# starsinger-mcp MCP server for StarSinger — make a finished AI song with real vocals from a brief (free daily song or a credit), and search/stream the AI music catalog - **Type:** MCP server - **Trust:** 85/100 (A), scored on the package rubric - **Verification:** verified (build provenance) - **Version:** 0.2.2 - **Author:** Veronata Inc. - **License:** MIT - **npm:** starsinger-mcp - **Endpoints:** streamable-http https://mcp-api.starsinger.ai/mcp - **Source:** https://github.com/jupiterspins/starsinger-mcp - **Endpoint health:** reachable (last checked 2026-09-08T11:12:44.114Z, 1 sample) — uptime is not a security property and is not part of the trust score - **Compatible clients:** claude-code, cursor, copilot, chatgpt, gemini (basis: transport) ## Trust 85/100 (A), scored on the package rubric - Publisher verified: no - Build provenance: verified attestation - npm trusted publishing (OIDC): yes - Install scripts: nothing suspicious found - Prompt-injection scan: not run - Obfuscation scan: not run - Evidence age: 0 days ## Security scan - **Status:** clean - **Scanned:** 2026-09-08T15:06:02.167Z - **Version scanned:** 0.2.2 - **CVEs:** none found by OSV at scan time ## Tools 11 declared. Statically extracted from the shipped source — a floor on the surface, not a census. - `make_song` - `song_status` — Status of a make_song job: writing → generating → done (with the song's url and MP3), or cap_reached / needs_public_ok / failed. - `my_songs` — The account's most recent StarSinger songs with playable MP3 links. - `wallet` — What the next make_song will spend on this account: today's free song, a purchased credit, or nothing left (with the checkout link and price). - `search_music` — Search the StarSinger AI music catalog by natural language query. Best for: Finding tracks by mood, genre, artist name, instrument, lyrics, or vibe description. - `get_track` — Get full details and streaming URL for a specific StarSinger track. Best for: Getting complete metadata, full lyrics, and streaming URL for a track you've alrea - `get_trending` — Get currently popular tracks from the StarSinger catalog. Best for: Discovering what's popular, getting a sample of the catalog, or finding background music qui - `browse_artists` — Browse AI catalog artists on StarSinger. Best for: Discovering artists by genre, exploring the catalog, or finding an artist to listen to. Returns: Artist profi - `get_artist` — Get an artist's full profile and their tracks from the StarSinger catalog. Best for: Learning about a specific artist and listening to their discography. Return - `create_playlist` — Create a curated playlist of StarSinger tracks. Best for: Saving a collection of tracks for later use — DJ sets, background music schedules, themed playlists. R - `get_playlist` — Get a playlist with all its tracks and streaming URLs. Best for: Retrieving a previously created playlist for playback or review. Returns: Full playlist details ## Install **Verdict: install** — No blocking findings and no open coverage gaps — safe to install as configured. **Config** (claude-code): ```json "{\n \"mcpServers\": {\n \"starsinger\": {\n \"command\": \"npx\",\n \"args\": [\n \"-y\",\n \"starsinger-mcp\"\n ],\n \"env\": {\n \"STARSINGER_API_KEY\": \"\"\n }\n }\n }\n}" ``` **Credentials it will ask for** (names only — Forge never holds a value): - `STARSINGER_API_KEY` — Starsinger API Key (required) Placeholders only. Forge never holds, brokers, or transmits a credential value — replace each in your own config file. Do not send a value back to Forge; no Forge endpoint accepts one. - This entry needs 1 credential (1 required). The generated config carries placeholders, so it will fail in the editor rather than at runtime if they are left unset. ## Blast radius Moderate blast radius — runs locally and hosted; holds an api key. - Floor 27, ceiling 27 (tier: moderate) - This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score. ## Machine-readable views of this entry - Signed JSON: https://forgeregistry.com/api/v1/packages/starsinger-mcp - Install plan: https://forgeregistry.com/api/v1/packages/starsinger-mcp/install-plan - Alternatives: https://forgeregistry.com/api/v1/alternatives/starsinger-mcp - HTML page: https://forgeregistry.com/registry/starsinger-mcp - MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan` ## About this document Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.