Mcp Yoto

io.github.danpillay87由 GitHub 帳號 danpillay87 發布v0.1.0更新於 Oct 24, 2026

MCP server for Yoto: manage cards, tracks, icons and family devices from any MCP client.

已驗證Streamable HTTP可網頁執行效率與工作流檔案與儲存媒體與設計

概覽

AI 產生的概覽

將 Yoto 帳號連接到 AI 助理，讓它能列出、建立和編輯 Yoto 卡片、加入曲目、設定圖示並查看家庭播放器。

可以做什麼
列出並讀取 MYO 或家庭資料庫中的卡片，含章節和曲目，並檢查驗證狀態與 API 可達性（yoto_list_cards、yoto_get_card、yoto_status）。建立、重新命名、重新排序、設定圖示和刪除 MYO 卡片（yoto_create_card、yoto_update_card、yoto_delete_card）。上傳並轉碼音訊，然後將曲目附加到卡片（yoto_upload_audio、yoto_add_track）。搜尋公開的 16×16 圖示目錄並上傳自訂圖示（yoto_search_icons、yoto_upload_icon）。查看家庭播放器及其設定，即時播放器狀態尚不可用（yoto_list_devices、yoto_get_device_config、yoto_player_status）。
適用情境
適合擁有 Yoto 的家庭，透過 Claude 或 ChatGPT 對話來製作或編輯音訊卡片、加入曲目和挑選圖示，而不必開啟 Yoto 應用程式，也可用來查看哪些家庭播放器已連線。
執行需求
需要一個 Yoto 帳號，透過 Yoto 自己的登入頁面登入，並授予個人資料、內容、圖示及家庭資料庫/裝置檢視的 OAuth 權限。可使用遠端端點 mcp-yoto.danpillay87.workers.dev/mcp，或透過 npx 執行本機 npm 套件 mcp-yoto（需 Node.js）。需要連線至 Yoto API 的網路存取。
安裝前請注意
此伺服器要求內容管理與圖示管理權限，助理因此可以建立、修改和刪除 MYO 卡片並上傳音訊和圖示。README 說明營運方原則上可以變更伺服器程式碼以在傳輸中截取權杖，且有效的用戶端權杖可能解密對應的已儲存紀錄。可在 Yoto 帳號設定中撤銷存取以中斷連線。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Mcp Yoto，將其新增到工作區。
  2. 連接 所需的 憑證。它們會被私密儲存，絕不會在公開頁面上展示。
  3. 為需要使用其工具的對話啟用該服務。

Web executable，透過 Streamable HTTP。 遠端服務在工作區中設定後即可從網頁執行環境執行。

交給代理程式安裝

把這段提示詞貼上到 Claude Code、Codex、Cursor 等代理程式，或 SourceWeft 對話中。代理程式會讀取該伺服器的安裝指南，先向你展示發布者、端點和登入方式，經你同意後再把它新增到你的客戶端。金鑰不會寫進任何命令。

閱讀 https://sourceweft.com/mcp/io.github.danpillay87%2Fmcp-yoto/install.md，並按其中說明把這個 MCP 伺服器接入我的客戶端。修改任何設定之前，先告訴我它的發布者、端點和登入方式，等我確認。不要把 API 金鑰寫進命令或我會提交的檔案；問我金鑰應從哪裡取得。

檢視代理程式所依據的安裝指南

其他 MCP 客戶端

把它新增到你客戶端的 mcpServers 設定中。 客戶端會在首次連接時完成 OAuth 登入。

{
  "mcpServers": {
    "yoto": {
      "type": "http",
      "url": "https://mcp-yoto.danpillay87.workers.dev/mcp"
    }
  }
}

README

[mcp-yoto logo]

mcp-yoto

Works with Yoto — connect your Yoto library to Claude and ChatGPT.

[npm version] [CI] [License: MIT] [Works with Yoto]

For parents

What you can do once it's connected:

  • See every card in your Yoto library (your own MYO cards and your family library) from inside Claude or ChatGPT.
  • Ask your AI assistant to build a new card — turn an audio file, a story, or a set of tracks into a card on your Yoto.
  • Add tracks to a card you've already made, without opening the Yoto app.
  • Search and set pixel-art icons for your cards and chapters.
  • Check on your family's Yoto players — see what's connected, without being able to control them remotely.
  • Coming when Yoto allows it: ask what's on a player right now — which card is loaded, battery, volume, nightlight, headphones.

What you can say

Once it's connected, just ask in plain English:

  • "Make a bedtime card from these three files and give each track a moon icon."
  • "Show me every card in my Yoto library."
  • "Add this new song to the 'Car Songs' card."
  • "Find a pixel-art icon of a dinosaur for chapter two."
  • "Which of my kids' Yoto players are online right now?"

How sign-in works

You paste one link into your AI app. That takes you to Yoto's own sign-in page — you sign in there, not here. We never see your password. Your Yoto tokens are stored encrypted, and the key is never written to our storage — it's wrapped using your AI app's own token, of which we keep only a hash, so a copy of our database alone decrypts nothing. Two honest caveats: the wrapping method is a fixed constant from the open-source library we use, not a secret unique to this server, so a live client token could decrypt the matching record; and because we run the server, we could in principle change its code to capture tokens in transit. The accurate claim is "nothing readable is stored, and we have no routine means to read it" — not "we are incapable of reading it". You can revoke access at any time from your Yoto account settings, which disconnects this instantly. See PRIVACY.md for the full, plain-English explanation.

