MAL MCP Server

NPM · MAL-MCP · 2 COMPONENTS · SCANNED AUG 3

MyAnimeList MCP server: Tenrai-powered reads plus official MAL personal-list management.

Available components

+42 this week 83 83 Trust /100

Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security100

No malware found by supply-chain analysis.Pass
No known CVEs affecting this package version or its production dependencies.Pass
No install/post-install scripts declared.Pass
0 of 3 dependencies flagged as unhealthy. View diagnostics → Pass

Provenance & Transparency97

Source repository is publicly reachable at the declared URL. View diagnostics → Pass
Cryptographically verified build provenance (signed, bound to Grinv/mal-mcp). View diagnostics → Pass
Clear OSI-approved license (MIT).Pass
Actively maintained (last published 2 days ago).Pass
Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail

Schema Quality & AI Usability79

100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
AI-judged instruction clarity (excellent).Pass
Context-footprint check failed: tool/resource definitions use about 10530 tokens (~210/item across 50 items; 50 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
Usage-examples check failed: none of the tools include examples. See how to fix → Fail

Stability & Change Management18

Stability check failed: the tool surface changed between 0.7.2 and 0.9.1: 2 tool removals, 4 breaking changes, 7 additions. See how to fix → Fail

Tool Coverage100

100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
100% of tool parameters carry a description.Pass
Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass

Capabilities100

Implements a current MCP spec version (2026-07-28).Pass

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · mal-mcp

Claude Codex opencode OpenClaw Hermes Other

# add to Claude Code

claude mcp add grinv-mal-mcp -- npx -y mal-mcp

# add to Codex CLI

codex mcp add grinv-mal-mcp -- npx -y mal-mcp

// opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "grinv-mal-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "mal-mcp"
      ],
      "enabled": true
    }
  }
}

# add to OpenClaw

openclaw mcp add grinv-mal-mcp --command npx --arg -y --arg mal-mcp

# ~/.hermes/config.yaml

mcp_servers:
  grinv-mal-mcp:
    command: "npx"
    args: ["-y", "mal-mcp"]

// mcp.json

{
  "mcpServers": {
    "grinv-mal-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "mal-mcp"
      ]
    }
  }
}

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

3 Aug 26 +1

No change was recorded against any check on this day. Stability & Change Management went from 14 to 18.
2 Aug 26 +22
- Malware scan: unverified → pass ▲ security
- Schema quality: unverified → excellent ▲ functional
1 Aug 26 +26
- Stability: unverified → fail ▼ security
- Schema quality: excellent → unverified ▼ functional
- MCP protocol: unverified → pass ▲ functional
- Tool coverage: unverified → 100 ▲ functional
- Schema quality: unverified → 100 ▲ functional
- Package version: 0.9.0 → 0.9.1 functional
31 Jul 26 −41
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
30 Jul 26 +34
- Schema quality: 109 → 208 ▼ functional
- Schema quality: unverified → 100 ▲ functional
- Tool coverage: unverified → 100 ▲ functional
- Package version: 0.8.0 → 0.9.0 functional
29 Jul 26 −37
- Tool coverage: 100 → unverified ▼ functional
- Schema quality: 100 → unverified ▼ functional
- Package version: 0.7.3 → 0.8.0 functional
28 Jul 26 +37
- Schema quality: unverified → 100 ▲ functional
- Tool coverage: unverified → 100 ▲ functional
27 Jul 26 −55
- Malware scan: pass → unverified ▼ security
- Schema quality: 100 → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
- Package version: 0.7.2 → 0.7.3 functional
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional

Show 4 earlier entries Hide earlier entries

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Analysed npm/[email protected]

Provenance verified

Ecosystem: npm · Outcome: verified

Reason: verified

Source repo:: Grinv/mal-mcp
Certificate issuer:: https://token.actions.githubusercontent.com
Certificate SAN:: https://github.com/Grinv/mal-mcp/.github/workflows/release.yml@refs/tags/v0.9.1
Rekor log index:: 2306026390
Predicate type:: https://slsa.dev/provenance/v1
Subject digest:: sha512:9f230d99c920f4a21f0c09c1e49b214019719bd29f469f73a644eabfaa6876e14c459462b659f3d20064ef5fb14eb020252eab79fd01aaac653f26451
Discovery method:: attestation_endpoint

Dependencies 3 packages

3 packages in the resolved dependency tree.

