
Company News
AWS Security Hub Adds Socket for Supply Chain Security
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.
@striderlabs/mcp-spotify
Advanced tools
MCP server for Spotify - let AI agents control playback, search music, and manage playlists
MCP server for Spotify — let AI agents control playback, search music, manage playlists, and view listening history.
By Strider Labs.
http://localhost:8888/callback to the Redirect URIsSet the SPOTIFY_CLIENT_ID environment variable to your app's Client ID:
export SPOTIFY_CLIENT_ID=your_client_id_here
Or add it to your MCP configuration (see below).
{
"mcpServers": {
"spotify": {
"command": "npx",
"args": ["-y", "@striderlabs/mcp-spotify"],
"env": {
"SPOTIFY_CLIENT_ID": "your_client_id_here"
}
}
}
}
Ask your AI assistant to use the login tool. It will open your browser to authorize the Spotify app. Once you approve, your credentials are saved to ~/.strider/spotify/tokens.json and refreshed automatically.
| Tool | Description |
|---|---|
status | Check authentication status |
login | Authorize with Spotify (PKCE OAuth 2.0) |
logout | Clear stored credentials |
get_playback | Get current playback state, track info, device, volume |
play | Start/resume playback, optionally with a Spotify URI |
pause | Pause playback |
skip_next | Skip to next track |
skip_previous | Skip to previous track |
seek | Seek to position in current track |
set_volume | Set volume (0–100) |
search | Search tracks, albums, artists, playlists |
get_playlists | List user's playlists |
play_playlist | Play a playlist by ID or URI |
add_to_queue | Add a track to the queue |
get_recently_played | Get recent listening history |
"What's playing on Spotify?"
"Play some jazz music on Spotify"
"Skip this track"
"Turn the volume up to 80"
"Search for albums by Radiohead"
"Play my Discover Weekly playlist"
"Add this track to my queue: spotify:track:4iV5W9uYEdYUVa79Axb7Rh"
"What have I been listening to lately?"
This server uses the OAuth 2.0 Authorization Code with PKCE flow — the most secure method for user authentication without exposing a client secret.
~/.strider/spotify/tokens.json with restricted permissionsMIT — Strider Labs
FAQs
MCP server for Spotify - let AI agents control playback, search music, and manage playlists
We found that @striderlabs/mcp-spotify demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.