PREVIEWInstall MBXHub to explore the full interactive docs

MBXHub

The bridge to everything else

v0.5.1.1
Base URL: http://localhost:8080
WebSocket: ws://localhost:8080/
150+ endpoints covering all MusicBee API methods

API Categories

Quick Start

It's as simple as:

# Get current track info (just open in browser)
http://localhost:8080/nowplaying

# Get album artwork (returns image)
http://localhost:8080/nowplaying/artwork

# Browse all albums in library
http://localhost:8080/library/albums

# Skip to next track
curl -X POST http://localhost:8080/player/next

Try it now: /nowplaying/nowplaying/artwork/library/albums

Dashboard

Web-based remote control. All actions use POST-Redirect-GET pattern. Supports keyboard shortcuts: Space (play/pause), ←/→ (prev/next), ↑/↓ (volume ±1%), Shift+↑/↓ (volume ±5%), M (mute).

GET /dashboard

Full web dashboard with now playing, controls, volume, ratings, shuffle/autodj/repeat toggles. Panel visibility, order, and collapsible grouping are configurable via dashboardLayout in settings.

Player Controls (POST)
POST/dashboard/play POST/dashboard/pause POST/dashboard/stop POST/dashboard/next POST/dashboard/prev POST/dashboard/previous
Volume (POST)
POST/dashboard/volup POST/dashboard/voldown POST/dashboard/volup1 POST/dashboard/voldown1 POST/dashboard/mute

volup/voldown - Adjust volume by 5%.
volup1/voldown1 - Adjust volume by 1% (fine control).

Shuffle/AutoDJ/Repeat (POST)
POST/dashboard/shuffle POST/dashboard/shuffle-off POST/dashboard/autodj POST/dashboard/repeat

shuffle=enable, shuffle-off=disable both, autodj=start AutoDJ, repeat=cycle mode

Rating & Metadata (POST)
POST/dashboard/love POST/dashboard/rate/{0-5} POST/dashboard/ban POST/dashboard/setban

love - Toggle love tag on current track.
rate/0 - Toggle bomb (don't play). Click on → click off.
rate/1-5 - Toggle star rating. Click to set, click same to clear.
ban - Ban track from shuffle, skip to next (undo: skip back within 10s).
setban - Set ban flag without skipping.

AutoQ & Mood (POST)
POST/dashboard/mood POST/dashboard/react/{type} POST/dashboard/refresh-queue POST/dashboard/influence/{target}/{direction}

mood - Set AutoQ mood channel (form: mood=Energetic).
react/fire|heart|like|dislike|ban - Submit reaction. Fire triggers queue refresh.
refresh-queue - Refresh vibe list and queue tracks.
influence/artist|genre/up|down - Thumbs up/down for artist or genre.

ARiA (POST)
POST/dashboard/aria/{preset} POST/dashboard/aria-expand POST/dashboard/aria-collapse
Theme
GET/dashboard/theme?t={dark|light|midnight}

Static Pages

MBXHub can serve custom HTML pages from a configurable directory. This enables building custom web UIs that use the REST API.

How it works: Place HTML, CSS, JS, and image files in the pages directory. MBXHub serves them at /pages/ with correct Content-Type headers. Default pages are extracted on first run and can be customized without losing changes on updates.
Configuration

Set pagesPath in mbxhub.json to customize the pages directory:

{
  "pagesPath": "C:\\MyCustomPages"
}

Default location: %APPDATA%\MusicBee\MBXHub\pages\

Set defaultPage to change the root URL redirect:

{
  "defaultPage": "/pages/player.html"
}

Options: /dashboard (default), /pages/player.html, /pages/partymode/, /pages/nowplaying.html, or any custom page.

Kiosk Mode: Lock the display to a single page/app. All navigation redirects to the default page.

{
  "defaultPage": "/pages/partymode/",
  "kioskMode": true
}

Multi-page apps work: sub-paths are allowed (e.g., /pages/partymode/ allows /pages/partymode/guest.html). API calls and resources still work. Only editable in mbxhub.json (not exposed via API).

Endpoints
GET/pages/

Serves index.html from the pages directory

GET/pages/{filename}

Serves any file from the pages directory (HTML, CSS, JS, images, fonts)

Default Pages
  • /pages/index.html - Landing page listing available views
  • /pages/player.html - Full-featured desktop player with:
    • Now Playing (artwork, title, artist, genre, lyrics)
    • Player controls (play/pause, prev/next, shuffle, repeat, volume, seek)
    • Browse panel (Artists, Albums, Genres, Playlists, Podcasts, Radio, Moods — empty categories auto-hidden)
    • Queue panel (Up Next with Now/Next/Last actions)
    • Vibe score badge, reaction buttons, mood channel selector
    • Influence thumbs, ARiA presets, Love/Ban buttons
    • Live WebSocket updates (including Reaction events)
    • Mobile tab bar (Now Playing / Browse / Queue), tablet 2-column, desktop 3-column with resizable panels
  • /pages/nowplaying.html - Focused now-playing view with artwork, lyrics, and queue. Auto-stacks below 800px with accordion sections (Now Playing, Queue, Lyrics) — expanding one collapses the others
  • /pages/browse.html - Library browser with 7 responsive tabs (Albums/Artists/Genres/Playlists/Podcasts/Radio/Moods), drilldown navigation, diacritic and punctuation normalized fuzzy search, album art grid, batch queue, and playlist picker
  • /pages/config.html - Settings and configuration for dashboard layout and AutoQ parameters
  • /pages/autoq.html - AutoQ Tuning Console with mixer-style sliders for scoring weights and normalization ranges
  • /pages/phantom.html - Devialet Phantom speaker control: transport, volume, source selection
Customization

To customize pages:

  1. Navigate to the pages directory (shown in MBXHub settings)
  2. Edit player.html or create new HTML files
  3. Refresh the browser - changes appear immediately
  4. To reset to defaults, delete the pages folder and restart MusicBee
Build with AI

MBXHub serves /llms.txt - an AI-friendly API reference. Use it with Claude or any AI to generate custom pages:

  1. Tell Claude: "Read https://mbxhub.com/llms.txt and build me a Party-On-Mode page - big artwork, guest queue requests, vibe controls"
  2. Claude fetches the API cheat sheet (public URL works from any AI)
  3. Claude generates code using relative URLs (/nowplaying, /player/play) that work on any MBXHub instance
  4. Save to %APPDATA%\MusicBee\MBXHub\pages\
  5. Open http://localhost:8080/pages/partyon.html

The generated code uses relative URLs, so it works on your local MBXHub without modification.

Network Discovery

MBXHub advertises itself on the local network via three protocols so clients can find it automatically.

SSDP/UPnP (UDP 1900): Periodic NOTIFY messages to multicast 239.255.255.250:1900. UPnP control points and DLNA clients discover MBXHub and retrieve its device description.
WS-Discovery (UDP 3702): Hello/Bye/ProbeMatch messages to multicast 239.255.255.250:3702. Makes MBXHub appear automatically in the Windows Explorer Network folder with a clickable "Device webpage" link to the dashboard.
mDNS/DNS-SD (UDP 5353): Bonjour/zero-conf service advertisement via Windows native DnsServiceRegister API. Requires Windows 10 1809+; gracefully skipped on older systems. Registered as MBXHub (Name)._http._tcp.local with TXT records for path and version.
GET /device.xml

UPnP device description XML. Contains device info, service URLs, and presentation URL.

POST /wsd

WS-Discovery metadata exchange endpoint. Windows sends a SOAP GetMetadata request after discovering MBXHub via UDP Probe; response includes PresentationUrl pointing to /dashboard.

Device Description Contents
FieldDescription
deviceTypeurn:halrad-com:device:MBXHub:1
friendlyNameMBXHub instance identifier
presentationURLDashboard URL (/dashboard)
controlURLREST API base (/api)
eventSubURLWebSocket endpoint (/ws)
Firewall Requirements
PortProtocolPurpose
8080TCPREST API + WebSocket
1900UDPSSDP (UPnP discovery)
3702UDPWS-Discovery (Windows Network folder)
5353UDPmDNS/DNS-SD (managed by OS)

Use the Settings → Firewall panel or CLI: MBXHub.exe firewall add --name MBXHub --tcp 8080 --udp 1900,3702 --urlacl 8080. mDNS port 5353 is managed by the Windows DNS client service.

Configuration: Enable/disable via Settings → "Advertise on local network" checkbox (enabled by default). Settings: discoveryEnabled (default: true), discoveryName (default: empty = machine name). The discovery name is used as the friendly name across all protocols and in GET /system/version.

System

GET /system/status

Returns system status and enabled modules

GET /system/version

Returns API version information. Includes host field with the configured discovery name (or machine name if not set).

GET /ping

Health check endpoint (alias: /system/ping)

GET /system/features

Returns enabled feature flags: banlist, ratings, loved, reactions, streaming, autoq. Clients use these to show/hide UI elements.

GET /system/settings PUT

Get or update hub configuration (ports, enabled modules)

GET /system/settings/schema

Returns schema for all configurable settings. Each entry includes:

FieldDescription
keyDotted key path (e.g. autoQ.batchSize)
typebool, int, double, string, enum
categoryGrouping: General, AutoQ, Scoring, Dashboard, API, etc.
tierStandard, Advanced, or Expert
descriptionHuman-readable explanation
defaultDefault value
currentCurrent live value
min, max, stepRange constraints (numeric types only)
optionsValid values (enum types only)
requiresRestartWhether a restart is needed for the change to take effect

Security: blocked when disableRemoteConfig is true (403) or during party mode (403). The /pages/settings.html page consumes this endpoint.

PUT /system/config POST

Update configurable settings via dotted key paths. Only properties decorated with [ConfigSetting] can be modified.

Body: JSON object with dotted keys:

{"autoQ.batchSize": 10, "apiReadOnlyMode": true}

Security: blocked by apiReadOnlyMode (403), disableRemoteConfig (403), and party mode (403). POST is an alias for PUT.

GET /system/default-page PUT

Get or set the default redirect page (body: {"defaultPage":"/pages/player.html"})

GET /system/qr

Generate QR code PNG image for the MBXHub base URL. Optional ?url= for custom target.