MCP tools — 50 exposed · ~10,379 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens

login_mal Log in to MyAnimeList ~138

Authorize the personal-list tools with your MyAnimeList account (one-time). Prerequisite: register a MAL API app of type 'other' at https://myanimelist.net/apiconfig with Redirect URI set to this server's localhost callback, and set MAL_CLIENT_ID in the server env. Calling this returns an authorization URL: open it, log in, and click Allow. If your browser is on the same machine as the server and the callback port is free, login completes automatically; otherwise (a remote/headless host, or the port is busy) copy the URL you land on and pass it to submit_mal_redirect.

Input Output Examples

Input schema present but exposes no named parameters.

Name	Type	Req	Description
authorize_url	string	yes	—
auto_capture	boolean	yes	—
instructions	string	yes	—
redirect_uri	string	yes	—

No examples provided.

search_anime Search anime ~786

Search MyAnimeList anime by keyword; returns compact summaries (with the mal_id that other anime tools require) plus pagination info. If Tenrai is unavailable and MAL_CLIENT_ID is set, transparently retries via the official API, which ignores every filter except `q`/`sfw`/`limit`/`page` (`type`/`status`/`genres`/`genres_exclude`/`rating`/`score`/`min_score`/`max_score`/`letter`/`producers`/`start_date`/`end_date`/`unapproved`/`order_by`/`sort` are silently dropped), always returns empty `themes`/`demographics`/`broadcast` (no official-API equivalent for any of these), enforces an explicit `sfw: true` client-side (a filtered page can come back shorter than `limit`), and — for a query with no real title match — comes back with a page of unrelated anime instead of an empty result (a quirk of the official search endpoint itself, not a mal-mcp bug; don't treat a nonsense-query result as a real match during a fallback).

Input Output Examples

Name	Type	Req	Description
end_date	string	—	Only include entries whose end date is on or before this date (YYYY-MM-DD).
genres	string	—	Comma-separated MAL genre IDs to include (max 25), e.g. '1,4'. Look up IDs with get_anime_genres.
genres_exclude	string	—	Comma-separated MAL genre IDs to exclude (max 25), e.g. '1,4'. Look up IDs with get_anime_genres.
letter	string	—	Restrict results to entries whose title starts with this single letter.
limit	integer	—	Max results per page (1-50).
max_score	number	—	Maximum average MAL score (inclusive), 1-10.
min_score	number	—	Minimum average MAL score (inclusive), 0-10.
order_by	string	—	Field to order by.
page	integer	—	1-based page number for pagination (1-1000).
producers	string	—	Comma-separated MAL producer/studio IDs to restrict to (max 25). Look up IDs with get_producers.
q	string	yes	Search query, e.g. an anime title.
rating	array	—	Restrict to one or more specific content ratings. More granular than `sfw`/`sfw_strict` — use this to target a precise rating band instead of a blanket adult-content cutoff.
score	number	—	Restrict to entries with exactly this average score (rarely useful — prefer min_score/max_score for a range).
sfw	boolean	—	If true, exclude adult/explicit-rated entries (R+ Mild Nudity and up). Defaults to false (no filtering). Note: this alone still allows mainstream, safely-rated shows tagged with the Ecchi genre (fans…
sfw_strict	boolean	—	If true, exclude adult/explicit-rated entries AND anything tagged with the Ecchi genre, even otherwise-mainstream/safely-rated shows. Stricter than `sfw` alone. Defaults to false.
sort	string	—	Sort direction.
start_date	string	—	Only include entries whose start date is on or after this date (YYYY-MM-DD).
status	string	—	Filter by airing status.
type	array	—	Restrict to one or more media types.
unapproved	boolean	—	If true, also include entries not yet approved by MAL's moderators (excluded by default). Defaults to false.

