← Back to search

io.github.cyanheads/musicbrainz-mcp-server

cyanheads streamable_http Scanned 24d ago

Search MusicBrainz artists, releases, works, labels; resolve ISRC/ISWC/barcode; fetch cover art.

B
89.5 / 100

Versions

0.1.0latest
first seen Jun 30, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 10

musicbrainz_get_label
annotations: verified low

Label by MBID: type (Original Production, Reissue, Imprint, …), country, life span, label code (the LC number), area, aliases, tags, and external links (url-rels — Wikidata, Discogs, official site). A label's releases are a potentially huge linked set (a major label can have tens of thousands), so they are NOT embedded here — enumerate them with musicbrainz_browse_entities (target_type=release, link.label).

area string mbid string tags array type string input object output object aliases array country string sortName string disambiguation string
readOnlyHint true openWorldHint true idempotentHint true
musicbrainz_lookup_identifier
annotations: verified low

Resolve a standard identifier to MusicBrainz entities without a name search — the deterministic path when you already hold an ID. id_type=isrc → recordings (a recording-level code, often shared by several recordings); id_type=iswc → works (a composition-level code); id_type=barcode → releases (UPC/EAN). ISRC and ISWC hit dedicated exact endpoints; barcode is a Lucene search filter so results are ranked (exact match scores 100). The output kind field tells you which entity type came back.

kind literal input object output object identifier string recordings array
readOnlyHint true openWorldHint true idempotentHint true
musicbrainz_get_work
annotations: verified low

Work (a composition — the song as written, distinct from any specific recording) by MBID: type, language(s), ISWCs (the work-level standard identifier), writer/composer/lyricist relationships (with the credited artist MBID), aliases, tags, and the recordings that perform it. The recording relationships are returned in full (the work lookup does not page them).

mbid string tags array type string input object iswcs array output object aliases array languages array disambiguation string
readOnlyHint true openWorldHint true idempotentHint true
musicbrainz_get_recording
annotations: verified low

Recording (a specific performance/track, distinct from the abstract work) by MBID: length, artist credits, ISRCs, the releases it appears on, the work(s) it performs (work-rels — chain to musicbrainz_get_work), and performance/production relationships (who played, produced, engineered, conducted — each with the role and the credited artist MBID). Relationships are capped at one page; for a heavily-covered recording call musicbrainz_browse_entities with target_type=recording and link.work.

mbid string input object isrcs array length string output object artistCredit array disambiguation string
readOnlyHint true openWorldHint true idempotentHint true
musicbrainz_get_release_group
annotations: verified low

Release-group ("the album" above specific pressings) by MBID: primary type (Album/Single/EP) and secondary types (Live/Compilation), first-release date, artist credit, the list of releases (editions), tags/genres, and a cover-art availability flag from the WS/2 payload (use musicbrainz_get_cover_art for actual image URLs). The embedded releases list is capped at one page (25); for the complete set of editions, call musicbrainz_browse_entities with target_type=release and link.release-group. For a specific edition\'s tracklist, take a release MBID from the releases list and call musicbrainz_get_release.

mbid string input object output object artistCredit array disambiguation string
readOnlyHint true openWorldHint true idempotentHint true
musicbrainz_get_release
annotations: verified low

One edition's full detail by MBID: the tracklist (media → tracks → recordings with lengths and recording MBIDs), label + catalog number, barcode, country, release date, format, packaging, text representation (language/script), and a cover-art availability stub. Track lengths are rendered m:ss (stored as milliseconds upstream). For the actual cover image URLs, call musicbrainz_get_cover_art with this release MBID.

date string mbid string input object output object country string artistCredit array disambiguation string
readOnlyHint true openWorldHint true idempotentHint true
musicbrainz_browse_entities
annotations: verified low

Paginate the COMPLETE set of entities linked to a parent MBID — every release-group by an artist, every release on a label, every recording of a work, every release in a release-group. This is the only complete-enumeration path: the get_* tools embed at most one page (25) of any linked list, so use this tool whenever a linked set may exceed a page (a prolific artist, a major label with thousands of releases, a heavily-covered work). Provide exactly ONE link MBID matching a valid parent→child relationship for the target_type. Pages arbitrarily deep via offset; totalCount is the true upstream total.

