Is io.github.NovaLux12/spotify-mcp-server safe to use?

io.github.NovaLux12/spotify-mcp-server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.

How do I install io.github.NovaLux12/spotify-mcp-server?

Install io.github.NovaLux12/spotify-mcp-server via npm: `npx @novalux12/spotify-mcp`. Then add it to your MCP client config file.

What AI clients work with io.github.NovaLux12/spotify-mcp-server?

io.github.NovaLux12/spotify-mcp-server is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.

Is io.github.NovaLux12/spotify-mcp-server actively maintained?

io.github.NovaLux12/spotify-mcp-server is actively maintained — last commit was 0 days ago.

io.github.NovaLux12/spotify-mcp-server

@novalux12/spotify-mcp

The most complete Spotify MCP: playback, library, playlists, search, podcasts and audiobooks.

504/wk GitHub npm

No known CVEs

MIT license

Actively maintained

Last commit 0d ago

Works with most clients

Transport: stdio

0 tools

Grade F

MCPpedia last refreshed this data 18h ago

Edit this pageView history

io.github.NovaLux12/spotify-mcp-server is an MCP server that the most complete Spotify MCP: playback, library, playlists, search, podcasts and audiobooks. Its tool list has not been published yet over stdio, requires no API key, and scores 55/100 on MCPpedia's security, maintenance and efficiency rubric.

Entertainment

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-novalux12-spotify-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@novalux12/spotify-mcp"
      ]
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-novalux12-spotify-mcp-server)](https://mcppedia.org/s/io-github-novalux12-spotify-mcp-server)

Read me

What io.github.NovaLux12/spotify-mcp-server does

The most complete Spotify MCP: playback, library, playlists, search, podcasts and audiobooks.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@novalux12/spotify-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

55/100across 5 weighted dimensions

How we score →

0255075100

−45

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @novalux12/spotify-mcp against OSV.dev.

Help improve this page

This server is missing a description. Tools and install config are also missing.If you've used it, help the community.

Add information

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.NovaLux12/spotify-mcp-server safe to use?: io.github.NovaLux12/spotify-mcp-server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.
How do I install io.github.NovaLux12/spotify-mcp-server?: Install io.github.NovaLux12/spotify-mcp-server via npm: `npx @novalux12/spotify-mcp`. Then add it to your MCP client config file.
What AI clients work with io.github.NovaLux12/spotify-mcp-server?: io.github.NovaLux12/spotify-mcp-server is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
Is io.github.NovaLux12/spotify-mcp-server actively maintained?: io.github.NovaLux12/spotify-mcp-server is actively maintained — last commit was 0 days ago.

Similar servers

Others in entertainment

View all →

Geargrafx MCP Server95

MCP server for Geargrafx PC Engine / TurboGrafx-16 emulator

230 12

Unity MCP94

AI Skills, MCP Tools, and CLI for Unity Engine. Full AI develop and test loop. Use cli for quick setup. Efficient token usage, advanced tools. Any C# method may be turned into a tool by a single line. Works with Claude Code, Gemini, Copilot, Cursor and any other absolutely for free.

4.0k 7

com.mux/mcp93

The official MCP Server for the Mux API

181 7

Mcp Tts93

MCP Server for Text to Speech

67 15

MCP Security Weekly

Get CVE alerts and security updates for io.github.NovaLux12/spotify-mcp-server and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Entertainment

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-novalux12-spotify-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@novalux12/spotify-mcp"
      ]
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-novalux12-spotify-mcp-server)](https://mcppedia.org/s/io-github-novalux12-spotify-mcp-server)

Read me

What io.github.NovaLux12/spotify-mcp-server does

The most complete Spotify MCP: playback, library, playlists, search, podcasts and audiobooks.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@novalux12/spotify-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

SpotifyMCP

An MCP server that wraps the Spotify Web API — lets Claude and other AI assistants control playback, search the catalog (tracks, podcasts, audiobooks), and manage your library and playlists.

212 tools. Every non-deprecated endpoint, plus extras most servers skip. Full list →

🤖 Paste this to your agent

Copy the block below into Claude Code, Cursor, OpenClaw, or any coding agent — it will set SpotifyMCP up for you.

