youtube-mcp-server
by Jing-yilin
Overview
Enables AI language models to interact with YouTube content through a standardized Model Context Protocol (MCP) interface.
Installation
npx -y @yilin-jing/youtube-mcp-serverEnvironment Variables
- YOUTUBE_API_KEY
- YOUTUBE_TRANSCRIPT_LANG
Security Notes
The server exposes a `save_dir` parameter in several tools (e.g., `videos_getVideo`, `transcripts_getTranscript`, `comments_getComments`) which, if controllable by an attacker through the AI model's input, could allow arbitrary file system writes (path traversal vulnerabilities). The `saveData` function creates directories recursively and writes arbitrary JSON content to the specified path without explicit sanitization or directory restrictions. This is a critical local file system write vulnerability if the server is deployed in an environment where AI input is not strictly validated or sandboxed.
Similar Servers
mcp-server-youtube-transcript
Provides a Model Context Protocol server to retrieve YouTube video transcripts, including language fallback, timestamps, and ad filtering.
yt-dlp-mcp
Integrate video platform capabilities like search, metadata extraction, and content download into AI agents using yt-dlp.
youtube-mcp-server
This server provides examples of Model Context Protocol (MCP) implementations, integrating the YouTube API to enable Large Language Models (LLMs) like GitHub Copilot Chat to search for YouTube channels and videos.
mcp-youtube
Empowers AI language models to retrieve token-optimized, structured YouTube data for video search, detail retrieval, transcript fetching, channel analysis, and trend discovery.