RomM MCP Server

An MCP server for RomM — the self-hosted retro game library manager. 19 read-only tools for browsing platforms, searching ROMs, viewing metadata, managing collections, tracking saves, and monitoring tasks through any MCP-compatible AI assistant.

Tools

Setup

Prerequisites

• Python 3.10+
• A running RomM instance (v4.0+)
• A RomM user account with admin role

Install

pip install fastmcp httpx

Or clone and install:

git clone https://github.com/lodordev/mcp-romm.git
cd mcp-romm
pip install .

Configure

Set environment variables:

Add to Claude Code

Add to your .mcp.json:

{
  "mcpServers": {
    "romm": {
      "command": "python",
      "args": ["/path/to/mcp-romm/server.py"],
      "env": {
        "ROMM_URL": "http://your-romm-instance:3000",
        "ROMM_USERNAME": "your-username",
        "ROMM_PASSWORD": "your-password"
      }
    }
  }
}

Add to Claude Desktop

Add to your Claude Desktop config (~/Library/Application Support/Claude/claude_desktop_config.json on macOS):

{
  "mcpServers": {
    "romm": {
      "command": "python",
      "args": ["/path/to/mcp-romm/server.py"],
      "env": {
        "ROMM_URL": "http://your-romm-instance:3000",
        "ROMM_USERNAME": "your-username",
        "ROMM_PASSWORD": "your-password"
      }
    }
  }
}

Examples

Once configured, you can ask your AI assistant things like:

• "What platforms do I have in RomM?"
• "Search for Zelda games"
• "Show me my backlog"
• "How many ROMs do I have total?"
• "What was recently added?"
• "Show me the saves for Super Metroid"
• "What's in my favorites?"
• "List my firmware files for PlayStation"
• "What tasks are running?"
• "What devices are registered?"

Security

• Read-only. All 19 tools are read-only. The only mutation is romm_scan_library, which triggers an idempotent library rescan.
• No disk writes. Credentials and tokens are held in memory only, never written to disk.
• Scoped tokens. OAuth2 tokens request only the scopes needed for read operations.
• TLS by default. Certificate verification is enabled by default (ROMM_TLS_VERIFY=true).
• Auto-retry. If a token expires mid-session, the server re-authenticates transparently.

Auth

The server uses OAuth2 password grant to authenticate with RomM. Tokens are scoped to the minimum permissions needed and automatically refreshed when they expire. If a request gets a 401, the server re-authenticates and retries once.

Note: Your RomM user must have the admin role for all tools to work. The user must also be enabled in the RomM admin panel.

License

MIT