Atlas / MCP servers / wizardoftryout / oszillation-mixing-buddy

oszillation-mixing-buddyCAUTION

mcp/wizardoftryout/oszillation-mixing-buddy

Universal AI Co-Producer for DAWs · Bit-transparent ITU-R BS.1770-4 telemetry, 128-band RTA & zero-latency native accessibility bridges (macOS / Logic Pro & Steinberg).

Verdict
CAUTION
Grade
B
Trust score
84 /100
Exposed tools
19 9r · 10w · 0d
Transport
sse · stdio
License
NOASSERTION
Stars
0
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

The Autonomous, Hearing-Protected AI Co-Producer for Professional Digital Audio Workstations. Bit-transparent ITU-R BS.1770-4 metrology, 128-band hardware-grade RTA, multi-satellite monitoring, and zero-latency native accessibility bridges for Apple Logic Pro & Steinberg Nuendo.

🎬 Studio Split-Screen Overview

Oszillation Mixing Buddy operates alongside your DAW as an intelligent, responsive co-producer. It continuously monitors incoming audio streams, detects tonal imbalances, and executes non-destructive mixing adjustments directly on your mixer and insert plugins.

⚡ Key Architectural Highlights

1. 30 FPS Multi-Satellite Telemetry ("The Ear")

  • JUCE 8 / C++20 Satellites: Dedicated lightweight meter plugins deployed simultaneously on Master, Subgroups, Vocals, and Drums.
  • Bit-Transparent Streaming: Evaluates Integrated LUFS, Momentary LUFS (400 ms), True Peak (dBTP), Stereo Correlation, and Crest Factor with internal latency $\le 0.1\text{ ms}$.
  • **Mult
Read from source at commit 5198ce3906a3OBSERVED · 2026-10-10
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code
claude mcp add shared-types --env ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY} --env GEMINI_API_KEY=${GEMINI_API_KEY} --env OPENAI_API_KEY=${OPENAI_API_KEY} -- npx -y @mixing-buddy/[email protected]
claude-desktop
{
  "mcpServers": {
    "shared-types": {
      "command": "npx",
      "args": [
        "-y",
        "@mixing-buddy/[email protected]"
      ],
      "env": {
        "ANTHROPIC_API_KEY": "${ANTHROPIC_API_KEY}",
        "GEMINI_API_KEY": "${GEMINI_API_KEY}",
        "OPENAI_API_KEY": "${OPENAI_API_KEY}"
      }
    }
  }
}
03

Exposed tools (19)

9 read · 10 write · 0 destructive.

ToolRiskDescription
audition_regionreadLocate the DAW playhead to a specific bar and play back for a range of bars or duration in seconds so the engineer can hear the mix at that position.
get_track_detailswriteGet detailed plugin/insert information for a specific track by name.
list_trackswriteFetch live channel strips and insert plugins from the active DAW session.
mcp__audition_regionreadSets cycle/loop markers in Nuendo/Logic Pro around a mix section and starts playback for immediate A/B auditioning.
mcp__execute_mix_adjustmentwriteExecutes approved parameter adjustments directly in Nuendo or Logic Pro through the Acoustic Shock Shield (master <= 0 dB, track <= +6 dB, step <= +3 dB).
mcp__get_mix_telemetryreadRetrieves real-time audio metrology from the master bus plugin (Momentary/Short-term/Integrated LUFS, True Peak, Stereo Correlation, 32-band FFT spectrum, and top-5 prominent resonances).
mcp__get_project_inforeadRetrieves active DAW session status including connected DAW name (Logic Pro / Nuendo / Cubase), open project name, and playback state.
mcp__learn_pluginreadScans the currently open plugin UI window in the active DAW, learns all its knobs/sliders, and saves it permanently to the user
mcp__list_tracksreadLists active tracks in Nuendo or Logic Pro with fader levels (dB), stereo pan, mute/solo states, and insert plugin names.
mcp__load_pluginreadDynamically inserts and loads a plugin into an Audio FX slot of a track using Logic Pro
mcp__match_reference_spectrumreadCalculates Delta(f) = Live_Mix(f) - Reference(f) and generates a structured MixActionProposal with Channel EQ adjustments when deviation exceeds threshold (default 2.5 dB).
mcp__propose_mix_adjustmentwriteSubmit an actionable mixing proposal to the engineer HUD
mcp__route_sendwriteAssigns a track
mcp__route_sidechainwriteRoutes a sidechain trigger source into an insert plugin
mcp__select_trackreadSelects a specific track in the arrangement, bringing its channel strip into focus in the left inspector.
mcp__set_active_skillwriteActivates a specific mixing skill profile (e.g.
mcp__set_folder_statewriteExpands or collapses a folder track or track stack (e.g. Drums, Vocals) in the Logic Pro arrangement.
propose_mix_adjustmentwriteSubmit the final, validated mix adjustment proposal.
set_track_statewriteDirectly adjust a track state in the DAW session: set fader volume (dB), pan (-63..+63), mute/solo toggle, or automation mode (
04

Trust audit

CAUTIONgrade B · trust 84/100 Install with care. The audit found things worth knowing before you trust its output.