Player Control

Playback
POST/player/play POST/player/pause POST/player/playpause POST/player/stop
Navigation
POST/player/next POST/player/previous POST/player/next-album POST/player/previous-album
Volume & Position
GET/player/volume PUT/player/volume GET/player/mute PUT/player/mute GET/player/position PUT/player/position
Shuffle & Repeat
GET/player/shuffle PUT/player/shuffle GET/player/repeat PUT/player/repeat
Audio Processing
GET/player/equalizer PUT/player/equalizer GET/player/dsp PUT/player/dsp GET/player/crossfade PUT/player/crossfade GET/player/replaygain PUT/player/replaygain
AutoDJ & Advanced
GET/player/autodj POST/player/autodj/start POST/player/autodj/stop GET/player/stopaftercurrent POST/player/stopaftercurrent
Output Devices
GET/player/output-devices PUT|POST/player/output-device
Scrobbling
GET/player/scrobble PUT/player/scrobble
Status & Display
GET/player/status GET/player/button-enabled GET/player/show-time-remaining GET/player/show-rating-track GET/player/show-rating-love POST/player/show-equaliser
Streaming & Statistics
POST/player/queue-random POST/player/open-stream POST/player/update-play-statistics

Now Playing

GET /nowplaying

Returns current track info with full metadata

// Response:
{
  "success": true,
  "data": {
    "playing": true,
    "url": "file:///C:/Music/Artist/Album/track.mp3",
    "title": "Love Don't Live Here",
    "artist": "Breaking Rust",
    "album": "Greatest Hits",
    "albumArtist": "Breaking Rust",
    "year": "2024",
    "genre": "Rock",
    "trackNo": "3",
    "discNo": "1",
    "rating": "4.5",
    "love": true,
    "duration": 234000,
    "position": 45000
  }
}
Track Data & Metadata
GET/nowplaying/position GET/nowplaying/tag GET/nowplaying/property

Tag fields: TrackTitle, Artist, Album, AlbumArtist, Year, Genre, Rating, RatingLove, Comment, Composer, Conductor, TrackNo, DiscNo, Lyrics, Publisher

Properties: Bitrate, SampleRate, Channels, Duration, Size, DateAdded, DateModified, PlayCount, SkipCount, LastPlayed

Examples:

GET /nowplaying/tag?field=Artist        → {"value": "Breaking Rust"}
GET /nowplaying/tag?field=Album         → {"value": "Love Don't Live Here"}
GET /nowplaying/tag?field=Genre         → {"value": "Rock"}
GET /nowplaying/tag?field=TrackNo       → {"value": "3"}
GET /nowplaying/property?type=Bitrate   → {"value": "320"}
GET /nowplaying/property?type=Duration  → {"value": "234000"} (ms)
GET /nowplaying/property?type=PlayCount → {"value": "42"}
Artwork
GET/nowplaying/artwork GET/nowplaying/artwork-url GET/nowplaying/downloaded-artwork GET/nowplaying/downloaded-artwork-url

Returns album artwork as binary image or URL

Lyrics
GET/nowplaying/lyrics GET/nowplaying/downloaded-lyrics
Artist Pictures
GET/nowplaying/artist-picture GET/nowplaying/artist-thumbnail GET/nowplaying/artist-picture-urls
Soundtrack
GET/nowplaying/is-soundtrack GET/nowplaying/soundtrack-pictures
Audio Analysis
GET/nowplaying/spectrum GET/nowplaying/sound-graph GET/nowplaying/sound-graph-ex

FFT spectrum and waveform data for visualizations

Queue Management

GET /queue

Returns the now playing list. Supports ?offset=0&limit=50

// Response:
{
  "success": true,
  "data": {
    "currentIndex": 5,
    "total": 150,
    "offset": 0,
    "limit": 50,
    "tracks": [
      {
        "index": 0,
        "url": "file:///C:/Music/track1.mp3",
        "title": "First Track",
        "artist": "Artist Name",
        "album": "Album Name",
        "duration": 234000
      },
      // ... more tracks
    ]
  }
}
Queue Info
GET/queue/current GET/queue/next-index GET/queue/has-prior GET/queue/has-following
Queue Actions
POST/queue/add POST/queue/playnow POST/queue/play POST/queue/clear POST/queue/move POST/queue/play-library-shuffled
// POST /queue/add - Add tracks to queue (position: "next" or "last")
{"urls": ["file:///C:/Music/song1.mp3", "file:///C:/Music/song2.mp3"], "position": "last"}
// or single track:
{"url": "file:///C:/Music/song.mp3", "position": "next"}
// Response: {"success": true, "data": {"result": true, "added": 2, "position": "last"}}

// POST /queue/playnow - Play track immediately
{"url": "file:///C:/Music/song.mp3"}

// POST /queue/play - Play track at index
{"index": 3}

// POST /queue/move - Move track in queue
{"from": 5, "to": 2}
Track at Index
GET/queue/{index}/url GET/queue/{index}/tag GET/queue/{index}/property DELETE/queue/{index}

Library

GET /library/files

Query library with ?query=, ?artist=, ?albumArtist=, ?album=, ?genre=, ?sort=

// GET /library/files?artist=Breaking%20Rust&limit=10
{
  "success": true,
  "data": {
    "total": 42,
    "offset": 0,
    "limit": 10,
    "tracks": [
      {
        "url": "file:///C:/Music/Breaking Rust/track.mp3",
        "title": "Love Don't Live Here",
        "artist": "Breaking Rust",
        "album": "Greatest Hits",
        "duration": 234000
      },
      // ... more tracks
    ]
  }
}
GET /library/search

Full-text search: ?q=search+term&sort=alpha (searches title, artist, album; diacritic and punctuation normalized so "cafe" matches "Café" and "acdc" matches "AC/DC")

Aggregations
GET/library/artists GET/library/album-artists GET/library/albums GET/library/albums/detailed GET/library/genres

/library/albums/detailed returns albums with firstTrackUrl, year, and dateAdded for artwork lookups and sorting. Eliminates per-album /library/files?limit=1 round-trips. Params: ?offset=&limit=

/library/album-artists returns distinct album artists. Params: ?offset=&limit=

GET /library/albums/by-artist

Albums for an album artist with year, track count, and firstTrackUrl for artwork. Params: ?albumArtist= (required), ?sort=alpha|year|year-asc

// GET /library/albums/by-artist?albumArtist=Pink%20Floyd&sort=year
{
  "success": true,
  "data": {
    "albumArtist": "Pink Floyd",
    "total": 3,
    "sort": "year",
    "albums": [
      {
        "name": "The Dark Side of the Moon",
        "year": "1973",
        "count": 10,
        "firstTrackUrl": "file:///C:/Music/Artist/Album/track.mp3"
      }
    ]
  }
}
File Operations
GET/library/file/{url} PUT/library/file/{url} POST/library/add POST/library/artwork/batch POST/library/find-device-ids POST/library/sync-delta

Note: URL-encode the file path in the URL (e.g., /library/file/file%3A%2F%2F%2FC%3A%2FMusic%2Ftrack.mp3)

// GET /library/file/{url} - Extended track metadata (includes playCount, lastPlayed, etc.)
{
  "success": true,
  "data": {
    "url": "file:///C:/Music/Artist/Album/track.mp3",
    "title": "Love Don't Live Here",
    "artist": "Breaking Rust",
    "album": "Greatest Hits",
    "duration": 234000,
    "albumArtist": "Breaking Rust",
    "genre": "Rock",
    "year": "2024",
    "trackNo": "3",
    "discNo": "1",
    "rating": "4.5",
    "composer": "J. Smith",
    "bitrate": "320",
    "format": "MPEG Audio",
    "sampleRate": "44100",
    "playCount": 42,
    "dateAdded": "2024-01-15",
    "lastPlayed": "2024-01-20"
  }
}

// PUT /library/file/{url} - Update metadata (fields: title, artist, album, albumArtist, genre, year, trackNo, discNo, composer, comment, rating)
{"rating": "5", "comment": "Great track!"}
// Response: {"success": true, "data": {"result": true, "updated": ["rating", "comment"]}}

// POST /library/artwork/batch - Batch artwork fetch (max 50 URLs per request)
// Request: {"urls": ["D:\\Music\\track1.mp3", "D:\\Music\\track2.flac"]}
// Response: {"success": true, "data": {"D:\\Music\\track1.mp3": "data:image/jpeg;base64,/9j/...", "D:\\Music\\track2.flac": null}}
File Details
GET/library/file/{url}/lyrics GET/library/file/{url}/artwork GET/library/file/{url}/artwork-url GET/library/file/{url}/device-id PUT/library/file/{url}/device-id
Artist Info
GET/library/artist/{name}/similar GET/library/artist/{name}/picture GET/library/artist/{name}/thumbnail GET/library/artist/{name}/pictures

Playlists

List & Create
GET/playlists POST/playlists
// GET /playlists - List all playlists
{
  "success": true,
  "data": {
    "total": 5,
    "playlists": [
      {"url": "playlist://Favorites", "name": "Favorites", "trackCount": 120},
      {"url": "playlist://Workout", "name": "Workout", "trackCount": 45},
      // ... more playlists
    ]
  }
}

// POST /playlists - Create new playlist
{"name": "New Playlist", "folder": "", "files": ["file:///C:/Music/song1.mp3"]}
// Response: {"success": true, "data": {"url": "playlist://New Playlist", "name": "New Playlist", "trackCount": 1}}
Playlist Operations
GET/playlists/{url} PUT/playlists/{url} DELETE/playlists/{url}
// PUT /playlists/{url} - Replace playlist contents
{"files": ["file:///C:/Music/song1.mp3", "file:///C:/Music/song2.mp3"]}
Playlist Files
GET/playlists/{url}/files POST/playlists/{url}/files POST/playlists/{url}/play
// GET /playlists/{url}/files - Get playlist tracks (supports pagination: ?offset=0&limit=50)
{
  "success": true,
  "data": {
    "total": 120,
    "offset": 0,
    "limit": 50,
    "tracks": [
      {"index": 0, "url": "file:///...", "title": "Song", "artist": "Artist", "album": "Album", "duration": 234000},
      // ... more tracks
    ]
  }
}

// POST /playlists/{url}/files - Add tracks to playlist
{"urls": ["C:\\Music\\song.mp3"]}

Pending Files

GET/pending GET/pending/url GET/pending/tag GET/pending/property

Podcasts

GET /podcasts

List podcast subscriptions. Query: ?query=

Subscription Details
GET/podcasts/{id} GET/podcasts/{id}/artwork GET/podcasts/{id}/episodes

MusicBee Settings

GET /settings

Get MusicBee settings overview

Individual Settings
GET/settings/storage-path GET/settings/skin GET/settings/skin-element-color GET/settings/window-borders-skinned GET/settings/lastfm-user GET/settings/web-proxy
Field & Data Info
GET/settings/field-name GET/settings/data-type GET/settings/value GET/settings/convert-command

MusicBee Application

POST /app/exit

Gracefully close MusicBee. Requires allowRemoteExit=true in settings.

