Model Context Protocol moderate risk

Vrchat

VRChat MCP server provides tools to interact with the VRChat API, enabling automation of tasks like managing friends, avatars, worlds, and invites.

Connections & Capabilities

Connects To

GitHub

Capabilities

readwrite

Quickstart

Install

npx vrchat-mcp

Config

{
  "mcpServers": {
    "vrchat-mcp": {
      "command": "npx",
      "args": ["vrchat-mcp"],
      "env": {
        "VRCHAT_USERNAME": "your-username",
        "VRCHAT_AUTH_TOKEN": "your-auth-token"
      }
    }
  }
}

Exposed MCP Tools (17)

safe

vrchat_get_friends_list

Retrieves a list of the user's VRChat friends.

Read-only operation, no side effects.

moderate

vrchat_send_friend_request

Sends a friend request to a specified VRChat user.

Non-destructive write operation, but could be abused.

safe

vrchat_search_avatars

Searches for avatars based on specified criteria.

Read-only operation, no side effects.

moderate

vrchat_select_avatar

Selects and switches the user's current avatar to a specified avatar.

Modifies user preferences, but not destructive.

safe

vrchat_search_worlds

Searches for worlds based on specified criteria.

Read-only operation, no side effects.

safe

vrchat_list_favorited_worlds

Retrieves a list of the user's favorited worlds.

Read-only operation, no side effects.

moderate

vrchat_create_instance

Creates a new VRChat instance.

Creates a new instance, but doesn't modify existing data.

safe

vrchat_get_instance

Retrieves information about a specific VRChat instance.

Read-only operation, no side effects.

safe

vrchat_search_groups

Searches for VRChat groups based on specified criteria.

Read-only operation, no side effects.

moderate

vrchat_join_group

Joins a specified VRChat group.

Non-destructive write operation, but could be abused.

safe

vrchat_list_favorites

Retrieves a list of the user's favorites.

Read-only operation, no side effects.

moderate

vrchat_add_favorite

Adds a new item to the user's favorites.

Non-destructive write operation, but could be abused.

safe

vrchat_list_favorite_groups

Retrieves a list of the user's favorite groups.

Read-only operation, no side effects.

safe

vrchat_list_invite_messages

Retrieves a list of the user's invite messages.

Read-only operation, no side effects.

moderate

vrchat_request_invite

Requests an invite to a specific VRChat instance.

Non-destructive write operation, but could be abused.

safe

vrchat_get_invite_message

Retrieves a specific invite message.

Read-only operation, no side effects.

safe

vrchat_get_notifications

Retrieves a list of the user's notifications.

Read-only operation, no side effects.

Safety Assessment

This MCP server provides a convenient way to interact with the VRChat API. While it doesn't have direct destructive capabilities, mishandling the auth token or abusing the available tools could lead to account issues. Use with caution and ensure proper token management.

User authentication required via username and auth token.
Limited scope of actions based on defined MCP tools.
No direct filesystem access or shell execution.
Primarily interacts with VRChat API, not local system.

Improper handling of auth token could lead to account compromise.
Some tools allow modification of VRChat account settings (avatar selection, adding favorites).
Potential for abuse if combined with other tools in an automated workflow.
Lack of explicit rate limiting could lead to API throttling or temporary account restrictions.