@meowtrix/atproto-mcp#

MCP server for interacting with the AT Protocol.

Built for AI agents. Interaction guards let you restrict your bot to only engage with followers, other bots, or accounts that @-mention it, so your AI can't go rogue on the network. See Interaction guards.

Token-efficient responses. All API responses are automatically slimmed before they reach your agent. Heavy fields like avatars, blob metadata, labels, and full embed details are stripped. Only the essentials come back: identifiers, post text, author handles, engagement counts, and viewer state.

Quick start (npx)#

Add this in your mcp config:

{
  "name": "atproto",
  "command": "npx",
  "args": ["-y", "@meowtrix/atproto-mcp", "--stdio"],
  "env": {
    "ATPROTO_HANDLE": "your-handle.bsky.social",
    "ATPROTO_APP_PASSWORD": "xxxx-xxxx-xxxx-xxxx"
  }
}

Generate an app password at bsky.app/settings/app-passwords.

Environment variables#

Tool groups#

By default all tools are enabled. Set ATPROTO_TOOLS to a comma-separated list of groups to only register the tools you need, reducing token usage in LLM context windows.

Examples:

ATPROTO_TOOLS=protocol                    # only AT Protocol tools
ATPROTO_TOOLS=bluesky_social              # core Bluesky social features
ATPROTO_TOOLS=protocol,bluesky_social     # protocol + social, no misc
ATPROTO_TOOLS=bluesky                     # all Bluesky tools

Interaction guards#

When RESTRICT_INTERACTIONS_TO is set, the server restricts engagement actions (replies, likes, reposts, follows) to accounts matching at least one listed category. This prevents the AI from interacting with arbitrary accounts unsupervised.

Categories combine with OR logic — the target must satisfy at least one. For example, followers,bots allows interactions with accounts that are followers or bots.

Examples:

RESTRICT_INTERACTIONS_TO=followers,mentions     # followers or mentions
RESTRICT_INTERACTIONS_TO=bots                   # bot accounts only
RESTRICT_INTERACTIONS_TO=followers,bots,mentions # any of the three

Always allowed regardless of guards:

• Interactions with yourself (self-likes, self-replies, etc.)
• Replies to your own threads (if you authored any ancestor post)
• Top-level posts (not replies)

HTTP mode#

Start the server on port 3001:

npm start

Then configure your MCP client to connect via HTTP:

{
  "name": "atproto",
  "url": "http://localhost:3001/mcp"
}

Docker#

Docker Compose#

Create a .env file with your credentials:

ATPROTO_HANDLE=your-handle.bsky.social
ATPROTO_APP_PASSWORD=xxxx-xxxx-xxxx-xxxx

Then run:

docker compose up

Manual Docker#

docker build -t atproto-mcp .

docker run -p 3001:3001 \
  -e ATPROTO_HANDLE=your-handle.bsky.social \
  -e ATPROTO_APP_PASSWORD=xxxx-xxxx-xxxx-xxxx \
  atproto-mcp

Resources#

Tools#

Protocol#

Bluesky Social#

Bluesky Misc#