Spotify Web API MCP Server
The Spotify Web API is a comprehensive RESTful service provided by Spotify AB that empowers developers to programmatically access Spotify's vast catalog of over 100 million songs and 5 million podcast titles.
Quick Start Summary
The Spotify Web API MCP server is a Model Context Protocol bridge that connects AI assistants — including Claude Desktop, Cursor, Windsurf, and VS Code Copilot — to the Spotify Web API API through natural language. It exposes 10 API endpoints as callable tools, such as Get Several Albums
, Get Album
, Get Album Tracks
, and more. No authentication is required — setup takes approximately 30 seconds. The server uses STDIO transport and can be installed by running npx -y @mcp/spotify-com. This integration is sourced from the auto Spotify Web API OpenAPI specification (v1.0.0) and has a quality score of 34/99 (fair documentation coverage).
Server Details
- Category
- Security
- Authentication
- None
- Endpoints
- 10 operations
- Transport
- STDIO
- Spec Version
- v1.0.0
- Install Command
npx -y @mcp/spotify-com
Environment Variables
SPOTIFY_WEB_API_API_KEYExample: your_spotify_web_api_api_key
Top Endpoints
/albumsGet Several Albums
/albums/{id}Get Album
/albums/{id}/tracksGet Album Tracks
/artistsGet Several Artists
/artists/{id}Get Artist
One-Click Install
Copy the snippet for your MCP client and paste it in — zero editing required.
Claude Desktop
Add to claude_desktop_config.json
{
"mcpServers": {
"spotify-com": {
"command": "npx",
"args": [
"-y",
"@mcp/spotify-com"
],
"env": {
"SPOTIFY_WEB_API_API_KEY": "your_spotify_web_api_api_key"
}
}
}
}Cursor
Settings → MCP Servers → Add
{
"mcpServers": {
"spotify-com": {
"url": "https://mcpbridge.org/config/spotify-com.json"
}
}
}Saves as .cursor/mcp.json in the download. Move it to your project root.
VS Code
Use with MCP extension
{
"mcpServers": {
"spotify-com": {
"url": "https://mcpbridge.org/config/spotify-com.json"
}
}
}Endpoints Explorer
Search and browse the 10 operations supported by this server.
Multi-Language Code Examples
Executable code snippets for calling Spotify Web API endpoints in curl, TypeScript, or Python.
curl -X GET "https://api.apis.guru/v2/specs/spotify.com/1.0.0/albums" \ -H "Content-Type: application/json" \ # No auth required
Manual Configuration
Directly add this block to your JSON config file, or use the hosted config registry URL.
{
"mcpServers": {
"spotify-com": {
"command": "npx",
"args": ["-y","@mcp/spotify-com"],
"env": {
"SPOTIFY_WEB_API_API_KEY": "your_spotify_web_api_api_key"
}
}
}
}Authentication Details
No authentication required. This MCP server runs out-of-the-box.
Documentation Links
Error Handling & HTTP Status Code Matrix
Common status codes, error causes, and resolution steps when invoking Spotify Web API endpoints.
400 Bad RequestCause: Malformed payload parameters or missing required fields.
Resolution: Verify request schema in Endpoints tab before calling tool.
401 UnauthorizedCause: Missing or invalid API key credentials.
Resolution: Set environment variable in MCP client config under env object.
403 ForbiddenCause: Insufficient scope permissions for requested resource.
Resolution: Verify key permissions in developer dashboard.
404 Not FoundCause: Resource URL path or requested entity ID does not exist.
Resolution: Check path variables and parameters.
429 Rate Limit ExceededCause: API rate limit quota exceeded.
Resolution: Implement exponential backoff retry in tool call.
500 Internal ErrorCause: Upstream server runtime fault.
Resolution: Inspect STDIO stderr output for log trace.
Quality Score
Checked against our protocol-compliance rules.
Specification Version: v1.0.0
Page compiled on: June 13, 2026
Own this API?
Verify ownership of this listing to control the description, configuration details, and documentation links. Choose between free manual verification or instant premium placement.
Option 1: Free Verification
Slow manual review. Requires creating a GitHub issue with verified documentation or domain verification.
- • Verified badge on page
- • Standard search sorting
- • 2-3 business days review
Option 2: Featured Upgrade($9/mo)
Instant verification plus premium styling, featured badges, and directory placement boost.
