# io.github.epheterson/applemusic-mcp (pypi · applemusic-mcp)

Apple Music MCP server: playlists, library, catalog, playback and Up Next, on Mac/Windows/Linux.

- Trust score: 79/100 (medium)
- Change this week: +1
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-09-20

## Components

- pypi · `applemusic-mcp`: 79/100 (this document), [markdown](https://verifymcp.io/servers/epheterson-applemusic-mcp/applemusic-mcp.md), [page](https://verifymcp.io/servers/epheterson-applemusic-mcp/applemusic-mcp)

## Channel facts

- Registry: `pypi`
- Package: `applemusic-mcp`
- Version: `0.20.1`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-09-20.

- **Supply Chain Security**: 100/100
  - No malware found by supply-chain analysis.
  - No known CVEs affecting this package version or its production dependencies.
  - Runs hatchling.build at install time, a recognised native-build step with no shell scripting around it.
  - 4 of 54 dependencies flagged as unhealthy.
- **Provenance & Transparency**: 35/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - License check failed: the license (MIT License) isn't a recognized OSI-approved license.
  - Actively maintained (last published 22 days ago).
  - Publishes a security disclosure policy (SECURITY.md).
- **Schema Quality & AI Usability**: 69/100
  - 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).
  - AI-judged instruction clarity (good).
  - Context-footprint check failed: tool/resource definitions use about 2283 tokens (~285/item across 8 items; 7 tools + 1 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 100/100
  - No destabilizing schema changes in the last 30 days.
- **Tool Coverage**: 71/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 0% of tool parameters carry a description.
  - Structured output schemas are declared (100% of tools); any adoption earns full credit.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - We read all 7 captured tool definition(s), and no name or description among them implies an irreversible operation.
  - An AI judge read all 8 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a current MCP spec version (2026-07-28).

## Install

### How do I install the io.github.epheterson/applemusic-mcp server?

io.github.epheterson/applemusic-mcp runs locally as a PyPI package, launched with uvx applemusic-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add epheterson-applemusic-mcp -- uvx applemusic-mcp
```

### Cursor

```json
{
  "mcpServers": {
    "epheterson-applemusic-mcp": {
      "command": "uvx",
      "args": [
        "applemusic-mcp"
      ]
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "epheterson-applemusic-mcp": {
      "command": "uvx",
      "args": [
        "applemusic-mcp"
      ]
    }
  }
}
```

### Codex

```bash
codex mcp add epheterson-applemusic-mcp -- uvx applemusic-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "epheterson-applemusic-mcp": {
      "type": "local",
      "command": [
        "uvx",
        "applemusic-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add epheterson-applemusic-mcp --command uvx --arg applemusic-mcp
```

### Hermes

```yaml
mcp_servers:
  epheterson-applemusic-mcp:
    command: "uvx"
    args: ["applemusic-mcp"]
```

### Netclaw

```json
{
  "McpServers": {
    "epheterson-applemusic-mcp": {
      "Transport": "stdio",
      "Command": "uvx",
      "Arguments": [
        "applemusic-mcp"
      ]
    }
  }
}
```

### Vellum

```bash
assistant mcp add epheterson-applemusic-mcp -t stdio -c uvx -a applemusic-mcp
```

### Other

```json
{
  "mcpServers": {
    "epheterson-applemusic-mcp": {
      "command": "uvx",
      "args": [
        "applemusic-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-09-19 (score 79, 0)

- [security] Stability: 0.97 → pass

### 2026-09-18 (score 79, +1)

No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-09-17 (score 78, −1)

- [functional] Stability: pass → 0.93

### 2026-09-16 (score 79, 0)

- [security] Stability: 0.97 → pass

### 2026-09-15 (score 79, +1)

No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-09-13 (score 78, +1)

No change was recorded against any check on this day. Stability & Change Management went from 87 to 90. That category is still filling its 30-day observation window: 26 days of observed history at the previous scan, 27 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-09-11 (score 77, +1)

No change was recorded against any check on this day. Stability & Change Management went from 80 to 83. That category is still filling its 30-day observation window: 24 days of observed history at the previous scan, 25 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-09-09 (score 76, +1)

No change was recorded against any check on this day. Stability & Change Management went from 73 to 77. That category is still filling its 30-day observation window: 22 days of observed history at the previous scan, 23 at this one. The score rises as the window fills, whether or not the server changes.

