Mcp Yoto

io.github.danpillay87由 GitHub 账号 danpillay87 发布v0.1.0更新于 Oct 24, 2026

MCP server for Yoto: manage cards, tracks, icons and family devices from any MCP client.

已验证Streamable HTTP可网页运行效率与工作流文件与存储媒体与设计

概览

AI 生成的概览

将 Yoto 账户连接到 AI 助手，使其能列出、创建和编辑 Yoto 卡片、添加曲目、设置图标并查看家庭播放器。

可以做什么
列出并读取 MYO 或家庭库中的卡片，含章节和曲目，并检查认证状态与 API 可达性（yoto_list_cards、yoto_get_card、yoto_status）。创建、重命名、重排、设置图标和删除 MYO 卡片（yoto_create_card、yoto_update_card、yoto_delete_card）。上传并转码音频，然后向卡片追加曲目（yoto_upload_audio、yoto_add_track）。搜索公共 16×16 图标库并上传自定义图标（yoto_search_icons、yoto_upload_icon）。查看家庭播放器及其配置，实时播放器状态尚不可用（yoto_list_devices、yoto_get_device_config、yoto_player_status）。
适用场景
适合拥有 Yoto 的家庭，通过 Claude 或 ChatGPT 对话来制作或编辑音频卡片、添加曲目和挑选图标，而无需打开 Yoto 应用，也可用于查看哪些家庭播放器已连接。
运行要求
需要一个 Yoto 账户，通过 Yoto 自己的登录页面登录，并授予个人资料、内容、图标及家庭库/设备查看的 OAuth 权限。可使用远程端点 mcp-yoto.danpillay87.workers.dev/mcp，或通过 npx 运行本地 npm 包 mcp-yoto（需 Node.js）。需要访问 Yoto API 的网络连接。
安装前请注意
该服务器申请内容管理和图标管理权限，助手因此可以创建、修改和删除 MYO 卡片并上传音频和图标。README 说明运营方原则上可以更改服务器代码以在传输中截获令牌，且有效的客户端令牌可能解密对应的已存记录。可在 Yoto 账户设置中撤销访问以断开连接。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Mcp Yoto，将其添加到工作区。
  2. 连接 所需的 凭据。它们会被私密存储，绝不会在公开页面上展示。
  3. 为需要使用其工具的对话启用该服务。

Web executable，通过 Streamable HTTP。 远程服务在工作区中配置后即可从网页运行时运行。

交给智能体安装

把这段提示词粘贴到 Claude Code、Codex、Cursor 等智能体，或 SourceWeft 对话中。智能体会读取该服务器的安装指南，先向你展示发布者、端点和登录方式，经你同意后再把它添加到你的客户端。密钥不会写进任何命令。

阅读 https://sourceweft.com/mcp/io.github.danpillay87%2Fmcp-yoto/install.md，并按其中说明把这个 MCP 服务器接入我的客户端。修改任何配置之前，先告诉我它的发布者、端点和登录方式，等我确认。不要把 API 密钥写进命令或我会提交的文件；问我密钥应从哪里获取。

查看智能体所依据的安装指南

其他 MCP 客户端

把它添加到你客户端的 mcpServers 配置中。 客户端会在首次连接时完成 OAuth 登录。

{
  "mcpServers": {
    "yoto": {
      "type": "http",
      "url": "https://mcp-yoto.danpillay87.workers.dev/mcp"
    }
  }
}

README

[mcp-yoto logo]

mcp-yoto

Works with Yoto — connect your Yoto library to Claude and ChatGPT.

[npm version] [CI] [License: MIT] [Works with Yoto]

For parents

What you can do once it's connected:

  • See every card in your Yoto library (your own MYO cards and your family library) from inside Claude or ChatGPT.
  • Ask your AI assistant to build a new card — turn an audio file, a story, or a set of tracks into a card on your Yoto.
  • Add tracks to a card you've already made, without opening the Yoto app.
  • Search and set pixel-art icons for your cards and chapters.
  • Check on your family's Yoto players — see what's connected, without being able to control them remotely.
  • Coming when Yoto allows it: ask what's on a player right now — which card is loaded, battery, volume, nightlight, headphones.

What you can say

Once it's connected, just ask in plain English:

  • "Make a bedtime card from these three files and give each track a moon icon."
  • "Show me every card in my Yoto library."
  • "Add this new song to the 'Car Songs' card."
  • "Find a pixel-art icon of a dinosaur for chapter two."
  • "Which of my kids' Yoto players are online right now?"

How sign-in works

You paste one link into your AI app. That takes you to Yoto's own sign-in page — you sign in there, not here. We never see your password. Your Yoto tokens are stored encrypted, and the key is never written to our storage — it's wrapped using your AI app's own token, of which we keep only a hash, so a copy of our database alone decrypts nothing. Two honest caveats: the wrapping method is a fixed constant from the open-source library we use, not a secret unique to this server, so a live client token could decrypt the matching record; and because we run the server, we could in principle change its code to capture tokens in transit. The accurate claim is "nothing readable is stored, and we have no routine means to read it" — not "we are incapable of reading it". You can revoke access at any time from your Yoto account settings, which disconnects this instantly. See PRIVACY.md for the full, plain-English explanation.

