74
grade C
2 days ago
glama
Bandmate MCP Server
Provides access to the Bandmate REST API for managing songs with chord notations, lyrics, and metadata, as well as organizing them into lists. Supports searching, creating, updating, and retrieving songs and playlists with optional authentication.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
🔐
You'll be asked for 1 credential: BANDMATE_AUTH_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from
process.env. You'll be asked to provide them before it can run.config
BANDMATE_API_URL— Base URL for the Bandmate API🔐 secret
BANDMATE_AUTH_TOKEN— Firebase auth token for authenticated endpoints (empty)config
PORT// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/jnicolasgomez-bandmate-mcp-u48f94)commit: 447bafc0aa678f640ac0861c789fa9d920c1bf57
code hash: 50bfcd2e3daf253365db082316600079c7d15257da1e728941b2f58c51d19840
verified: 4/18/2026, 6:36:08 PM