← Back to search

@darrenjaws/spotify-mcp

GitHub Actions Scanned 25d ago

Model Context Protocol server for Spotify integration

npm ↗
? Not scanned yet

Versions

1.2.4latest
Apr 18, 2026
1.2.1
Mar 12, 2026
1.2.0
Mar 12, 2026
1.1.0
Mar 12, 2026
1.0.1
Mar 11, 2026
+ show 8 moreshow less
1.0.0
Mar 11, 2026
0.6.1
Feb 26, 2026
0.6.0
Feb 26, 2026
0.5.3
Feb 26, 2026
0.4.0
Feb 22, 2026
0.3.0
Feb 22, 2026
0.2.0
Feb 14, 2026
0.1.0
Feb 14, 2026

Tools 34

spotify_play
annotations: none low

Start or resume playback of a track, album, artist, or playlist

device_id string
spotify_pause
annotations: none low

Pause current playback

device_id string
spotify_next
annotations: none low

Skip to next track

device_id string
spotify_previous
annotations: none low

Skip to previous track

device_id string
spotify_set_volume
annotations: none low

Set playback volume (0-100)

device_id string volume_percent number
spotify_get_playback_state
annotations: none low

Get current playback state including track, artist, album, and playback status

spotify_get_devices
annotations: none low

List available Spotify Connect devices

spotify_shuffle
annotations: none low

Enable or disable shuffle mode

state boolean device_id string
spotify_repeat
annotations: none low

Set repeat mode: 'track' repeats current track, 'context' repeats album/playlist, 'off' disables repeat

device_id string
spotify_search
annotations: none low

Search for tracks, albums, artists, or playlists with optional field filters

type enum album string genre string query string artist string
spotify_get_playlists
annotations: none low

Get current user's playlists

spotify_get_playlist
annotations: none low

Get details of a specific playlist

playlist_id string
spotify_create_playlist
annotations: none low

Create a new playlist

name string description string
spotify_add_to_playlist
annotations: none low

Add tracks to a playlist

uris array playlist_id string
spotify_remove_from_playlist
annotations: none low

Remove tracks from a playlist

uris array playlist_id string
spotify_reorder_playlist_tracks
annotations: none low

Reorder tracks in a playlist

playlist_id string range_start number range_length number insert_before number
spotify_delete_playlist
annotations: none low

Delete (unfollow) a playlist. You can only delete playlists you own.

playlist_id string
spotify_update_playlist
annotations: none low

Update playlist details (name, description, public/private, collaborative)

name string public boolean description string playlist_id string
spotify_get_user_profile
annotations: none low

Get current user's profile information

spotify_get_top_items
annotations: none low

Get user's top artists or tracks

type enum
spotify_get_recently_played
annotations: none low

Get user's recently played tracks

spotify_get_saved_tracks
annotations: none low

Get tracks saved in the current user's library

offset number
spotify_get_saved_albums
annotations: none low

Get albums saved in the current user's library

offset number
spotify_get_followed_artists
annotations: none low

Get artists followed by the current user

spotify_save_tracks
annotations: none low

Save tracks to the current user's library

track_ids array
spotify_remove_saved_tracks
annotations: none low

Remove tracks from the current user's library

spotify_save_albums
annotations: none low

Save albums to the current user's library

album_ids array
spotify_remove_saved_albums
annotations: none low

Remove albums from the current user's library

spotify_follow_artists
annotations: none low

Follow one or more artists

spotify_unfollow_artists
annotations: none low

Unfollow one or more artists

spotify_transfer_playback
annotations: none low

Transfer playback to a different device (use spotify_get_devices to find device IDs)

device_id string
spotify_open
annotations: none low

Open the Spotify desktop app on this machine

test_tool
annotations: none low

A test tool

test_param string
test_callback
annotations: none low

Test callback execution

param string

Permissions 4

network medium
Server uses network capabilities via: http
filesystem low
Server uses filesystem capabilities via: path
shell high
Server uses shell capabilities via: child_process, spawn(), spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 81

