MCP.Market

VRChat MCP server

by BASIC-BIT·io.github.BASIC-BIT/vrchat-mcp·v0.1.15·3 stars

MCP server for VRChat friends, worlds, groups, events, notifications, and VRCX history.

A92/100grade A
What users say
No reviews yet
Be the first
Safety scan
A92/100

full report

Adoption
Growing

3 stars87 downloads/wk

Reviews

Write one

Nobody has reviewed VRChat MCP yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

VRChat MCP tools (2)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • vrchat.config.get

    Fetch API config (read-only).

  • vrchat.system.time

    Get current system time (read-only).

Public scan report

scanner v0.1.10 · 2026-10-14 · same rubric, same numbers if you re-run it

no findings
  • Code scan141 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 12 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 92/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How VRChat MCP compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
92/100
higher than 93% of 48,243 servers
Tools
2
the typical server has 7
Tools that change things
0%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
3
more than 80% of 28,706 servers
Downloads a week
87
more than 59% of 12,306 servers with a package

What its tools let an agent do: 2 read

Install VRChat MCP in Claude Code, Cursor or VS Code

Runs npx -y @basicbit/vrchat-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add vrchat-mcp -- npx -y @basicbit/vrchat-mcp
Add to Cursor

What the publisher says

From the VRChat MCP repository's README, as published. We do not edit it. Read it on GitHub

VRChat MCP

Unofficial local Model Context Protocol tools for VRChat friends, worlds, groups, events, notifications, status, invites, and local VRCX history.

VRChat MCP runs locally through stdio by default and also offers an opt-in loopback-only Streamable HTTP mode. Your VRChat auth cookies stay on your machine and default to your OS keychain, with file storage as the fallback when a keychain backend is unavailable. Curated write tools, generated read/write tools, and read-only VRCX local-history tools are available by default; use your MCP client or agent harness to approve account-changing tool calls.

This project is unofficial and is not affiliated with VRChat Inc.

Policy and Safety Boundaries

VRChat does not provide a public OAuth flow for third-party API applications. VRChat's Creator Guidelines say API applications should not request or store VRChat login credentials, auth tokens, or session data, should identify themselves with a clear User-Agent, should cache/back off instead of sending unmetered requests, and should not act on behalf of another user.

This project is therefore intended only as a local, user-controlled personal tool. Do not run it as a hosted/public MCP service, do not collect anyone else's credentials or cookies, do not automate spam or harassment, and do not use it to evade VRChat enforcement or moderation. Use write tools only for actions you would intentionally perform yourself in VRChat.

Install

Requirements:

  • Node.js 24.15.0 or newer.
  • An MCP client that can run local stdio servers.
  • Native dependencies are installed for keychain and VRCX SQLite support (keytar, better-sqlite3).

On headless Linux or containers without a keychain daemon such as libsecret, set VRCHATMCPCOOKIE_STORE=file for explicit persistent cookie storage.

The npm package is the normal install path:

npx -y @basicbit/vrchat-mcp

The server is also published to the official MCP Registry as io.github.BASIC-BIT/vrchat-mcp.

MCP Client Config

Most clients use one of these shapes. No environment variables are required for the default setup.

OpenCode

OpenCode uses an array-valued command field.

Add this to ~/.config/opencode/opencode.json:

{
  "mcp": {
    "vrchat": {
      "type": "local",
      "command": ["npx", "-y", "@basicbit/vrchat-mcp"],
      "enabled": true
    }
  }
}

Claude Desktop, Cursor, Kiro, Roo, Windsurf

These clients usually split the executable into command plus args.

Use this in clients that expect an mcpServers object:

{
  "mcpServers": {
    "vrchat": {
      "command": "npx",
      "args": ["-y", "@basicbit/vrchat-mcp"]
    }
  }
}

VS Code

VS Code uses a servers object instead of mcpServers.

Use this in .vscode/mcp.json:

{
  "servers": {
    "vrchat": {
      "type": "stdio",
      "command": "npx",
      "args": ["-y", "@basicbit/vrchat-mcp"]
    }
  }
}

OpenAI Codex

Add this to ~/.codex/config.toml or .codex/config.toml:

[mcp_servers.vrchat]
command = "npx"
args = ["-y", "@basicbit/vrchat-mcp"]
startup_timeout_sec = 40

If your Windows client cannot spawn npx directly, use cmd as the command and put /c, npx, -y, and @basicbit/vrchat-mcp in the argument list.

Local Streamable HTTP

Use native Streamable HTTP when an MCP client needs to connect to a long-running local server instead of spawning its own stdio child process. STDIO remains the default and recommended setup for ordinary desktop clients.

HTTP mode:

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

VRChat MCP: common questions

Is VRChat MCP server safe?
Yes, by our scan: it is graded A (92/100). Read the VRChat MCP safety report
How do I install VRChat MCP?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does VRChat MCP need an API key?
No secret keys are declared. It reads 7 settings from the environment.
Is VRChat MCP maintained?
The last commit was 34 days ago (2026-10-02). The latest release is v0.1.15.
How does VRChat MCP compare with other MCP servers?
safety score 92/100 (higher than 93% of 48,243 servers); tools 2 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.