Back to Home
Knuckles-Team icon

media-downloader

by Knuckles-Team

Overview

The primary use case is to download videos and audio from various online sources, and it functions as an MCP server and an A2A agent for integration into agentic frameworks.

Installation

Run Command
docker run -d --name media-downloader-mcp -p 8004:8004 -e HOST=0.0.0.0 -e PORT=8004 -e TRANSPORT=http -e AUTH_TYPE=none -e EUNOMIA_TYPE=none -e DOWNLOAD_DIRECTORY=/downloads -e AUDIO_ONLY=false -v "/home/genius/Downloads:/downloads" knucklessg1/media-downloader:latest

Environment Variables

  • HOST
  • PORT
  • TRANSPORT
  • DOWNLOAD_DIRECTORY
  • AUDIO_ONLY
  • MCP_URL
  • PROVIDER
  • MODEL_ID
  • OPENAI_BASE_URL
  • OPENAI_API_KEY
  • AUTH_TYPE
  • OIDC_CONFIG_URL
  • OIDC_CLIENT_ID
  • OIDC_CLIENT_SECRET
  • OIDC_BASE_URL
  • TOKEN_JWKS_URI
  • TOKEN_ISSUER
  • TOKEN_AUDIENCE
  • EUNOMIA_TYPE

Security Notes

The server exposes highly dangerous tools (`run_command` and `text_editor`) that allow arbitrary shell command execution (`subprocess.run(..., shell=True)`) and file system manipulation via AI-generated input. While the MCP server supports various authentication and authorization mechanisms (JWT, OAuth, OIDC, Eunomia), these tools, if callable by an agent or user with sufficient permissions, present a critical Remote Code Execution (RCE) and data manipulation vulnerability. Even with strong authentication, if an attacker or a misaligned AI can make calls to these tools, the host system is at severe risk. Hardcoded static tokens are present for the 'static' auth type, intended for testing, which should never be used in production.

Similar Servers

Stats

Interest Score34
Security Score3
Cost ClassLow
Avg Tokens350
Stars5
Forks2
Last Update2026-01-19

Tags

Media DownloaderVideo DownloaderAudio DownloaderMCP ServerA2A AgentAI Tool