Optional body to schedule a restart via Windows Task Scheduler before closing:

// Request (optional):
{
  "restart": true,   // schedule restart before closing (default: false)
  "delay": 22        // seconds to wait before restarting (default: 22, range: 1-300)
}

// Response:
{
  "success": true,
  "data": {
    "message": "MusicBee restarting in 10s",
    "restart": true,
    "delay": 22
  }
}
POST /app/restart

Restart MusicBee. Convenience alias for /app/exit with restart=true. Requires allowRemoteExit=true.

// Request (optional):
{
  "delay": 22   // seconds to wait before restarting (default: 22, range: 1-300)
}
Window Control
GET/mb/window-handle POST/mb/window-size POST/mb/refresh-panels
Commands
POST/mb/command POST/mb/filter POST/mb/nowplaying-assistant POST/mb/download
Localisation
GET/mb/localisation
Visualizers & Plugins
GET/mb/visualisers POST/mb/visualiser GET/mb/plugin-views POST/mb/plugin-view

PartyMode

Turn MusicBee into a social jukebox. Guests scan a QR code, enter a PIN, and request songs from their phone. The DJ controls playback while a TV display shows artwork, lyrics, and a live feed of requests and joins.

Roles: Guest (browse/request), DJ (full control), Display (TV mode)

Party Session
GET /partymode/status

Get current party state (active, request count).

POST /partymode/start

Start a party session.

// Request body:
{"guestPin": "1234", "djPin": "5678"}
// djPin is optional - defaults to guestPin
POST /partymode/stop

End the current party session.

Guest Access
GET /partymode/validate?pin=1234&nickname=Haro

Validate PIN and get role. If nickname provided, announces join in feed.

// Response:
{"success": true, "data": {"valid": true, "role": "guest"}}
// role: "guest" or "dj"
POST /partymode/verify-dj

Verify if a PIN grants DJ access. Used by DJ page login.

// Request body:
{"pin": "5678"}
// Response:
{"success": true, "data": {"valid": true}}
// valid is true only if PIN matches DJ PIN
POST /partymode/vote

Submit a vote (thumbs up/down) with guest attribution. Records in feed and forwards to influences if AutoQ available.

// Request body:
{"type": "++", "target": "Artist", "value": "Daft Punk", "nickname": "Haro"}
// type: "++"=more, "--"=less; target: "Artist" or "Genre"
POST /partymode/request

Submit a song request (adds to queue).

// Request body:
{"url": "C:\\Music\\song.mp3", "nickname": "Haro"}
// Response includes requestId, title, artist
Feed & Display
GET /partymode/feed?limit=20

Get party feed (joins, requests, votes, reactions - newest first).

// Response:
{"success": true, "data": {
  "items": [
    {"type": "join", "nickname": "Haro", "timestamp": "..."},
    {"type": "request", "nickname": "Haro", "title": "Song", "artist": "Artist", "timestamp": "..."},
    {"type": "voteup", "nickname": "Haro", "artist": "Daft Punk", "timestamp": "..."},
    {"type": "votedown", "nickname": "Haro", "artist": "Nickelback", "timestamp": "..."},
    {"type": "reaction", "nickname": "Haro", "emoji": "🔥", "title": "Song", "artist": "Artist", "timestamp": "..."}
  ]
}}
GET /partymode/requests?limit=20

Get recent song requests only (for DJ page).

GET /partymode/qr

Generate QR code PNG image. Auto-includes PIN if party is active.

GET /partymode/role

Returns the caller's role based on IP: host (loopback), dj (verified DJ PIN), or guest.

Settings

Party Mode settings are configured in MusicBee via Settings → Network → Party Mode...

SettingDefaultDescription
protectMetadatatrueBlock metadata writes (love, rate, tag edits) for ALL users including DJ
rateLimitEnabledtrueEnable per-IP rate limiting on party endpoints
rateLimitRequestsPerMinute5Max song requests per minute per IP (when rate limiting enabled)
rateLimitVotesPerMinute5Max votes per minute per IP (when rate limiting enabled)
rateLimitPinAttemptsPerMinute5Max PIN validation attempts per minute per IP
trustForwardedForfalseTrust X-Forwarded-For header for client IP. Enable only behind a reverse proxy.

Protect Metadata: When enabled, blocks PUT /track/{}/love, PUT /track/{}/rating, and PUT /track/{}/tags for everyone during the party. Use this to prevent guests from permanently modifying your library ratings. The setting also blocks the DJ—toggle it off temporarily if you need to make edits.

Web Pages

Built-in pages at /pages/partymode/:

  • index.html - PIN + nickname entry (guest join page)
  • guest.html - Browse 7 tabs (Albums, Artists, Genres, Playlists, Podcasts, Radio, Moods), fuzzy search, request songs, vote on vibes
  • dj.html - Start/stop party, set PINs, manage queue, see requests & vibes
  • display.html - TV mode: artwork, lyrics, request feed, QR code, floating reactions
  • leaderboard.html - Party stats: guest activity, top tracks, reaction counts

AutoQ

Intelligent queue system. AutoQ combines TrueShuffle rules, mood analysis, reactions, and influences to automatically queue tracks that match the room's energy.

TrueShuffle (Rules Engine)

TrueShuffle manages the shuffle cycle — play rules, cycle tracking, and queue constraints. Returns 503 SERVICE_UNAVAILABLE if TrueShuffle/AutoQ not enabled.

GET /shuffle/status

Get shuffle cycle status

// Response:
{
  "success": true,
  "data": {
    "enabled": true,
    "totalTracks": 1000,
    "playedCount": 250,
    "remainingCount": 750,
    "percentComplete": 25.0,
    "cycleStarted": "2024-01-01T00:00:00Z"
  }
}
POST/shuffle/reset

Reset the shuffle cycle. All tracks become unplayed.

GET/shuffle/played GET/shuffle/remaining

Tracks played/remaining in shuffle cycle. Query: ?offset=&limit=

Banlist

Permanently excluded tracks. Banned tracks are never queued by AutoQ. Returns 503 SERVICE_UNAVAILABLE if TrueShuffle/AutoQ not enabled.

GET /banlist

Get list of banned tracks. Query: ?offset=&limit=

// Response:
{
  "success": true,
  "data": {
    "total": 5,
    "offset": 0,
    "limit": 50,
    "tracks": [
      {
        "url": "file:///C:/Music/corrupted.mp3",
        "reason": "Audio corruption detected at 2:30",
        "bannedAt": "2024-01-01T12:00:00Z"
      }
    ]
  }
}
Manage Banlist
POST/banlist DELETE/banlist/{url}
// POST /banlist - Ban a track
{"url": "file:///C:/Music/track.mp3", "reason": "Corrupted audio at 2:30"}

// DELETE /banlist/{url} - Unban a track (URL-encode the file path)

Influences

Influence rules shape AutoQ scoring — Pandora-style thumbs up/down on artists and genres. Unlike bans (permanent, track-specific), influences are resettable metadata preferences. Returns 503 if TrueShuffle/AutoQ not enabled.

Negative (--): Hard exclude matching tracks. Positive (++): Preference boost (future).

GET /influences

Get list of all influences. Query: ?offset=&limit=

// Response:
{
  "success": true,
  "data": {
    "total": 2,
    "offset": 0,
    "limit": 50,
    "influences": [
      {
        "type": "--",
        "target": "Genre",
        "value": "Audiobook",
        "timestamp": "2024-01-15T10:30:00Z"
      },
      {
        "type": "++",
        "target": "Artist",
        "value": "The Beatles",
        "timestamp": "2024-01-15T10:35:00Z"
      }
    ]
  }
}
GET /influences/current

Get current track's genre/artist and any matching influences (for UI state).

// Response:
{
  "success": true,
  "data": {
    "genre": "Rock",
    "artist": "Pink Floyd",
    "genreInfluence": null,
    "artistInfluence": "++"
  }
}
Manage Influences
POST/influences DELETE/influences/{target}/{value} POST/influences/clear
// POST /influences - Add an influence
{"type": "--", "target": "Genre", "value": "Audiobook"}
// type: "++" (more) or "--" (less/exclude)
// target: "Genre" or "Artist"

// DELETE /influences/Genre/Audiobook - Remove specific influence

// POST /influences/clear - Clear all influences (reset preferences)

Scoring & Vibe List

How it works: AutoQ maintains a scored list of candidate tracks (the "vibe list"). Scores are based on:
  • Reactions: Now playing reactions from guests (fire +3, heart +2, like +1, dislike -1, ban -100). Reactions also create influences automatically: fire/heart → positive artist influence, like → positive genre, dislike → negative genre, ban → negative artist.
  • Influences: Thumbs up/down on artists and genres from party voting and reactions
  • Recency: Small boost for recently reacted tracks
When the queue runs low, AutoQ picks top-scoring tracks to add.
AutoQ Control
GET /autoq/status

Get AutoQ status and configuration.

// Response:
{
  "success": true,
  "data": {
    "enabled": true,
    "mode": "autopilot",
    "soloMode": false,
    "vibeListCount": 10,
    "vibeListPreview": [
      { "title": "Uptown Funk", "artist": "Mark Ronson", "score": 12.5 }
    ]
  }
}
POST /autoq/start

Start AutoQ. Begins monitoring queue and adding tracks when needed.

