Plex MCP Server

Item: Plex MCP Server
Rating: 2
Author: M8ven

MCP Server for Plex to allow LLMs to converse with Plex.

→ vladimir-tutin/plex-mcp-server · listed on mcp_so

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

mcp.so Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Reads files from sensitive locations

Touches: ~/.config/plex-mcp-server

⚠️

Tool descriptions don’t match what handlers do

2 tools describe read intent but their handlers mutate — media_get_artwork (line 813: with open(file_path, 'wb') as f:); server_get_plex_logs (line 157: os.remove(logs_path_or_data))

🔐

You'll be asked for 1 credential: PLEX_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configPLEX_URL

🔐 secretPLEX_TOKEN— your-authentication-token

configMCP_OAUTH_ENABLED— 1. Set =true in your environment.

configMCP_OAUTH_ISSUER— 2. Configure (e.g., your OAuth provider URL).

configMCP_SERVER_URL— 3. Set to your public-facing URL.

configMCP_OAUTH_JWKS_CACHE_TTL

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 9 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/vladimir-tutin-plex-mcp-server-tgb0zo)](https://m8ven.ai/mcp/vladimir-tutin-plex-mcp-server-tgb0zo)

commit: 0723c720498c4ab1eaf3a22ffc7b5a451985f0c0

code hash: 9169ae0c2404e72f7ffa0aa5806646dd7ce7ec8647a655cdee19ad95134db771

verified: 6/16/2026, 1:13:48 PM

view raw JSON →