video-search-and-summarization (NVIDIA-AI-Blueprints/video-search-and-summarization) is an MCP server listed on the M8ven Trust Index. It scores 98 out of 100, grade A. It declares 35 tools. No publisher has claimed this listing.

Back to MCP Trust IndexM8ven
A
Trusted
98/100
24 days ago

video-search-and-summarization

NVIDIA AI Blueprint for video search and summarization (VSS) is a GPU-accelerated reference architecture for building video analytics agents with real-time verified alerts, visual Q&A, and automated reporting. The VSS Blueprint uses vision language models (VLMs) such as NVIDIA Cosmos, LLMs such as NVIDIA Nemotron, RAG, and NVIDIA NIMs.

→ NVIDIA-AI-Blueprints/video-search-and-summarization· listed on github_topic

Trusted. Deep verification, no outstanding findings, and an established reputation. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

Code Verified⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every pushwhy connect →

Who stands behind it

NVIDIA-AI-Blueprints

Source: github_topic

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

⚡ Connect GitHub for Live Monitored

Install from

GitHub

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 2 credentials: AWS_SECRET_ACCESS_KEY, GCS_HMAC_SECRET_ACCESS_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// environment variables
To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.
configANALYZE
configCOMPRESS
configCORS_ORIGIN
configDEFAULT_MODEL
configHTTP_PUBLIC_PATH
configRUN_APP_NAME
configWS_PUBLIC_PATH
configNOTIFY_BACKENDS
configVST_ENDPOINT
configVST_PUBLIC_URL_BASE
configWEBHOOK_HOST
configWEBHOOK_PORT
configPROMETHEUS_PORT
configBREV_LINK_DOMAIN
configBREV_ENV_ID
configBREV_LINK_PREFIX
configVSS_API_ENABLE_VERSIONING
configLVS_MCP_PORT
configSSH_CLIENT
configSSH_TTY
configCONTAINER
configREMOTE_CONTAINERS_IPC
configCODESPACES
configSTORAGE_PROVIDER
configBASE_PREFIX_PATH
configSIMULATION_ID
configAWS_ACCESS_KEY_ID
🔐 secretAWS_SECRET_ACCESS_KEY
configAWS_REGION
configAWS_BUCKET
configGCS_HMAC_ACCESS_KEY_ID
🔐 secretGCS_HMAC_SECRET_ACCESS_KEY
configGCS_BUCKET
configGCS_REGION
configGCS_ENDPOINT_URL
configVSS_AGENT_VERSION
configVST_INTERNAL_URL
configVIA_DEV_API
configLVS_ENABLE_MCP
configVSS_SKIP_INPUT_MEDIA_VERIFICATION
configFORCE_PYTHON_GC
configENABLE_AUDIO
configRTVI_STREAM_DELETE_DRAIN_TIMEOUT_SEC
configRTVI_STREAM_DELETE_BLOCKING_TIMEOUT_SEC
configFILE_URL_ALLOWED_DIRS
configVLM_MODEL_SUPPORTS_AUDIO
configRTVI_LOG_DIR
configVLM_MAX_MODEL_LEN
configALERT_AGENT_CONFIG_DIR
configLOG_VERBOSE_PROMPTS
configLOG_VERBOSE_VLM_RESPONSE
configFASTAPI_PORT
configPROMETHEUS_MULTIPROC_DIR
configCONFIG_PATH
configVLM_WARMUP_ENABLED
configINSTALL_PROPRIETARY_CODECS
configPYTHONPATH
configVSS_PROPRIETARY_CODECS_MAX_RETRY_SECONDS
configVSS_PROPRIETARY_CODECS_DIR
configVSS_OPENCV_VERSION
configVSS_PROPRIETARY_CODECS_WHEEL
configLOG_VERBOSE_ES
configLOG_VERBOSE_DEDUP
configLOG_LEVEL_ROOT
configLOG_LEVEL_3P
configLOG_SINGLE_LINE
configLOG_TRUNCATE_BASE64
Deployment configuration, supplied by whoever hosts the server. Users are not asked for these.
deployNEXT_PUBLIC_AGENT_API_URL_BASE
deployNEXT_PUBLIC_ALERTS_API_URL
deployNEXT_PUBLIC_ALERTS_TAB_ALERTS_FETCH_DEFAULT_TIME_WINDOW_IN_MINUTES
deployNEXT_PUBLIC_ALERTS_TAB_ALERTS_FETCH_MAX_RESULT_SIZE
deployNEXT_PUBLIC_ALERTS_TAB_ALERT_REPORT_PROMPT_TEMPLATE
deployNEXT_PUBLIC_ALERTS_TAB_DEFAULT_AUTO_REFRESH_IN_MILLISECONDS
deployNEXT_PUBLIC_ALERTS_TAB_MAX_SEARCH_TIME_LIMIT
deployNEXT_PUBLIC_ALERTS_TAB_MEDIA_WITH_OBJECTS_BBOX
deployNEXT_PUBLIC_ALERTS_TAB_VERIFIED_FLAG_DEFAULT
deployNEXT_PUBLIC_APP_SUBTITLE
deployNEXT_PUBLIC_APP_TITLE
deployNEXT_PUBLIC_CHAT_UPLOAD_FILE_CONFIG_TEMPLATE_JSON
deployNEXT_PUBLIC_DARK_THEME_DEFAULT
deployNEXT_PUBLIC_DASHBOARD_TAB_KIBANA_BASE_URL
deployNEXT_PUBLIC_ENABLE_ALERTS_TAB
deployNEXT_PUBLIC_ENABLE_CHAT_TAB
deployNEXT_PUBLIC_ENABLE_DASHBOARD_TAB
deployNEXT_PUBLIC_ENABLE_MAP_TAB
deployNEXT_PUBLIC_ENABLE_SEARCH_TAB
deployNEXT_PUBLIC_ENABLE_VIDEO_MANAGEMENT_TAB
deployNEXT_PUBLIC_MAP_URL
deployNEXT_PUBLIC_MDX_WEB_API_URL
deployNEXT_PUBLIC_SEARCH_TAB_MEDIA_WITH_OBJECTS_BBOX
deployNEXT_PUBLIC_VIDEO_MANAGEMENT_TAB_ADD_RTSP_ENABLE
deployNEXT_PUBLIC_VIDEO_MANAGEMENT_VIDEO_UPLOAD_ENABLE
deployNEXT_PUBLIC_VST_API_URL
// quality suggestions

