Back to Home
marcelmarais icon

spotify-mcp-server

Verified Safe

by marcelmarais

Overview

Enables AI assistants to control Spotify playback and manage playlists via the Model Context Protocol (MCP).

Installation

Run Command
node build/index.js

Security Notes

The server uses standard OAuth 2.0 for Spotify API authentication, storing tokens and client secrets in a local `spotify-config.json` file. It enforces `localhost` for the redirect URI during the authorization flow, preventing token leakage to external domains. OAuth state parameter is generated and verified to protect against CSRF. While the configuration file stores sensitive tokens unencrypted, this is a common practice for local applications and the file is explicitly excluded from version control in examples. No 'eval' or malicious patterns were found in the source code.

Similar Servers

Stats

Interest Score63
Security Score9
Cost ClassMedium
Avg Tokens200
Stars217
Forks56
Last Update2026-01-12

Tags

SpotifyMCPAI AssistantPlayback ControlPlaylist Management