## MCP tools (7)

### `playlist` (~557 tokens)

Playlist and folder operations. Actions: list, folders (macOS — show the folder tree; folders are NOT in `list`), tracks, search, create, add, copy, move, path (macOS), remove, delete, rename. (move/remove/delete/rename work on every OS — via Music.app on macOS, via the web API on Windows/Linux. Only folders/path are macOS-only.) To find a playlist by name, use action='list' with filter='jack' (loose name match) rather than action='search', which searches the TRACKS inside a given playlist and needs a playlist param. Folders support slash-separated paths (e.g. 'Summer/Chill/Deep'). For action='add', `track` accepts a song NAME, a catalog song id (a numeric id like '1440857781' — pins the EXACT edition, avoiding name/album version mismatches), or a library id; set auto_add=True to find tracks not already in the user's library — this is required to add catalog songs the user doesn't own. Note: adding a not-yet-owned catalog track to a Music.app-made playlist is two-step — it's added to the library over the API, then attached locally once iCloud syncs it down (usually seconds). If the sync is slow it may return "added to your library — re-run to attach"; just re-run the same add. Rarely, if the sync stalls past ~20s, Music.app briefly flashes to the foreground as a last-resort sync nudge — expected, not a glitch. To SWAP one track for another, use action='add' with `replace`=<the old track to remove>: it adds the new track, confirms it actually persisted, and only THEN removes the old one — so if the add silently reverts (a Music.app bug), the old track is kept rather than lost.

Input parameters:

- `action` (string)
- `album` (string)
- `allow_duplicates` (boolean)
- `artist` (string)
- `auto_add`
- `description` (string)
- `dry_run` (boolean)
- `export` (string)
- `fetch_explicit`
- `filter` (string)
- `folder` (string)
- `format` (string)
- `full` (boolean)
- `limit` (integer)
- `name` (string)
- `new_name` (string)
- `offset` (integer)
- `playlist` (string)
- `query` (string)
- `replace` (string)
- `source` (string)
- `track` (string)
- `verify` (boolean)

Output parameters:

- `result` (string)

### `library` (~366 tokens)

Your library. Actions: search, add, recently_played, recently_added, browse, favorites (macOS), rate, remove, snapshot (macOS). action='search' searches the user's local library only — for catalog (Apple Music's full library) use catalog(action='search'). For search, types can be 'songs' (default), 'artists', 'albums', 'all', or 'genre' — types='genre' lists the user's own tracks whose genre matches query (e.g. query='Rock'); genre filtering is macOS-only (local Music app). Search returns one page: limit (default 25) caps results and offset pages through larger result sets — the text header shows 'start-end of total' so you know when more remain. action='favorites' lists songs marked Favorite (loved) in Music.app. action='add' adds catalog tracks/albums to your library over the API (developer token — generated or harvested — plus a media-user-token from `signin`); there is no UI-automation fallback. In api mode, search/browse read via the API and love/dislike rate via the API; star ratings (rate get/set) need native mode (local Music.app).

Input parameters:

- `action` (string)
- `album` (string)
- `artist` (string)
- `clean_only`
- `export` (string)
- `fetch_explicit`
- `format` (string)
- `full` (boolean)
- `item_type` (string)
- `limit` (integer)
- `offset` (integer)
- `query` (string)
- `rate_action` (string)
- `stars` (integer)
- `track` (string)
- `types` (string)

Output parameters:

- `result` (string)

### `discover` (~98 tokens)

Personalized discovery. Actions: recommendations, heavy_rotation, personal_station, charts, top_songs, similar_artists, song_station.