// Optional request body:
{ "mode": "autopilot" }
// Modes: "autopilot" (default), "djassist" (aliases: "dj", "assist", "auto")
POST /autoq/stop

Stop AutoQ. Queue continues playing but no new tracks are added automatically.

POST /autoq/reset

Reset AutoQ session state (clears reactions, taste vector, ban list). DJ-only in party mode.

POST /autoq/vibe-list/refresh

Force refresh vibe list. Returns updated track count.

// Response:
{
  "success": true,
  "data": { "message": "Vibe list refreshed", "count": 100 }
}
POST /autoq/pick

Pick the next track from the vibe list without queueing it.

// Response:
{
  "success": true,
  "data": { "url": "C:\\Music\\track.mp3", "title": "Uptown Funk", "artist": "Mark Ronson" }
}
POST /autoq/unban

Unban a track, allowing it back into the vibe list.

// Request:
{ "url": "C:\\Music\\track.mp3" }

// Response:
{
  "success": true,
  "data": { "result": true, "url": "C:\\Music\\track.mp3" }
}
GET /autoq/banned

Check if the currently playing track is banned.

// Response:
{
  "success": true,
  "data": { "url": "C:\\Music\\track.mp3", "isBanned": false }
}
Mood Channels
GET /autoq/moods

Get available mood channels with arousal/valence coordinates. Channels are customizable via autoQ.moodChannels in mbxhub.json.

// Response:
{
  "success": true,
  "data": {
    "currentMood": "Energetic",
    "channels": [
      { "name": "Energetic", "emoji": "🔥", "arousal": 0.90, "valence": 0.80 },
      { "name": "Chill", "emoji": "😌", "arousal": 0.35, "valence": 0.65 }
    ]
  }
}
GET /autoq/moods/browse

Browse tracks matching a mood channel. Returns scored tracks sorted by mood similarity.

channelMood channel name (e.g. "Energetic", "Chill")
limitMax results (default: 200, max: 500)
// GET /autoq/moods/browse?channel=Energetic&limit=50
// Response:
{
  "success": true,
  "data": {
    "channel": "Energetic",
    "emoji": "🔥",
    "total": 50,
    "tracks": [
      { "url": "...", "title": "...", "artist": "...", "album": "...", "trackNo": "3", "moodMatch": 0.92 }
    ]
  }
}
GET /autoq/track-mood

Raw mood data for the current track (or any track via ?url=). Returns Essentia features, percentile ranks, computed valence/arousal, and best mood channel match.

// Response (Essentia-analyzed track):
{
  "success": true,
  "data": {
    "valence": 0.5003,
    "arousal": 0.5794,
    "source": "essentia",
    "hasEssentiaData": true,
    "moodChannel": "Upbeat",
    "moodEmoji": "😊",
    "raw": {
      "bpm": 119.95,
      "mode": "major",
      "loudness": -10.23,
      "spectralCentroid": 1284.56,
      "spectralFlux": 0.000342,
      "spectralRms": 0.001245,
      "spectralFlatness": 0.000089,
      "danceability": 1.45,
      "onsetRate": 2.87,
      "zeroCrossingRate": 0.058,
      "dissonance": 0.4123,
      "pitchSalience": 0.3856,
      "chordsChangesRate": 0.0312,
      "mfcc": 142.56
    },
    "percentiles": {
      "bpm": 0.52, "loudness": 0.61, "centroid": 0.48,
      "flux": 0.35, "dance": 0.67, "onset": 0.55,
      "zcr": 0.42, "rms": 0.58, "dissonance": 0.44,
      "salience": 0.39, "chords": 0.51, "mfcc": 0.63
    },
    "confidence": 0.82,
    "confidenceLabel": "high",
    "genreProfile": "electronic"
  }
}

// Response (fallback — no Essentia data):
{
  "success": true,
  "data": {
    "valence": 0.65,
    "arousal": 0.70,
    "source": "fallback",
    "hasEssentiaData": false,
    "moodChannel": "Energetic",
    "moodEmoji": "🔥",
    "confidence": 0.45,
    "confidenceLabel": "medium",
    "genreProfile": null
  }
}
POST /autoq/mood

Set target mood for Mood mode. Pass empty channel to disable mood mode.

// Request:
{ "channel": "Energetic" }

// Response:
{
  "success": true,
  "data": {
    "message": "Mood set to Energetic",
    "mode": "mood",
    "mood": { "name": "Energetic", "emoji": "🔥", "arousal": 0.90, "valence": 0.80 }
  }
}
POST /autoq/moods/reload

Reload the mood channel cache from disk (re-reads Essentia data).

POST /autoq/retag-moods

Bulk write mood tags to a MusicBee custom field. Only processes Essentia-analyzed tracks. Requires autoQ.moodTagField to be configured (e.g. "Custom1").

// Response:
{
  "success": true,
  "data": { "updated": 342 }
}
Vibe List
GET /autoq/vibe-list

Get current vibe list (candidate tracks with scores). Query: ?count=50

// Response:
{
  "success": true,
  "data": {
    "count": 50,
    "tracks": [
      {
        "url": "C:\\Music\\track.mp3",
        "title": "Uptown Funk",
        "artist": "Mark Ronson",
        "genre": "Funk",
        "score": 12.5
      }
    ]
  }
}
Taste Explorer
GET /autoq/taste-explorer

Discover tracks adjacent to the current taste profile, grouped by category. Query: ?limit=100&groupBy=auto|genre|artist|mood

// Response:
{
  "success": true,
  "data": {
    "profile": {
      "topGenres": [{ "name": "Rock", "weight": 1.0 }],
      "topArtists": [{ "name": "Foo Fighters", "weight": 0.85 }],
      "bpmRange": [90, 160],
      "mood": "Energetic",
      "influenceCount": 3,
      "reactionCount": 12
    },
    "groupBy": "genre",
    "groups": [{
      "label": "Rock",
      "reason": "genre",
      "count": 15,
      "tracks": [{
        "url": "C:\\Music\\track.mp3",
        "title": "Everlong",
        "artist": "Foo Fighters",
        "genre": "Rock",
        "score": 8.2,
        "reasons": ["genre match", "artist match"]
      }]
    }],
    "total": 45
  }
}
GET /autoq/similar

Find tracks similar to a seed track by metadata and feature distance. Query: ?url={trackUrl}&limit=20

// Response:
{
  "success": true,
  "data": {
    "seed": {
      "url": "C:\\Music\\seed.mp3",
      "title": "Everlong",
      "artist": "Foo Fighters",
      "genre": "Rock"
    },
    "tracks": [{
      "url": "C:\\Music\\similar.mp3",
      "title": "Learn to Fly",
      "artist": "Foo Fighters",
      "genre": "Rock",
      "similarity": 0.6,
      "reasons": ["same genre", "same artist", "similar BPM"]
    }]
  }
}
Reactions

Tiered reactions for the now playing track. Each emoji has a different score weight.

EmojiNameScoreDescription
🔥fire+3This track is fire! (triggers queue refresh)
❤️heart+2Love this song
👍like+1Good choice
👎dislike-1Not feeling it
🚫ban-100Skip and exclude from queue
POST /autoq/react

Submit a reaction for a track. Reactions appear as floating emojis on the Display page.

// Request body (always reacts to currently playing track):
{
  "emoji": "🔥",
  "nickname": "Mike"
}
// emoji: "🔥", "❤️", "👍", "👎", "🚫" or "fire", "heart", "like", "dislike", "ban"

// Response:
{
  "success": true,
  "data": {
    "recorded": true,
    "emoji": "🔥",
    "trackUrl": "C:\\Music\\track.mp3",
    "trackTitle": "Uptown Funk",
    "trackArtist": "Mark Ronson",
    "nickname": "Mike"
  }
}
GET /autoq/reactions

Get reaction history. Query: ?trackUrl= for specific track, ?limit=100

// Response:
{
  "success": true,
  "data": {
    "count": 25,
    "trackUrl": null,
    "reactions": [
      {
        "emoji": "🔥",
        "type": "fire",
        "trackUrl": "C:\\Music\\track.mp3",
        "trackTitle": "Uptown Funk",
        "trackArtist": "Mark Ronson",
        "nickname": "Haro",
        "timestamp": "2026-02-01T20:45:00Z"
      }
    ]
  }
}
Leaderboard
GET /autoq/stats

Get party leaderboard data: guest activity, top tracks, reaction breakdown.

// Response:
{
  "success": true,
  "data": {
    "totalReactions": 156,
    "topTracks": [
      { "url": "...", "title": "Uptown Funk", "artist": "Mark Ronson", "score": 15 }
    ],
    "guests": [
      { "nickname": "Haro", "totalReactions": 42, "fire": 10, "heart": 15, "like": 12, "dislike": 3, "ban": 2 }
    ]
  }
}
GET /autoq/settings

Get all tunable AutoQ parameters: scoring weights, reaction scores, influence scores, estimation weights, and normalization ranges. Use with Tuning Console.

PUT /autoq/settings

Partial update of AutoQ parameters. Only provided fields are changed. Changes take effect on the next scoring pass — no restart needed. Nested objects are merged, not replaced.

