56
grade D
3 days ago
glama
Spotify MCP Server
Provides 51 granular tools for Spotify control and data retrieval, optimized for building dynamic HUDs and music interfaces with direct access to individual playback states, track info, device controls, and library management.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
⚠️
Known vulnerabilities in dependencies: 6 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 1 credential: SPOTIFY_CLIENT_SECRET
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from
process.env. You'll be asked to provide them before it can run.config
SPOTIFY_CLIENT_ID— 4. Configure Copy example env: cp .env.example .env<br><br>Edit .env with credentials:<br>=your_id<br>SPOTIFY_CLIENT_SECRET=your_secret<br>SPOTIFY_REDIRECT_URI=http://localhost:8888/callback🔐 secret
SPOTIFY_CLIENT_SECRET— 4. Configure Copy example env: cp .env.example .env<br><br>Edit .env with credentials:<br>SPOTIFY_CLIENT_ID=your_id<br>=your_secret<br>SPOTIFY_REDIRECT_URI=http://localhost:8888/callbackconfig
SPOTIFY_REDIRECT_URI— 4. Configure Copy example env: cp .env.example .env<br><br>Edit .env with credentials:<br>SPOTIFY_CLIENT_ID=your_id<br>SPOTIFY_CLIENT_SECRET=your_secret<br>=http://localhost:8888/callback// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/llmtooling-spotify-mcp-server-rv8ude)commit: f90914a814f1655536b35410201d3a80eed7ae0d
code hash: 6b3f3842b163698e036fdc3e96218d409cbafd72b91a6a60cb0c4af4c31e5034
verified: 4/18/2026, 6:43:35 PM