Name	Type	Req	Description
page	object	yes	—
results	array	yes	—

No examples provided.

search_characters Search characters ~134

Search MyAnimeList characters by name. Returns compact summaries and the mal_id needed by get_character. Use get_anime_characters instead if you already have an anime's mal_id and want its full cast.

Input Output Examples

Name	Type	Req	Description
letter	string	—	Restrict results to entries whose title starts with this single letter.
limit	integer	—	Max results per page (1-50).
order_by	string	—	Field to order by.
page	integer	—	1-based page number for pagination (1-1000).
q	string	yes	Character name.
sort	string	—	Sort direction.

Name	Type	Req	Description
page	object	yes	—
results	array	yes	—

No examples provided.

search_manga Search manga ~729

Search MyAnimeList manga by keyword (also light novels, manhwa/manhua); returns compact summaries with the mal_id that other manga tools require. If Tenrai is unavailable and MAL_CLIENT_ID is set, transparently retries via the official API, which ignores every filter except `q`/`sfw`/`limit`/`page` (`type`/`status`/`genres`/`genres_exclude`/`score`/`min_score`/`max_score`/`letter`/`magazines`/`start_date`/`end_date`/`unapproved`/`order_by`/`sort` are silently dropped), always returns empty `themes`/`demographics` (no official-API equivalent), enforces an explicit `sfw: true` client-side (a filtered page can come back shorter than `limit`), and — for a query with no real title match — comes back with a page of unrelated manga instead of an empty result (a quirk of the official search endpoint itself, not a mal-mcp bug; don't treat a nonsense-query result as a real match during a fallback).

Input Output Examples

Name	Type	Req	Description
end_date	string	—	Only include entries whose end date is on or before this date (YYYY-MM-DD).
genres	string	—	Comma-separated MAL genre IDs to include (max 25), e.g. '1,4'. Look up IDs with get_manga_genres.
genres_exclude	string	—	Comma-separated MAL genre IDs to exclude (max 25), e.g. '1,4'. Look up IDs with get_manga_genres.
letter	string	—	Restrict results to entries whose title starts with this single letter.
limit	integer	—	Max results per page (1-50).
magazines	string	—	Comma-separated MAL magazine IDs to restrict to (max 25). Look up IDs with get_magazines.
max_score	number	—	Maximum average MAL score (inclusive), 1-10.
min_score	number	—	Minimum average MAL score (inclusive), 0-10.
order_by	string	—	Field to order by.
page	integer	—	1-based page number for pagination (1-1000).
q	string	yes	Search query, e.g. a manga title.
score	number	—	Restrict to entries with exactly this average score (rarely useful — prefer min_score/max_score for a range).
sfw	boolean	—	If true, exclude adult/explicit-rated entries (R+ Mild Nudity and up). Defaults to false (no filtering). Note: this alone still allows mainstream, safely-rated shows tagged with the Ecchi genre (fans…
sfw_strict	boolean	—	If true, exclude adult/explicit-rated entries AND anything tagged with the Ecchi genre, even otherwise-mainstream/safely-rated shows. Stricter than `sfw` alone. Defaults to false.
sort	string	—	Sort direction.
start_date	string	—	Only include entries whose start date is on or after this date (YYYY-MM-DD).
status	string	—	Filter by publication status.
type	array	—	Restrict to one or more publication types.
unapproved	boolean	—	If true, also include entries not yet approved by MAL's moderators (excluded by default). Defaults to false.

Name	Type	Req	Description
page	object	yes	—
results	array	yes	—

No examples provided.

search_people Search people ~116

Search MyAnimeList people (voice actors, directors, authors) by name. Returns the mal_id needed by get_person.

