Is io.github.miller-joe/youtube-mcp safe to use?

io.github.miller-joe/youtube-mcp has no known CVEs as of the latest MCPpedia security scan. It requires authentication to connect, which limits unauthorized access.

How do I install io.github.miller-joe/youtube-mcp?

io.github.miller-joe/youtube-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can io.github.miller-joe/youtube-mcp do?

io.github.miller-joe/youtube-mcp provides 29 tools: list_my_videos, get_video, update_video_metadata, delete_video, list_captions and 24 more. See the full tools list on the server page for descriptions and parameters.

What AI clients work with io.github.miller-joe/youtube-mcp?

io.github.miller-joe/youtube-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.

Is io.github.miller-joe/youtube-mcp actively maintained?

io.github.miller-joe/youtube-mcp is actively maintained — last commit was 25 days ago.

io.github.miller-joe/youtube-mcp

@miller-joe/youtube-mcp

MCP server for YouTube creator-ops with a ComfyUI bridge for AI thumbnail generation.

51/wk 29 tools GitHub npm

No known CVEs

No license

Actively maintained

Last commit 25d ago

Works with most clients

Transport: stdio, http

29 tools · ~952 tok

Grade B · 0.5% of 200K ctx

Edit this pageView history

Entertainment Marketing

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-miller-joe-youtube-mcp": {
      "args": [
        "-y",
        "@miller-joe/youtube-mcp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-miller-joe-youtube-mcp)](https://mcppedia.org/s/io-github-miller-joe-youtube-mcp)

Read me

What io.github.miller-joe/youtube-mcp does

OAuth-authenticated YouTube MCP for channel owners. Edit video metadata, reply to and moderate comments, manage playlists, query channel analytics, and generate or set AI thumbnails via a ComfyUI bridge. Goes beyond the read-only Data API v3 wrappers that dominate this space.

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@miller-joe/youtube-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

81/100across 5 weighted dimensions

How we score →

0255075100

−19

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @miller-joe/youtube-mcp against OSV.dev.

Inventory

Tools (29)

Click any tool to inspect its schema.

~952 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.miller-joe/youtube-mcp safe to use?: io.github.miller-joe/youtube-mcp has no known CVEs as of the latest MCPpedia security scan. It requires authentication to connect, which limits unauthorized access.
How do I install io.github.miller-joe/youtube-mcp?: io.github.miller-joe/youtube-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.miller-joe/youtube-mcp do?: io.github.miller-joe/youtube-mcp provides 29 tools: list_my_videos, get_video, update_video_metadata, delete_video, list_captions and 24 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.miller-joe/youtube-mcp?: io.github.miller-joe/youtube-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.
Is io.github.miller-joe/youtube-mcp actively maintained?: io.github.miller-joe/youtube-mcp is actively maintained — last commit was 25 days ago.

Similar servers

Others in entertainment / marketing

View all →

Mcp Server Typescript94

DataForSEO API modelcontextprotocol server

223 9

Spotify Mcp Server91

Lightweight MCP server for Spotify

378 17

Unity Mcp Server90

Unity MCP Server — 268 tools for AI-assisted game development. Connect Claude, Cursor, or any MCP client to Unity Editor & Unity Hub. Scene management, GameObjects, components, builds, profiling, Shader Graph, Amplify, terrain, physics, NavMesh, animation, MPPM multiplayer & more. Free & open source by AnkleBreaker Studio.

303 2

Alicization Town90

**⚔️ Alicization Town** is a decentralized, multi-agent pixel sandbox world powered by the **Model Context Protocol (MCP)**. **⚔️ Alicization Town** 是一个基于 **MCP (Model Context Protocol)** 架构的去中心化多智能体像素沙盒世界。

120 8

MCP Security Weekly

Get CVE alerts and security updates for io.github.miller-joe/youtube-mcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Entertainment Marketing

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-miller-joe-youtube-mcp": {
      "args": [
        "-y",
        "@miller-joe/youtube-mcp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-miller-joe-youtube-mcp)](https://mcppedia.org/s/io-github-miller-joe-youtube-mcp)

Read me

What io.github.miller-joe/youtube-mcp does

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@miller-joe/youtube-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

youtube-mcp

The pitch

Most existing YouTube MCPs use an API key against Data API v3. Search videos, fetch public metadata, read-only. This one uses OAuth 2.0 (Authorization Code + PKCE) so it can actually write to your channel: update video titles, descriptions and tags, reply to comments, moderate spam, manage playlists. It also hits the separate YouTube Analytics API for channel stats, and generates a thumbnail via ComfyUI and pushes it to YouTube in a single MCP call.

