Secure MCP server for YouTube intelligence โ 18 tools, OAuth2, OWASP Top 10 controls.
Connect Runs on your machine
claude mcp add tubemind-secure-mcp -e YOUTUBE_CLIENT_ID=<YOUTUBE_CLIENT_ID> -e YOUTUBE_CLIENT_SECRET=<YOUTUBE_CLIENT_SECRET> -e YOUTUBE_REDIRECT_URI=<YOUTUBE_REDIRECT_URI> -e TOKEN_ENCRYPTION_KEY=<TOKEN_ENCRYPTION_KEY> -e RATE_LIMIT_PER_MINUTE=<RATE_LIMIT_PER_MINUTE> -e REQUEST_TIMEOUT_MS=<REQUEST_TIMEOUT_MS> -e AUDIT_LOG_PATH=<AUDIT_LOG_PATH> -e NODE_ENV=<NODE_ENV> -- npx -y [email protected]
{
"mcpServers": {
"tubemind-secure-mcp": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"YOUTUBE_CLIENT_ID": "<YOUTUBE_CLIENT_ID>",
"YOUTUBE_CLIENT_SECRET": "<YOUTUBE_CLIENT_SECRET>",
"YOUTUBE_REDIRECT_URI": "<YOUTUBE_REDIRECT_URI>",
"TOKEN_ENCRYPTION_KEY": "<TOKEN_ENCRYPTION_KEY>",
"RATE_LIMIT_PER_MINUTE": "<RATE_LIMIT_PER_MINUTE>",
"REQUEST_TIMEOUT_MS": "<REQUEST_TIMEOUT_MS>",
"AUDIT_LOG_PATH": "<AUDIT_LOG_PATH>",
"NODE_ENV": "<NODE_ENV>"
}
}
}
}
{
"mcpServers": {
"tubemind-secure-mcp": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"YOUTUBE_CLIENT_ID": "<YOUTUBE_CLIENT_ID>",
"YOUTUBE_CLIENT_SECRET": "<YOUTUBE_CLIENT_SECRET>",
"YOUTUBE_REDIRECT_URI": "<YOUTUBE_REDIRECT_URI>",
"TOKEN_ENCRYPTION_KEY": "<TOKEN_ENCRYPTION_KEY>",
"RATE_LIMIT_PER_MINUTE": "<RATE_LIMIT_PER_MINUTE>",
"REQUEST_TIMEOUT_MS": "<REQUEST_TIMEOUT_MS>",
"AUDIT_LOG_PATH": "<AUDIT_LOG_PATH>",
"NODE_ENV": "<NODE_ENV>"
}
}
}
}
{
"servers": {
"tubemind-secure-mcp": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"YOUTUBE_CLIENT_ID": "<YOUTUBE_CLIENT_ID>",
"YOUTUBE_CLIENT_SECRET": "<YOUTUBE_CLIENT_SECRET>",
"YOUTUBE_REDIRECT_URI": "<YOUTUBE_REDIRECT_URI>",
"TOKEN_ENCRYPTION_KEY": "<TOKEN_ENCRYPTION_KEY>",
"RATE_LIMIT_PER_MINUTE": "<RATE_LIMIT_PER_MINUTE>",
"REQUEST_TIMEOUT_MS": "<REQUEST_TIMEOUT_MS>",
"AUDIT_LOG_PATH": "<AUDIT_LOG_PATH>",
"NODE_ENV": "<NODE_ENV>"
}
}
}
}
Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.
Tools
This server runs locally, so its tools are listed by your MCP client once it starts.
Environment variables
| Name | Description |
|---|---|
YOUTUBE_CLIENT_IDRequired | Google OAuth2 Client ID for YouTube Data API v3 + Analytics API |
YOUTUBE_CLIENT_SECRETRequired, secret | Google OAuth2 Client Secret |
YOUTUBE_REDIRECT_URIOptional | OAuth2 redirect URI (must match Google Cloud Console) |
TOKEN_ENCRYPTION_KEYRequired, secret | 64-char hex key for AES-256-GCM token encryption at rest. Generate with: openssl rand -hex 32 |
RATE_LIMIT_PER_MINUTEOptional | Max tool invocations per minute |
REQUEST_TIMEOUT_MSOptional | HTTP request timeout (ms) |
AUDIT_LOG_PATHOptional | Path to the audit log file |
NODE_ENVOptional | production | development |
Details
| Package | [email protected] (NPM, stdio) |
| First published | 7 May 2026 |
| Last updated | 7 May 2026 |
| Registry name | io.github.dewtech-technologies/tubemind-secure-mcp |
More marketing and seo servers See all
Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.
