1. Conduid
  2. AI
  3. Arr MCP
MCP server · AI

Arr MCP

An MCP server for your *Arr stack for you to be able to communicate, find out information and also be able to do basic tasks

Unclaimed MIT content
52Fair

Scored 5 days ago · breakdown

About Arr MCP

Arr MCP is an MCP server published by GauranshMathur in the AI category: an MCP server for your *Arr stack for you to be able to communicate, find out information and also be able to do basic tasks.

The repository has 5 stars and 2 forks, with the last commit 4 days ago. Recent commit activity is the strongest signal that reported issues will get attention.

Install

From source
git clone https://github.com/GauranshMathur/ARR_MCP

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (1)

bazarr_delete_blacklist_itemdestructive

Parameters not published.

Ask AI

✦

Ask AI about Arr MCP

Powered by Claude · Grounded in docs

I know everything about Arr MCP. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

Static checks derived from the repository 4 days ago. Heuristics on the source, not an audit.

  • ✓README presentThe repository ships documentation.
  • ✓License declaredUsable under a stated license.
  • ✓Tests presentA test suite exists in the repository.
  • ✓Dependencies pinnedA lockfile pins dependency versions.
  • ✓No dynamic code executionSource scan found no eval, dynamic Function, or shell execution.
  • !Scoped permissionsDoesn't declare a permission scope. Assume it can do anything its process can.

Releases

v1.17.0v1.17.0 · 18 Oct 20261.17.0 (2026-10-18) Features jellyfin: add jellyfin_get_plugin_config behind a plugin and key allowlist (eff8505) Bug Fixes jellyfin: say that changing Intro Skipper analyzers re-analyzes the season (ab50afd)
v1.16.0v1.16.0 · 18 Oct 20261.16.0 (2026-10-18) Features jellyfin: add Intro Skipper segment, analyzer and season-scan tools (abe6f01)
v1.15.0v1.15.0 · 18 Oct 20261.15.0 (2026-10-18) Features jellyfin: add jellyfin_list_plugins (800a6d4)
v1.14.0v1.14.0 · 18 Oct 20261.14.0 (2026-10-18) Features jellyfin: add chapters, media segments and per-series skip markers (de0b27c)
v1.13.1v1.13.1 · 12 Oct 20261.13.1 (2026-10-12) Documentation arr-mcp: split the README into docs/ and make it a landing page (25256b3)

README


  • Real MCP — JSON-RPC 2.0 over stdio and Streamable HTTP, built on the official Go SDK
  • 323 tools — what you would otherwise do by clicking through each web UI
  • Multi-instance — run two Sonarrs (4K and 1080p) and address them by name
  • Permission controls — read-only, confirm-before-write, or full access
  • Single static binary, distroless container, multi-arch image

Supported services

Service Tools Service Tools
Sonarr 77 Maintainerr 25
Radarr 73 Seerr 17
Bazarr 33 Jellyfin 11
Prowlarr 23 Jellystat 10
qBittorrent 22 Synology DSM 14
NZBGet 18

Expose one service or all of them; anything you don't configure registers no tools. What is planned and what is deliberately left out is in docs/scope.md.

Install with your AI

The fastest way in. Paste this into Claude, ChatGPT, Cursor, or whichever assistant you use:

Read https://raw.githubusercontent.com/GauranshMathur/ARR_MCP/main/docs/ai-install-prompt.md
and follow it to set up ARR-MCP for me. It is an instruction document — act on it, don't
summarise it back to me.

That last sentence matters: without it, assistants tend to fetch the page and report on it rather than doing anything.

It works out which MCP client you are using — often the one you are already talking to — then asks only what it needs and either performs the setup itself or gives you exact steps for your operating system, ending with a command to check it worked.

If your assistant can't browse the web, paste the contents of docs/ai-install-prompt.md instead — it is self-contained and needs no network access.

Would rather do it by hand? Carry on below.

60-second quickstart

The shortest path from nothing to a working server. No config file, no clone — just environment variables and one container.