- • ★ Featured star & amber highlight border
- • Top of directory search placement
- • Instant activation via claim token
📖 Detailed MCP Integration Guide
A technical breakdown of capabilities, agent workflows, and security/configuration best practices.
playlist-read-private for reading user playlists, not user-modify-playback-state if control isn't required), adhering to the principle of least privilege. All API calls must be made over HTTPS, and refresh tokens must be stored securely, preferably in an environment secret manager. The MCP server should be configured to handle token refresh transparently, ensuring the AI agent's tool calls remain authenticated without exposing sensitive tokens in logs or client-side code, thus maintaining a secure and compliant integration architecture.Similar APIs
Other APIs in the Security category.
1Password Connect
The 1Password Connect API is a robust RESTful interface provided by 1Password, a leading enterprise password management and secrets orchestration platform. This API serves as the programmatic backbone for 1Password Connect, a self-hosted server that acts as a secure bridge between an organization's internal infrastructure and its 1Password vaults. Its core capability is to enable secure, automated access to secrets, credentials, documents, and other sensitive items stored within 1Password, without exposing master passwords or sensitive data to applications directly. Typical use cases are extensive within modern DevOps and IT environments, including dynamically injecting database credentials into cloud application deployments, rotating secrets on a scheduled basis, automatically retrieving API keys for CI/CD pipelines, and centralizing secret management for microservices architectures. By providing a self-hosted component, the API allows organizations to maintain full control over their data flow and integrate 1Password's zero-knowledge security model directly into their internal tooling and automation scripts.
Events API
The 1Password Events API is a specialized service provided by the password and credential management platform 1Password, designed for enterprise security teams, IT administrators, and security analysts. Its core capability is to provide a secure, queryable stream of audit events related to secret access and authentication activity within a 1Password organization or team. By aggregating data from the specified endpoints—`/api/v1/itemusages` for secret access logs and `/api/v1/signinattempts` for user authentication logs—it enables comprehensive monitoring, threat detection, and compliance reporting. Unlike a general-purpose API for managing vaults or secrets, this API is strictly read-focused, serving as the primary telemetry pipeline for security information and event management (SIEM) systems, custom alerting tools, and internal audit platforms. Typical use cases include correlating unusual secret access patterns with potential insider threats, verifying compliance with data access policies, generating audit trails for regulatory frameworks like SOC 2 or GDPR, and building real-time dashboards to visualize credential usage across an organization.
Authentiq API
The Authentiq API provides a robust foundation for implementing strong, passwordless authentication and identity verification systems. Developed by Authentiq, a specialist in modern digital identity solutions, this API enables the secure management of cryptographic keys and the orchestration of login and scope-based authorization flows. Its core capabilities are centered around the lifecycle management of public-private key pairs, which serve as the user's credentials. The endpoints allow for the creation of a new key pair (POST /key), retrieval of a public key by its ID (GET /key/{PK}), and associated management operations (POST, PUT, DELETE on the key resource). Beyond basic key management, the API facilitates the authentication process itself through the POST /login endpoint, which verifies a signature from the user's private key. The /scope endpoints introduce a layer of fine-grained, permission-based access control, allowing developers to define, query, and manage specific authorization scopes tied to a job or session. This makes the API ideal for enterprise applications requiring secure internal tool access, consumer-facing mobile or web apps seeking seamless login experiences without credential fatigue, and IoT ecosystems where device authentication is paramount.
IP geolocation API
The IP Geolocation API, developed by AbstractAPI, is a robust and scalable RESTful service designed to provide developers with precise geographic, network, and contextual data associated with any given IPv4 or IPv6 address. Its core capability lies in translating a digital identifier—a public IP address—into a rich dataset that includes region, country, city, latitude, longitude, timezone, and ISP details. Beyond this fundamental geolocation, the API extends its value by offering supplementary metadata such as the local currency code, national flag, primary language, and security flags indicating whether an IP is from a corporate network or associated with a known threat actor. Typical enterprise use cases span from real-time user authentication and fraud prevention, where a login attempt from an unexpected location can trigger a security alert, to localized content delivery, ensuring users see region-appropriate pricing, language, and offers. For consumers and developers, it powers features like website analytics dashboards, personalized news feeds, and dynamic form auto-population.