// Example: change just the BPM arousal weight
PUT /autoq/settings
{"estimation": {"arousalWeightBpm": 0.30}}
Configuration

AutoQ settings in mbxhub.json under the autoQ section:

SettingDefaultDescription
enabledfalseEnable AutoQ feature
pickMode"weighted"Track selection mode: off (disabled, shuffle fill only), favorites (always pick highest-scored), weighted (score-proportional random from top candidates), random (uniform random, diversity caps still apply)
queueThreshold3Add tracks when queue drops below this
batchSize5Tracks to add per batch
vibeListSize100Size of candidate track pool
moodMatchWeight0.4Weight for mood matching in scoring (0-1)
recencyDecayLambda0.1Decay rate for recency boost on reacted tracks
recencyPenaltyDecay0.1Decay rate for recently-played penalty
minReplayMinutes30Minimum minutes before a track can be replayed
diversityWindowSize10Recent tracks considered for diversity calculations
minSessionEntropy0.5Entropy threshold before boosting diversity (0-5)
vibeListRefreshMinutes30Minutes between automatic vibe list refreshes
moodChannelsnullCustom mood channels (array). Uses defaults if null.
genreQuota3Max consecutive same-genre tracks (0=disabled)
artistQuota2Max tracks from same artist in batch (0=disabled)
moodTagField"Custom1"MusicBee custom tag field for mood labels (null=disabled)
moodTagFieldName"AutoQ Mood"Expected display name for the tag field (must match MusicBee config)

Scoring weights under autoQ.scoringWeights: featureSimilarity (0.5), trackSentiment (0.25), artistSentiment (0.15), recencyPenalty (0.3), diversityPenalty (0.6), explorationBonus (0.1), influenceWeight (0.3).

Reaction scores under autoQ.reactionScores: fire (3), heart (2), like (1), dislike (-1), ban (-100).

Estimation settings under autoQ.estimation: usePercentileNormalization (true) — ranks each feature against the library for automatic 0-1 spread. When false, uses absolute ranges below. useGenreAdjustment (true) — applies genre-specific weight multipliers to V/A computation (e.g., BPM matters less for EDM, chord changes matter more for jazz). moodMatchMinSimilarity (0.5), moodComboMaxResults (3), moodComboMinScore (0.85), bpmMin (80), bpmMax (170), ratingScale (5.0), yearMin (1950), yearMax (2030), playCountLogDivisor (4.0).

Confidence scoring under autoQ.estimation: confidenceEssentiaBase (0.9), confidenceFallbackGenre (0.45), confidenceFallbackNone (0.2) — base confidence by data source. confidenceMinForTag (0.3) — skip writing mood tag when confidence is below this threshold. Confidence = sourceBase × channelProximity (how close V/A lands to nearest mood channel).

Genre profiles under autoQ.genreProfiles: dictionary of genre name → weight multiplier profile. Each profile has 14 multipliers (8 arousal: bpm, loudness, flux, centroid, dance, onsetRate, zcr, rms; 6 valence: mode, valDance, dissonance, pitchSalience, chords, mfcc). Values are multiplied against base weights then renormalized. Built-in profiles cover electronic, metal, jazz, classical, hip-hop, folk, pop/rock, and R&B. Set to null to use built-in defaults.

Valence weights (positivity, 6 active inputs) under autoQ.estimation: valenceWeightMode (0.35), valenceWeightCentroid (0.0 — centroid is an arousal feature), valenceWeightDance (0.05), valenceWeightFlatness (0.0), valenceWeightDissonance (0.25), valenceWeightPitchSalience (0.10), valenceWeightChords (0.15), valenceWeightMfcc (0.10). Mode scoring: modeScoreMajor (0.85), modeScoreMinor (0.4).

Arousal weights (energy/intensity, 8 inputs) under autoQ.estimation: arousalWeightBpm (0.25), arousalWeightLoudness (0.20), arousalWeightFlux (0.15), arousalWeightCentroid (0.05), arousalWeightDance (0.02), arousalWeightOnsetRate (0.15), arousalWeightZcr (0.08), arousalWeightRms (0.10).

Normalization ranges (used when percentile off) under autoQ.estimation: centroidMin/Max (500/2300 Hz), loudnessMin/Max (-23/-5 dB), onsetRateMax (5.5), zcrMax (0.12), rmsMax (0.008), chordsRateMax (0.2), mfccMin/Max (70/220).

Mood Quadrants — Arousal (energy) is the vertical axis, valence (positivity) is the horizontal. Each mood channel targets a point in this space.

QuadrantProfileTypical GenresAcoustic Traits
High arousal + high valenceEnergetic, upbeatEDM, pop, funkFast tempo, bright timbre, strong beats
High arousal + low valenceTense, aggressiveMetal, hard rock, industrialDistortion, high energy, dissonance
Low arousal + low valenceSad, subduedAmbient drone, slow blues, lo-fiSlow tempo, dark timbre, soft dynamics
Low arousal + high valenceCalm, pleasantChillhop, acoustic folk, soft jazzWarm timbre, consonance, smooth textures

Library Sync

Status & Discovery
GET/sync/status GET/sync/peers GET/sync/discover
Delta & Operations
GET/sync/delta GET/sync/operations GET/sync/operations/{syncId}
Sync Actions
POST/sync/start POST/sync/stop POST/sync/pull POST/sync/push

Device Sync

POST/mbsync/file/start POST/mbsync/file/end POST/mbsync/file/delete/start POST/mbsync/file/delete/end

ARiA - Input Simulation

Simulate keyboard and mouse input to wake or control the host PC. Useful for remote wake scenarios. Full ARiA Documentation →

Security: ARiA is disabled by default (ariaEnabled: false). Returns 403 ARIA_DISABLED when disabled.
GET /aria/status

Check if ARiA input simulation is enabled

POST /aria/wake

Quick wake: move mouse + send Shift key to wake sleeping/locked PC

POST /aria/send-keys

Send keyboard input. Body: {"keys": "^a"} (Ctrl+A). Optional: {"keys": "%{F4}", "window": "Notepad"} to focus window first.

SendKeys format: ^=Ctrl, %=Alt, +=Shift. Special keys: {ENTER}, {TAB}, {ESC}, {F1}-{F12}, {UP}, {DOWN}, etc.

DuckyScript format: CTRL ALT V, SHIFT F1, ALT TAB. Modifiers: CTRL, ALT, SHIFT. Special: WIN/GUI (opens Start Menu, standalone only - not a modifier).

POST /aria/focus

Focus a window by title. Body: {"window": "Notepad"} (partial match, case-insensitive)

Mouse Control
POST/aria/mouse/move POST/aria/mouse/click

Move: {"x":100,"y":100} (absolute) or {"dx":10,"dy":0} (relative)

Click: {"button":"left"} or {"x":500,"y":300,"button":"right"}

Presets
GET/aria/presets

List available presets

GET/aria/preset/{name}

Execute a preset by name (e.g., /aria/preset/RIA3)

Customizing Presets: Edit %APPDATA%\MusicBee\mb_MBXHub.json to add/modify presets:
"ariaPresets": [
  {"name": "RIA1", "script": "sndkeys(^%a)", "icon": "1"},
  {"name": "DuckyDemo", "script": "sndkeys(CTRL ALT V)", "icon": "D"},
  {"name": "Notify", "script": "toast(MBXHub,Hello World!)", "icon": "N"}
]
Script commands:
sndkeys(keys) - SendKeys or DuckyScript: sndkeys(^a) or sndkeys(CTRL A)
delay(ms) - Wait milliseconds (max 30000)
click(x,y[,button]) - Mouse click: click(100,200) or click(100,200,right)
volume(action) - Volume control: up, down, mute, or steps like +5/-3
run(path[,args]) - Launch program: run(notepad.exe) or run(cmd.exe,/c dir)
webhook(url[,method,body]) - HTTP request: webhook(http://example.com) or webhook(!http://...,POST,{}) (prefix ! for fire-and-forget)
toast(msg) or toast(title,msg) - Show notification
restart(target) - Restart: mb (MusicBee), system, or shutdown
Chain commands: sndkeys(^a);delay(100);sndkeys(^c)

RemoteApp

Publish MusicBee as a Windows RemoteApp, allowing the full desktop UI to be accessed from other machines via RDP. Requires Windows Pro, Enterprise, or Server — Home edition is not supported.

GET /remoteapp/status

Check RemoteApp status. Always accessible.

Response:

{
  "configured": false,
  "supported": true,
  "rdpEnabled": true,
  "edition": "Professional",
  "enabled": false,
  "apiDisabled": false,
  "message": "RemoteApp not configured. Run 'MBXHub.exe remoteapp setup' to configure."
}
GET /remoteapp/rdp

Download a .rdp file for connecting to MusicBee as a RemoteApp. Blocked when remoteAppApiDisabled is true.

Query parameters:

  • hostname - Override the hostname in the .rdp file (defaults to request Host header)
  • Any other query parameter is forwarded as an .rdp setting override (e.g. audioqualitymode=0, redirectprinters=1)

Response: application/x-rdp file download (MusicBee.rdp)

403 when remoteAppApiDisabled is true.

Visibility: Dashboard footer link requires remoteAppEnabled and remoteAppApiDisabled: false. Footer links are configurable via dashboardFooterLinks in settings.

App program: On Windows Client (Pro/Enterprise), the .rdp file uses the full executable path from the registry. On Windows Server, it uses the ||AppName alias for RDS published app lookup.

Setup (CLI): Machine configuration is done via the CLI:
MBXHub.exe remoteapp setup --path "C:\MusicBee\MusicBee.exe" (requires elevation)
MBXHub.exe remoteapp setup --detect (auto-detect MusicBee)
MBXHub.exe remoteapp remove (remove configuration)
MBXHub.exe remoteapp status (check current state)
Prerequisites — Windows Client (Pro/Enterprise):
1. Settings → System → Remote Desktop → turn ON
2. Allow through firewall (Windows usually prompts automatically).
   If not: Control Panel → Windows Defender Firewall → Allow an app → Remote Desktop → check both boxes.
3. Network Level Authentication (NLA) is on by default. Disable it if older clients cannot connect.
Prerequisites — Windows Server:
Install the Remote Desktop Services role:
Server Manager → Add Roles and Features → Remote Desktop Services →
• Remote Desktop Session Host
• Remote Desktop Connection Broker
• Remote Desktop Web Access

Or via PowerShell:
Install-WindowsFeature RDS-Connection-Broker, RDS-Web-Access, RDS-RD-Server -IncludeManagementTools

Device Proxy

Generic HTTP proxy for controlling LAN devices (speakers, receivers, home automation) from the browser. Browsers enforce CORS on all cross-origin requests, and LAN devices don’t serve CORS headers — direct fetch() from the dashboard to a device IP will silently fail. The proxy solves this by forwarding requests server-side.

POST /api/proxy

Forward an HTTP request to a LAN device. Only private IPs are allowed (RFC 1918).

