Spotify
by Spotify
Search Spotify's catalogue, build playlists and manage your saved library through an AI agent. Six listed tools, eight granted OAuth scopes that reach further than those tools do, a public-by-default playlist API, and a library removal with no documented undo.
Verified connector
Listed by Anthropic as a partner connector in its Connectors Directory.
Connection checked by Agentman on .
Anthropic states this reflects the level of review a connector received, not a security audit.
Connect Spotify via MCP
https://mcp-gateway-external-pilot.spotify.net/mcpWorks in any MCP-compatible client. In Agentman Studio it is one click — no config file to edit.
Spotify Tools & Capabilities (6)
Tool names from Anthropic's directory listing. This server requires sign-in, so we could not read tool descriptions or parameter schemas.
Limits
Remove_from_libraryhas no documented undo. It removes tracks, albums, episodes, shows, audiobooks, playlists and users, up to 40 URIs per call. Spotify's documented recovery is a 90-day restore for deleted playlists only; for a missing library item its advice is to search and save it again.- The endpoint is a pilot.
mcp-gateway-external-pilot.spotify.netsays so in the hostname, on a.netdomain. Expect it to be capable of moving or being withdrawn. Spotify publishes no stability commitment for it that we could find. - The scopes exceed the tools. Five of eight granted scopes have no obvious tool in the six-name listing, including two playback write scopes and a follow-modify scope with delete access.
- Playlist visibility is unconfirmed. Spotify's API defaults
publicto true; the connector was granted onlyplaylist-modify-private. The scope evidence points to private, and no Spotify document states what the tool sends. Check the first playlist an agent makes. - Collaborative playlists are out of reach. Spotify requires both playlist-modify scopes for them, and only the private one is granted.
get_currently_playingreads live state. Current item, progress, and a device object with name, type, volume and private-session flag.- No safety annotations were observed. The endpoint refuses anonymous handshakes, so no tool has a
readOnlyHintordestructiveHintvalue we can report. Treat all six as unannotated. - The directory's auth posture is wrong. It records
no_authandis_authless: true; the server returns 401 and demands a bearer token. - Spotify publishes no MCP documentation. The directory's documentation link is the support site root, not an article. There is no tool reference, no MCP setup guide, no argument schema and no rate limit published for this server. Everything specific on this page comes from Spotify's Web API specification, its scopes reference, its support articles and its announcement — never from an MCP document, because none exists.
- No dynamic client registration. Spotify's authorization server advertises no
registration_endpoint, so an arbitrary client cannot self-register against this endpoint. - Premium gates playback and vibe playlists. Free accounts connect and use search and library tools; ten playback operations are Premium-only in Spotify's specification, and the described-vibe playlist is Premium-only per Spotify's announcement.
Frequently asked questions
What does the Spotify MCP server let an AI agent do?
It searches Spotify's catalogue, builds playlists and changes what is saved in your library. The six listed tools cover catalogue search, looking up specific tracks, reading what is playing right now, creating a playlist, and adding to or removing from your saved library. Spotify markets it as music and podcast recommendations that draw on your listening history.
What exactly does `Remove_from_library` delete, and can I undo it?
It removes saved items, and Spotify documents no undo for them. The matching Web API operation accepts up to 40 Spotify URIs at once spanning tracks, albums, episodes, shows, audiobooks, playlists and users. Spotify's guidance for a missing library item is to search for it and save it again. Only deleted playlists have a documented recovery path, lasting 90 days.
Are playlists created by the Spotify connector public by default?
Spotify's API defaults new playlists to public, but this connector was granted only `playlist-modify-private`. Spotify's specification states the `public` field defaults to true and that creating a private playlist requires that scope. The connector holds the private scope and not the public one, which points to private creation. Spotify publishes no MCP tool reference confirming what the tool sends.
Does the Spotify MCP server need Spotify Premium?
No, Free accounts work. Spotify states both Free and Premium listeners can use the Claude integration, and that Premium users additionally get a playlist generated from a described vibe or mood. The gating is real but partial. Every playback-control operation in Spotify's Web API is documented as Premium-only, so anything that starts, pauses or skips audio needs a subscription.
Can the Spotify connector pause or skip what I am listening to?
No tool in the listing does that, but the granted scopes allow it. None of the six names covers pause, skip, seek, volume or queue. Yet the connector requests `user-modify-playback-state` and `app-remote-control`, which Spotify defines as write access to playback state and remote control of the Spotify app. The grant is wider than the tool list.
What does `get_currently_playing` reveal about me?
Your live listening state, and the device playing it. The matching Web API operation returns the current track or episode, progress in milliseconds, whether playback is running, shuffle and repeat settings, and a device object naming the hardware, its type, volume and whether it is in a private session. That is a real-time picture of what you are doing now.
How many tools does the Spotify MCP server have compared to the Web API?
Six, against 96 operations in Spotify's published Web API specification. The connector leaves out the entire player family, queue management, follow and unfollow, playlist editing after creation, and listening history. That is a deliberately narrow surface over a large API, and narrowing is the right instinct. The scope grant does not narrow with it.
Sources
- Spotify Web API OpenAPI specification — 96 operations; the library save and remove operations with their seven URI types and 40-URI cap; the create-playlist
publicdefault and its scope requirement; the collaborative-playlist requirement; the playback-state response and device schema; catalogue search and its scope-free security block; bulk track lookup with its 50-ID cap; the Premium-only sentence on ten player operations. Spotify's robots.txt explicitly allows crawling this file. - Spotify scopes reference — definitions for all eight granted scopes, including the write/delete wording on
user-library-modifyanduser-follow-modify, and the Premium note onstreaming. - Spotify newsroom announcement — Free and Premium both supported, the Premium-only vibe playlist, the Spotify Connect device control claim, global availability, and Spotify's statement that it does not share content with Anthropic for training. · retrieved 2026-04-23
- Save and recover playlists — the 90-day recovery window for deleted playlists.
- Missing music or podcasts — Spotify's guidance to search and re-save a missing library item, and the absence of any restore path for saved content.
- Spotify developer llms.txt — the machine-readable doc index, which names the OpenAPI spec and a building-with-AI guide but no MCP documentation.
- Anthropic connector directory listing — partner tier, 6 tool names, "Read and write" permissions label, empty prompt list, and the
no_authposture our probe contradicts. Snapshot dated 2026-08-16. · retrieved 2026-08-16 - Live probes, 2026-08-19: anonymous
initializePOST to the endpoint; three RFC 9728 path forms; two RFC 8414 path forms on the resource host; authorization-server metadata ataccounts.spotify.com. No authentication was performed and no tool was called. · retrieved 2026-08-19
Use in Agentman
Connect once and your agents call these tools on their own — on a schedule, in a workflow, with nobody at the keyboard.
Open in Agentman StudioServer Info
- Category
- Productivity
- Developer
- Spotify
- Tools
- 6
- Domain
- mcp-gateway-external-pilot.spotify.net
Using Claude Desktop or another MCP client? Setup docs — the connection URL above works anywhere.