← Back to Skills Marketplace
joe12801

Xiaozhi Mcp Music Official

by joe12801 · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
142
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install xiaozhi-mcp-music-official
Description
按小智官方 MCP 接入方式,为小智增加在线音乐播放能力。适用于已经有小智 MCP 接入点(wss://api.xiaozhi.me/mcp/?token=...)并希望通过 MCP 工具实现搜歌、播放、暂停、继续、停止等在线音乐控制的场景。支持在线音乐 API 搜索、多源 fallback、调用本地播放器播放网...
Usage Guidance
This skill implements a local MCP-to-player music bridge and will: (1) open a websocket to whatever MCP_ENDPOINT you supply, (2) call third‑party music API endpoints (api-v2.yuafeng.cn) with your MUSIC_API_KEY, and (3) spawn local player processes (mpv by default) and use pkill to control them. Before installing: - Only connect to an MCP endpoint you trust; whatever endpoint you provide can instruct the bridged script to run the exposed tool operations. - Be aware MUSIC_API_KEY will be sent to api-v2.yuafeng.cn; confirm that domain is the intended music API provider or replace it with a provider you trust. - Registry metadata omitted required env vars (MCP_ENDPOINT, MUSIC_API_KEY, etc.); supply these deliberately and do not paste secrets from unrelated services. - Running this on a shared or production host can fetch remote audio and spawn processes; consider running in a sandbox/container and ensure mpv and pkill behavior is acceptable. - If you need higher assurance, review/replace the third‑party API URLs in music_mcp.py and audit the fastmcp dependency implementation before use.
Capability Analysis
Type: OpenClaw Skill Name: xiaozhi-mcp-music-official Version: 1.0.0 The skill bundle provides a legitimate MCP (Model Context Protocol) bridge for searching and playing online music using a local media player like mpv. It uses standard subprocess calls in music_mcp.py to control playback and communicates with third-party music APIs (yuafeng.cn) to fetch track information and stream URLs. No evidence of malicious intent, data exfiltration, or prompt injection was found.
Capability Assessment
Purpose & Capability
The code implements an MCP music bridge consistent with the description (websocket MCP endpoint → bridge → music API → local player). However the package/registry metadata declared no required environment variables while the code requires MCP_ENDPOINT and MUSIC_API_KEY (plus optional MUSIC_SOURCE and PLAYER_CMD). That mismatch is an incoherence between what the skill claims and what it actually needs.
Instruction Scope
The SKILL.md instructions align with the code: it tells the user to set environment variables, install dependencies, and run the bridge. The instructions do not ask to read unrelated files or credentials. Note: the runtime will open a websocket to an external MCP endpoint and will call third‑party music API endpoints (api-v2.yuafeng.cn) — both are expected for this skill but imply you must trust those remote services.
Install Mechanism
There is no special installer; user is instructed to pip install the requirements.txt bundled with the skill. No arbitrary downloads or URL-based installers are present in the files provided.
Credentials
The code expects MCP_ENDPOINT and MUSIC_API_KEY (and may send MUSIC_API_KEY as an 'apikey' parameter to api-v2.yuafeng.cn). The registry metadata incorrectly lists no required env vars/credentials. Requiring an API key and connecting to a remote websocket is proportionate for a music bridge, but the metadata omission and the fact that the key is sent to a third‑party domain are notable risks — the user may unintentionally leak an API key to an unexpected host. PLAYER_CMD and MUSIC_SOURCE are also read from env but were not declared in metadata.
Persistence & Privilege
The skill is not always-enabled and uses normal autonomous invocation. It does not attempt to alter other skills or system-wide config. It spawns local processes (player, pkill/pause/resume) which is expected for local playback control; run-time privileges are limited to what the user process has.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install xiaozhi-mcp-music-official
  3. After installation, invoke the skill by name or use /xiaozhi-mcp-music-official
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release: official-style XiaoZhi MCP online music bridge with online search, fallback, and local player playback support.
Metadata
Slug xiaozhi-mcp-music-official
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Xiaozhi Mcp Music Official?

按小智官方 MCP 接入方式,为小智增加在线音乐播放能力。适用于已经有小智 MCP 接入点(wss://api.xiaozhi.me/mcp/?token=...)并希望通过 MCP 工具实现搜歌、播放、暂停、继续、停止等在线音乐控制的场景。支持在线音乐 API 搜索、多源 fallback、调用本地播放器播放网... It is an AI Agent Skill for Claude Code / OpenClaw, with 142 downloads so far.

How do I install Xiaozhi Mcp Music Official?

Run "/install xiaozhi-mcp-music-official" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Xiaozhi Mcp Music Official free?

Yes, Xiaozhi Mcp Music Official is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Xiaozhi Mcp Music Official support?

Xiaozhi Mcp Music Official is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Xiaozhi Mcp Music Official?

It is built and maintained by joe12801 (@joe12801); the current version is v1.0.0.

💬 Comments