Claude, use generate_and_set_thumbnail on video abc123:
  prompt: "cyberpunk hacker at keyboard, neon blue and pink, high contrast"

ComfyUI renders 1280×720, youtube-mcp fetches the bytes, and POSTs to thumbnails.set. Done.

Install

# npx, no install
npx @miller-joe/youtube-mcp --help

# Docker
docker run -p 9120:9120 \
  -e YOUTUBE_CLIENT_ID=... \
  -e YOUTUBE_CLIENT_SECRET=... \
  -e YOUTUBE_TOKEN_FILE=/token/token.json \
  -v $PWD/token:/token \
  ghcr.io/miller-joe/youtube-mcp:latest

Setup: Google Cloud one-time (~10 min)

Google account plus YouTube channel. Use a personal account, not a workspace one you might lose.
Google Cloud project at https://console.cloud.google.com. Call it whatever you want (e.g. youtube-mcp).
Enable APIs:
- YouTube Data API v3
- YouTube Analytics API
OAuth consent screen: External, App name, support email. In Scopes, add:
- youtube.upload
- youtube.force-ssl
- yt-analytics.readonly
Stay in Testing mode. Add yourself as a test user (required). As the project owner, your refresh token won't expire.
Create OAuth Client ID: Application type = Desktop app. Download the JSON.
Run the interactive auth flow:
```
npx @miller-joe/youtube-mcp --auth --client-secret-file ./client_secret.json
```
A browser opens, you log in to the Google account tied to your YouTube channel, and grant the requested scopes. On success, a refresh token is saved to ~/.config/youtube-mcp/token.json.
Start the server:
```
npx @miller-joe/youtube-mcp --client-secret-file ./client_secret.json
```
Or provide the client credentials via env: YOUTUBE_CLIENT_SECRET_FILE, or YOUTUBE_CLIENT_ID + YOUTUBE_CLIENT_SECRET.

Connect an MCP client

claude mcp add --transport http youtube http://localhost:9120/mcp

Or point your MCP gateway at the Streamable HTTP endpoint.

Configuration

CLI flag	Env var	Default	Notes
`--client-secret-file`	`YOUTUBE_CLIENT_SECRET_FILE`	(none)	Path to Google OAuth JSON
`--client-id`	`YOUTUBE_CLIENT_ID`	(none)	Alternative to the secret file
`--client-secret`	`YOUTUBE_CLIENT_SECRET`	(none)	Alternative to the secret file
`--token-file`	`YOUTUBE_TOKEN_FILE`	`~/.config/youtube-mcp/token.json`	Refresh token storage
`--host`	`MCP_HOST`	`0.0.0.0`	Bind host (HTTP mode only)
`--port`	`MCP_PORT`	`9120`	Bind port (HTTP mode only)
`--stdio`	`MCP_TRANSPORT=stdio`	(unset)	Speak MCP over stdio instead of HTTP. Use when launched as a subprocess by a stdio-first MCP client (Claude Desktop, mcp-inspector).
`--comfyui-url`	`COMFYUI_URL`	(unset, bridge disabled)	ComfyUI HTTP URL for bridge tools

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

81/100across 5 weighted dimensions

How we score →

0255075100

−19

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @miller-joe/youtube-mcp against OSV.dev.

Inventory

Tools (29)

Click any tool to inspect its schema.

~952 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.miller-joe/youtube-mcp safe to use?: io.github.miller-joe/youtube-mcp has no known CVEs as of the latest MCPpedia security scan. It requires authentication to connect, which limits unauthorized access.
How do I install io.github.miller-joe/youtube-mcp?: io.github.miller-joe/youtube-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.miller-joe/youtube-mcp do?: io.github.miller-joe/youtube-mcp provides 29 tools: list_my_videos, get_video, update_video_metadata, delete_video, list_captions and 24 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.miller-joe/youtube-mcp?: io.github.miller-joe/youtube-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.
Is io.github.miller-joe/youtube-mcp actively maintained?: io.github.miller-joe/youtube-mcp is actively maintained — last commit was 25 days ago.