Back to Browse

Modrinth MCP Server

Developer ToolsModerate6.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Search Modrinth and publish Minecraft mods (create projects, upload versions) via the Modrinth API.

About

Search Modrinth and publish Minecraft mods (create projects, upload versions) via the Modrinth API.

Security Report

6.2
Moderate6.2Moderate Risk

This MCP server implements proper authentication for write operations and reads the token securely from environment variables. However, there are notable security concerns: the token is transmitted as plaintext in the Authorization header without Bearer prefix (non-standard), file paths are read from user input without validation enabling potential path traversal, and sensitive file I/O operations lack comprehensive error handling and logging safeguards. Supply chain analysis found 1 known vulnerability in dependencies (0 critical, 1 high severity). Package verification found 1 issue.

3 files analyzed · 8 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

What You'll Need

Set these up before or after installing:

Modrinth Personal Access Token (https://modrinth.com/settings/pats). Required only for write actions; read-only tools work without it.Required

Environment variable: MODRINTH_TOKEN

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-justinscott12-modrinth-mcp": {
      "env": {
        "MODRINTH_TOKEN": "your-modrinth-token-here"
      },
      "args": [
        "-y",
        "@justinscott12/modrinth-mcp"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

modrinth-mcp

An MCP server that wraps the Modrinth API so an AI agent (Claude Code, Claude Desktop, Cursor, …) can search projects, read project/version metadata, and publish Minecraft mods — create projects and upload built jars as new versions.

Tools

ToolAuthWhat it does
modrinth_whoamiVerify your token; return the authenticated user.
modrinth_search_projectsSearch public Modrinth projects.
modrinth_get_projectGet a project's metadata by slug or id.
modrinth_list_project_versionsList a project's published versions.
modrinth_create_versionPublish a new version by uploading one or more jars.
modrinth_create_projectCreate a new project (as a draft).
modrinth_modify_versionEdit metadata of an existing version.

Read-only tools work without a token. Anything that writes needs a Modrinth Personal Access Token.

Getting a token

Create a PAT at https://modrinth.com/settings/pats with these scopes:

  • Read projects
  • Read versions
  • Create versions
  • Write versions

Set it as the MODRINTH_TOKEN environment variable.

Install

As a Claude Code plugin

/plugin marketplace add justinscott12/modrinth-mcp
/plugin install modrinth-mcp@justinscott12

It runs the published npm package under the hood via npx. Claude Code plugins have no token-entry UI, so the server reads its token from the MODRINTH_TOKEN environment variable in the environment Claude Code runs in. Set it before launching Claude Code, e.g.:

# macOS/Linux (add to your shell profile to persist)
export MODRINTH_TOKEN=your-modrinth-pat

# Windows PowerShell (persist for your user)
setx MODRINTH_TOKEN "your-modrinth-pat"

Then restart Claude Code and run modrinth_whoami to confirm. Read-only tools (search, get project/versions) work without a token.

As an MCP server (any client)

Add to your MCP client config (e.g. Claude Desktop claude_desktop_config.json):

{
  "mcpServers": {
    "modrinth": {
      "command": "npx",
      "args": ["-y", "@justinscott12/modrinth-mcp"],
      "env": {
        "MODRINTH_TOKEN": "your-modrinth-pat"
      }
    }
  }
}

Or in Claude Code directly:

claude mcp add modrinth --env MODRINTH_TOKEN=your-modrinth-pat -- npx -y @justinscott12/modrinth-mcp

Environment variables

VariableDefaultPurpose
MODRINTH_TOKENModrinth Personal Access Token. Required for write actions.
MODRINTH_STAGINGunsetSet to 1 to hit https://staging-api.modrinth.com for safe testing.
MODRINTH_USER_AGENTmodrinth-mcp/<version> …Override the User-Agent sent to Modrinth.

Example flow

  1. modrinth_whoami — confirm auth works.
  2. modrinth_create_project — create the project page (created as a draft).
  3. modrinth_create_version — upload your built jar(s) with the target game_versions and loaders.
  4. Submit the project for review on the Modrinth site when ready.

Note: create_version and create_project publish public content. Only call them when you actually intend to publish.

Development

npm install
MODRINTH_STAGING=1 MODRINTH_TOKEN=your-staging-pat npm start

The server speaks MCP over stdio. stdout is reserved for the protocol; logs go to stderr.

License

MIT

Reviews

No reviews yet

Be the first to review this server!