1. Collect one URL and one API key for each service you want to expose. See Find your API key if you don't know where they live.

2. Write them into a .env file:

cat > .env <<'EOF'
SONARR_URL=http://192.168.10.12:8989
SONARR_API_KEY=your-sonarr-api-key
RADARR_URL=http://192.168.10.14:7878
RADARR_API_KEY=your-radarr-api-key
EOF

Any service you leave out is simply not exposed. One service is enough to start.

3. Check that the credentials work before wiring up a client, so a mistake shows up as a clear error rather than as a client that mysteriously has no tools:

docker run --rm --env-file .env ghcr.io/gauranshmathur/arr-mcp --check
OK    sonarr/default (http://192.168.10.12:8989)
OK    radarr/default (http://192.168.10.14:7878)

4. Add it to your client. For Claude Code:

claude mcp add arr -- docker run -i --rm --env-file /absolute/path/to/.env \
  ghcr.io/gauranshmathur/arr-mcp --transport stdio

That is the whole setup. docs/clients.md has copy-pasteable blocks for Claude Desktop, Cursor, VS Code, Windsurf, Zed, Cline, Roo Code, Continue.dev, LibreChat, Goose and anything else that speaks MCP.

Use an absolute path for --env-file. Your MCP client starts the server from its own working directory, which is rarely the one you were standing in when you created .env.

Prefer a long-running server?

Run it once over HTTP and point every client at the same endpoint:

docker run -d --name arr-mcp --env-file .env -p 8080:8080 \
  ghcr.io/gauranshmathur/arr-mcp
curl -s localhost:8080/health   # {"status":"ok"}

MCP is served at http://localhost:8080/mcp. The container defaults to --transport http --addr 0.0.0.0:8080, so no arguments are needed. If you cloned the repository, docker compose up -d does the same thing.

Permissions

Every credential you hand ARR-MCP is full access to that application, so mutating tools are gated by a policy. The default, confirm, asks you before any write or delete; readonly hides mutating tools from the client entirely; full runs everything immediately. Any instance can override the global policy. If writes are refused without a prompt, your client does not support MCP elicitation: see docs/permissions.md for the fallback and confirmScope settings.

Connecting a client

Full copy-pasteable configuration for every client below lives in docs/clients.md. The two forms everything reduces to:

stdio — the client launches the process and talks over stdin/stdout:

docker run -i --rm --env-file /absolute/path/to/.env ghcr.io/gauranshmathur/arr-mcp --transport stdio

The -i is required: without it Docker gives the container no stdin and the JSON-RPC handshake never completes.

HTTP — the server runs somewhere and the client connects to it:

http://localhost:8080/mcp

/health on the same port answers {"status":"ok"} and is not part of the MCP protocol; it exists for container and Kubernetes probes.

Kubernetes

Manifests for a Deployment, Service, ConfigMap and Secret template are in deploy/kubernetes/, with a kustomization.yaml so they can be pointed at directly by Argo CD or kubectl apply -k.

Documentation

Client setup Copy-pasteable config for Claude, Cursor, VS Code, Windsurf, Zed and others
Configuration Finding API keys, environment variables, config.yaml, multiple instances, CLI flags
Permissions Modes, confirmation scope, per-instance overrides
Tools Every tool by service, and what responses contain
Troubleshooting 401, connection refused, missing tools, refused writes
Scope What is covered, what is planned, and what is left out on purpose
Development Building, testing, adding a service, releases

Contributing

Issues and pull requests are welcome. Start with docs/development.md; AGENTS.md holds the repository conventions.

License

MIT

README fetched from the repository 4 days ago. The original is authoritative.

Questions

About Arr MCP

How do I install Arr MCP?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Arr MCP safe to use with an AI agent?

Its trust score is 52 out of 100 (fair). It passes 5 of the 6 static security checks run so far; the failures are listed above. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Arr MCP still maintained?

Yes — the latest release is v1.17.0 (18 Oct 2026), and the last commit was 4 days ago. The repository has 5 stars and 1 open issues.