TIDAL MCP

io.github.sickn33Published by GitHub account sickn33v1.4.0Updated Nov 5, 2026

Search, analyze, organize, and safely modify TIDAL through 122 typed MCP tools.

VerifiedSTDIODesktop onlyData & AnalyticsMedia & Design

Overview

AI-generated overview

Local MCP server that connects an AI assistant to a TIDAL account for catalog search, playlist analysis, discovery and approval-gated playlist edits.

What you can do
  • Search and look up tracks, albums, artists, playlists, videos, mixes, users, barcodes and ISRCs
  • Explore catalog, editorial pages, genres, moods, Home, Explore and For You, plus lyrics and artist discographies
  • Read favorites, counts, playlists, folders and mixes, and analyze or compare playlists
  • Export playlists to JSON or M3U and summaries or comparisons to JSON
  • Preview playlist, folder and favorite changes, then commit them with a single-use approval token
When to use it
Useful when you want an assistant to work with your own TIDAL library: auditing or comparing playlists, finding related tracks, summarizing your collection, or preparing playlist and folder changes you review before they are applied.
Requirements
Runs locally over stdio via npx; needs Node.js 18 or newer, Python 3.11–3.13, uv, macOS or Linux, and a TIDAL account. A one-time device-login authorization stores the OAuth session locally. Optional variables: TIDAL_MCP_DATA_DIR, TIDAL_MCP_EXPORT_DIR, and TIDAL_MCP_ENABLE_WRITES set to 1 to allow writes.
Before you install
Account changes are off by default and only run after a preview and explicit approval, but enabling TIDAL_MCP_ENABLE_WRITES lets the assistant create, edit, delete, merge or clear playlists and folders and change favorites. The OAuth session is kept in a local private directory, so protect that directory. It relies on an unofficial TIDAL adapter that may break when TIDAL changes.

Installation

In SourceWeft

  1. Open TIDAL MCP in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

TIDAL MCP — Complete, Safety-First TIDAL Server for AI Assistants

[Abstract sound waves becoming a network of MCP tools]

[CI] [Website] [npm] [Python 3.11–3.13] [MCP Python SDK 2.x] [Tests: 100% statements + branches] [License: MIT]

TIDAL MCP connects Codex, Claude Desktop, Claude Code, Cursor, and other stdio-compatible Model Context Protocol clients to a TIDAL account. Search the catalog, analyze playlists, discover music, read lyrics, manage favorites, organize folders, and safely create or edit playlists through 122 typed MCP tools.

Positioning: in the September 4, 2026 review, this was the most complete public TIDAL MCP implementation found in a reproducible review of the current GitHub landscape. The claim is based on registered tool coverage, structured schemas, mutation safety, and automated test evidence—not marketing alone. See the dated comparison.

Why this TIDAL MCP exists

Most TIDAL integrations expose a small selection of search and playlist commands. TIDAL MCP is built as a complete local control surface for AI agents while keeping credentials and approvals on your machine.

  • 122 discoverable tools: 84 reads, 36 mutation previews, and 2 approval-token commits.
  • Broad account coverage: catalog, editorial pages, recommendations, lyrics, favorites, playlists, folders, mixes, images, and playback metadata.
  • Safe writes: mutations are off by default and always require preview → explicit approval → commit.
  • Private authentication: OAuth session data never travels through MCP tool responses.
  • Typed and bounded: every input and output has a schema, limits, and MCP safety annotations.
  • Verified quality: 100% statement and branch test coverage plus a real stdio handshake and an optional authenticated read-only smoke test.

What can an AI assistant do with TIDAL?

Ask naturally:

  • “Analyze my entire workout playlist: artist concentration, eras, duplicates, duration, and sequencing.”
  • “Find 20 tracks related to these three songs, exclude anything already in my playlist, and use at most two tracks per artist.”
  • “Compare an artist’s albums, EPs, singles, appearances, top tracks, biography, and related artists.”
  • “Show my favorite albums and playlists, then summarize how my collection is distributed.”
  • “Prepare a new playlist from these recommendations and show me the exact changes before doing anything.”
  • “Move these playlists into a folder, but ask for confirmation before changing my account.”

See real-world workflows and prompt examples.

Tool coverage

SurfaceToolsExamples
Authentication, search, recommendations3status, multi-type search, deterministic multi-seed recommendations
Catalog, editorial, discovery54tracks, albums, artists, videos, lyrics, genres, Home, Explore, For You
Collection, playlists, folders22favorites, counts, playlist items, owned/public playlists, folders, mixes
Derived analysis3full-playlist collection, playlist summary, playlist comparison
Local export2playlist to JSON or M3U, and summaries or comparisons to JSON
Exact mutation previews36playlist CRUD, item moves, visibility, favorites, folders
Approval-token commits2universal commit and compatible playlist-creation alias

The table sums to the 122 registered tools. Four MCP prompts are registered alongside them (playlist-from-description, playlist review, discovery digest, library audit); prompts are guidance over the tools, so they are not counted as tools.

Every list operation is bounded and paginated. Every result uses a public-field allowlist so OAuth tokens, request clients, and internal session data cannot enter model context. The complete map is in API_COVERAGE.md.

Quick start

Requirements

  • macOS or Linux; macOS is live-account tested
  • Node.js 18 or newer
  • Python 3.11–3.13
  • uv
  • A TIDAL account

1. Install and authenticate

bash
npx -y @sickn33/tidal-mcp auth

Open the device-authorization URL, approve access in TIDAL, and return to the terminal. The session is stored in your private operating-system application-data directory, not in the repository.