Request body:

{
  "method": "GET",
  "url": "http://192.168.10.100/ipcontrol/v1/systems/current/sources",
  "body": {}
}
  • method — HTTP method to use: GET, POST, or PUT
  • url — Full URL of the target device endpoint. Must be a private IP address.
  • body — Optional JSON body to forward with POST/PUT requests.

Response: The target device’s response is passed through verbatim (status code and body).

Errors:

  • 400 — Missing or invalid request body, missing method/url fields
  • 403 — Target URL is not a private IP (public internet proxying is blocked)
  • 405 — Only POST is accepted on this endpoint
  • 502 — Target device unreachable or returned an error
Security: The proxy only forwards to RFC 1918 private IP ranges (10.x, 172.16–31.x, 192.168.x) plus loopback (127.x, localhost). Requests to public IPs are rejected with 403. Timeout is 5 seconds.
Request flow:
Browser → POST /api/proxy → MBXHub → LAN device
Browser ← JSON response (passthrough) ← MBXHub ← LAN device

The proxy can be disabled in Settings → API → Feature Toggles (apiDisableProxy). When disabled, POST /api/proxy returns 404 and charm webapps that depend on it will not be able to reach LAN devices.

Audio Streaming

Serves audio files from the MusicBee library over HTTP with Range support. Enables “Listen Here” mode in the player — the browser plays audio locally via <audio> while MusicBee acts as the library manager.

GET /stream/{path}

Stream an audio file. The path must be URL-encoded and must be a file in the MusicBee library.

Path parameter: URL-encoded absolute file path (e.g. /stream/C%3A%5CMusic%5Csong.mp3).

Range support: Send Range: bytes=N-M header for partial content (required for seeking). The server responds with 206 Partial Content and Content-Range header.

Supported formats: mp3, flac, m4a, mp4, ogg, oga, wav, opus, aac, wma, aiff, aif. Actual browser playback depends on codec support — FLAC works in Firefox/Chrome/Edge, WMA is not supported by any browser.

Security:

  • Path traversal (..) is blocked
  • Only whitelisted audio extensions are served
  • File must exist in the MusicBee library (verified via API)

Errors:

  • 400 — Invalid path or non-audio extension
  • 403 — File not in MusicBee library
  • 404 — File not found or streaming disabled
  • 416 — Range not satisfiable
CUE tracks: Supported. The player seeks to the correct offset and shows track-relative progress. Track boundaries are enforced (auto-advance at track end).

Streaming can be disabled in Settings → API → Feature Toggles (disableStreaming). When disabled, GET /stream/* returns 404 and the Listen Here button is hidden in the player.

Charms

Charms are configurable action buttons on the dashboard. They can open webapps, fire HTTP requests to LAN devices, or call MBXHub endpoints. The charm bar appears as a dashboard section and can be reordered/hidden like any other panel.

Manifest Format

Each charm is a .json file in the charms/ folder inside the MBXHub data directory. MBXHub seeds a built-in phantom.json on first run.

Simple charm (single button):

{
  "id": "my-charm",
  "icon": "\uD83D\uDD0A",
  "label": "My Charm",
  "action": "webapp /pages/my-charm.html",
  "display": "both",
  "msg": "My Charm"
}

Expand charm (grouped buttons, e.g. Phantom):

{
  "id": "phantom",
  "label": "Phantom",
  "expand": [
    { "icon": "\u2699\uFE0F", "label": "Settings", "action": "webapp /pages/phantom.html", "display": "inline" },
    { "icon": "+", "label": "Volume Up", "action": "iframe-cmd volumeUp", "msg": "Vol +" },
    { "icon": "\u2013", "label": "Volume Down", "action": "iframe-cmd volumeDown", "msg": "Vol \u2013" },
    { "icon": "\uD83D\uDD07", "label": "Mute", "action": "iframe-cmd toggleMute", "msg": "Mute" }
  ]
}

Settings

Charm bar order and visibility are stored in charmBar in mbxhub.json:

{
  "charmBar": {
    "order": ["phantom"],
    "hidden": []
  }
}

The charm bar also appears as “Charm Bar” in the Dashboard Layout panel ordering, so it can be repositioned or collapsed like any other section.

RPC Interface

Direct access to all 137 MusicBee API methods. Use this for operations not exposed via REST endpoints or for scripting/automation.

POST /rpc/{methodName}

Invoke any MusicBee API method by name

POST /rpc/Library_GetFileTag
Content-Type: application/json

{
  "fileUrl": "C:\\Music\\song.mp3",
  "field": "TrackTitle"
}

// Response:
{
  "success": true,
  "data": {
    "method": "Library_GetFileTag",
    "result": "Song Title"
  }
}
Player Control Methods
MethodParametersReturns
Player_PlayPause-boolean
Player_Stop-boolean
Player_StopAfterCurrent-boolean
Player_PlayNextTrack-boolean
Player_PlayPreviousTrack-boolean
Player_PlayNextAlbum-boolean
Player_PlayPreviousAlbum-boolean
Player_StartAutoDj-boolean
Player_EndAutoDj-boolean
Player_GetPosition-int (ms)
Player_SetPositionposition: intboolean
Player_GetVolume-float (0-1)
Player_SetVolumevolume: floatboolean
Player_GetMute-boolean
Player_SetMutemute: booleanboolean
Player_GetShuffle-boolean
Player_SetShuffleshuffle: booleanboolean
Player_GetRepeat-RepeatMode
Player_SetRepeatmode: RepeatModeboolean
Player_GetPlayState-PlayState
Player_GetEqualiserEnabled-boolean
Player_SetEqualiserEnabledenabled: booleanboolean
Player_GetDspEnabled-boolean
Player_SetDspEnabledenabled: booleanboolean
Player_GetCrossfade-boolean
Player_SetCrossfadeenabled: booleanboolean
Player_GetReplayGainMode-ReplayGainMode
Player_SetReplayGainModemode: ReplayGainModeboolean
Player_GetScrobbleEnabled-boolean
Player_SetScrobbleEnabledenabled: booleanboolean
Player_QueueRandomTrackscount: intint
Player_GetOutputDevices-{devices, activeDevice}
Player_SetOutputDevicedeviceName: stringboolean
Now Playing Methods
MethodParametersReturns
NowPlaying_GetFileUrl-string
NowPlaying_GetDuration-int (ms)
NowPlaying_GetFileTagfield: MetaDataTypestring
NowPlaying_GetFileTagsfields: MetaDataType[]string[]
NowPlaying_GetFilePropertytype: FilePropertyTypestring
NowPlaying_GetArtwork-string (base64/path)
NowPlaying_GetArtworkUrl-string
NowPlaying_GetLyrics-string
NowPlaying_GetDownloadedLyrics-string
NowPlaying_GetArtistPicturefadingPercent: intstring
NowPlaying_GetArtistPictureThumb-string
NowPlaying_GetArtistPictureUrlslocalOnly: booleanstring[]
NowPlaying_IsSoundtrack-boolean
NowPlaying_GetSpectrumData-float[]
NowPlaying_GetSoundGraph-float[]
Now Playing List (Queue) Methods
MethodParametersReturns
NowPlayingList_GetCurrentIndex-int
NowPlayingList_GetNextIndexoffset: intint
NowPlayingList_IsAnyPriorTracks-boolean
NowPlayingList_IsAnyFollowingTracks-boolean
NowPlayingList_GetListFileUrlindex: intstring
NowPlayingList_GetFileTagindex: int, field: MetaDataTypestring
NowPlayingList_GetFileTagsindex: int, fields: MetaDataType[]string[]
NowPlayingList_GetFilePropertyindex: int, type: FilePropertyTypestring
NowPlayingList_Clear-boolean
NowPlayingList_PlayNowfileUrl: stringboolean
NowPlayingList_QueueNextfileUrl: stringboolean
NowPlayingList_QueueLastfileUrl: stringboolean
NowPlayingList_QueueFilesNextfileUrls: string[]boolean
NowPlayingList_QueueFilesLastfileUrls: string[]boolean
NowPlayingList_RemoveAtindex: intboolean
NowPlayingList_MoveFilesfromIndices: int[], toIndex: intboolean
NowPlayingList_PlayLibraryShuffled-boolean
NowPlayingList_QueryFilesExquery: stringstring[]
Library Methods
MethodParametersReturns
Library_GetFileTagfileUrl: string, field: MetaDataTypestring
Library_GetFileTagsfileUrl: string, fields: MetaDataType[]string[]
Library_GetFilePropertyfileUrl: string, type: FilePropertyTypestring
Library_SetFileTagfileUrl: string, field: MetaDataType, value: stringboolean
Library_CommitTagsToFilefileUrl: stringboolean
Library_GetLyricsfileUrl: string, type: LyricsTypestring
Library_GetArtworkfileUrl: string, index: intstring
Library_GetArtworkUrlfileUrl: string, index: intstring
Library_GetArtistPictureartistName: string, fadingPercent: intstring
Library_GetArtistPictureThumbartistName: stringstring
Library_GetArtistPictureUrlsartistName: string, localOnly: booleanstring[]
Library_QueryFilesExquery: stringstring[]
Library_QuerySimilarArtistsartistName: string, minimumSimilarity: doublestring
Library_AddFileToLibraryfileUrl: string, category: LibraryCategorystring
Playlist Methods
MethodParametersReturns
Playlist_QueryPlaylists-boolean
Playlist_QueryGetNextPlaylist-string
Playlist_GetNameplaylistUrl: stringstring
Playlist_GetTypeplaylistUrl: stringPlaylistFormat
Playlist_IsInListplaylistUrl: string, filename: stringboolean
Playlist_QueryFilesExplaylistUrl: stringstring[]
Playlist_CreatePlaylistfolderName: string, playlistName: string, filenames: string[]string
Playlist_DeletePlaylistplaylistUrl: stringboolean
Playlist_SetFilesplaylistUrl: string, filenames: string[]boolean
Playlist_AppendFilesplaylistUrl: string, filenames: string[]boolean
Playlist_RemoveAtplaylistUrl: string, index: intboolean
Playlist_MoveFilesplaylistUrl: string, fromIndices: int[], toIndex: intboolean
Playlist_PlayNowplaylistUrl: stringboolean
Podcast Methods
MethodParametersReturns
Podcasts_QuerySubscriptionsquery: stringstring[]
Podcasts_GetSubscriptionid: stringstring[]
Podcasts_GetSubscriptionArtworkid: string, index: intstring (base64)
Podcasts_GetSubscriptionEpisodesid: stringstring[]
Podcasts_GetSubscriptionEpisodeid: string, index: intstring[]
Settings Methods
MethodParametersReturns
Setting_GetPersistentStoragePath-string
Setting_GetSkin-string
Setting_GetSkinElementColourelement: SkinElement, state: ElementState, component: ElementComponentint
Setting_IsWindowBordersSkinned-boolean
Setting_GetFieldNamefield: MetaDataTypestring
Setting_GetDataTypefield: MetaDataTypestring
Setting_GetLastFmUserId-string
Setting_GetWebProxy-string
Setting_GetValuesettingId: SettingIdobject
MusicBee Application Methods
MethodParametersReturns
MB_GetWindowHandle-long
MB_RefreshPanels-true
MB_GetLocalisationid: string, defaultText: stringstring
MB_ShowNowPlayingAssistant-boolean
MB_InvokeCommandcommand: Command, parameter: objectboolean
MB_SetWindowSizewidth: int, height: intboolean
MB_GetVisualiserInformation-{visualiserNames, defaultState, currentState}
MB_ShowVisualiservisualiserName: string, state: WindowStateboolean
Configuration: RPC mode is enabled by default. Disable via settings: "rpcEnabled": false