low
Tool 'spotify_play' has no annotations annotation_checker · 100%
low
Tool 'spotify_pause' has no annotations annotation_checker · 100%
low
Tool 'spotify_next' has no annotations annotation_checker · 100%
low
Tool 'spotify_previous' has no annotations annotation_checker · 100%
low
Tool 'spotify_set_volume' has no annotations annotation_checker · 100%
low
Tool 'spotify_get_playback_state' has no annotations annotation_checker · 100%
low
Tool 'spotify_get_devices' has no annotations annotation_checker · 100%
low
Tool 'spotify_shuffle' has no annotations annotation_checker · 100%
low
Tool 'spotify_repeat' has no annotations annotation_checker · 100%
low
Tool 'spotify_search' has no annotations annotation_checker · 100%
low
Tool 'spotify_get_playlists' has no annotations annotation_checker · 100%
low
Tool 'spotify_get_playlist' has no annotations annotation_checker · 100%
low
Tool 'spotify_create_playlist' has no annotations annotation_checker · 100%
low
Tool 'spotify_add_to_playlist' has no annotations annotation_checker · 100%
low
Tool 'spotify_remove_from_playlist' has no annotations annotation_checker · 100%
low
Tool 'spotify_reorder_playlist_tracks' has no annotations annotation_checker · 100%
low
Tool 'spotify_delete_playlist' has no annotations annotation_checker · 100%
low
Tool 'spotify_update_playlist' has no annotations annotation_checker · 100%
low
Tool 'spotify_get_user_profile' has no annotations annotation_checker · 100%
low
Tool 'spotify_get_top_items' has no annotations annotation_checker · 100%
low
Tool 'spotify_get_recently_played' has no annotations annotation_checker · 100%
low
Tool 'spotify_get_saved_tracks' has no annotations annotation_checker · 100%
low
Tool 'spotify_get_saved_albums' has no annotations annotation_checker · 100%
low
Tool 'spotify_get_followed_artists' has no annotations annotation_checker · 100%
low
Tool 'spotify_save_tracks' has no annotations annotation_checker · 100%
low
Tool 'spotify_remove_saved_tracks' has no annotations annotation_checker · 100%
low
Tool 'spotify_save_albums' has no annotations annotation_checker · 100%
low
Tool 'spotify_remove_saved_albums' has no annotations annotation_checker · 100%
low
Tool 'spotify_follow_artists' has no annotations annotation_checker · 100%
low
Tool 'spotify_unfollow_artists' has no annotations annotation_checker · 100%
low
Tool 'spotify_transfer_playback' has no annotations annotation_checker · 100%
low
Tool 'spotify_open' has no annotations annotation_checker · 100%
low
Tool 'test_tool' has no annotations annotation_checker · 100%
low
Tool 'test_callback' has no annotations annotation_checker · 100%
high
Hardcoded OAuth client secret in darrenjaworski-spotify-mcp-f2ae2b5/src/spotify/client.test.ts auth_checker · 95%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: vitest@4.0.18 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: spotify_play manifest_parser · 85%
info
Tool: spotify_pause manifest_parser · 85%
info
Tool: spotify_next manifest_parser · 85%
info
Tool: spotify_previous manifest_parser · 85%
info
Tool: spotify_set_volume manifest_parser · 85%
info
Tool: spotify_get_playback_state manifest_parser · 85%
info
Tool: spotify_get_devices manifest_parser · 85%
info
Tool: spotify_shuffle manifest_parser · 85%
info
Tool: spotify_repeat manifest_parser · 85%
info
Tool: spotify_search manifest_parser · 85%
info
Tool: spotify_get_playlists manifest_parser · 85%
info
Tool: spotify_get_playlist manifest_parser · 85%
info
Tool: spotify_create_playlist manifest_parser · 85%
info
Tool: spotify_add_to_playlist manifest_parser · 85%
info
Tool: spotify_remove_from_playlist manifest_parser · 85%
info
Tool: spotify_reorder_playlist_tracks manifest_parser · 85%
info
Tool: spotify_delete_playlist manifest_parser · 85%
info
Tool: spotify_update_playlist manifest_parser · 85%
info
Tool: spotify_get_user_profile manifest_parser · 85%
info
Tool: spotify_get_top_items manifest_parser · 85%
info
Tool: spotify_get_recently_played manifest_parser · 85%
info
Tool: spotify_get_saved_tracks manifest_parser · 85%
info
Tool: spotify_get_saved_albums manifest_parser · 85%
info
Tool: spotify_get_followed_artists manifest_parser · 85%
info
Tool: spotify_save_tracks manifest_parser · 85%
info
Tool: spotify_remove_saved_tracks manifest_parser · 85%
info
Tool: spotify_save_albums manifest_parser · 85%
info
Tool: spotify_remove_saved_albums manifest_parser · 85%
info
Tool: spotify_follow_artists manifest_parser · 85%
info
Tool: spotify_unfollow_artists manifest_parser · 85%
info
Tool: spotify_transfer_playback manifest_parser · 85%
info
Tool: spotify_open manifest_parser · 85%
info
Tool: test_tool manifest_parser · 85%
info
Tool: test_callback manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (5) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 80%
low
Permission: filesystem access detected permission_analyzer · 60%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 302 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%