
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
Music Player for Agent.
agentune is a local MCP music player for Claude Code, Codex, OpenCode, and other MCP-compatible coding agents. Your agent can discover tracks, play instantly, queue the next song, and keep one shared listening session running while you work.
CLI-only package: install and run
agentuneas a command. Programmaticimport "agentune"is not a supported interface.
mpv, not a browser tabmpvyt-dlpUse agentune doctor after install to verify the runtime sees the required dependencies, the bundled yt-dlp binary, the system yt-dlp command, and the current daemon state.
brew install mpv yt-dlp
sudo apt-get install mpv python3-pip
pip install yt-dlp
scoop install mpv yt-dlp
npm install -g agentune
agentune --version
agentune doctor
Here are ready-to-use examples for common coding agents. Other MCP-compatible clients can point to the same local agentune command.
claude mcp add agentune --scope user -- agentune
codex mcp add agentune -- agentune
Add this to opencode.json:
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"agentune": {
"type": "local",
"command": ["agentune"],
"enabled": true
}
}
}
Your MCP client launches agentune automatically. The dashboard is available at http://localhost:3737 after the first connection.
Useful daemon commands:
agentune --help
agentune doctor
agentune start
agentune stop
Use agentune doctor to confirm Node.js, mpv, bundled yt-dlp, system yt-dlp, config paths, and daemon health before you start playback.
Use agentune start when you want the background daemon running before your agent connects, or when autoStartDaemon is disabled.
play some musics. id like Vietnamese song only, V-Pop, Indie, RAP, Ballad.
Use that first prompt to define your taste/persona in plain language. The agent can save that preference and reuse it later.
After that, a simple prompt is enough:
Play some musics
The agent should read your saved taste, recent listening history, top artists, and top keywords, then choose music that fits instead of starting from zero each time.
If you want to change taste later, just say it naturally. For example:
play some musics. i want more chill Vietnamese indie and fewer rap tracks tonight.
The agent can update the saved taste text, then continue using the new preference on later picks.
Tip: if your coding setup supports subagents, you can dedicate one subagent to keep the playlist going during the whole work session. In repos that use
CLAUDE.mdorAGENTS.md, you can also add a small instruction telling the agent to maintain playback, queue the next fitting track, and adapt when you describe a new taste.
agentune doctor to inspect runtime dependencies and local daemon healthOpen http://localhost:3737 to see:
On first run, agentune creates ${AGENTUNE_DATA_DIR || ~/.agentune}/config.json.
Most useful settings:
dashboardPort: browser dashboard port, default 3737daemonPort: local daemon port, default 3747defaultVolume: initial playback volumeautoStartDaemon: automatically start the daemon when your agent connectsIf autoStartDaemon is false, start the daemon yourself before connecting:
agentune start
The daemon keeps playing in the background after the agent session closes. It stops only when you run agentune stop or click Stop daemon in the dashboard.
agentune doctor treats Node.js, runtime config, mpv, and the bundled yt-dlp binary as required checks. System yt-dlp and daemon stopped state are reported as advisory warnings instead of hard failures.
MIT
FAQs
Music Player for Agent
We found that agentune demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.