Input Output Examples

Name	Type	Req	Description
letter	string	—	Restrict results to entries whose title starts with this single letter.
limit	integer	—	Max results per page (1-50).
order_by	string	—	Field to order by.
page	integer	—	1-based page number for pagination (1-1000).
q	string	yes	Person name.
sort	string	—	Sort direction.

Name	Type	Req	Description
page	object	yes	—
results	array	yes	—

No examples provided.

submit_mal_redirect Finish MyAnimeList login ~90

Complete a login started with login_mal by submitting the URL your browser was redirected to after clicking Allow (the one containing ?code=...). Use this when login didn't complete automatically — e.g. the server runs on a remote/headless host. A bare code string is also accepted.

Input Output Examples

Name	Type	Req	Description
redirect_url	string	yes	The full redirected URL (contains ?code=...), or just the code value.

Name	Type	Req	Description
logged_in	boolean	yes	—
message	string	yes	—
user	string	—	—

No examples provided.

update_my_anime_status Update my anime status ~335

Add or update an anime on the authenticated user's list (status, score, watched episodes, dates). Creates the entry if absent; fields you omit are left unchanged on an existing entry. Provide at least one field besides anime_id. Requires a MyAnimeList login.

Input Output Examples

Name	Type	Req	Description
anime_id	integer	yes	MyAnimeList numeric ID of the target entry. (The read tools call this same id `id`; it's named anime_id/manga_id here to match MAL's own write endpoints.) Obtain it from search_anime/search_manga, or…
comments	string	—	Free-text comments.
finish_date	string	—	Date as YYYY-MM-DD.
is_rewatching	boolean	—	Whether currently rewatching.
num_times_rewatched	integer	—	Times rewatched.
num_watched_episodes	integer	—	Episodes watched. Note: get_my_anime_list returns this same value as `num_episodes_watched` — the field name is intentionally different here.
priority	integer	—	List priority: 0 = low, 1 = medium, 2 = high.
rewatch_value	integer	—	Rewatch/reread value: 0 = none … 5 = very high.
score	integer	—	Score 0-10 (0 clears the score).
start_date	string	—	Date as YYYY-MM-DD.
status	string	—	List status bucket.
tags	string	—	Comma-separated free-text tags.

Name	Type	Req	Description
score	integer	—	—
status	string	—	—

No examples provided.

update_my_manga_status Update my manga status ~292

Add or update a manga on the authenticated user's list (status, score, chapters/volumes read). Creates the entry if absent; fields you omit are left unchanged on an existing entry. Provide at least one field besides manga_id. Requires a MyAnimeList login.

Input Output Examples

Name	Type	Req	Description
comments	string	—	Free-text comments.
is_rereading	boolean	—	Whether currently rereading.
manga_id	integer	yes	MyAnimeList numeric ID of the target entry. (The read tools call this same id `id`; it's named anime_id/manga_id here to match MAL's own write endpoints.) Obtain it from search_anime/search_manga, or…
num_chapters_read	integer	—	Chapters read.
num_times_reread	integer	—	Times reread.
num_volumes_read	integer	—	Volumes read.
priority	integer	—	List priority: 0 = low, 1 = medium, 2 = high.
reread_value	integer	—	Rewatch/reread value: 0 = none … 5 = very high.
score	integer	—	Score 0-10 (0 clears the score).
status	string	—	List status bucket.
tags	string	—	Comma-separated free-text tags.

Name	Type	Req	Description
score	integer	—	—
status	string	—	—

No examples provided.

On this page

Handy links

Scoring key

80+ high trust
60–79 medium
below 60 low

How we score

Score history · last 30 days

26 Jul 3 Aug

Day	Score
26 Jul	96
27 Jul	41
28 Jul	78
29 Jul	41
30 Jul	75
31 Jul	34
1 Aug	60
2 Aug	82
3 Aug	83