Nuclear

Overview

From the repository's own README, as read at the audited commit.

<p align="center">  <picture>    <source alt="Nuclear Music Player"  srcset="packages/docs/.gitbook/assets/readme-banner.png">    <img alt="Nuclear Music Player"  srcset="packages/docs/.gitbook/assets/readme-banner.png">  </picture></p><div align="center"># Nuclear </div><div align="center">  Nuclear is a free, open-source music player without ads or tracking. Search for any song or artist, build playlists, and start listening.<br>  Runs on Windows, macOS, and Linux.  </div>## Screenshots<p align="center">  <img src="packages/docs/.gitbook/assets/dashboard-main.png" alt="Nuclear Music Player - Dashboard" width="100%"></p>Nuclear comes with multiple built-in themes:<p align="center">  <img src="packages/docs/.gitbook/assets/dashboard-green.png" alt="Green theme" width="32%">  <img src="packages/docs/.gitbook/assets/dashboard-aqua.png" alt="Aqua theme" width="32%">  <img src="packages/docs/.gitbook/assets/dashboard-mint.png" alt="Mint theme" width="32%"></p><p align="center">  <img src="packages/docs/.gitbook/assets/dashboard-orange.png" alt="Orange theme" width="32%">  <img src="packages/docs/.gitbook/assets/dashboard-red.png" alt="Red theme" width="32%">  <img src="packages/docs/.gitbook/assets/dashboard-violet.png" alt="Violet theme" width="32%"></p>| | ||:---:|:---:|| ![Search artists](packages/docs/.gitbook/assets/search-artists.png) | ![Search albums](packages/docs/.gitbook/assets/search-albums.png) || Artist search | Album search || ![Playlists](packages/docs/.gitbook/assets/playlists.png) | ![Plugin store](packages/docs/.gitbook/assets/plugin-store.png) || Playlists | Plugin store || ![Installed plugins](packages/docs/.gitbook/assets/installed-plugins.png) | ![Preferences](packages/docs/.gitbook/assets/preferences.png) || Installed plugins | Preferences || ![What's new](packages/docs/.gitbook/assets/whats-new.png) | ![Log viewer](packages/docs/.gitbook/assets/log-viewer.png) || What's new | Log viewer |## DownloadGrab the latest release for your platform from 

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude mcp add website --env CODECOV_TOKEN=${CODECOV_TOKEN} -- npx -y @nuclearplayer/[email protected]

{
  "mcpServers": {
    "website": {
      "command": "npx",
      "args": [
        "-y",
        "@nuclearplayer/[email protected]"
      ],
      "env": {
        "CODECOV_TOKEN": "${CODECOV_TOKEN}"
      }
    }
  }
}

Exposed tools (70) 42 read · 19 write · 9 destructive

Blast radius: 9 tools can delete or overwrite. An agent that can be talked into calling a tool can be talked into calling this one.

Details

Source

nukeop/nuclear

npm

@nuclearplayer/website@2.12.3

Transports

streamable-http

Credentials it reads

CODECOV_TOKEN

License

AGPL-3.0

Stars

18,456 · pushed 0d ago

Trust audit

Do not install this without reading the findings. The audit found something that could harm you or your machine.

What the source does

Filesystem

declared (5 observation(s))

Network

declared (8 observation(s))

Shell

declared (3 observation(s))

Dependencies

not all pinned

Secrets in source

none-found

Findings (25)

new Function('exports', 'module', 'require', code)(

clearQueue, deletePlaylist, removeAlbum, removeArtist, removeByIds, removeByIndices, removeTrack, removeTracks, stop

nuclear-mcp.zip

.node-version

.prettierignore

.gitbook.yaml

import { LoggerProvider } from '../../LoggerProvider';

import { useCoreSetting } from '../../hooks/useCoreSetting';

import { useProviders } from '../../hooks/useProviders';

import { playbackManager } from '../../services/playback';

import { useQueueStore } from '../../stores/queueStore';

claude mcp add nuclear --transport http http://127.0.0.1:8800/mcp

codex mcp add nuclear --url http://127.0.0.1:8800/mcp

"url": "http://127.0.0.1:8800/mcp"

"url": "http://127.0.0.1:8800/mcp"

Enable Nuclear Jam in Settings, then Integrations. The **API URL** field shows the base URL (e.g. `http://192.168.1.42:4120/api`).

@ianvs/prettier-plugin-sort-imports, @tailwindcss/vite, @vitejs/plugin-react, @vitest/coverage-v8, eslint, husky, jsdom, lint-staged

@eslint/css, @eslint/js, @eslint/json, @eslint/markdown, @ianvs/prettier-plugin-sort-imports, eslint, eslint-config-prettier, eslint-plugin-prettier

hls.js, @testing-library/jest-dom, @testing-library/react, @types/react, @types/react-dom, @vitejs/plugin-react, @vitest/coverage-v8, jsdom

i18next, react-i18next, @types/react, @vitejs/plugin-react, @vitest/coverage-v8, typescript, vite, vite-plugin-dts

zod, @vitest/coverage-v8, typescript, vite, vitest

packages/docs/.gitbook/assets/dashboard-main.png

packages/docs/.gitbook/assets/playlists.png

packages/docs/.gitbook/assets/search-albums.png

packages/docs/.gitbook/assets/search-artists.png

Gates applied: no_behavioural_pass.

Audited 2026-09-16 · audit v0.4.0 · source sha 10f8e40debaa · full audit: observations/trust-audit/mcp-server/nukeop__nuclear.json · Report an issue or request a re-scan

Audit history

Alternatives

Other servers in the same categories, safer ones first.

Questions