WebSocket Events

Real-time event streaming. Connect once, receive updates automatically - no polling.

URL: ws://localhost:8080/
Use REST for: Commands (play, pause), queries (get queue)
Use WebSocket for: Real-time UI updates, visualizations, remote displays
Connection Lifecycle
StepDescription
1. ConnectOpen WebSocket to ws://localhost:8080/
2. ReceiveImmediately starts receiving ALL events (default behavior)
3. Subscribe (optional)Send subscribe message to filter to specific events only
4. DisconnectClose the WebSocket connection when done

Note: New clients receive ALL events by default. Once you send a subscribe message, you only receive those specific events. Use unsubscribe to stop receiving events without disconnecting.

Event Types
EventDescriptionFrequency
TrackChangedNew track started playingOn track change
PlayStateChangedPlay/pause/stop state changedOn state change
VolumeChangedVolume level or mute state changedOn volume change
PositionChangedPlayback position update (milliseconds)~1 per second while playing
QueueChangedNow playing list modified (add/remove/clear)On queue change
ShuffleChangedShuffle mode toggled on/offOn shuffle change
RepeatChangedRepeat mode changed (none/all/one)On repeat change
MetadataChangedRating or love tag changed on current trackOn tag/rating change
ReactionUser reacted to now playing track (emoji, nickname, track info)On reaction submit
Subscribe/Unsubscribe
// Subscribe to specific events (filters to only these events)
{"subscribe": ["TrackChanged", "PlayStateChanged"]}

// Unsubscribe from events (stop receiving them)
{"unsubscribe": ["PositionChanged"]}

// Subscribe to all events (equivalent to no subscriptions)
{"subscribe": ["TrackChanged", "PlayStateChanged", "VolumeChanged",
              "PositionChanged", "QueueChanged", "ShuffleChanged",
              "RepeatChanged", "MetadataChanged", "Reaction",
              "TasteChanged"]}
Event Data Formats
// TrackChanged
{
  "event": "TrackChanged",
  "timestamp": "2024-01-03T12:00:00.000Z",
  "data": {
    "fileUrl": "C:\\Music\\song.mp3",
    "title": "Track Title",
    "artist": "Artist Name",
    "album": "Album Name",
    "duration": 245000,
    "artworkUrl": "/nowplaying/artwork"
  }
}

// PlayStateChanged
{
  "event": "PlayStateChanged",
  "timestamp": "2024-01-03T12:00:00.000Z",
  "data": {
    "state": "playing"  // "playing", "paused", "stopped"
  }
}

// VolumeChanged
{
  "event": "VolumeChanged",
  "timestamp": "2024-01-03T12:00:00.000Z",
  "data": {
    "volume": 75,  // 0 to 100
    "muted": false
  }
}

// PositionChanged
{
  "event": "PositionChanged",
  "timestamp": "2024-01-03T12:00:00.000Z",
  "data": {
    "position": 45000,   // Current position in milliseconds
    "duration": 245000   // Total duration in milliseconds
  }
}

// QueueChanged
{
  "event": "QueueChanged",
  "timestamp": "2024-01-03T12:00:00.000Z",
  "data": {
    "action": "add",    // "add", "remove", "clear", "move"
    "index": 5,
    "totalTracks": 42
  }
}

// ShuffleChanged
{
  "event": "ShuffleChanged",
  "timestamp": "2024-01-03T12:00:00.000Z",
  "data": {
    "enabled": true
  }
}

// RepeatChanged
{
  "event": "RepeatChanged",
  "timestamp": "2024-01-03T12:00:00.000Z",
  "data": {
    "mode": "all"  // "none", "all", "one"
  }
}

// MetadataChanged
{
  "event": "MetadataChanged",
  "timestamp": "2024-01-03T12:00:00.000Z",
  "data": {
    "fileUrl": "C:\\Music\\song.mp3",
    "rating": 3,      // -1 (unrated) to 5
    "love": "L"       // "L" (loved), "B" (banned), or "" (neither)
  }
}

// Reaction
{
  "event": "Reaction",
  "timestamp": "2024-01-03T12:00:00.000Z",
  "data": {
    "emoji": "fire",
    "type": "fire",       // fire, heart, like, dislike, ban
    "nickname": "Guest",
    "trackTitle": "Song Name",
    "trackArtist": "Artist"
  }
}

// TasteChanged (debounced, fires after reactions/influences/mood changes)
{
  "event": "TasteChanged",
  "timestamp": "2024-01-03T12:00:05.000Z",
  "data": {
    "profile": {
      "topGenres": [{ "name": "Rock", "weight": 1.0 }],
      "topArtists": [{ "name": "Foo Fighters", "weight": 0.85 }],
      "bpmRange": [90, 160],
      "mood": "Energetic",
      "moodConfidence": 0.88,
      "influenceCount": 3,
      "reactionCount": 12
    }
  }
}
JavaScript Example
// Connect to WebSocket
const ws = new WebSocket('ws://localhost:8080/');

ws.onopen = function() {
  console.log('Connected to MBXHub');

  // Optional: Subscribe to specific events only
  // Without this, you receive ALL events
  ws.send(JSON.stringify({
    subscribe: ['TrackChanged', 'PlayStateChanged', 'PositionChanged']
  }));
};

ws.onmessage = function(event) {
  const msg = JSON.parse(event.data);

  switch (msg.event) {
    case 'TrackChanged':
      console.log('Now playing:', msg.data.title, '-', msg.data.artist);
      break;
    case 'PlayStateChanged':
      console.log('State:', msg.data.state);
      break;
    case 'PositionChanged':
      const pct = (msg.data.position / msg.data.duration * 100).toFixed(1);
      console.log('Position:', pct + '%');
      break;
  }
};

ws.onclose = function() {
  console.log('Disconnected from MBXHub');
};

ws.onerror = function(err) {
  console.error('WebSocket error:', err);
};

// Later: Unsubscribe from position updates (too frequent)
ws.send(JSON.stringify({ unsubscribe: ['PositionChanged'] }));

// Clean disconnect
ws.close();
Test Page: Visit /test/websocket to interactively test WebSocket events with subscription controls.

Error Handling

{
  "success": false,
  "error": {
    "code": "ERROR_CODE",
    "message": "Human-readable description"
  }
}
CodeHTTPDescription
NOT_FOUND404Endpoint or resource not found
INVALID_REQUEST400Invalid parameters or malformed request
ARIA_DISABLED403ARiA input simulation is disabled
FORBIDDEN403Operation not allowed (e.g., RPC disabled)
METHOD_NOT_ALLOWED405Wrong HTTP method
SERVICE_UNAVAILABLE503Required service not available (e.g., TrueShuffle/AutoQ)
INTERNAL_ERROR500Server error

Enumerations Reference

Common enum values used in API parameters and responses.

PlayState
ValueCodeDescription
undefined0Unknown state
loading1Track is loading
playing3Playing
paused6Paused
stopped7Stopped
RepeatMode
ValueCodeDescription
none0No repeat
all1Repeat all tracks
one2Repeat current track
ReplayGainMode
ValueCodeDescription
off0Disabled
track1Track-based gain
album2Album-based gain
smart3Automatic selection
MetaDataType (Common Fields)
FieldCodeDescription
TrackTitle65Track title
Album30Album name
AlbumArtist31Album artist
Artist32Track artist
Composer43Composer
Genre59Genre
Rating75Star rating (0-5)
RatingLove76Love rating
TrackNo86Track number
DiscNo52Disc number
Year88Year
Lyrics114Lyrics text
Comment44Comment
Publisher73Publisher/Label
Conductor45Conductor
FilePropertyType
PropertyCodeDescription
Url2File path/URL
Kind4File type (Music, Video, etc.)
Format5Audio format (MP3, FLAC, etc.)
Size7File size in bytes
Channels8Audio channels
SampleRate9Sample rate (Hz)
Bitrate10Bitrate (kbps)
Duration16Duration (ms)
PlayCount14Play count
SkipCount15Skip count
LastPlayed13Last played date
DateAdded12Date added to library
DateModified11File modification date
PlaylistFormat
FormatCodeDescription
Unknown0Unknown format
M3u1M3U playlist
Xspf2XSPF (XML Shareable Playlist)
Asx3ASX (Windows Media)
Wpl4WPL (Windows Media)
Pls5PLS playlist
Auto7Auto-detect format
LyricsType
TypeCodeDescription
NotSpecified0Any lyrics type
Synchronised1Time-synced lyrics (LRC)
UnSynchronised2Plain text lyrics
LibraryCategory
CategoryCodeDescription
Music0Music files
Audiobook1Audiobooks
Video2Video files
Inbox4Inbox (new files)

Logging

MBXHub includes comprehensive logging for debugging and monitoring. Logs are written using NLog to a log file in the MBXHub folder.

