucix -- OSINT and security signals only, five official-API sources, no markets or air-traffic domains.
Does TrueSignal replace Crucix?TrueSignal covers only OSINT/security signals from five official APIs; Crucix also covers markets, air traffic, social feeds, and general news. If you need the wider domain coverage and can tolerate Crucix's five open, unfixed fabrication/staleness issues (cited above), Crucix still does more. If you specifically need a security/OSINT feed with a tested guarantee against fabricated or silently-stale data, that's what TrueSignal is for.
What happens if a source goes down?The connector either returns real cached data explicitly labeledfallback(with its exact real age infallbackAgeSeconds), or returns nothing. It never returns invented data or silently relabels old data as current. That guarantee is enforced bysrc/truesignal/provenance/no-fabrication.test.ts(22 tests, all passing) for every one of the 5 connectors.
Does this need an API key?Not to start. CISA-KEV and GDELT work with zero configuration. Cloudflare Radar, Reddit, and Telegram each need a free developer key or token --truesignal inittells you exactly which environment variables are still missing.
Does it send my data anywhere?No telemetry by default. Everything runs on your own machine using your own API keys; there's no account and no phone-home.
Is this the same team's hosted product?This repository is the free, self-hosted, MIT-licensed CLI and connector engine. It works completely standalone.
Can I add a new source?Yes -- every connector implements one sharedConnectorinterface, so adding a new source (NVD, Shodan, VirusTotal, etc.) is a scoped, additive change. SeeCONTRIBUTING.mdfor the exact steps.
npm or pip -- which should I use?Whichever matches your toolchain. Both are genuine, independent implementations of the same five connectors and the same no-fabrication guarantee (the Python package is not a wrapper around the Node binary), kept in behavioral parity. Field names follow each language's own convention (fallbackAgeSecondsin TypeScript,fallback_age_secondsin Python); everything else about the data and CLI surface is the same. Seepython/README.mdfor the Python-specific docs.
What is TrueSignal, in one line, and what's the actual differentiator?Per its own--helpoutput: "a provenance-first OSINT/security intelligence feed" that pulls from five official-API connectors (CISA-KEV, Cloudflare Radar, Reddit, Telegram, GDELT) and stamps every item with a real source URL, a real upstream timestamp, and an explicitliveorfallbackstatus. The differentiator isn't the connector list, it's the no-fabrication guarantee:src/truesignal/provenance/no-fabrication.test.tsand its Python equivalent (python/tests/test_no_fabrication.py) run on every push and pull request tomain(.github/workflows/ci.yml), asserting that no connector's failure path ever invents data.
What platforms and versions does TrueSignal run on?The npm package requires Node.js 18.17 or later (engines.nodeinpackage.json). The Python package supports Python 3.9 through 3.13 (pyproject.tomlclassifiers), and CI runs the Python test suite against both 3.9 and 3.13 on every push and pull request. Both CI jobs currently run onubuntu-latest; Node.js and Python are cross-platform runtimes, but macOS and Windows aren't separately exercised by this repo's CI today.
Can I use TrueSignal commercially?Yes. It's MIT-licensed (seeLICENSE): free to use, modify, and redistribute, including in commercial products, with no royalty and no separate commercial tier, subject to keeping the copyright notice. There's no paid version and no account requirement.
To report a vulnerability, seeSECURITY.mdfor the private disclosure process and what counts as in scope (in short: anything that lets an item'surlortimestampbe shown without really coming from a live upstream fetch or an honestly-labeled cache entry).
This is a web browser that enables your coding agent, such as Claude Code, to visit websites on your behalf and assist you in identifying bugs or creating UI test cases.
Create crafted UI components inspired by the best 21st.dev design engineers.
Bring agent evaluations, observability, and synthetic test set generation directly into your IDE for free with Galileo's new MCP server
An MCP server to help AI assistants to answer questions and generate AccelByte Extend SDK code more effectively .
MCP server for AI Diagram Maker — generate beautiful software engineering diagrams directly inside Cursor, Claude Desktop, Claude Code, or any MCP-compatible AI agent
ALAPI MCP Tools,Call hundreds of API interfaces via MCP
AI-powered SVG animation generator that transforms static files into animated SVG components using the Allyson platform
MCP server that gives AI assistants on-demand access to 1,500+ amCharts docs, ~300 code examples, and 1000+ class API references.
APIMatic MCP Server is used to validate OpenAPI specifications using APIMatic. The server processes OpenAPI files and returns validation summaries by leveraging APIMatic’s API.
One shared context layer for AI agents and humans — live API specs, DB schemas, and versioned contracts across repos so every agent and teammate works from the same source of truth.
Build and deploy full-stack Next.js apps with 98 tools for React, AWS, and MongoDB
Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.