🚧 Rebuild in progress (Sept 2026). The command-line version works today; the paste-one-link version for claude.ai / ChatGPT lands in ~2 weeks.

For developers

Connect

🚧 Rebuild in progress (September 2026). The npx route below works today. The paste-one-link route for claude.ai and ChatGPT goes live once the website address ships — expected September 2026.

claude.ai — Add the Yoto connector (or Settings → Connectors → Add custom connector, prefilled).

ChatGPT — Settings → Connectors → Advanced → Developer mode → Add connector → paste https://mcp-yoto.danpillay87.workers.dev/mcp.

Claude Code:

claude mcp add --transport http yoto https://mcp-yoto.danpillay87.workers.dev/mcp

Power users — run it locally today:

npx -y mcp-yoto
  • Cursor: Add to Cursor
  • VS Code: Install in VS Code

Tools

15 tools, all yoto_*, each shipped with a title, description, icon, and all four MCP annotation hints (read-only / destructive / idempotent / open-world):

ToolPurposeKey inputsRead-only
yoto_statusAuth state, scopes, token-store kind (CLI), API reachability–yes
yoto_sign_inCLI: launch loopback PKCE. Remote: sign in via your client's connector settingsopenBrowser?no
yoto_sign_outCLI: delete local token. Remote: how to disconnect + revoke at Yotoconfirmdestructive
yoto_list_cardsMy MYO cards or family librarysource: myo|family, limit?, cursor?yes
yoto_get_cardFull card with chapters/trackscardIdyes
yoto_create_cardNew MYO card, optional tracks + icontitle, tracks[]?, iconRef?no
yoto_update_cardRename / reorder / set iconscardId, patchdestructive, idempotent
yoto_delete_cardDelete a MYO cardcardId, confirmdestructive
yoto_upload_audioUpload + transcode → yoto:#shaCLI audioFilePath · Remote audioUrl (https, size-capped, streamed)no
yoto_add_trackUpload and append to a cardcardId, audioFilePath|audioUrl, trackTitle?, iconRef?no
yoto_search_iconsSearch the public 16×16 icon cataloguequery?, tags?, limit?yes
yoto_upload_iconUpload a custom 16×16 iconimagePath|imageUrl, title, autoConvert?no
yoto_list_devicesFamily players (view only)–yes
yoto_get_device_configDevice config incl. right-hand-button shortcuts; 403 → friendly FORBIDDEN_SCOPEdeviceIdyes
yoto_player_statusLive status: card, battery, volume, nightlight, headphones (not yet available — waiting on Yoto); uses a Yoto endpoint marked deprecated (no replacement published yet)deviceId?, refresh?yes

Architecture

One Cloudflare Worker runs the official MCP TypeScript SDK v2 (stateless Streamable HTTP) behind Cloudflare's own @cloudflare/workers-oauth-provider — the reference implementation for remote-MCP auth, so this project writes only the small Yoto-specific upstream handler, not its own OAuth server. The same core (Yoto client + tool definitions) also powers npx mcp-yoto, a local stdio server for direct use from Claude Code, Cursor, or any stdio-based MCP client. Requested scopes are profile offline_access user:content:view user:content:manage user:icons:manage family:library:view family:devices:view — deliberately no family:devices:control or family:devices:manage, which is what keeps this app eligible for Yoto's Verified listing. (family:device-status:view, needed for the still-registered yoto_player_status tool, isn't requested either: a live sign-in attempt with it included was refused outright by Yoto, so it currently can't be granted to third-party apps at all.)

Roadmap

WhenWhat
Week of 14 SepScaffold + this outreach post (you're reading it)
Week of 14 SepYoto client + the 15 tools, tested against a mocked API
Week of 14 Sepnpx mcp-yoto — local sign-in working end to end
Week of 21 SepRemote connector: Cloudflare Worker + Yoto OAuth, live for claude.ai / ChatGPT
Week of 21 SepSecurity pass, real-client verification, Yoto Verified submission

Prior art

This isn't the first Yoto MCP server. bperkinspdx/yoto-mcp-server is the origin this project was forked from and is rebuilt on top of. tmcinerney/yoto-mcp is another independent Yoto MCP server on npm, built separately.

Privacy & Security

  • PRIVACY.md — what we can and can't see, in plain English.
  • SECURITY.md — how to report a vulnerability, and how token storage is designed.

License

MIT — see LICENSE. Portions originally derived from bperkinspdx/yoto-mcp-server (MIT).

來源：README.md，提交 04f83b8

工具

0
該伺服器需要登入，因此 SourceWeft 無法在沒有帳號的情況下讀取其工具，也未收錄。已連接帳號所能看到的內容可能因帳號及其權限而異。

版本歷史

1
  1. v0.1.0最新Sep 16, 2026

評分

已滿足適用檢查項的 75%

該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通必需25 分
  • 已宣告認證方式必需10 分
  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list，或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分

    請在儲存庫或註冊中心條目中宣告授權條款。