Tool annotations

No tools have read-only/destructive annotations

Add readOnlyHint or destructiveHint annotations to every tool so hosts can warn users before invoking.

All four hints declared on every tool

35/35 tools missing one or more hints — sensor_list (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); sensor_status (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint); get_live_picture_base64 (missing: readOnlyHint, destructiveHint, idempotentHint, openWorldHint), +32 more. OpenAI's directory rejects tools where any of the four hints are missing or non-boolean.

For every tool, set all four hints (readOnlyHint, destructiveHint, idempotentHint, openWorldHint) to explicit true/false values that match the handler’s actual behaviour.

Tool test coverage

25/35 tools referenced in tests (71%)

Write tests that reference each tool by name so every tool has at least one test.

Shell command execution

1 child_process/subprocess call in production code — runs shell commands (services/agent/docker/entrypoint.py:47)

Prefer library functions over shell-outs. If you must shell out, ensure all inputs are properly escaped.

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail
The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.
// improvement guidance — verified publishers only
We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/nvidia-ai-blueprints/video-search-and-summarization)](https://m8ven.ai/mcp/nvidia-ai-blueprints/video-search-and-summarization)
Shows your grade and updates automatically. Prefer no grade? Append ?variant=verified to the badge URL.
commit: 27bc8aa04855e9539d4ad423178cd062d609d268
code hash: 6f310c06e872a8054667f3f3d7bdcd1803336250f71b0ac3528bc9f90d2ba03f
verified: 8/17/2026, 5:20:16 PM
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client