Is mcp-lrclib safe?
MCP server for LRCLIB. Search tracks and fetch plain or time-synced (LRC) lyrics. No API key required.
If an AI agent using this server were tricked, the damage it could do through this server is limited.
Why: no high-reach capabilities found.
What it can do
No commands, file changes, browser control or database access found in its code.
Tools it offers your AI (3):
- search_tracks
- get_lyrics
- get_track
Code patterns worth reviewing
No risky code patterns matched in the files we read (2).
Install it pinned
{
"mcpServers": {
"lrclib": {
"command": "npx",
"args": ["-y", "mcp-lrclib@2.1.0"]
}
}
}Check your whole MCP setup
Agent Verify checks the servers in your Claude, Cursor and VS Code config — including whole-drive access and keys stored in plain text.
Maintain mcp-lrclib?
Show users you've thought about access: add the badge below. If something here is wrong or you've released a fix, ask for a re-scan — we update pages on request.
[](https://aimodularity.com/agentverify/mcp/mcp-lrclib/)
Agent Verify reads the package published on npm as text — it is never installed or run. Ratings describe capability, not intent, and are an automated, evidence-based check, not a guarantee. Scanner 2.0.0.