
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
node-appletv
Advanced tools
A node module for interacting with an Apple TV (4th-generation or later) over the Media Remote Protocol.

node-appletv is a node.js implementation of the Media Remote Protocol which shipped with the 4th-generation Apple TV. This is the protocol that the Apple TV remote app uses, so this should enable the creation of an Apple TV remote app for various platforms. It can also be used in a homebridge plugin to connect Apple TV events to HomeKit and vice versa. node-appletv can be used as a standalone command line application, or as a module in your own node app. Keep reading for installation and usage instructions.
Developer documentation for node-appletv can be found here.
# Install
$ npm install -g node-appletv
# Display built-in help
$ appletv --help
The appletv cli supports several commands, such as:
pair: Scans for Apple TVs on the local network and initiates the pairing process
command <command>: Execute a command on an Apple TV (play, pause, menu, volume, wake, suspend, etc.)
state: Logs state changes from an Apple TV (now playing info)
queue: Requests the current playback queue from an Apple TV
artwork: Requests the current now playing artwork from an Apple TV
messages: Logs all raw messages from an Apple TV
help <command>: Get help for a specific command
$ npm install --save node-appletv
node-appletv makes heavy use of Promises. All functions, except for the observe functions, return Promises.
import { scan } from 'node-appletv';
let devices = await scan();
// devices is an array of AppleTV objects
let device = devices[0];
await device.openConnection();
let callback = await device.pair();
// the pin is provided onscreen from the Apple TV
await callback(pin);
// you're paired!
let credentials = device.credentials.toString();
console.log(credentials);
import { scan, parseCredentials, NowPlayingInfo } from 'node-appletv';
// see example above for how to get the credentials string
let credentials = parseCredentials(credentialsString);
let devices = await scan(uniqueIdentifier)[]
let device = devices[0];
await device.openConnection(credentials);
// you're connected!
// press menu
await device.sendKeyCommand(AppleTV.Key.Menu);
console.log("Sent a menu command!");
// monitor now playing info
device.on('nowPlaying', (info: NowPlayingInfo) => {
console.log(info.toString());
});
The uniqueIdentifier is advertised by each Apple TV via Bonjour. Use an app like Bonjour Browser to find it. The identifier is also the first value in the string value of the Credentials object.
See homebridge-theater-mode for a more practical use of this module.
node-appletv is written in Typescript. Edit files in the src directory and then run npm link to clean, build, and create the symlinks to use the library and cli.
node-appletv would not have been possible without the work of these people:
You can find me on Twitter @evandcoleman
Distributed under the MIT license. See LICENSE for more information.
FAQs
A Node.js library for communicating with an Apple TV
The npm package node-appletv receives a total of 43 weekly downloads. As such, node-appletv popularity was classified as not popular.
We found that node-appletv demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.