VRChat MCP server
io.github.BASIC-BIT/vrchat-mcp·v0.1.15·3 starsMCP server for VRChat friends, worlds, groups, events, notifications, and VRCX history.
3 stars87 downloads/wk
Reviews
Write oneNobody has reviewed VRChat MCP yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
VRChat MCP tools (2)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
vrchat.config.getFetch API config (read-only).
vrchat.system.timeGet current system time (read-only).
Public scan report
scanner v0.1.10 · 2026-10-14 · same rubric, same numbers if you re-run it
- Code scan141 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 12 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How VRChat MCP compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 92/100
- higher than 93% of 48,243 servers
- Tools
- 2
- the typical server has 7
- Tools that change things
- 0%
- typical: 0%. Fewer write tools means less an agent can break
- GitHub stars
- 3
- more than 80% of 28,706 servers
- Downloads a week
- 87
- more than 59% of 12,306 servers with a package
What its tools let an agent do: 2 read
Install VRChat MCP in Claude Code, Cursor or VS Code
Runs npx -y @basicbit/vrchat-mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add vrchat-mcp -- npx -y @basicbit/vrchat-mcp
What the publisher says
From the VRChat MCP repository's README, as published. We do not edit it. Read it on GitHub
VRChat MCP
Unofficial local Model Context Protocol tools for VRChat friends, worlds, groups, events, notifications, status, invites, and local VRCX history.
VRChat MCP runs locally through stdio by default and also offers an opt-in loopback-only Streamable HTTP mode. Your VRChat auth cookies stay on your machine and default to your OS keychain, with file storage as the fallback when a keychain backend is unavailable. Curated write tools, generated read/write tools, and read-only VRCX local-history tools are available by default; use your MCP client or agent harness to approve account-changing tool calls.
This project is unofficial and is not affiliated with VRChat Inc.
Policy and Safety Boundaries
VRChat does not provide a public OAuth flow for third-party API applications. VRChat's Creator Guidelines say API applications should not request or store VRChat login credentials, auth tokens, or session data, should identify themselves with a clear User-Agent, should cache/back off instead of sending unmetered requests, and should not act on behalf of another user.
This project is therefore intended only as a local, user-controlled personal tool. Do not run it as a hosted/public MCP service, do not collect anyone else's credentials or cookies, do not automate spam or harassment, and do not use it to evade VRChat enforcement or moderation. Use write tools only for actions you would intentionally perform yourself in VRChat.
Install
Requirements:
- Node.js 24.15.0 or newer.
- An MCP client that can run local stdio servers.
- Native dependencies are installed for keychain and VRCX SQLite support (keytar, better-sqlite3).
On headless Linux or containers without a keychain daemon such as libsecret, set VRCHATMCPCOOKIE_STORE=file for explicit persistent cookie storage.
The npm package is the normal install path:
npx -y @basicbit/vrchat-mcpThe server is also published to the official MCP Registry as io.github.BASIC-BIT/vrchat-mcp.
MCP Client Config
Most clients use one of these shapes. No environment variables are required for the default setup.
OpenCode
OpenCode uses an array-valued command field.
Add this to ~/.config/opencode/opencode.json:
{
"mcp": {
"vrchat": {
"type": "local",
"command": ["npx", "-y", "@basicbit/vrchat-mcp"],
"enabled": true
}
}
}Claude Desktop, Cursor, Kiro, Roo, Windsurf
These clients usually split the executable into command plus args.
Use this in clients that expect an mcpServers object:
{
"mcpServers": {
"vrchat": {
"command": "npx",
"args": ["-y", "@basicbit/vrchat-mcp"]
}
}
}VS Code
VS Code uses a servers object instead of mcpServers.
Use this in .vscode/mcp.json:
{
"servers": {
"vrchat": {
"type": "stdio",
"command": "npx",
"args": ["-y", "@basicbit/vrchat-mcp"]
}
}
}OpenAI Codex
Add this to ~/.codex/config.toml or .codex/config.toml:
[mcp_servers.vrchat]
command = "npx"
args = ["-y", "@basicbit/vrchat-mcp"]
startup_timeout_sec = 40If your Windows client cannot spawn npx directly, use cmd as the command and put /c, npx, -y, and @basicbit/vrchat-mcp in the argument list.
Local Streamable HTTP
Use native Streamable HTTP when an MCP client needs to connect to a long-running local server instead of spawning its own stdio child process. STDIO remains the default and recommended setup for ordinary desktop clients.
HTTP mode:
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
VRChat MCP: common questions
- Is VRChat MCP server safe?
- Yes, by our scan: it is graded A (92/100). Read the VRChat MCP safety report
- How do I install VRChat MCP?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does VRChat MCP need an API key?
- No secret keys are declared. It reads 7 settings from the environment.
- Is VRChat MCP maintained?
- The last commit was 34 days ago (2026-10-02). The latest release is v0.1.15.
- How does VRChat MCP compare with other MCP servers?
- safety score 92/100 (higher than 93% of 48,243 servers); tools 2 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.