Related MCP Server Integrations
1Password Connect MCP Setup
The 1Password Connect API is a robust RESTful interface provided by 1Password, a leading enterprise password management and secrets orchestration platform. This API serves as the programmatic backbone for 1Password Connect, a self-hosted server that acts as a secure bridge between an organization's internal infrastructure and its 1Password vaults. Its core capability is to enable secure, automated access to secrets, credentials, documents, and other sensitive items stored within 1Password, without exposing master passwords or sensitive data to applications directly. Typical use cases are extensive within modern DevOps and IT environments, including dynamically injecting database credentials into cloud application deployments, rotating secrets on a scheduled basis, automatically retrieving API keys for CI/CD pipelines, and centralizing secret management for microservices architectures. By providing a self-hosted component, the API allows organizations to maintain full control over their data flow and integrate 1Password's zero-knowledge security model directly into their internal tooling and automation scripts.
Events API MCP Setup
The 1Password Events API is a specialized service provided by the password and credential management platform 1Password, designed for enterprise security teams, IT administrators, and security analysts. Its core capability is to provide a secure, queryable stream of audit events related to secret access and authentication activity within a 1Password organization or team. By aggregating data from the specified endpoints—`/api/v1/itemusages` for secret access logs and `/api/v1/signinattempts` for user authentication logs—it enables comprehensive monitoring, threat detection, and compliance reporting. Unlike a general-purpose API for managing vaults or secrets, this API is strictly read-focused, serving as the primary telemetry pipeline for security information and event management (SIEM) systems, custom alerting tools, and internal audit platforms. Typical use cases include correlating unusual secret access patterns with potential insider threats, verifying compliance with data access policies, generating audit trails for regulatory frameworks like SOC 2 or GDPR, and building real-time dashboards to visualize credential usage across an organization.
Authentiq API MCP Setup
The Authentiq API provides a robust foundation for implementing strong, passwordless authentication and identity verification systems. Developed by Authentiq, a specialist in modern digital identity solutions, this API enables the secure management of cryptographic keys and the orchestration of login and scope-based authorization flows. Its core capabilities are centered around the lifecycle management of public-private key pairs, which serve as the user's credentials. The endpoints allow for the creation of a new key pair (POST /key), retrieval of a public key by its ID (GET /key/{PK}), and associated management operations (POST, PUT, DELETE on the key resource). Beyond basic key management, the API facilitates the authentication process itself through the POST /login endpoint, which verifies a signature from the user's private key. The /scope endpoints introduce a layer of fine-grained, permission-based access control, allowing developers to define, query, and manage specific authorization scopes tied to a job or session. This makes the API ideal for enterprise applications requiring secure internal tool access, consumer-facing mobile or web apps seeking seamless login experiences without credential fatigue, and IoT ecosystems where device authentication is paramount.
IP geolocation API MCP Setup
The IP Geolocation API, developed by AbstractAPI, is a robust and scalable RESTful service designed to provide developers with precise geographic, network, and contextual data associated with any given IPv4 or IPv6 address. Its core capability lies in translating a digital identifier—a public IP address—into a rich dataset that includes region, country, city, latitude, longitude, timezone, and ISP details. Beyond this fundamental geolocation, the API extends its value by offering supplementary metadata such as the local currency code, national flag, primary language, and security flags indicating whether an IP is from a corporate network or associated with a known threat actor. Typical enterprise use cases span from real-time user authentication and fraud prevention, where a login attempt from an unexpected location can trigger a security alert, to localized content delivery, ensuring users see region-appropriate pricing, language, and offers. For consumers and developers, it powers features like website analytics dashboards, personalized news feeds, and dynamic form auto-population.
Adyen Balance Control API MCP Setup
The Adyen Balance Control API, provided by the global payment platform Adyen, serves as a specialized financial operations tool designed for enterprise-grade treasury management. Its core capability is to facilitate secure and immediate internal fund transfers between distinct merchant accounts that operate under the same legal entity and shared company structure within the Adyen ecosystem. This API moves beyond simple transaction processing, addressing a fundamental need for liquidity optimization and financial agility in complex business models. Typical use cases include reallocating funds from high-revenue sales channels to cover operational costs in other segments, consolidating balances from multiple regional storefronts for centralized reporting, or managing pre-funded accounts for specific departments like marketing or payroll. It is particularly valuable for businesses operating multiple online stores, marketplaces, or physical point-of-sale systems under one corporate umbrella, enabling them to manage their internal capital flow with precision, reduce external banking fees, and maintain a holistic view of their liquid assets in real time.