io.github.smeet666/mcp-bideetmusique
NPM · MCP-BIDEETMUSIQUE · 2 COMPONENTS
Search the Bide & Musique collection of forgotten French songs. Records, lyrics, no API key.
Available components
Last scanned (21 hours ago)
Scores higher than 93% of npm servers
Category Entertainment and Games
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security98
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- No install/post-install scripts declared.Pass
- 31 of 92 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency100
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Cryptographically verified build provenance (signed, bound to smeet666/mcp-bideetmusique). View diagnostics → Pass
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 47 days ago).Pass
- Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability62
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 1887 tokens (~377/item across 5 items; 5 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management87
- Stability observed for 26 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 5 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 6 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 16 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes.
- 14 Oct 26 −3
- Stability: pass → 0.80 functional
- 13 Oct 26 +1
- Stability: 0.97 → pass security
- 12 Oct 26 +15
- Malware scan: unverified → pass ▲ security
- 11 Oct 26 −15
- Malware scan: pass → unverified ▼ security
- 3 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 90 to 93. That category is still filling its 30-day observation window: 27 days of observed history at the previous scan, 28 at this one. The score rises as the window fills, whether or not the server changes.
- 1 Oct 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes.
- 29 Sept 26 −3
- Stability: pass → 0.80 functional
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 16 Oct 2026 · Analysed npm/mcp-bideetmusique@2.0.1
Provenance Verified
A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.
| Result | Verified |
|---|---|
| Ecosystem | npm |
| Reason | Verified |
| Discovered via | Registry attestation endpoint |
| Source repo | smeet666/mcp-bideetmusique |
| Certificate issuer | https://token.actions.githubusercontent.com |
| Certificate SAN | https://github.com/smeet666/mcp-bideetmusique/.github/workflows/publish.yml@refs/tags/v2.0.1 |
| Rekor log index | 2644861906 |
| Predicate type | SLSA build provenance https://slsa.dev/provenance/v1 |
| Subject digest | sha512:28435eb7b6f6c6131811949512180024df57728ff195784954274f758847fb737c0d5378de51622bb9be9cd051ef452bb29495820567d7ce2eef9e7d4 |
Background: How many MCP packages publish verified provenance →
Dependencies 92 packages
| Packages resolved | 92 |
|---|---|
| Stale | 31 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
get_artist Read an artist's page ~248
Read an artist's page on Bide & Musique: the names they recorded under, what the catalogue notes about them, and every song of theirs the collection holds, each with its year. Takes the 'artist_id' that search_songs, get_song and get_random_song return. An artist page is a way into a discography rather than a biography: half of them state nothing beyond the name, and the median artist has one record here. Fields the page does not state come back null or empty, which is the ordinary state of this catalogue rather than a failed read. The date of birth comes back exactly as written, since the catalogue states a full date, a bare year, or a date with a death beside it. Nationality is free text for the same reason. Rows come in the site's order, by year of release, never by importance. When you show an artist to a user, credit Bide & Musique and link the page.
| Name | Type | Req | Description |
|---|---|---|---|
| artist_id | string | yes | The artist id returned by search_songs, get_song or get_random_song, digits only, for example '290'. |
| limit | integer | – | Maximum songs of the discography to return. |
| Name | Type | Req | Description |
|---|---|---|---|
| aliases | array | yes | Other names this artist recorded under, as the page stacks them. |
| artist_id | string | yes | – |
| birth_date | string|null | yes | Exactly as published, which may be a day, a bare year, a month and a year, or a date with a death beside it. Nothing here is parsed into a date. |
| discography | array | yes | – |
| discography_count | integer | yes | Songs returned, after 'limit'. |
| first_name | string|null | yes | – |
| links | array | yes | Addresses off the site, with the label the page gave them. |
| name | string | yes | – |
| nationality | string|null | yes | As the catalogue writes it, in its own words: 'suisse', 'franco-espagnole'. |
| notes | array | yes | – |
| photo_url | string|null | yes | – |
| presentation | string|null | yes | – |
| see_also | array | yes | – |
| songs_on_page | integer | yes | Songs the page held, before 'limit'. |
| source | string | yes | – |
| surname | string|null | yes | – |
| url | string | yes | – |
No examples provided.
get_random_song Read a record drawn at random ~165
Read one record drawn at random from the Bide & Musique collection: same answer as get_song, on a record nobody chose. Use it to browse the collection. For a question about a particular song, use get_song. The draw runs over the ids the site serves, from the first to the newest one its feed of new entries names, and an id the collection does not serve is drawn again. Records whose page carries a transcription come back with the words themselves, as published. When you show a record to a user, credit Bide & Musique and link the page.
