Skip to content

cswkim/discogs-mcp-server

MCP SaaS Integrations

MCP Server for the Discogs API enabling music catalog operations and search functionality

TypeScript Latest v0.5.7 · 8d ago Security brief →

Features

  • Provides an MCP (Model Context Protocol) server interface to the Discogs music database API
  • Supports catalog operations such as adding, updating, and deleting records in a Discogs collection
  • Enables search of Discogs data via standardized MCP requests

Recent releases

View all 7 releases →
v0.5.6 Security relevant
Security fixes
  • minimatch >= 10.2.3 (GHSA-23c5-xmqv-rm74, GHSA-7r86-cg39-jmmj)
  • koa ^3.1.2 (GHSA-7gcc-r8m5-44qm)
  • express-rate-limit, @hono/node-server (GHSA-46wh-pxpv-q5gq, GHSA-wc8c-qw6v-h7f6)
Full changelog

Patch Changes

  • fix(security): override minimatch to >=10.2.3 to address GHSA-23c5-xmqv-rm74 and GHSA-7r86-cg39-jmmj (#146)

  • fix(security): override koa to ^3.1.2 to address GHSA-7gcc-r8m5-44qm (#145)

  • fix(security): override express-rate-limit and @hono/node-server to fix GHSA-46wh-pxpv-q5gq and GHSA-wc8c-qw6v-h7f6 (#152)

  • fix(security): hono override to address GHSA-q5qw-h33p-qvwr, GHSA-wc8c-qw6v-h7f6, GHSA-p6xx-57qc-3wxr and GHSA-5pq2-9x2x-5p6w (#150)

  • fix(security): bump hono to >=4.12.2 to address GHSA-xh87-mx6m-69f3 (#144)

  • fix(security): override rollup to >=4.59.0 to address GHSA-mw96-cpmx-2vgc (#147)

v0.5.5 Security relevant
Security fixes
  • hono >= 4.11.10 (GHSA-gq3j-xvxp-8hrf)
  • minimatch >= 10.2.1 (GHSA-3ppc-4f35-3m26, CVE-2026-26996)
  • qs >= 6.14.2 (GHSA-6rw7-vpxm-498p, CVE-2025-15284)
Full changelog

Patch Changes

  • fix(deps): bump hono to >=4.11.10 (GHSA-gq3j-xvxp-8hrf) (#138)

  • fix(deps): add minimatch override >=10.2.1 (GHSA-3ppc-4f35-3m26, CVE-2026-26996) (#139)

  • fix(deps): bump qs to >=6.14.2 (GHSA-6rw7-vpxm-498p, CVE-2025-15284) (#137)

v0.5.4 Security relevant
Security fixes
  • MCP SDK 1.26.0 (CVE-2026-25536, GHSA-345p-7cg4-v4c7)
Full changelog

Patch Changes

  • fix(security): upgrade MCP SDK to 1.26.0 to address CVE-2026-25536 (GHSA-345p-7cg4-v4c7) (#131)

  • fix(lint): attach cause to rethrown errors for preserve-caught-error (#134)

v0.5.3 Security relevant
Security fixes
  • hono patched for CVE-2026-24398, CVE-2026-24472, CVE-2026-24473
  • CVE-2026-24472
  • CVE-2026-24473
Full changelog

Patch Changes

  • chore: update hono to address CVE-2026-24398, CVE-2026-24472, CVE-2026-24473 (#128)
v0.5.2 Security relevant
Security fixes
  • hono >= 4.11.4 patched for JWT algorithm confusion (CVE-2026-22817, CVE-2026-22818)
  • CVE-2026-22818
Full changelog

Patch Changes

  • fix(security): update hono to >=4.11.4 to patch JWT algorithm confusion vulnerabilities (CVE-2026-22817, CVE-2026-22818) (#123)

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
103
Forks
15
Languages
TypeScript JavaScript Dockerfile
Downloads/week
257 ↑30%
NPM Maintainers
1 Single npm maintainer
Contributors
2

Install & Platforms

Install via
npm docker

Beta — feedback welcome: [email protected]