Is bettersuno-mcp@1.2.0 safe to install?

Skills/npm/bettersuno-mcp

bettersuno-mcp@1.2.0

VERIFIED

Publisher claims: "MCP server for BetterSuno — exposes Suno API features to AI agents via the Model Context Protocol" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher mrdoe · publishing for 123 daysInstalls 1,192Last detonated 10 h ago

$claude mcp add bettersuno-mcp -- npx -y bettersuno-mcp

Watch Report an issue

Coverage

Server started and answered tools/list.

Tested: install scripts, with decoy credentials in place · second launch with the clock 45 days ahead · MCP initialize and tools/list · every tool description, for hidden instructions · every file read, file written and host contacted by what ran
Not tested: what the tools do when called with real credentials

Before you give it your token

It will ask for: MCP_TOKEN_FILEConfiguration, not credentials: INIT_CWD, MCP_ALLOW_COMMENTS, MCP_API_BASE_URL, MCP_CAPTCHA_TIMEOUT_MS, MCP_GENERATION_INTERVAL_MS, MCP_MANGO_BASE_URL, MCP_WS_PORT, npm_config_global, npm_config_location
Where it talks to: no vendor host named in the codeAlso suno.com, opencode.ai — not the publisher's domain; check what for before connecting.
What the honeypot saw: no credential files read · no network
What we could not test: what the tools do when called with real credentials

Connect it with a scoped credential, under the guard, and read the third-party hosts first. The code names suno.com, opencode.ai as well as its own vendor. The guard injects MCP_TOKEN_FILE only into requests to the host you bind (and its subdomains) and refuses the rest.

$vet-skills run --net declared -- npx -y bettersuno-mcp

Never paste a credential into a chat, a ticket or a report, including ours. How the guard holds it.

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (3 scenarios) on 2026-11-14 and scored it 91/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 26 s · 3 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessinstall script run in the sandbox

0.1sprocessexited 1: Node.js v22.23.5

6.1sprocessdependency install exit 0

26sclaimed121 tools: create_song, inspire_song, cover_song, extend_song, mashup_song, concat_songs, remaster_song, make_stems, generate_lyrics, lyrics_infill, lyrics_mashup, get_recommended_styles, upsample_tags, list_library, get_song, get_songs_by_ids, search_songs, search_users, get_profile, get_current_user, get_user_session, get_library_stats, get_db_songs, search_by_lyrics, get_song_urls

26stoolsc95b5749d1528eb2

26stools0426c0de2cd7eeb7

26stoolsd506ce410ea4eff7

26stools3d88b90c5727abdc

26stoolsc918e30041c816b3

26stoolsb8e32cb4db6ed0e3

26stools831afe1813aebceb

26stools2f4771d59871403a

26stools063436554f3056c3

26stools52986f3ff84cda6d

26stoolsc58a8016c42658ac

26stoolsaccd49ec600e1ca9

26stools1dc6b45f71af93ab

26stools301958eba27e2a5b

26stools6b11fbc3043020e1

26stoolsfc77c37dd37e5128

26stools35f10db926d55c74

26stools192e92a75ce6d771

26stools057e72686e2c1374

26stools500ccd52373d7d79

26stoolsec0c1f6ff8be2d60

26stools801b8ba8d796fe2a

26stoolsd15e3845cae4cc95

26stools100f7c2ca4273ab7

26stools7ef26ce71710e64b

26stools91705d7762d51b2b

26stools98630462942ca0be

26stoolsb6734f5a18c0963a

26stools07004b154d123e98

26stools87428ff0783a1959

26stools99812e6aee088b56

26stools25f4bae586466e04

26stools06f0fa37eb3f4fb5

26stoolscacc90936ad2ae5c

26stools4e3337494ad19726

26stools84da550f3c51e02e

26stoolsd2c80172bc2c2130

26stools45834c7d4b4f03e2

26stools6b6c58ad6e149d4b

26stoolsffed70d56711f028

26stoolsf8641d135fb969ac

26stools4098559970dfc3dd

26stools34439eba9cce2787

26stoolsb1ec3c4f645f66f8

26stools9ccf72495f3d9ef7

26stools03f6612d50d604a9

26stoolsfd54caf9913eba39

26stools6b892430dd2a8051

26stools284f806f1946b4db

26stools081274ac7878a727

26stoolse1be3b563fb0f1d5

26stoolsad52f53ed1a9bcf9

26stools72b89fcb8e493391

26stools28553e52d43c66d2

26stoolsaa159bd4ec9b5f4f

26stoolsc9191b1e21d27e28

26stoolsf848f9f03274e53d

26stoolsee632e0b817d3db5

26stools5d38b1e134c7bbe3

26stools13f4c52fcd4dd090

26stoolsd4c805551b8fd5aa

26stoolse924130839c6ed66

26stoolsacf622f96bd022a7

26stools1427101d760971b5

26stools06ebb58e8b48e138

26stools4c1a60b108b441bf

26stools1068684206937c9e

26stoolsafc68ff05a50ea3a

26stools5cf6901c133d577a

26stoolsbd57b1cf28c62dd2

26stoolsce878437a2bd3752

26stools1ee2bf184504767a

26stoolse2c09790905cb3d0

26stools3e32dc50b4ac5d7c

26stools095020a890438c7a

26stoolsc9c652b9ee5c5525

26stools94e641700d0b4f57

26stools6e8e4eede59eaae2

26stoolsdfff213460d3fe66

26stools599590dd8cabb2f6

26sprocessscript backend runs setup only

26sprocesssecond launch, clock +45 days, CI unset

26sprocessexited 1: Node.js v22.23.5

Static findings

MEDIUM

Process kill commandsrc/ws-bridge.js:26 · Process kill command — agent can terminate processesconsole.error('[ws-bridge] Fix: kill stale instance(s) with: pkill -f bettersuno-mcp');Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.

AST05

MEDIUM

Process kill commandsrc/ws-bridge.js:132 · Process kill command — agent can terminate processes

return Promise.reject(new Error('BetterSuno extension is not connected. If another opencode session holds ws://127.0.0.1:' + config.wsPort + ', kill it with: pkill -f bettersuno-mcp'));

Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.

AST05

MEDIUM

Process kill commandsrc/ws-bridge.js:147 · Process kill command — agent can terminate processes

return reject(new Error('BetterSuno extension is not connected. If another opencode session holds ws://127.0.0.1:' + config.wsPort + ', kill it with: pkill -f bettersuno-mcp'));

Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.

AST05

Cost to the agent

Instructions loaded

≈61 tok

1 file · 29 in bundle

Tool list per prompt

≈13,027 tok

121 tools · 108 per tool

Handshake

2398 ms

launch to tools/list, stdio

Undocumented tools

description under 20 chars · avg 68

Tokens estimated at four characters each. The tool list is re-read by the agent on every turn, so it is the number to compare between servers that do the same job: ranked across the index.

Known vulnerabilities

No advisories in OSV for bettersuno-mcp@1.2.0 as of 10 h ago. This is the package itself, not its dependencies.