VERIFIED

Vrchat

Safety: 55/100

0.0(0)

VRChat MCP server provides tools to interact with the VRChat API, enabling automation of tasks like managing friends, avatars, worlds, and invites.

MCP ServersDevelopmentProductivityData & DatabasesSearch & WebAI & LLMSocial MediaUtilitiesFreemium

Boost this tool

Subscribe to listing upgrades or segmented pushes.

Overview

VRChat MCP server provides tools to interact with the VRChat API, enabling automation of tasks like managing friends, avatars, worlds, and invites.

This MCP server provides a convenient way to interact with the VRChat API. While it doesn't have direct destructive capabilities, mishandling the auth token or abusing the available tools could lead to account issues. Use with caution and ensure proper token management.

Performance depends on the VRChat API response times and the efficiency of the vrchat-mcp implementation. Large friend lists or extensive search queries may take longer to process.

Cost is primarily related to VRChat API usage. Excessive API calls could potentially lead to rate limiting or, in extreme cases, account restrictions.

HybridTypeScript53 starsMITCI/CD

Connections & Capabilities

Connects To

GitHub

Capabilities

ReadWrite

Client Compatibility

Claude Desktop

full

Cursor

untested

Windsurf

untested

VS Code (Copilot)

untested

Quickstart

Install

npx vrchat-mcp

Claude Desktop Config

{
  "mcpServers": {
    "vrchat-mcp": {
      "command": "npx",
      "args": ["vrchat-mcp"],
      "env": {
        "VRCHAT_USERNAME": "your-username",
        "VRCHAT_AUTH_TOKEN": "your-auth-token"
      }
    }
  }
}

Environment Variables

VRCHAT_USERNAMEVRCHAT_AUTH_TOKEN

Tools (17)

safe

vrchat_get_friends_list

Retrieves a list of the user's VRChat friends.

Read-only operation, no side effects.

moderate

vrchat_send_friend_request

Sends a friend request to a specified VRChat user.

Non-destructive write operation, but could be abused.

safe

vrchat_search_avatars

Searches for avatars based on specified criteria.

Read-only operation, no side effects.

moderate

vrchat_select_avatar

Selects and switches the user's current avatar to a specified avatar.

Modifies user preferences, but not destructive.

safe

vrchat_search_worlds

Searches for worlds based on specified criteria.

Read-only operation, no side effects.

safe

vrchat_list_favorited_worlds

Retrieves a list of the user's favorited worlds.

Read-only operation, no side effects.

moderate

vrchat_create_instance

Creates a new VRChat instance.

Creates a new instance, but doesn't modify existing data.

safe

vrchat_get_instance

Retrieves information about a specific VRChat instance.

Read-only operation, no side effects.

safe

vrchat_search_groups

Searches for VRChat groups based on specified criteria.

Read-only operation, no side effects.

moderate

vrchat_join_group

Joins a specified VRChat group.

Non-destructive write operation, but could be abused.

safe

vrchat_list_favorites

Retrieves a list of the user's favorites.

Read-only operation, no side effects.

moderate

vrchat_add_favorite

Adds a new item to the user's favorites.

Non-destructive write operation, but could be abused.

safe

vrchat_list_favorite_groups

Retrieves a list of the user's favorite groups.

Read-only operation, no side effects.

safe

vrchat_list_invite_messages

Retrieves a list of the user's invite messages.

Read-only operation, no side effects.

moderate

vrchat_request_invite

Requests an invite to a specific VRChat instance.

Non-destructive write operation, but could be abused.

safe

vrchat_get_invite_message

Retrieves a specific invite message.

Read-only operation, no side effects.

safe

vrchat_get_notifications

Retrieves a list of the user's notifications.

Read-only operation, no side effects.

Security

Auth Method

Environment Variable

Data Locality

hybrid

Known Risks

!Compromised VRCHAT_AUTH_TOKEN could grant unauthorized access to the VRChat account.
!Automated friend requests or world searches could be flagged as suspicious activity by VRChat.
!Lack of input validation in MCP tools could lead to unexpected API behavior.
!Potential for denial-of-service if abused to rapidly query the VRChat API.

Safety Score

moderate risk

Positive

+User authentication required via username and auth token.
+Limited scope of actions based on defined MCP tools.
+No direct filesystem access or shell execution.
+Primarily interacts with VRChat API, not local system.

Risks

-Improper handling of auth token could lead to account compromise.
-Some tools allow modification of VRChat account settings (avatar selection, adding favorites).
-Potential for abuse if combined with other tools in an automated workflow.
-Lack of explicit rate limiting could lead to API throttling or temporary account restrictions.

Use Cases

Social Automation

-Automatically accept friend requests based on certain criteria.
-Send personalized welcome messages to new friends.
-Search for and join groups related to specific interests.

Content Discovery

-Search for avatars matching a specific theme or style.
-Discover new worlds based on popularity or user ratings.
-Get notified when favorited worlds are updated.

Instance Management

-Create private instances for specific groups of friends.
-Automatically join instances based on world or activity.
-Monitor instance activity and send notifications.

Personal Assistant

-Get notified of new invites.
-Automatically request invites to specific instances.
-Manage favorite avatars and worlds.

Who Is This For?

Best For

VRChat users who want to automate repetitive tasks.
Developers building VRChat companion apps.
Researchers studying VRChat user behavior.
Content creators looking to manage their avatars and worlds more efficiently.

Not Ideal For

Users who are not comfortable with managing API tokens.
Applications requiring real-time, low-latency VRChat data.
Use cases that violate VRChat's terms of service.

Autonomy & Execution

Default ModeRead and Write enabled

Sandboxed

The level of autonomy depends on the specific tools used and the configuration of the agent. Exercise caution when automating actions that modify user preferences or interact with other users.

StatelessYes

Retry LogicNot documented

ConcurrencyNot documented

Production Tip

Monitor API usage to avoid rate limiting and implement robust error handling to gracefully handle unexpected API responses.

FAQ

How do I get my VRChat auth token?

Use the `vrchat-auth-token-checker` tool as described in the README. Be sure to keep your token secure.

Is it safe to store my auth token in the Claude Desktop config file?

Storing the token in the config file is convenient, but consider the security implications. Ensure your system is protected from unauthorized access.

Can I use this MCP server to create bots that interact with other users?

Using bots to interact with other users may violate VRChat's terms of service. Use this tool responsibly and ethically.

What happens if I exceed the VRChat API rate limits?

Your requests may be throttled or temporarily blocked. Implement error handling and rate limiting in your application to avoid this.

How can I debug issues with the MCP server?

Use the MCP Inspector as described in the README. Ensure your environment variables are correctly configured.

Does this MCP server support two-factor authentication?

Yes, the `vrchat-auth-token-checker` tool supports two-factor authentication when obtaining the auth token.

Can I use this MCP server to access private VRChat data?

This MCP server can only access data that your VRChat account has permission to access. It cannot bypass VRChat's access controls.

Key Features

Development Productivity Data & Databases Search & Web AI & LLM Social Media Utilities

Metrics

Discovered2/14/2026

Reviews0

Saved By0 users

Related Tools

Vrchat | AI Builder Hub Review & Alternatives | Flaex AI