.vscode — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited .vscode (MCP Server) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A Model Context Protocol (MCP) server that enables AI agents to interact with the Sonic API for managing events, venues, songs, and users.
This MCP server provides a comprehensive interface for AI agents to:
npm install npm run build # Windows (PowerShell)
$env:SONIC_API_TOKEN = "your-jwt-token-here"
# macOS/Linux
export SONIC_API_TOKEN="your-jwt-token-here" npm startSONIC_API_TOKEN: Your JWT authentication token (required)SONIC_API_BASE_URL: API base URL (default: https://localhost:5001/api)curl -X POST https://localhost:5001/api/auth/login \
-H "Content-Type: application/json" \
-d '{
"email": "[email protected]",
"password": "your-password"
}'Add to your Claude Desktop configuration:
{
"mcpServers": {
"sonic-api": {
"command": "node",
"args": ["C:\\path\\to\\sonic-mcp-server\\build\\index.js"],
"env": {
"SONIC_API_TOKEN": "your-jwt-token-here"
}
}
}
}get_events - List events with filtering and paginationget_event - Get specific event detailscreate_event - Create new eventupdate_event - Modify existing eventdelete_event - Remove eventget_venues - List venues with searchget_venue - Get venue detailscreate_venue - Add new venueupdate_venue - Modify venue infodelete_venue - Remove venueget_songs - List music libraryget_song - Get song detailscreate_song - Add song to libraryupdate_song - Update song infodelete_song - Remove songget_users - List users (admin)get_user - Get user profileget_current_user - Get your profileupdate_user - Update user infosearch_spotify - Search Spotify catalogget_spotify_token - Check Spotify authsearch_places - Find locationsget_place_details - Get place infoOnce configured with an AI assistant, you can use natural language:
{
"name": "create_event",
"arguments": {
"name": "Summer Music Festival",
"description": "Outdoor music event",
"startDate": "2024-07-15T18:00:00Z",
"maxAttendees": 500,
"isPublic": true
}
}npm run build - Compile TypeScriptnpm run dev - Watch mode for developmentnpm run clean - Remove build filesnpm start - Run the compiled serversrc/
├── index.ts # Main MCP server
├── sonic-client.ts # API client wrapper
└── types.ts # TypeScript definitions
.vscode/
└── mcp.json # VS Code MCP configuration
.github/
└── copilot-instructions.md # AI coding assistanceThe project includes VS Code debugging support. You can now debug this MCP server using VS Code with proper breakpoints and debugging tools.
Compatible with Sonic API endpoints:
/api/events - Event management/api/venues - Venue management/api/songs - Music management/api/users - User operations/api/spotify - Music search/api/maps - Location servicesMIT License - See LICENSE file for details
For issues and questions:
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.