Back to Home
jojoprison icon

mcp-music-forge

Verified Safe

by jojoprison

Overview

Scalable MCP server and HTTP API for downloading, transcoding, and tagging audio from various online sources like SoundCloud and YouTube.

Installation

Run Command
make upb

Environment Variables

  • APP_ENV
  • TZ
  • REDIS_URL
  • STORAGE_DIR
  • DATABASE_URL
  • SOUNDCLOUD_COOKIE_FILE
  • ALLOW_STREAM_DOWNLOADS
  • FFMPEG_BIN
  • API_HOST
  • API_PORT
  • OTEL_EXPORTER_OTLP_ENDPOINT
  • OTEL_SERVICE_NAME
  • TELEGRAM_BOT_TOKEN

Security Notes

The `CORSMiddleware` is configured with `allow_origins=["*"]`, which can be a security risk if the API is exposed publicly. Ensure `SOUNDCLOUD_COOKIE_FILE` is handled with strict permissions. External tools like `yt-dlp` and `ffmpeg` are used via `subprocess.run`; argument construction appears safe, mitigating direct command injection. File system operations generally use `pathlib` and internally managed `job_id`s, reducing path traversal risks. No `eval` or obvious obfuscation found.

Similar Servers

Stats

Interest Score30
Security Score8
Cost ClassLow
Avg Tokens50
Stars1
Forks0
Last Update2025-12-04

Tags

Audio ProcessingMCP ServerMedia DownloaderFastAPIDocker