Skip to content

cswkim/discogs-mcp-server

MCP SaaS Integrations

MCP Server for the Discogs API enabling music catalog operations and search functionality

Track releases GitHub
TypeScript Latest v0.5.7 · 2mo ago Security brief →

Features

  • Provides an MCP server interface to the Discogs music catalog API
  • Supports music collection operations such as searching, adding, editing entries
  • Offers configurable per‑page response limits for client compatibility

Recent releases

View all 7 releases →
v0.5.6 Security relevant
Security fixes
  • minimatch >= 10.2.3 (GHSA-23c5-xmqv-rm74, GHSA-7r86-cg39-jmmj)
  • koa ^3.1.2 (GHSA-7gcc-r8m5-44qm)
  • express-rate-limit, @hono/node-server (GHSA-46wh-pxpv-q5gq, GHSA-wc8c-qw6v-h7f6)
Full changelog

Patch Changes

  • fix(security): override minimatch to >=10.2.3 to address GHSA-23c5-xmqv-rm74 and GHSA-7r86-cg39-jmmj (#146)

  • fix(security): override koa to ^3.1.2 to address GHSA-7gcc-r8m5-44qm (#145)

  • fix(security): override express-rate-limit and @hono/node-server to fix GHSA-46wh-pxpv-q5gq and GHSA-wc8c-qw6v-h7f6 (#152)

  • fix(security): hono override to address GHSA-q5qw-h33p-qvwr, GHSA-wc8c-qw6v-h7f6, GHSA-p6xx-57qc-3wxr and GHSA-5pq2-9x2x-5p6w (#150)

  • fix(security): bump hono to >=4.12.2 to address GHSA-xh87-mx6m-69f3 (#144)

  • fix(security): override rollup to >=4.59.0 to address GHSA-mw96-cpmx-2vgc (#147)

View release on GitHub
v0.5.5 Security relevant
Security fixes
  • hono >= 4.11.10 (GHSA-gq3j-xvxp-8hrf)
  • minimatch >= 10.2.1 (GHSA-3ppc-4f35-3m26, CVE-2026-26996)
  • qs >= 6.14.2 (GHSA-6rw7-vpxm-498p, CVE-2025-15284)
Full changelog

Patch Changes

  • fix(deps): bump hono to >=4.11.10 (GHSA-gq3j-xvxp-8hrf) (#138)

  • fix(deps): add minimatch override >=10.2.1 (GHSA-3ppc-4f35-3m26, CVE-2026-26996) (#139)

  • fix(deps): bump qs to >=6.14.2 (GHSA-6rw7-vpxm-498p, CVE-2025-15284) (#137)

View release on GitHub
v0.5.4 Security relevant
Security fixes
  • MCP SDK 1.26.0 (CVE-2026-25536, GHSA-345p-7cg4-v4c7)
Full changelog

Patch Changes

  • fix(security): upgrade MCP SDK to 1.26.0 to address CVE-2026-25536 (GHSA-345p-7cg4-v4c7) (#131)

  • fix(lint): attach cause to rethrown errors for preserve-caught-error (#134)

View release on GitHub
v0.5.3 Security relevant
Security fixes
  • hono patched for CVE-2026-24398, CVE-2026-24472, CVE-2026-24473
  • CVE-2026-24472
  • CVE-2026-24473
Full changelog

Patch Changes

  • chore: update hono to address CVE-2026-24398, CVE-2026-24472, CVE-2026-24473 (#128)
View release on GitHub
v0.5.2 Security relevant
Security fixes
  • hono >= 4.11.4 patched for JWT algorithm confusion (CVE-2026-22817, CVE-2026-22818)
  • CVE-2026-22818
Full changelog

Patch Changes

  • fix(security): update hono to >=4.11.4 to patch JWT algorithm confusion vulnerabilities (CVE-2026-22817, CVE-2026-22818) (#123)
View release on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

About

Stars
115
Forks
19
Languages
TypeScript JavaScript Dockerfile
Downloads/week
48 ↓60%
NPM Maintainers
1 Single npm maintainer
Contributors
2
View on GitHub View on npm

Install & Platforms

Install via
npm docker

Similar tools

awslabs/mcp
saseq/discord-mcp
utapyngo/sentry-mcp-rs
portainer/portainer-mcp
conorbronsdon/substack-mcp

Beta — feedback welcome: [email protected]