🚧 Rebuild in progress (Sept 2026). The command-line version works today; the paste-one-link version for claude.ai / ChatGPT lands in ~2 weeks.

For developers

Connect

🚧 Rebuild in progress (September 2026). The npx route below works today. The paste-one-link route for claude.ai and ChatGPT goes live once the website address ships — expected September 2026.

claude.ai — Add the Yoto connector (or Settings → Connectors → Add custom connector, prefilled).

ChatGPT — Settings → Connectors → Advanced → Developer mode → Add connector → paste https://mcp-yoto.danpillay87.workers.dev/mcp.

Claude Code:

claude mcp add --transport http yoto https://mcp-yoto.danpillay87.workers.dev/mcp

Power users — run it locally today:

npx -y mcp-yoto
  • Cursor: Add to Cursor
  • VS Code: Install in VS Code

Tools

15 tools, all yoto_*, each shipped with a title, description, icon, and all four MCP annotation hints (read-only / destructive / idempotent / open-world):

ToolPurposeKey inputsRead-only
yoto_statusAuth state, scopes, token-store kind (CLI), API reachability–yes
yoto_sign_inCLI: launch loopback PKCE. Remote: sign in via your client's connector settingsopenBrowser?no
yoto_sign_outCLI: delete local token. Remote: how to disconnect + revoke at Yotoconfirmdestructive
yoto_list_cardsMy MYO cards or family librarysource: myo|family, limit?, cursor?yes
yoto_get_cardFull card with chapters/trackscardIdyes
yoto_create_cardNew MYO card, optional tracks + icontitle, tracks[]?, iconRef?no
yoto_update_cardRename / reorder / set iconscardId, patchdestructive, idempotent
yoto_delete_cardDelete a MYO cardcardId, confirmdestructive
yoto_upload_audioUpload + transcode → yoto:#shaCLI audioFilePath · Remote audioUrl (https, size-capped, streamed)no
yoto_add_trackUpload and append to a cardcardId, audioFilePath|audioUrl, trackTitle?, iconRef?no
yoto_search_iconsSearch the public 16×16 icon cataloguequery?, tags?, limit?yes
yoto_upload_iconUpload a custom 16×16 iconimagePath|imageUrl, title, autoConvert?no
yoto_list_devicesFamily players (view only)–yes
yoto_get_device_configDevice config incl. right-hand-button shortcuts; 403 → friendly FORBIDDEN_SCOPEdeviceIdyes
yoto_player_statusLive status: card, battery, volume, nightlight, headphones (not yet available — waiting on Yoto); uses a Yoto endpoint marked deprecated (no replacement published yet)deviceId?, refresh?yes

Architecture

One Cloudflare Worker runs the official MCP TypeScript SDK v2 (stateless Streamable HTTP) behind Cloudflare's own @cloudflare/workers-oauth-provider — the reference implementation for remote-MCP auth, so this project writes only the small Yoto-specific upstream handler, not its own OAuth server. The same core (Yoto client + tool definitions) also powers npx mcp-yoto, a local stdio server for direct use from Claude Code, Cursor, or any stdio-based MCP client. Requested scopes are profile offline_access user:content:view user:content:manage user:icons:manage family:library:view family:devices:view — deliberately no family:devices:control or family:devices:manage, which is what keeps this app eligible for Yoto's Verified listing. (family:device-status:view, needed for the still-registered yoto_player_status tool, isn't requested either: a live sign-in attempt with it included was refused outright by Yoto, so it currently can't be granted to third-party apps at all.)

Roadmap

WhenWhat
Week of 14 SepScaffold + this outreach post (you're reading it)
Week of 14 SepYoto client + the 15 tools, tested against a mocked API
Week of 14 Sepnpx mcp-yoto — local sign-in working end to end
Week of 21 SepRemote connector: Cloudflare Worker + Yoto OAuth, live for claude.ai / ChatGPT
Week of 21 SepSecurity pass, real-client verification, Yoto Verified submission

Prior art

This isn't the first Yoto MCP server. bperkinspdx/yoto-mcp-server is the origin this project was forked from and is rebuilt on top of. tmcinerney/yoto-mcp is another independent Yoto MCP server on npm, built separately.

Privacy & Security

  • PRIVACY.md — what we can and can't see, in plain English.
  • SECURITY.md — how to report a vulnerability, and how token storage is designed.

License

MIT — see LICENSE. Portions originally derived from bperkinspdx/yoto-mcp-server (MIT).

来源：README.md，提交 04f83b8

工具

0
该服务器需要登录，因此 SourceWeft 无法在没有账号的情况下读取其工具，也未收录。已连接账号所能看到的内容可能因账号及其权限而异。

版本历史

1
  1. v0.1.0最新Sep 16, 2026

评分

已满足适用检查项的 75%

该评分衡量此收录条目的完整程度，依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价，也不表示服务器安全或当前可用：可连通性是带日期的检查结果，评分也不包含安装量或用户评价。

  • 近 30 天内可连通必需25 分
  • 已声明认证方式必需10 分
  • 已列出工具15 分

    请让服务器在无凭据时响应 tools/list，或发布可在沙箱中无凭据启动的软件包。

  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分

    请在仓库或注册中心条目中声明许可证。