Input parameters:

- `action` (string)
- `artist` (string)
- `chart_type` (string)
- `export` (string)
- `format` (string)
- `full` (boolean)
- `limit` (integer)
- `song_id` (string)
- `storefront` (string)

Output parameters:

- `result` (string)

### `catalog` (~367 tokens)

Apple Music catalog. Actions: search, resolve, album_tracks, album_details, song_details, artist_details, genres, suggestions.

\`search` is discovery: one query in, a ranked list out, for browsing.

\`resolve` is identification: N identifiers in, N verdicts out, writing nothing —
use it (never repeated `search`) to turn a track list into catalog IDs. It routes
on which identifier you have:

\- `resolve(isrcs=...)` — exact, 25 per request. ISRCs come with Spotify/Rekordbox/
  Plex exports; this is what keeps a large import under Apple's rate limit.
\- `resolve(tracks=...)` — titles/artists, fuzzy, reporting how confident each match
  is so a wrong edition gets caught before it's written. One request per track, so
  it's capped at 25 (raise with `max_tracks`, not `limit`).

Either way the IDs come back ready for `playlist(action="add", track=...)` — or use
\`playlist(action="add", dry_run=True)` to preview against a specific playlist,
which also reports what's already in it.

Input parameters:

- `action` (string)
- `album` (string)
- `artist` (string)
- `chart_type` (string)
- `clean_only`
- `export` (string)
- `format` (string)
- `full` (boolean)
- `isrcs` (string)
- `limit` (integer)
- `max_tracks` (integer)
- `offset` (integer)
- `query` (string)
- `song_id` (string)
- `term` (string)
- `tracks` (string)
- `types` (string)

Output parameters:

- `result` (string)

### `config` (~199 tokens)

Config, cache, and authentication.

Settings/cache actions: info, set-pref, list-storefronts, audit-log,
clear-tracks, clear-exports, clear-audit-log.

Auth actions (no terminal needed — just ask):
\- auth-status (or status): which tokens are active, expiry/auto-renew, what works, next step
\- signin: open a browser to sign in (any OS) and capture your session
\- logout: sign out — clears your user token + browser session so you can switch accounts (needs confirm=True)
\- reset: wipe ALL credentials for a clean slate or to drop a dev token for the web path; keeps your .p8 (needs confirm=True)

Input parameters:

- `action` (string)
- `confirm` (boolean)
- `days_old` (integer)
- `limit` (integer)
- `preference` (string)
- `string_value` (string)
- `value`

Output parameters:

- `result` (string)

### `queue` (~362 tokens)

The Up Next play queue — the web player's own MusicKit state (the same Up Next
you see in the player). It runs on a web engine: Safari on macOS (no Chrome
needed) or Chrome elsewhere, picked by your `mode` (auto/safari/chrome) or a
per-call `engine=` ('safari' | 'chrome'). Using the queue makes it the active
playback engine, so transport controls reach it. Native (Music.app) mode has no
Up Next — set mode to safari/chrome or pass engine='safari'.

Actions:
\- `list` — show Up Next (▶ marks the current item; indices are 0-based)
\- `set` — replace the whole queue in order, one call (`track`=comma/newline-separated ids or names)
\- `play_next` — insert a track right after the current one (`track`=name or catalog id, optional `artist`)
\- `play_last` — append a track to the end of Up Next
\- `remove` — remove the item at `index` (can't remove the currently-playing item — jump away first)
\- `clear` — empty the queue
\- `jump` — jump playback to a track: by `track` (name or catalog id — drift-proof, preferred since Up Next auto-advances) or by `index`
\- `autoplay` — set Autoplay (∞: keep playing similar music when the queue ends); pass `enabled=true` or `enabled=false` (required)

Input parameters:

- `action` (string)
- `artist` (string)
- `enabled`
- `engine` (string)
- `index` (integer)
- `track` (string)