| Name | Type | Req | Description |
|---|---|---|---|
| include_lyrics | boolean | – | Whether to return the transcription the drawn record's page carries. Browsing chains many calls, and a record with one runs to a few thousand characters. |
| Name | Type | Req | Description |
|---|---|---|---|
| added_on | string|null | yes | The day the collection catalogued it, as an ISO date. |
| artist | object | yes | – |
| catalogue_reference | string|null | yes | The reference printed on the record. A reference of four digits is not a year. |
| comments | – | yes | – |
| credited_performer | string|null | yes | A performer the sleeve credits apart from the artist page, when the record names one. |
| duration | object | yes | – |
| favourites | – | yes | How many people keep it as a favourite. Null when the page prints no counter. |
| image_url | string|null | yes | – |
| labels | array | yes | One entry per label, two when a record was co-released. |
| lyrics | object | yes | – |
| notes | array | yes | – |
| presentation | string|null | yes | What the catalogue wrote about the record. |
| see_also | array | yes | Other artists the record links to. |
| sleeve_credits | array | yes | Who is credited for the sleeve, when anyone is. |
| song_id | string | yes | – |
| source | string | yes | – |
| thumbnail_url | string|null | yes | – |
| title | string | yes | – |
| top50 | – | yes | – |
| url | string | yes | – |
| writers | array | yes | Writers and composers as credited, one entry each, empty when the record credits none. A few records name the part someone took, and the entry then reads as the site prints it, for example 'Paroles :… |
| year | – | yes | – |
No examples provided.
get_song Read a song's record ~265
Read one song's record on Bide & Musique: the year, the writers and composers, the duration, the label and its catalogue reference, the sleeve, when the collection catalogued it, how it ranked in the station's own chart, and how many people kept it as a favourite. Takes the 'song_id' that search_songs returns. Three things are always there: the title, the artist and the duration. Everything else is absent on some records, and comes back null or empty rather than guessed; a counter the record does not print is unknown, not zero. Records whose page carries a transcription come back with the words themselves, as published, along with who typed them. A record whose page carries none says so. When you show a record to a user, credit Bide & Musique and link the page.
| Name | Type | Req | Description |
|---|---|---|---|
| include_lyrics | boolean | – | Whether to return the transcription the page carries. A record whose page has one runs to a few thousand characters, so ask for false when the question is about the record: the year, the label or the… |
| song_id | string | yes | The song id returned by search_songs, digits only, for example '1734'. |
| Name | Type | Req | Description |
|---|---|---|---|
| added_on | string|null | yes | The day the collection catalogued it, as an ISO date. |
| artist | object | yes | – |
| catalogue_reference | string|null | yes | The reference printed on the record. A reference of four digits is not a year. |
| comments | – | yes | – |
| credited_performer | string|null | yes | A performer the sleeve credits apart from the artist page, when the record names one. |
| duration | object | yes | – |
| favourites | – | yes | How many people keep it as a favourite. Null when the page prints no counter. |
| image_url | string|null | yes | – |
| labels | array | yes | One entry per label, two when a record was co-released. |
| lyrics | object | yes | – |
| notes | array | yes | – |
| presentation | string|null | yes | What the catalogue wrote about the record. |
| see_also | array | yes | Other artists the record links to. |
| sleeve_credits | array | yes | Who is credited for the sleeve, when anyone is. |
| song_id | string | yes | – |
| source | string | yes | – |
| thumbnail_url | string|null | yes | – |
| title | string | yes | – |
| top50 | – | yes | – |
| url | string | yes | – |
| writers | array | yes | Writers and composers as credited, one entry each, empty when the record credits none. A few records name the part someone took, and the entry then reads as the site prints it, for example 'Paroles :… |
| year | – | yes | – |
No examples provided.
list_new_songs Read what was just catalogued ~211
Read the records Bide & Musique has just catalogued. The collection is built by hand and grows a few records at a time, so this answers what has been added lately rather than what the station is playing. The feed carries a fixed number of entries and offers no second page, so the count is what it holds and says nothing about how many records the collection has. Entries come in the order the feed publishes them, which runs newest first without being sorted: read 'published_at' rather than the position to date one. Each entry names the song and the artist as one line, which is read apart at the first separator and kept whole under 'listed_as'. Use get_song on the id for the record itself: year, writers, label, duration and the words when the page carries them. When you show a record to a user, credit Bide & Musique and link the page.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | Maximum entries to return, taken from the head of the feed. |
| Name | Type | Req | Description |
|---|---|---|---|
| entries_in_feed | integer | yes | How many entries the feed carries, read or not. It is a fixed window on the newest records, never a count of the collection. |
| notes | array | yes | – |
| result_count | integer | yes | – |
| results | array | yes | – |
| source | string | yes | – |
No examples provided.