Configuration

Logging is controlled by two settings in mbxhub.json:

SettingTypeDescription
debugModebooleanMaster switch - enables/disables all logging
logLevelstringMinimum log level when debug mode is on
Log Levels
LevelWhat Gets Logged
TraceEverything including request/response bodies, WebSocket message content. Very verbose.
DebugRoute matching, handler selection, subscription changes, internal decisions.
InfoStartup/shutdown, HTTP requests (method/path/status/timing), connections, track changes.
WarningRecoverable errors, timeouts, retries, unexpected but handled situations.
ErrorFailures, exceptions, service unavailable. Always logged even with debug mode off.
Log Location

Log files are stored in the MBXHub subfolder of MusicBee's persistent storage:

%AppData%\MusicBee\MBXHub\mbxhub.log
  • Log files are automatically rotated when they reach 2MB (debug) or 5MB (normal)
  • Old logs are archived as mbxhub.1.log, mbxhub.2.log, etc.
  • Maximum 5 archive files in debug mode, 3 otherwise
Enabling Logging

To enable debug logging:

// In mbxhub.json:
{
  "debugMode": true,
  "logLevel": "Trace"  // or "Debug", "Info", "Warning", "Error"
}
Request Logging Format

HTTP requests are logged at Info level with timing:

2025-01-25 14:32:15 [INFO ] [REST] HTTP GET /player/status -> 200 (12ms)
2025-01-25 14:32:16 [INFO ] [REST] HTTP POST /player/playpause -> 200 (8ms)
2025-01-25 14:32:17 [INFO ] [Plugin] Track changed: Artist Name - Track Title
2025-01-25 14:32:17 [INFO ] [WebSocket] WS client abc12345 connected from 192.168.1.50:54321
Performance Note: Trace level logging can impact performance due to the volume of data written. Use Debug or Info level for normal troubleshooting, and only enable Trace when investigating specific issues.

Security

MBXHub operates on a trusted local network model with multiple security layers.

PartyMode Roles

PartyMode uses PIN-based authentication with three roles:

RoleAccessAuthentication
DJFull control: player, queue, start/stop partyDJ PIN via X-Party-PIN header
GuestBrowse library, request songs, voteGuest PIN via X-Party-PIN header
AnonymousRead-only: now playing, artwork, statusNo PIN required
X-Party-PIN Header

PartyMode endpoints authenticate via the X-Party-PIN header:

# Guest request example
curl -X POST http://localhost:8080/partymode/request \
  -H "X-Party-PIN: 1234" \
  -H "Content-Type: application/json" \
  -d '{"url":"C:\\Music\\Track.mp3","nickname":"Haro"}'

# Validate PIN and get role
GET /partymode/validate?pin=1234&nickname=Haro

Invalid or missing PIN returns 401 Unauthorized.

Protection Levels

MBXHub supports three protection levels for different deployment scenarios:

LevelDescriptionUse Case
DefaultFull API access, no restrictionsPersonal use, trusted networks
KioskAll requests redirect to defaultPageParty displays, public screens
RestrictedRead-only mode with granular controlsShared access, limited control

Configure via kioskMode and apiReadOnlyMode in settings.

Rate Limiting

PartyMode includes built-in limits and optional per-IP rate limiting:

Built-in limits (always active):

  • Join deduplication: Same nickname can only trigger join announcement once per 60 seconds
  • Request history: Maximum 100 entries kept in memory per session
  • Feed buffer: Maximum 100 items (joins + requests + votes)

Per-IP rate limiting (configurable via Settings → Party Mode...):

  • Requests/min: Max song requests per minute per IP (default: 10)
  • Votes/min: Max votes per minute per IP (default: 30)

Returns 429 Too Many Requests when limits exceeded.

CORS Policy
OriginAccess
localhost, 127.0.0.1Always allowed
192.168.x.xAllowed when allowRemoteConnections is enabled
10.x.x.xAllowed when allowRemoteConnections is enabled
172.16.x.x - 172.31.x.xAllowed when allowRemoteConnections is enabled
External originsBlocked (prevents cross-site attacks)
Request Limits
  • Maximum request body size: 1 MB
  • Content-Type validation for JSON endpoints
  • No stack traces exposed in error responses
Access Control (Read-Only Mode)

MBXHub can restrict write operations via settings with granular per-operation controls:

Restriction Hierarchy:

  • Master read-only - Blocks all write operations API-wide
  • Category restriction - Blocks all operations within a category
  • Operation restriction - Blocks specific operations only

Settings cascade: master OR category OR operation = blocked

Granular Operations:

CategoryOperationEndpoints Affected
LibraryTag editsPUT /library/file/*, POST /library/commit
File deletionDELETE /library/file/*
QueueAdd tracksPOST /queue/add, /queue/playnow, /queue/play
Remove tracksDELETE /queue/*
Reorder tracksPOST /queue/move
PlayerPlaybackPOST /player/play, /pause, /stop, /next, /previous
VolumePOST /player/volume, /mute
SeekPOST /player/position
PlaylistsCreatePOST /playlists
DeleteDELETE /playlists/*
ModifyPUT /playlists/*, POST /playlists/*/files

Default Settings:

The philosophy: player and queue are open, destructive operations are locked. Playlists, tag edits, and file deletion default to read-only.

SettingDefaultEffect
apiReadOnlyModefalseMaster switch — off
apiReadOnlyPlayerfalsePlayer controls allowed
apiReadOnlyQueuefalseQueue modifications allowed
apiReadOnlyLibraryfalseLibrary allowed (but see granular)
apiReadOnlyPlayliststruePlaylists blocked by default
apiReadOnlyLibraryTagstrueTag edits blocked by default
apiReadOnlyLibraryDeletetrueFile deletion blocked by default
apiReadOnlyPlayerPlaybackfalsePlayback allowed
apiReadOnlyPlayerVolumefalseVolume allowed
apiReadOnlyPlayerSeekfalseSeek allowed
apiReadOnlyQueueAddfalseQueue add allowed
apiReadOnlyQueueRemovefalseQueue remove allowed
apiReadOnlyQueueReorderfalseQueue reorder allowed
apiReadOnlyPlaylistsCreatefalse(moot — parent is true)
apiReadOnlyPlaylistsDeletefalse(moot — parent is true)
apiReadOnlyPlaylistsModifyfalse(moot — parent is true)

Settings cascade: master OR category OR operation = blocked. The granular playlist settings default to false but are moot because their parent apiReadOnlyPlaylists is true.

Always Permitted (exempt from restrictions):

  • All GET requests - Browse, search, view queue, get status, stream audio/artwork
  • PartyMode guest actions - Song requests, voting, viewing party queue
  • PartyMode DJ role - When party active, DJ bypasses restrictions for player/queue/shuffle

Blocked requests return 403 Forbidden:

{"success":false,"error":{"code":"READ_ONLY","message":"API is in read-only mode"}}
Recommendations:
1. Firewall: Configure Windows Firewall to allow port 8080 only from trusted networks
2. Local Only: Keep allowRemoteConnections disabled unless needed
3. RPC Access: Consider disabling RPC (rpcEnabled: false) if not needed, as it exposes all API methods
4. ARiA: Keep ARiA disabled (ariaEnabled: false) unless specifically needed for PC wake scenarios

Integration Notes

File URLs

All file URLs are Windows paths. URL-encode when passing in path parameters:

// Original: C:\Music\Artist\Track.mp3
// Encoded:  C%3A%5CMusic%5CArtist%5CTrack.mp3

// Example: GET /library/file/C%3A%5CMusic%5CArtist%5CTrack.mp3
Pagination

Most list endpoints support offset and limit query parameters:

  • Default limit: 50
  • Maximum limit: 10000
  • Example: GET /library/files?offset=100&limit=50
Sorting

Library endpoints support ?sort= parameter for server-side sorting:

  • alpha (default) - Alphabetical by title+artist
  • artist - By artist name, then title
  • album - By album name, then track number
  • title - By title only
  • date - By date added (newest first)
  • track - By disc number, then track number (natural album order)
  • name - By display name
  • year-asc - By year ascending (chronological, oldest first)

Example: GET /library/files?artist=Pink+Floyd&sort=album

AutoQ Availability

Shuffle, banlist, and influence endpoints require TrueShuffle or AutoQ to be enabled. Check availability:

GET /shuffle/status
// Returns 503 SERVICE_UNAVAILABLE if TrueShuffle/AutoQ not enabled
Real-time Events

For real-time updates (track changes, state changes), use WebSocket instead of polling:

  • Use REST for: Commands (play, pause), queries (get queue, search)
  • Use WebSocket for: Real-time UI updates, visualizations, progress bars
  • See WebSocket Events section
Network Access

By default, MBXHub only accepts localhost connections. For network access:

  1. Enable allowRemoteConnections in settings
  2. Configure Windows Firewall (use Settings → Firewall → Add Rule)
  3. Clients connect to your PC's IP address (e.g., http://192.168.1.100:8080)
CUE Track Resolution

MBXHub automatically detects CUE-backed audio files and resolves per-track metadata across all surfaces:

  • Player status (/player/status) - Overlays title, artist, trackNo, album from CUE sheet
  • Position (/nowplaying/position) - Includes cueTrack and cueTitle
  • Tags (/nowplaying/tag) - Returns CUE track data for TrackTitle, Artist, Album, TrackNo
  • WebSocket - track events include cueTrack field when CUE active
  • Dashboard - Now-playing shows resolved CUE track metadata

Encoding detection: BOM check → UTF-8 validation → Windows-1252 fallback. Optional CueSharp.dll in Plugins folder enables enhanced parsing via reflection.

REST vs RPC
Use REST when...Use RPC when...
Building a client appWriting automation scripts
Need clean, discoverable URLsNeed direct MusicBee API access
Want resource-oriented designFamiliar with MusicBee plugin API
Working with standard HTTP clientsNeed parameter flexibility