Output parameters:

- `result` (string)

### `playback` (~320 tokens)

Playback transport. play/control/now_playing/settings run on the engine the
\`mode` preference resolves to — native Music.app (macOS), the Safari web player
(macOS), or the Chrome web player (any OS). Override it for ONE call with
\`engine=`: 'native', 'safari', 'chrome', 'web' (the web engine — Safari on macOS,
Chrome off-mac), or 'auto'. control/now_playing follow whichever engine is
actively playing (so after a Safari queue, pause/next reach Safari). Safari needs
a signed-in Safari + "Allow JavaScript from Apple Events"; Chrome needs a
signed-in Chrome (`applemusic-mcp login`) + a desktop session. reveal and airplay
are macOS-only. For the Up Next queue, use the separate `queue` tool.
Actions: play, control, now_playing, settings, reveal, airplay.

Input parameters:

- `action` (string)
- `add_to_library` (boolean)
- `album` (string)
- `artist` (string)
- `control` (string)
- `device_name` (string)
- `engine` (string)
- `playlist` (string)
- `repeat` (string)
- `reveal`
- `seconds` (number)
- `shuffle` (boolean)
- `shuffle_mode` (string)
- `track` (string)
- `track_name` (string)
- `url` (string)
- `volume` (integer)

Output parameters:

- `result` (string)

## Diagnostics

Captured diagnostic sections: Provenance, Install scripts, Dependencies. The full working is on the page: https://verifymcp.io/servers/epheterson-applemusic-mcp/applemusic-mcp#diagnostics

## Score history

- 2026-09-20: 79
- 2026-09-19: 79
- 2026-09-18: 79
- 2026-09-17: 78
- 2026-09-16: 79
- 2026-09-15: 79
- 2026-09-14: 78
- 2026-09-13: 78
- 2026-09-12: 77
- 2026-09-11: 77
- 2026-09-10: 76
- 2026-09-09: 76
- 2026-09-08: 75
- 2026-09-07: 75
- 2026-09-06: 74
- 2026-09-05: 74
- 2026-09-04: 74
- 2026-09-03: 73
- 2026-09-02: 73
- 2026-09-01: 72
- 2026-08-31: 72
- 2026-08-30: 71
- 2026-08-29: 71
- 2026-08-28: 55
- 2026-08-27: 70
- 2026-08-26: 69
- 2026-08-25: 67
- 2026-08-24: 66
- 2026-08-23: 66
- 2026-08-22: 65

## Common questions

### What is the io.github.epheterson/applemusic-mcp server?

io.github.epheterson/applemusic-mcp is listed in the public MCP registry as io.github.epheterson/applemusic-mcp. Apple Music MCP server: playlists, library, catalog, playback and Up Next, on Mac/Windows/Linux. This page covers its PyPI package (applemusic-mcp).

### Is the io.github.epheterson/applemusic-mcp server safe to use?

io.github.epheterson/applemusic-mcp scores 79 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 20 September 2026. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the io.github.epheterson/applemusic-mcp server expose?

io.github.epheterson/applemusic-mcp exposes 7 tools: playlist, library, discover, catalog, config, and 2 more. Their descriptions and schemas cost roughly 2,269 tokens of context every time the server is loaded.

### Is the io.github.epheterson/applemusic-mcp server still maintained?

io.github.epheterson/applemusic-mcp is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

## Links

- PyPI project: https://pypi.org/project/applemusic-mcp/
- Socket report: https://socket.dev/pypi/package/applemusic-mcp
- Repository: https://github.com/epheterson/applemusic-mcp
- Changelog RSS feed: https://verifymcp.io/servers/epheterson-applemusic-mcp/applemusic-mcp.xml
- Changelog JSON feed: https://verifymcp.io/servers/epheterson-applemusic-mcp/applemusic-mcp.json
- HTML version of this page: https://verifymcp.io/servers/epheterson-applemusic-mcp/applemusic-mcp