‹ The Index

Yarr

npm

Rust MCP and CLI server for Sonarr, Radarr, Prowlarr, Plex, Jellyfin, and download clients.

Works with: Claude Code, Cursor, Claude Desktop, Codex CLI, Gemini CLI, Cline, Windsurf, VS Code

Category: Other — see all ranked ›

Install (Claude Code):

claude mcp add arr -- npx -y yarr-mcp
deep

“Discloses [email protected] is missing from npm and points at issue #80 until it resolves”

Security audit

scanned 2026-07-30

Every finding is shown in full. A licence adds the detail needed to act on it — which advisory, what the install script does, the version that fixes it.

No known advisoriesclearchecked against OSV for 1.1.1
Runs a script at install timecodeunlock detail
No permission surface detecteddeclares no dependency that reaches files, shell or network
No build provenanceno attestation — the published artifact cannot be traced to its source

1 finding here has detail behind a licence. You can see it exists above, free, permanently — Pro tells you the exact command it runs at install time.

Unlock the fix — $6/mo ›or check your whole config free with npx tashan-cli doctor

npm ↗  ·  source ↗  ·  pkg:yarr-mcp

Already running this? npx tashan-cli doctor checks your whole config against the Index — how it works ›