io.github.smeet666/mcp-metacritic
NPM · MCP-METACRITIC · 2 COMPONENTS · SCANNED SEP 27
Search Metacritic films, shows and games, read scores and critic reviews. No API key.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →
Supply Chain Security98
- No malware found by supply-chain analysis.Pass
- No known CVEs affecting this package version or its production dependencies.Pass
- No install/post-install scripts declared.Pass
- 31 of 95 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency100
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Cryptographically verified build provenance (signed, bound to smeet666/mcp-metacritic). View diagnostics → Pass
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 28 days ago).Pass
- Publishes a security disclosure policy (SECURITY.md).Pass
Schema Quality & AI Usability65
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 1115 tokens (~278/item across 4 items; 4 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management97
- Stability observed for 29 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
- Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 4 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 5 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
How do I install the io.github.smeet666/mcp-metacritic server?
io.github.smeet666/mcp-metacritic runs locally as an npm package, launched with npx -y mcp-metacritic. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
npm · mcp-metacritic
claude mcp add smeet666-mcp-metacritic -- npx -y mcp-metacritic
{
"mcpServers": {
"smeet666-mcp-metacritic": {
"command": "npx",
"args": [
"-y",
"mcp-metacritic"
]
}
}
} {
"servers": {
"smeet666-mcp-metacritic": {
"command": "npx",
"args": [
"-y",
"mcp-metacritic"
]
}
}
} codex mcp add smeet666-mcp-metacritic -- npx -y mcp-metacritic
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"smeet666-mcp-metacritic": {
"type": "local",
"command": [
"npx",
"-y",
"mcp-metacritic"
],
"enabled": true
}
}
} openclaw mcp add smeet666-mcp-metacritic --command npx --arg -y --arg mcp-metacritic
mcp_servers:
smeet666-mcp-metacritic:
command: "npx"
args: ["-y", "mcp-metacritic"] {
"McpServers": {
"smeet666-mcp-metacritic": {
"Transport": "stdio",
"Command": "npx",
"Arguments": [
"-y",
"mcp-metacritic"
]
}
}
} assistant mcp add smeet666-mcp-metacritic -t stdio -c npx -a -y mcp-metacritic
{
"mcpServers": {
"smeet666-mcp-metacritic": {
"command": "npx",
"args": [
"-y",
"mcp-metacritic"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 27 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
- 26 Sept 26 −1
- Stability: pass → 0.93 functional
- 25 Sept 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 24 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
- 22 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 87 to 90. That category is still filling its 30-day observation window: 26 days of observed history at the previous scan, 27 at this one. The score rises as the window fills, whether or not the server changes.
- 21 Sept 26 −2
- Stability: pass → 0.87 functional
- 20 Sept 26 0
- Stability: 0.97 → pass security
- 19 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 27 Sept 2026 · Analysed npm/mcp-metacritic@2.0.1
Provenance Verified
A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.
| Result | Verified |
|---|---|
| Ecosystem | npm |
| Reason | Verified |
| Discovered via | Registry attestation endpoint |
| Source repo | smeet666/mcp-metacritic |
| Certificate issuer | https://token.actions.githubusercontent.com |
| Certificate SAN | https://github.com/smeet666/mcp-metacritic/.github/workflows/publish.yml@refs/tags/v2.0.1 |
| Rekor log index | 2644879448 |
| Predicate type | https://slsa.dev/provenance/v1 |
| Subject digest | sha512:81c7589db07827887f6f54fdefb14e103631031abced3416fab8544b15e94e9617af5716f55d05dd5575411970e0eed812e49dd8bc396d712ecf7e333 |
Background: How many MCP packages publish verified provenance →
Dependencies 95 packages
| Packages resolved | 95 |
|---|---|
| Stale | 31 |
| Tree resolution | Complete |
Background: SBOMs and build attestations, explained →
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
browse_titles Browse rankings ~227
List films, shows or games by score, by release date or by current popularity. Use this when there is no specific title to look up: best rated, newest, what people are looking at now. Filter by genre with a single name such as Horror, Comedy or Action. Sorting by score returns the all-time ranking, which is dominated by older titles: combine with a genre to narrow it. Scores come back on their own scales, 100 for critics and 10 for users. Paging is approximate: Metacritic does not order tied entries stably, so an entry can appear on two consecutive pages. Deduplicate by slug rather than counting rows.
| Name | Type | Req | Description |
|---|---|---|---|
| genre | string | – | Single genre name, such as Horror. Omit for all genres. |
| kind | string | – | Which catalogue to list. |
| limit | integer | – | How many rows to return. |
| offset | integer | – | How many rows to skip, for paging. |
| sort | string | – | 'score' is the critic ranking, 'recent' is by release date, 'popular' is current attention. |
| Name | Type | Req | Description |
|---|---|---|---|
| genre | string|null | yes | – |
| kind | string | yes | – |
| next_offset | – | yes | Pass as 'offset' for the next page. Tied entries are not ordered stably upstream, so deduplicate by slug across pages. |
| notes | array | yes | – |
| offset | integer | yes | – |
| results | array | yes | – |
| sort | string | yes | – |
| total_available | integer | yes | How many entries match upstream, which is the size of what this samples. |
No examples provided.
