Spotify MCP server

by markswendsen-code·io.github.markswendsen-code/spotify·v0.1.0

MCP server for Spotify - let AI agents control playback, search music, and manage playlists

B72/100grade B

What users say

No reviews yet

Safety scan

B72/100

Adoption

New

0 stars

Reviews

Nobody has reviewed Spotify yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

add_to_queue
Add a track to the Spotify playback queue.
get_playback
Get the current Spotify playback state — what's playing, track info, device, volume, progress, shuffle/repeat mode.
get_playlists
Get the current user's Spotify playlists.
get_recently_played
Get the user's recently played tracks on Spotify.
login
Initiate Spotify OAuth login flow. Opens the browser for the user to authorize the app. Requires SPOTIFY_CLIENT_ID to be set.
logout
Logout from Spotify and clear stored credentials.
pause
Pause Spotify playback.
play
Start or resume Spotify playback. Can play a specific track, album, artist, or playlist URI, or resume current playback if no URI is provided.
play_playlist
Play a specific Spotify playlist by its ID or URI.
search
Search Spotify for tracks, albums, artists, and/or playlists.
seek
Seek to a specific position in the currently playing track.
set_volume
Set the playback volume.
skip_next
Skip to the next track in the queue.
skip_previous
Skip to the previous track. If more than 3 seconds into the current track, restarts it instead.
status
Check Spotify connection and authentication status. Use this to see if the user is logged in and what account is connected.

scanner v0.1.10 · 2026-09-27 · same rubric, same numbers if you re-run it

no findings

Code scan12 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitylocal package, no credentials required12/15
Maintenancelast push 201 days ago4/15
Maintainer identityregistry namespace matches repository owner6/10

Overall 72/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Runs npx -y @striderlabs/mcp-spotify on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add spotify -- npx -y @striderlabs/mcp-spotify

Is Spotify MCP server safe?: Mostly: it is graded B (72/100). Read the Spotify safety report
How do I install Spotify?: It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Spotify need an API key?: Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Spotify maintained?: The last commit was 216 days ago (2026-03-11). The latest release is v0.1.0.