search_songs Search songs ~549
Search the Bide & Musique collection: French songs, mostly forgotten ones, catalogued by hand since 2000 by the association that runs the station. Bide & Musique is a French site, so French terms work best. 'search_type' picks the axis and has to be stated: 'performer' for the artist credited on the record, 'title' for the name of the song, 'writer' for who wrote or composed it, 'lyrics' for the words sung in it, 'label' for the label it came out on, 'year' for the year printed on it. Each asks a different question and they are never merged, so a name that finds nothing as a performer may still be a title. 'year' takes one four-digit year and nothing else: the site drops any other word on that axis instead of filtering on it, and the ranges its own form documents return nothing. To combine a year with words, search the words on their own axis and read each record's year from its page. Use 'lyrics' to find a song from a line someone remembers. It answers with the songs whose words match, without showing what matched; read the words themselves with get_song on the id. Several keywords are combined with AND, each matched inside words, so every extra word narrows the search and never widens it. Quoting a phrase returns nothing, whatever the site's own form says. Results carry the song id, the artist and the page to read, which is where the song's own record lives: year, label, catalogue reference and writers. The count returned counts matching songs across every page, so it is usually larger than the rows of one page; ask for the next page with 'page'. When you show a song to a user, credit Bide & Musique and link the source URL.
| Name | Type | Req | Description |
|---|---|---|---|
| limit | integer | – | Maximum songs to return from that page. |
| page | integer | – | Which page of results to read. The answer states which page the site served. |
| query | string | yes | What to search for, in French, for example 'Pierre Bachelet' or 'vacances'. |
| search_type | string | yes | Which axis to search: 'performer' for the artist credited on the record, 'title' for the name of the song, 'writer' for who wrote or composed it, 'lyrics' for the words sung in it, 'label' for the la… |
| Name | Type | Req | Description |
|---|---|---|---|
| has_more_pages | boolean|null | yes | – |
| notes | array | yes | – |
| page_count | – | yes | – |
| page_requested | integer | yes | – |
| page_served | – | yes | The page the site actually served, read from its pagination bar. Asking for a page past the last one returns the last page, so this can differ from 'page_requested'. |
| query | string | yes | – |
| result_count | integer | yes | Songs returned, after 'limit'. |
| results | array | yes | – |
| rows_on_page | integer | yes | Songs this page held, before 'limit'. |
| search_type | string | yes | – |
| source | string | yes | – |
| total_matches | – | yes | The number Bide & Musique prints above the results, counting matching songs across every page. Null when the site printed none, which is different from zero. |
No examples provided.
How do I install the io.github.smeet666/mcp-bideetmusique server?
io.github.smeet666/mcp-bideetmusique runs locally as an npm package, launched with npx -y mcp-bideetmusique. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · mcp-bideetmusique
claude mcp add smeet666-mcp-bideetmusique -- npx -y mcp-bideetmusique
What is the io.github.smeet666/mcp-bideetmusique server?
io.github.smeet666/mcp-bideetmusique is listed in the public MCP registry as io.github.smeet666/mcp-bideetmusique. Search the Bide & Musique collection of forgotten French songs. Records, lyrics, no API key. This page covers its npm package (mcp-bideetmusique).
Is the io.github.smeet666/mcp-bideetmusique server safe to use?
io.github.smeet666/mcp-bideetmusique scores 91 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 16 October 2026. It declares no install or post-install scripts. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.smeet666/mcp-bideetmusique server expose?
io.github.smeet666/mcp-bideetmusique exposes 5 tools: search_songs, get_song, get_artist, get_random_song, list_new_songs. Their descriptions and schemas cost roughly 1,438 tokens of context every time the server is loaded.
Is the io.github.smeet666/mcp-bideetmusique server still maintained?
io.github.smeet666/mcp-bideetmusique is still listed as active in the MCP registry. We last reached this channel on 16 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the io.github.smeet666/mcp-bideetmusique server under?
io.github.smeet666/mcp-bideetmusique declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.