area string work string input object label string limit number target_type enum
readOnlyHint true openWorldHint true idempotentHint true
musicbrainz_get_artist
annotations: verified low

Artist profile by MBID: type (person/group/…), country, life span, gender, area, aliases, tags/genres, plus the discography (release-groups) and band-membership / collaboration relationships and external links (Wikidata QID, Discogs, official site — surfaced as url-rels chainable to those servers). The 80% artist-detail call. Discography and relationships are capped at one page (25); for a prolific artist's complete release-group list, call musicbrainz_browse_entities with target_type=release-group and the artist link.

mbid string input object output object country string sortName string
readOnlyHint true openWorldHint true idempotentHint true
musicbrainz_search_entities
annotations: verified low

Full-text search across a MusicBrainz entity type (artist, release-group, release, recording, work, label) using a Lucene query string. Returns ranked matches with MBID, name/title, disambiguation, type, and a 0–100 relevance score (100 = exact). Starting point when resolving a name to an MBID — chain the returned MBID into the matching musicbrainz_get_* tool. Results are in MusicBrainz score-descending order. Supports field-scoped Lucene syntax (e.g. `artist:radiohead AND country:GB`).

input object offset number output object entityType string totalCount number effectiveQuery string
readOnlyHint true openWorldHint true idempotentHint true
musicbrainz_get_cover_art
annotations: verified low

Cover Art Archive images for a release or release-group MBID: front/back flags, image types, full-resolution URLs, and 250/500/1200px thumbnail URLs. Returns an empty image set (NOT an error) when the entity has no art — absence of art is information. Art is served at the release level; a release-group MBID resolves to a representative release's art automatically. URLs are linked, never rehosted — image copyright stays with the rights holders (only MusicBrainz core metadata is CC0).

mbid string input object hasArt boolean images array notice string output object entityType string
readOnlyHint true openWorldHint true idempotentHint true

Permissions 2

shell high
Server uses shell capabilities via: child_process, spawn(), spawnSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 29

info
Tool 'musicbrainz_get_label' annotations are consistent annotation_checker · 80%
info
Tool 'musicbrainz_lookup_identifier' annotations are consistent annotation_checker · 80%
info
Tool 'musicbrainz_get_work' annotations are consistent annotation_checker · 80%
info
Tool 'musicbrainz_get_recording' annotations are consistent annotation_checker · 80%
info
Tool 'musicbrainz_get_release_group' annotations are consistent annotation_checker · 80%
info
Tool 'musicbrainz_get_release' annotations are consistent annotation_checker · 80%
info
Tool 'musicbrainz_browse_entities' annotations are consistent annotation_checker · 80%
info
Tool 'musicbrainz_get_artist' annotations are consistent annotation_checker · 80%
info
Tool 'musicbrainz_search_entities' annotations are consistent annotation_checker · 80%
info
Tool 'musicbrainz_get_cover_art' annotations are consistent annotation_checker · 80%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
info
package.json metadata manifest_parser · 100%
info
Tool: musicbrainz_get_label manifest_parser · 75%
info
Tool: musicbrainz_lookup_identifier manifest_parser · 75%
info
Tool: musicbrainz_get_work manifest_parser · 75%
info
Tool: musicbrainz_get_recording manifest_parser · 75%
info
Tool: musicbrainz_get_release_group manifest_parser · 75%
info
Tool: musicbrainz_get_release manifest_parser · 75%
info
Tool: musicbrainz_browse_entities manifest_parser · 75%
info
Tool: musicbrainz_get_artist manifest_parser · 75%
info
Tool: musicbrainz_search_entities manifest_parser · 75%
info
Tool: musicbrainz_get_cover_art manifest_parser · 75%
info
Required env vars (10) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 11 components sbom_generator · 100%
high
Hardcoded Password found in cyanheads-musicbrainz-mcp-server-35d1e4f/framework-skills/api-utils/references/security.md secret_scanner · 65%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%