Set up the Spotify MCP server from https://github.com/NovaLux12/spotify-mcp-server.

1. Walk me through creating a Spotify app at https://developer.spotify.com/dashboard
   with redirect URI http://127.0.0.1:8888/callback, or use the Client ID I paste below.
2. Clone, build, and authenticate:
   git clone https://github.com/NovaLux12/spotify-mcp-server.git
   cd spotify-mcp-server && npm ci && npm run build
   SPOTIFY_CLIENT_ID=<paste-here> npm run auth
3. Wire it into my MCP host config and verify with the get_me tool.

My Spotify Client ID: <paste here or say "help me create one">

Why this one


Complete	212 tools — playback, search, catalog, library, playlists, following + extras like duplicate cleanup, M3U/CSV import-export, podcast sessions and market checks.
Safe	`dry_run` previews on every write, receipts that prove what landed, human confirmation for bulk deletes, and `READONLY` to hide all writes.
Honest	No zombie tools for endpoints Spotify removed. Legacy lookups explain the 403 instead of crashing.
Polished	Paginated (up to 500), podcasts first-class, device-aware playback, `spotify_doctor` self-diagnosis, real test suite.

Quick start

1. Create a Spotify app

Spotify Developer Dashboard → Create app → add this Redirect URI exactly:

http://127.0.0.1:8888/callback

Copy the Client ID.

2. Authenticate

SPOTIFY_CLIENT_ID=your_client_id_here npx -y @novalux12/spotify-mcp@latest auth

Opens a browser, saves tokens to ~/.spotify-mcp/tokens.json, auto-refreshes after.

Windows & headless

Windows (Command Prompt):

set SPOTIFY_CLIENT_ID=your_client_id_here && npx -y @novalux12/spotify-mcp@latest auth

Windows (PowerShell):

$env:SPOTIFY_CLIENT_ID="your_client_id_here"; npx -y @novalux12/spotify-mcp@latest auth

Headless / remote host:

SPOTIFY_HEADLESS=1 SPOTIFY_CLIENT_ID=your_client_id_here npx -y @novalux12/spotify-mcp@latest auth
# prints a URL → open it on any machine → paste the redirect back

Check: npx -y @novalux12/spotify-mcp@latest doctor — exit 0 means you're good.

3. Add to your MCP host

{
  "mcpServers": {
    "spotify": {
      "command": "npx",
      "args": ["-y", "@novalux12/spotify-mcp@latest"],
      "env": { "SPOTIFY_CLIENT_ID": "your_client_id_here" }
    }
  }
}

Restart the host. A hammer icon in the chat input means it's connected.

Claude Code · OpenClaw · other hosts

Claude Code (no JSON editing):

claude mcp add spotify -- npx -y @novalux12/spotify-mcp@latest
export SPOTIFY_CLIENT_ID=your_client_id_here

OpenClaw — ~/.openclaw/openclaw.json → mcp.servers:

"spotify": {
  "command": "node",
  "args": ["/path/to/spotify-mcp-server/dist/index.js"],
  "cwd": "/path/to/spotify-mcp-server",
  "env": { "SPOTIFY_CLIENT_ID": "your_client_id_here" }
}

Any spec-compliant host work

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

55/100across 5 weighted dimensions

How we score →

0255075100

−45

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @novalux12/spotify-mcp against OSV.dev.

Help improve this page

This server is missing a description. Tools and install config are also missing.If you've used it, help the community.

Add information

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.NovaLux12/spotify-mcp-server safe to use?: io.github.NovaLux12/spotify-mcp-server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.
How do I install io.github.NovaLux12/spotify-mcp-server?: Install io.github.NovaLux12/spotify-mcp-server via npm: `npx @novalux12/spotify-mcp`. Then add it to your MCP client config file.
What AI clients work with io.github.NovaLux12/spotify-mcp-server?: io.github.NovaLux12/spotify-mcp-server is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
Is io.github.NovaLux12/spotify-mcp-server actively maintained?: io.github.NovaLux12/spotify-mcp-server is actively maintained — last commit was 0 days ago.