LayerWhat it checksResult
L0Provenance & inventoryWARN
L1Static analysis of the codeWARN
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
declared (4 observation(s))
Network
declared (10 observation(s))
Shell
none-observed
Dependencies
not all pinned
Secrets in source
none-found

Findings (18)

MEDIUMInventory / provenance · inv.binary · CWE-1104
apps/desktop/src-tauri/icons/icon.icns
icon.icns
Why it matters. a compiled or binary member cannot be reviewed from source
Fix. ship source, or explain the binary in the README
MEDIUMFilesystem / path · fs.system_paths · CWE-22, CWE-59
apps/desktop/src-tauri/src/lib.rs:1426
"/usr/local/bin/node",
MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319
apps/desktop/src-tauri/src/ipc_server.rs:1420
.post("http://127.0.0.1:48198/api/proposals")
MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319
apps/desktop/src-tauri/src/ipc_server.rs:1444
.get("http://127.0.0.1:48197/api/project")
MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319
apps/desktop/src-tauri/src/ipc_server.rs:1455
.get("http://127.0.0.1:48197/api/tracks")
MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319
apps/desktop/src-tauri/src/ipc_server.rs:1479
.post("http://127.0.0.1:48197/api/tracks")
MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319
apps/desktop/src-tauri/src/ipc_server.rs:1489
.get("http://127.0.0.1:48197/api/tracks")
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
apps/desktop/src-tauri/src/lib.rs:61
"../../packages/daw-adapters/bin/logic-ax-bridge",
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
apps/desktop/src-tauri/src/lib.rs:62
"../../../packages/daw-adapters/bin/logic-ax-bridge",
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
packages/daw-adapters/src/logic/macos_ax_client.ts:99
const candidate = resolve(__dirname, '../../bin/logic-ax-bridge');
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
apps/desktop/package.json
@tauri-apps/api, @tauri-apps/plugin-shell, lucide-react, react, react-dom, @tauri-apps/cli, @types/node, @types/react
Why it matters. 15 dependency range(s) float
Fix. pin exact versions or ship a lockfile
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
package.json
@types/node, typescript
Why it matters. 2 dependency range(s) float
Fix. pin exact versions or ship a lockfile
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
packages/ai-engine/package.json
@anthropic-ai/sdk, @google/generative-ai, openai, @types/node, typescript
Why it matters. 5 dependency range(s) float
Fix. pin exact versions or ship a lockfile
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
packages/daw-adapters/package.json
@types/node, typescript
Why it matters. 2 dependency range(s) float
Fix. pin exact versions or ship a lockfile
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
packages/mcp-server/package.json
@modelcontextprotocol/sdk, ws, zod, @types/node, @types/ws, typescript
Why it matters. 6 dependency range(s) float
Fix. pin exact versions or ship a lockfile
INFOInventory / provenance · inv.oversize · CWE-1104
screenshots/hero_split_screen_logic_buddy.png
screenshots/hero_split_screen_logic_buddy.png
Why it matters. 5380179 bytes not read
INFOInventory / provenance · inv.oversize · CWE-1104
screenshots/plugin_vault_library.png
screenshots/plugin_vault_library.png
Why it matters. 1228457 bytes not read
INFOInventory / provenance · inv.oversize · CWE-1104
screenshots/reasoning_engine_backend.png
screenshots/reasoning_engine_backend.png
Why it matters. 1032691 bytes not read

Gates applied: no_behavioural_pass.

Audited 2026-10-10 · audit v0.4.1 · source sha 5198ce3906a3full audit observations/trust-audit/mcp-server/wizardoftryout__oszillation-mixing-buddy.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-105198ce3906a3CAUTIONB84first audit
06

Questions

What is the oszillation-mixing-buddy MCP server?

Universal AI Co-Producer for DAWs · Bit-transparent ITU-R BS.1770-4 telemetry, 128-band RTA & zero-latency native accessibility bridges (macOS / Logic Pro & Steinberg).

What tools does oszillation-mixing-buddy expose?

19 in total: 9 read-only, 10 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is oszillation-mixing-buddy safe to connect to an agent?

With care. The audit graded it B (84/100) and found 18 things worth knowing before you trust this server, listed below with the exact line each was found on.

What credentials does oszillation-mixing-buddy need?

It reads ANTHROPIC_API_KEY, GEMINI_API_KEY and OPENAI_API_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.

How does oszillation-mixing-buddy run?

It speaks sse and stdio, so it runs as a local process your client starts. It is published on npm as @mixing-buddy/shared-types at 0.1.0.

How current is this page?

The grade is for one exact copy of the source (5198ce3906a3), read on 2026-10-10. The repository is watched and re-audited when it changes.

Advertisement