MCP Security Index

Is Yarr MCP safe to install?

jmagar · Reference · stdio (local process)

Rust MCP and CLI server for Sonarr, Radarr, Prowlarr, Plex, Jellyfin, and download clients.

unrated exposureSource
unrated
Grade
Blast radius
Tools
Capabilities

Scan

AxioRank has not graded Yarr MCP yet

AxioRank could not enumerate Yarr MCP's surface (server process exited (1): npm error A complete log of this run can be found in: /home/runner/.npm/_logs/2026-08-26T07_27_47_619Z-debug-0.log). Many remote servers gate even a read-only handshake behind OAuth. This listing stays factual and updates when a scan succeeds.

View the source

Install

Add Yarr MCP to your client

Drop this into your MCP client config (Claude Desktop, Cursor, and others).

mcp.json
{
  "mcpServers": {
    "ai-dinglebear-yarr-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "yarr-mcp@1.1.1"
      ]
    }
  }
}

Embed

Show the grade in your README

Links back to this page and updates when the grade changes.AxioRank grade for Yarr MCP
[![AxioRank MCP Security Index grade for Yarr MCP](https://axiorank.com/api/badge/mcp/ai-dinglebear-yarr-mcp.svg)](https://axiorank.com/mcp-index/ai-dinglebear-yarr-mcp)

How it works

About this grade

The grade reflects the blast radius of what Yarr MCP declares it can do, read-only, not whether it is secure or trustworthy, and not a judgment of the vendor. Maintain this server? Claim this listing or request a re-scan. See the methodology.

Email me this scorecard

Get the Yarr MCP grade in your inbox.

Let your agents use Yarr MCP safely

Route this server through AxioRank to allowlist its tools, hold risky calls for approval, and keep a signed audit trail of every action.

Start free