zonefoundry-mcpSAFE
Remote MCP server for controlling Sonos from Claude, Cursor, Kimi Code and other AI assistants — https://relay.zonefoundry.dev/mcp
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Remote MCP server: `https://relay.zonefoundry.dev/mcp` (Streamable HTTP · OAuth 2.1 with PKCE · dynamic client registration and client ID metadata documents supported)
Talk to Claude, Cursor, Kimi Code or any MCP client and your Sonos system does it: play songs, artists and playlists, set volume, group rooms, move music to another room, switch to TV, speak announcements and set spoken reminders.
This repository only holds the connection manifests, logo and documentation. The server is hosted by ZoneFoundry; its source code is not published here.
Requirements
- A Sonos system.
- The free ZoneFoundry iOS app, signed in to your own Sonos account. Commands go through the official Sonos cloud, so there is no home bridge to install and it works when you are away from home.
Connect
Authorization
When you connect, your browser opens a ZoneFoundry page that shows a 6-digit code. Approve it in the ZoneFoundry app: Settings → AI access → enter the code, or tell the in-app assistant "authorize 123456". Every connected AI app is listed there and can be disconnected at any time.
Tools (27)
059d193bee04OBSERVED · 2026-10-11Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | NA |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | WARN |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (2)
streamable-http
Gates applied: no_behavioural_pass.
059d193bee04full audit observations/trust-audit/mcp-server/kisssam6886__zonefoundry-mcp.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-11 | 059d193bee04 | SAFE | B | 89 | first audit |
Questions
What is the zonefoundry-mcp MCP server?
Remote MCP server for controlling Sonos from Claude, Cursor, Kimi Code and other AI assistants — https://relay.zonefoundry.dev/mcp
Is zonefoundry-mcp safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does zonefoundry-mcp need?
No credential environment variables were found in its source, so it appears to need none.
How does zonefoundry-mcp run?
It speaks streamable-http, so it runs as a service you connect to over the network.
How current is this page?
The grade is for one exact copy of the source (059d193bee04), read on 2026-10-11. The repository is watched and re-audited when it changes.