# io.github.jack1590/RokuMCP (npm · roku-mcp)

MCP server for Roku device automation — deploy, ECP control, screenshots, and debug console

- Trust score: 66/100 (medium)
- Change this week: +20
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- npm · `roku-mcp`: 66/100 (this document), [markdown](https://verifymcp.io/servers/jack1590-rokumcp/roku-mcp.md), [page](https://verifymcp.io/servers/jack1590-rokumcp/roku-mcp)

## Channel facts

- Registry: `npm`
- Package: `roku-mcp`
- Version: `1.3.2`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 88/100
  - No malware found by supply-chain analysis.
  - Only part of the dependency tree could be resolved (172 of 174), so this covers what we could see, not the whole tree.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (172 of 174), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 58 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 77/100
  - AI-judged instruction clarity (excellent).
  - Tool/resource definitions use about 1465 tokens (~73/item across 20 items; 20 tools + 0 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 0/100
  - Stability not yet verified: not enough scan history yet (needs a 30-day window).
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

**Unverified: 1 category.** A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

## Install

### Claude

```bash
claude mcp add jack1590-rokumcp -- npx -y roku-mcp
```

### Codex

```bash
codex mcp add jack1590-rokumcp -- npx -y roku-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "jack1590-rokumcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "roku-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add jack1590-rokumcp --command npx --arg -y --arg roku-mcp
```

