// SCAN REPORT

Spotify MCP Server

59 tools. 21 can modify or destroy data without limits.

2 destructive tools with no built-in limits. Policy required.

Last updated: 3 Jul 2026

21 can modify or destroy data

38 read-only

59 tools total

Community server · catalogue entry verified 03/07/2026

How to control Spotify MCP Server ↓

TOOL MAP

What Spotify MCP Server exposes to your agents

Read (38) Write / Execute (19) Destructive / Financial (2)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Spotify MCP Server tools

Destructive · Medium remove_from_library Removing items from a user's library is a destructive action because it deletes saved/liked content and cannot be easily undone by an AI agent without explicit user intervention. Destructive · High remove_playlist_items Removing items from a playlist is a destructive operation because it permanently deletes those tracks/episodes from the playlist. Execute · Medium transfer_playback This tool triggers an external operation on the Spotify platform — redirecting active audio playback from one device to another. Execute · Low set_repeat This tool triggers an external operation on Spotify's playback system, changing its repeat state.

21 of Spotify MCP Server's 59 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Spotify MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and Spotify MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "remove_from_library": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "add_playlist_items": {
    "limits": [
      {
        "counter": "add_playlist_items_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "check_following": {
    "limits": [
      {
        "counter": "check_following_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Spotify MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON SPOTIFY →

Instant setup, no code required.

FULL CATALOGUE

All 59 Spotify MCP Server tools

DESTRUCTIVE 2 tools

Destructive remove_from_library Remove items from the current user's library. Auto-chunks at 50 items per request. Destructive remove_playlist_items Remove tracks or episodes from a playlist. Auto-chunks at 100 items per request.

EXECUTE 8 tools

Execute next_track Skip to the next track. Execute pause Pause playback on the active device. Execute play play Execute previous_track Skip to the previous track. Execute seek Seek to a position in the currently playing track. Execute set_repeat Set the repeat mode for playback. Execute toggle_shuffle Set or toggle shuffle mode for playback. Execute transfer_playback Transfer playback to a different device.

WRITE 11 tools

Write add_playlist_items add_playlist_items Write add_to_queue Add a track or episode to the playback queue. Write create_playlist Create a new playlist for the current user. Write follow_artists_or_users Follow one or more artists or users. Auto-chunks at 50 IDs per request. Write follow_playlist Follow a playlist. Write reorder_playlist_items reorder_playlist_items Write save_to_library Save items (tracks/albums/shows/episodes/audiobooks) to the user's library. Write set_volume Set the playback volume. Write unfollow_artists_or_users Unfollow one or more artists or users. Auto-chunks at 50 IDs per request. Write unfollow_playlist Unfollow a playlist. Write update_playlist Update a playlist's name, description, or visibility.

READ 38 tools

Read check_following Check whether the current user follows the given artists or users. Read check_saved_in_library Check if items are saved in the current user's library. Read get_album Get details of a Spotify album by its ID. Read get_album_tracks Get tracks of a Spotify album. Read get_albums Get details of multiple albums in one call (up to 20 IDs). Read get_artist Get details of a Spotify artist by their ID. Read get_artist_albums get_artist_albums Read get_artists Get details of multiple artists in one call (up to 50 IDs). Read get_audiobook Get details of a Spotify audiobook. Read get_audiobook_chapters get_audiobook_chapters Read get_audiobooks Get details of multiple audiobooks in one call (up to 50 IDs). Read get_chapter Get details of a specific audiobook chapter. Read get_chapters Get details of multiple chapters in one call (up to 50 IDs). Read get_currently_playing Get the currently playing track or episode. Read get_devices Get the user's available Spotify devices. Read get_episode Get details of a podcast episode. Read get_episodes Get details of multiple episodes in one call (up to 50 IDs). Read get_followed_artists Get the current user's followed artists. Cursor-paginated. Read get_my_playlists Get the current user's playlists. Read get_my_profile Get the current user's Spotify profile. Read get_my_top_items get_my_top_items Read get_playback_state Get the current playback state including track, device, and progress. Read get_playlist get_playlist Read get_playlist_items get_playlist_items Read get_queue Get the current playback queue. Read get_recently_played get_recently_played Read get_saved_albums Get the current user's saved albums. Read get_saved_audiobooks Get the current user's saved audiobooks. Read get_saved_episodes Get the current user's saved episodes. Read get_saved_shows Get the current user's saved shows (podcasts). Read get_saved_tracks Get the current user's saved tracks. Read get_show Get details of a Spotify show (podcast). Read get_show_episodes get_show_episodes Read get_shows Get details of multiple shows in one call (up to 50 IDs). Read get_track Get details of a Spotify track by its ID. Read get_tracks Get details of multiple tracks in one call (up to 50 IDs). Read search search Read whoami Diagnostic: show auth status, profile basics, active device, and configured scopes.

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Spotify MCP Server

Can an AI agent delete data through the Spotify MCP Server MCP server? +

Yes. The Spotify MCP Server server exposes 2 destructive tools including remove_from_library, remove_playlist_items. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Spotify MCP Server? +

The Spotify MCP Server server has 11 write tools including add_playlist_items, add_to_queue, create_playlist. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Spotify MCP Server.

How many tools does the Spotify MCP Server MCP server expose? +

59 tools across 4 categories: Destructive, Financial, Read, Write. 38 are read-only. 21 can modify, create, or delete data.

How do I enforce a policy on Spotify MCP Server? +

Register the Spotify MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Spotify MCP Server tool call.

Deterministic rules across all 59 Spotify MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON SPOTIFY →

Instant setup, no code required.

59 Spotify MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.