68
grade C
1 hour ago
smithery
youtube-mcp
Search and browse videos, channels, and playlists to fetch titles, descriptions, stats, and durations. Retrieve multilingual, timestamped transcripts and search within captions for precise context. Surface channel and playlist insights quickly by listing items and details.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
// key findings
⚠️
Known vulnerabilities in dependencies: 2 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
✅
7 tools verified — handlers match their declared behaviour
7 read-only tools verified — handlers contain no write/delete/exec
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
🔐
You'll be asked for 2 credentials: GOOGLE_TRANSLATE_API_KEY, YOUTUBE_API_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from
process.env. You'll be asked to provide them before it can run.config
GOOGLE_PROJECT_ID🔐 secret
GOOGLE_TRANSLATE_API_KEY🔐 secret
YOUTUBE_API_KEY— "": "your_youtube_api_key_here"config
YOUTUBE_TRANSCRIPT_LANG— Default language for transcripts (optional, defaults to 'en')// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[](https://m8ven.ai/mcp/sfiorini-youtube-mcp-1ed0e0)commit: 12b0642af6f2b93f14541c84204c78327c3254d0
code hash: 1c8a5888860f69bf9937cb646aba7bec351d8c9c32ded48873eb7c0ef07cb3f3
verified: 4/28/2026, 8:41:04 AM