### Hermes

```yaml
mcp_servers:
  jack1590-rokumcp:
    command: "npx"
    args: ["-y", "roku-mcp"]
```

### Other

```json
{
  "mcpServers": {
    "jack1590-rokumcp": {
      "command": "npx",
      "args": [
        "-y",
        "roku-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-02 (score 66, +45)

- [security regression] Provenance: unverified → fail
- [security improvement] Known CVEs: unverified → partial
- [security improvement] Install scripts: unverified → pass
- [security improvement] Malware scan: unverified → pass
- [security] Stability: Stability not yet verified: not enough scan history yet (needs a 30-day window).
- [functional regression] Security disclosure: fail → unverified
- [functional regression] Tool coverage: 100 → unverified
- [functional improvement] MCP protocol: unverified → pass
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] Dependency health: unverified → partial
- [functional improvement] License: unverified → pass
- [functional improvement] Schema quality: unverified → excellent
- [functional] Licence: MIT

### 2026-07-31 (score 21, −25)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-30 (score 46, +20)

- [functional regression] Dependency health: partial → unverified
- [functional improvement] Tool coverage: unverified → 100

### 2026-07-28 (score 26, −20)

- [functional regression] Tool coverage: 100 → unverified
- [functional improvement] Dependency health: unverified → partial
- [functional] First check of Schema quality: unverified

### 2026-07-27 (score 46)

First indexed and scored.

## MCP tools (20)

### `roku_deploy` (~118 tokens)

Sideload (deploy) a Roku application to the device. Packages all files in the project directory and uploads them. A dev channel must not already be running, or it will be replaced.

Input parameters:

- `files` (array): Glob patterns for files to include. Defaults to all files in rootDir (**/*).
- `host` (string): IP address or hostname of the Roku device
- `password` (string): Developer password for the Roku device
- `rootDir` (string, required): Absolute path to the project root directory containing the manifest file

### `roku_delete_dev_channel` (~51 tokens)

Delete the currently sideloaded developer channel from the Roku device.

Input parameters:

- `host` (string): IP address or hostname of the Roku device
- `password` (string): Developer password for the Roku device

### `roku_discover` (~52 tokens)

Scan the local network for Roku devices using SSDP discovery. Returns a list of all found devices with their IP addresses.

Input parameters:

- `timeoutMs` (number): How long to scan in milliseconds (default 3000)

### `roku_keypress` (~108 tokens)

Send a single key press to the Roku device via ECP. Common keys: Home, Rev, Fwd, Play, Select, Left, Right, Down, Up, Back, InstantReplay, Info, Backspace, Search, Enter, Lit_<character>

Input parameters:

- `host` (string): IP address or hostname of the Roku device
- `key` (string, required): The key to press (e.g. Home, Select, Up, Down, Left, Right, Back, Lit_a)

### `roku_keypress_sequence` (~76 tokens)

Send a sequence of key presses to the Roku device with an optional delay between each press.

Input parameters:

- `delayMs` (number): Delay in milliseconds between each key press (default 100)
- `host` (string): IP address or hostname of the Roku device
- `keys` (array, required): Array of keys to press in order

### `roku_launch` (~89 tokens)

Launch or deep-link into a channel on the Roku device. Use appId "dev" for the sideloaded developer channel.

Input parameters:

- `appId` (string, required): Application ID to launch (use "dev" for the sideloaded channel)
- `host` (string): IP address or hostname of the Roku device
- `params` (object): Optional launch parameters for deep linking (key-value pairs)

### `roku_query_device_info` (~46 tokens)

Query the Roku device for its info: model, firmware version, serial number, network info, etc.

Input parameters:

- `host` (string): IP address or hostname of the Roku device

### `roku_query_active_app` (~38 tokens)

Query the currently active (foreground) app on the Roku device.

Input parameters:

- `host` (string): IP address or hostname of the Roku device

### `roku_query_app_ui` (~46 tokens)

Get the current app UI tree as XML. Only works when a sideloaded dev channel is running.

Input parameters:

- `host` (string): IP address or hostname of the Roku device

### `roku_query_sg_nodes` (~104 tokens)

Query SceneGraph nodes on the Roku device. Use type "all" for all nodes, "roots" for root nodes, or "node" with a nodeId to inspect a specific node.

Input parameters:

- `host` (string): IP address or hostname of the Roku device
- `nodeId` (string): Node ID to inspect (required when type is "node")
- `type` (string, required): Type of query: "all", "roots", or "node"

### `roku_type_text` (~95 tokens)

Type a text string into the currently focused text field on the Roku device. Each character is sent as an individual Lit_ keypress. Use this for search fields, email inputs, password fields, etc.

Input parameters:

- `delayMs` (number): Delay in milliseconds between each character (default 50)
- `host` (string): IP address or hostname of the Roku device
- `text` (string, required): The text string to type

### `roku_query_media_player` (~66 tokens)

Query the media player state on the Roku device. Returns playback state (play, pause, buffer, stop, none), position, duration, and error info. Use this to verify video playback in tests.

Input parameters:

- `host` (string): IP address or hostname of the Roku device

### `roku_find_node` (~142 tokens)

Search the app UI tree for a node by its ID or attribute value. Returns the matching node with all its properties (text, visible, focused, subtype, bounds, etc.). Only works when a sideloaded dev channel is running.

Input parameters:

- `attr` (string): Attribute name to search by (e.g. "subtype", "text", "name")
- `host` (string): IP address or hostname of the Roku device
- `nodeId` (string): The ID of the node to find (e.g. "emailBox", "settingsTabs")
- `value` (string): Attribute value to match (e.g. "AccountSettingsScreen")

### `roku_get_focused_node` (~67 tokens)

Get the currently focused node in the app UI tree. Returns the node with all its properties (id, subtype, text, bounds, etc.). Only works when a sideloaded dev channel is running.

Input parameters:

- `host` (string): IP address or hostname of the Roku device

### `roku_sleep` (~67 tokens)

Wait for a specified duration. Use this between navigation steps to allow the UI to render, animations to complete, or content to load.

Input parameters:

- `durationMs` (number, required): Duration to wait in milliseconds (e.g. 1000 for 1 second, 5000 for 5 seconds)

### `roku_screenshot` (~115 tokens)

Capture a screenshot of the current screen on the Roku device. A sideloaded dev channel must be running. Returns the image as base64-encoded content and the file path where it was saved.

Input parameters:

- `host` (string): IP address or hostname of the Roku device
- `outDir` (string): Directory to save the screenshot. Defaults to OS temp directory.
- `outFile` (string): Base filename (without extension). Defaults to timestamped name.
- `password` (string): Developer password for the Roku device

### `roku_console_connect` (~65 tokens)

Open a persistent TCP connection to the BrightScript debug console on port 8085. Only one connection is active at a time.

Input parameters:

- `host` (string): IP address or hostname of the Roku device
- `port` (number): Debug console port (default 8085)

### `roku_console_read` (~29 tokens)

Read buffered output from the BrightScript debug console since the last read. Automatically disconnects after reading.

### `roku_console_send` (~73 tokens)

Send a command to the BrightScript debug console and return the response. Automatically disconnects after receiving the response. Common commands: bt (backtrace), var (variables), cont (continue), step, over, out, exit, print <expr>.

Input parameters:

- `command` (string, required): Command to send to the debug console

### `roku_console_disconnect` (~18 tokens)

Close the active BrightScript debug console connection.

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/jack1590-rokumcp/roku-mcp#diagnostics

## Score history

- 2026-08-03: 66
- 2026-08-02: 66
- 2026-08-01: 21
- 2026-07-31: 21
- 2026-07-30: 46
- 2026-07-28: 26
- 2026-07-27: 46

## Links

- npm package: https://www.npmjs.com/package/roku-mcp
- Socket report: https://socket.dev/npm/package/roku-mcp
- Repository: https://github.com/jack1590/RokuMCP
- Changelog RSS feed: https://verifymcp.io/servers/jack1590-rokumcp/roku-mcp/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/jack1590-rokumcp/roku-mcp/changelog.json
- HTML version of this page: https://verifymcp.io/servers/jack1590-rokumcp/roku-mcp