Check or remove it at any time:

bash
npx -y @sickn33/tidal-mcp auth --statusnpx -y @sickn33/tidal-mcp auth --logout --yes

To install from source for development instead:

bash
git clone https://github.com/sickn33/tidal-mcp.gitcd tidal-mcpuv syncuv run tidal-auth

2. Connect an MCP client

Use npm directly; the package launches the pinned Python implementation locally through uvx:

json
{  "mcpServers": {    "tidal": {      "command": "npx",      "args": [        "-y",        "@sickn33/tidal-mcp"      ]    }  }}

Restart or reconnect your MCP client, then ask: “Check my TIDAL authentication status.”

Enable safe account writes

Remote writes are disabled unless the MCP process receives:

json
"env": {  "TIDAL_MCP_ENABLE_WRITES": "1"}

Enabling the flag does not make mutations automatic. Every change still uses three explicit steps:

  1. A named tidal_preview_* tool records the exact parameters and target metadata in a private, short-lived local draft.
  2. The assistant presents that preview to the user.
  3. Only after approval does tidal_commit_action accept the single-use token and execute exactly the recorded action.

Successful token replays return the stored result. Expired tokens fail closed. Ambiguous failed writes are locked to reduce duplicate effects. Destructive previews are clearly annotated.

Supported TIDAL operations

  • Search and lookup: tracks, albums, artists, playlists, videos, mixes, users, barcodes, ISRCs.
  • Track intelligence: details, radio, radio mixes, lyrics, playback metadata, temporary account-scoped URLs.
  • Artists and albums: discographies, EPs and singles, appearances, biographies, reviews, related artists, similar albums, resolutions, artwork, and editorial pages.
  • Discovery: Home, Explore, For You, genres, moods, mixes, videos, hi-res, and local genre hubs.
  • Editorial navigation: read the items and links inside a page category, expand a show-more/view-all section, and open a page link to keep browsing past the first screen.
  • Collection: favorite tracks, albums, artists, playlists, videos, mixes, folders, and counts.
  • Playlists: metadata, tracks, mixed items, counts, images, create/edit/delete/clear/merge, visibility, add/remove/reorder operations.
  • Folders: inspect, create, rename, delete, and move collection-tree items.

The server intentionally does not download media, bypass DRM, expose raw OAuth methods, or provide an unrestricted private-endpoint proxy.

Configuration

VariableDefaultMeaning
TIDAL_MCP_ENABLE_WRITES0Permit approval-token commits for allowlisted account mutations
TIDAL_MCP_DATA_DIROS application-data directorySession and draft root
TIDAL_MCP_SESSION_FILE<data-dir>/session.jsonOverride the OAuth session path
TIDAL_MCP_DRAFT_TTL_SECONDS900Approval lifetime, between 60 and 3600 seconds
TIDAL_MCP_EXPORT_DIR<data-dir>/exportsWhere tidal_export_playlist writes; created privately

New private directories use mode 0700 and sensitive files use 0600 on systems supporting POSIX permissions. Existing custom parent directories are never silently permission-rewritten.

Verified quality

bash
uv sync --all-groupsuv run ruff format --check .uv run ruff check .uv run pytest --cov=tidal_mcp --cov-report=term-missinguv run python scripts/smoke_stdio.pyuv build

The coverage gate is 100% for statements and branches. Tests exercise every registered read and mutation route through the MCP schemas and the pinned tidalapi adapter without contacting TIDAL. The stdio smoke test launches the packaged protocol process and verifies all 122 tool schemas.

Official releases are published from GitHub Actions through npm Trusted Publishing, with no long-lived npm write token. npm attaches provenance automatically, and the same release workflow publishes the matching metadata to the official MCP Registry through GitHub OIDC.

An optional authenticated smoke test performs representative reads only:

bash
uv run python scripts/smoke_live_read_only.py

Release maintainers can test the exact public npm package through the same MCP client path:

bash
uv run python scripts/smoke_live_read_only.py \  --command npx \  --server-arg=-y \  --server-arg=@sickn33/[email protected]

The deterministic evaluation suite and the dated competitive matrix make quality claims inspectable.

Architecture and compatibility

TIDAL provides developer APIs, but developer credentials are issued separately and the official surface does not cover every consumer-account workflow. This local server therefore pins tidalapi 0.8.11, an unofficial adapter around TIDAL’s consumer endpoints, for broad device-login coverage. TIDAL changes can require maintenance; the pinned dependency and live smoke test make that risk visible.

The server uses the MCP Python SDK over stdio. Blocking upstream calls run outside the async protocol event loop. It does not launch a Flask sidecar or store authentication in temporary directories.

Documentation

Project status

Version 1.4.0 adds export of a playlist summary or comparison to JSON, and reduces the network cost of every playlist tool by resolving each playlist once per call.

License, attribution, and trademark notice

MIT. This repository preserves the history and license of yuhuacheng/tidal-mcp; see NOTICE.md.

TIDAL is a trademark of its respective owner. This is an independent, unofficial community project and is not affiliated with, endorsed by, or sponsored by TIDAL. No TIDAL logo or album artwork is bundled with the project.

Source: README.md at commit b69ff65

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

3
  1. v1.4.0LatestOct 8, 2026
  2. v1.3.0Oct 7, 2026
  3. v1.0.1Sep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts