Back to Home
bans1mp icon

mcp-server

by bans1mp

Overview

The server provides an agent-callable interface for interacting with Spotify's API to retrieve top songs and for updating local notes.

Installation

Run Command
go run main.go

Environment Variables

  • SPOTIFY_ACCESS_TOKEN

Security Notes

The `auth.SpotifyAccessToken` variable used for Spotify API authorization is directly accessed without its origin being shown. If this token is hardcoded within the `auth` package (which is part of the same repository), it represents a critical security vulnerability, exposing a sensitive secret. Ensure this token is loaded securely, ideally from environment variables, and never hardcoded. The `UpdateNotes` tool writes user-provided content to a local file (`notes.txt`); while this is contained, it could lead to integrity issues for that specific file if the input is untrusted. No 'eval' or obfuscation found.

Similar Servers

Stats

Interest Score0
Security Score3
Cost ClassLow
Avg Tokens100
Stars0
Forks0
Last Update2025-11-29

Tags

MCPGoSpotifyToolsAI Agent