get_reviews Read reviews ~258
Read individual reviews of a Metacritic entry, from critics or from users. Get the slug and kind from search_titles first. Filter with 'sentiment' to read only what praised or panned it, which Metacritic groups itself. Metacritic returns a fixed sample rather than the full list, so 'total_available' is usually far larger than what comes back, and there is no way to page past the sample. Critic reviews carry the publication and a link to the original article: quote them with both. Critic scores run to 100 and user scores to 10, so do not average the two together.
| Name | Type | Req | Description |
|---|---|---|---|
| kind | string | yes | Which catalogue the entry belongs to. Pass it back with the slug. |
| limit | integer | – | How many reviews to return from the sample Metacritic publishes. |
| offset | integer | – | How many of the sampled reviews to skip. The sample itself cannot be paged past. |
| sentiment | string | – | Which slice to read. Metacritic groups reviews this way itself. |
| slug | string | yes | Identifier from search_titles, such as 'the-matrix'. |
| source | string | – | 'critic' is the professional press, 'user' is the audience. |
| Name | Type | Req | Description |
|---|---|---|---|
| kind | string | yes | – |
| next_offset | – | yes | Pass as 'offset' for the next page. |
| notes | array | yes | – |
| offset | integer | yes | – |
| reviews | array | yes | – |
| sentiment | string | yes | – |
| slug | string | yes | – |
| source | string | yes | – |
| source_url | string | yes | Metacritic page these reviews belong to. Cite it when an article link is missing. |
| total_available | integer | yes | How many reviews Metacritic counts in total. Usually far more than it serves here. |
No examples provided.
get_title Read an entry ~238
Read one Metacritic entry by slug and kind, both from search_titles. Sections are opt-in because a full entry is large: 'basic' and 'scores' are the default and cover most questions. 'scores' fetches the critic and audience breakdowns, each with its own scale, so never compare the two numbers directly. Sections gate the payload: asking for 'scores' alone returns no description, and 'basic' alone returns no scores. 'networks' lists the broadcasters of a show; 'where_to_watch' costs an extra request and covers films and shows only. A long description paginates: when 'truncated' is true, call again with 'offset' set to 'next_offset'.
| Name | Type | Req | Description |
|---|---|---|---|
| kind | string | yes | Which catalogue the entry belongs to. Pass it back with the slug. |
| max_chars | integer | – | Character budget for the description. |
| offset | integer | – | Where to resume the description. |
| sections | array | – | Which parts to return. Each extra section beyond the default costs a request. |
| slug | string | yes | Identifier from search_titles, such as 'the-matrix'. |
| Name | Type | Req | Description |
|---|---|---|---|
| awards | array | – | One tally per ceremony. Metacritic publishes no per-category detail. |
| critic_score | – | yes | – |
| description | string|null | yes | – |
| duration_minutes | – | yes | Runtime in minutes for a film, or the length of a typical episode for a show. |
| genres | array | yes | – |
| imdb_id | string|null | yes | IMDb identifier, usable to cross-reference other sources. |
| networks | array | – | Broadcasters, for shows. |
| next_offset | – | yes | Pass as 'offset' to read the rest. |
| notes | array | yes | – |
| offset | integer | yes | – |
| production | array | – | – |
| returned_chars | integer | yes | – |
| tagline | string|null | yes | – |
| title | object | yes | – |
| total_chars | integer | yes | Length of the full description. |
| truncated | boolean | yes | – |
| user_score | – | yes | – |
| where_to_watch | array | – | – |
No examples provided.
search_titles Search Metacritic ~187
Search Metacritic for films, shows and games by title. Returns one compact row per match, carrying the critic Metascore, so a question about the critical verdict needs no second call. Search rows carry no audience score: use get_title for that, or browse_titles, which does return it. Use the slug and kind with get_title for the full entry, or with get_reviews for what critics wrote. There is no paging: 'limit' is the only lever, and results always start from the most relevant match. This searches titles only. It cannot find an entry from a plot detail, a person or a studio.
| Name | Type | Req | Description |
|---|---|---|---|
| kind | string | – | Restrict results to one catalogue. Metacritic searches all three at once. |
| limit | integer | – | How many rows to return. |
| query | string | yes | Title or part of one, for example 'the matrix'. |
| Name | Type | Req | Description |
|---|---|---|---|
| notes | array | yes | – |
| query | string | yes | – |
| results | array | yes | – |
| total_available | integer | yes | How many entries Metacritic counted. For a query of several words it counts entries matching any one of them, so the number is far larger than the useful matches and should not be read as a match cou… |
No examples provided.
What is the io.github.smeet666/mcp-metacritic server?
io.github.smeet666/mcp-metacritic is listed in the public MCP registry as io.github.smeet666/mcp-metacritic. Search Metacritic films, shows and games, read scores and critic reviews. No API key. This page covers its npm package (mcp-metacritic).
Is the io.github.smeet666/mcp-metacritic server safe to use?
io.github.smeet666/mcp-metacritic scores 93 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 27 September 2026. It declares no install or post-install scripts. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the io.github.smeet666/mcp-metacritic server expose?
io.github.smeet666/mcp-metacritic exposes 4 tools: search_titles, get_title, get_reviews, browse_titles. Their descriptions and schemas cost roughly 910 tokens of context every time the server is loaded.
Is the io.github.smeet666/mcp-metacritic server still maintained?
io.github.smeet666/mcp-metacritic is still listed as active in the MCP registry. We last reached this channel on 27 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.
What licence is the io.github.smeet666/mcp-metacritic server under?
io.github.smeet666/mcp-metacritic declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.