Atlas / MCP servers / ayushozha / Adobe Premiere Pro

Adobe Premiere ProBLOCK

mcp/ayushozha/adobe-premiere-pro-1

An open-source bridge between AI assistants and Adobe Premiere Pro, for supported editing workflows. Go, Rust, Python, and TypeScript.

Verdict
BLOCK
Grade
D
Trust score
69 /100
Exposed tools
8 7r · 1w · 0d
Transport
—
License
MIT
Stars
117
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://opensource.org/licenses/MIT) [](https://github.com/ayushozha/AdobePremiereProMCP/pulls) [](https://www.adobe.com/products/premiere.html) [](https://modelcontextprotocol.io) [](https://github.com/ayushozha/AdobePremiereProMCP/stargazers)

An open-source MCP server for Adobe Premiere Pro. Automate supported timeline, media, audio, effect, caption, graphics-template, and export workflows through Claude, GPT, or another Model Context Protocol client.

Give it a script and your footage, review the proposed edit, then let it assemble a recoverable rough cut on a duplicated sequence.
"Edit this 5-minute video using script.pdf with the footage in /media/"

The server can parse a script, scan media, generate an edit decision list, and assemble a Premiere Pro timeline. Mutations are checked with timeline/DOM readback where the host API exposes it.

Why This Exists

Video editors spend hours on repetitive tasks: syncing clips, rough cuts, color matching, audio leveling, exporting variants. This MCP server turns Adobe Premiere Pro into an AI-controllable tool, so you can describe edits in plain English and let your AI assistant execute them.

No separate MCP subscription. Local CEP bridge. Fully open source.

Capabilities and Verification Boundary

The source registry contains 1,066 MCP tool schemas backed by 935 literal host command names. The default standard profile exposes 74 curated, readback-first tools,

Read from source at commit 11b5f5a28f5fOBSERVED · 2026-10-07
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code
claude mcp add ts-bridge --env ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY} --env BRIDGE_CEP_TOKEN=${BRIDGE_CEP_TOKEN} --env MCP_CEP_TOKEN=${MCP_CEP_TOKEN} --env OPENAI_API_KEY=${OPENAI_API_KEY} -- npx -y @premierpro-mcp/[email protected]
claude-desktop
{
  "mcpServers": {
    "ts-bridge": {
      "command": "npx",
      "args": [
        "-y",
        "@premierpro-mcp/[email protected]"
      ],
      "env": {
        "ANTHROPIC_API_KEY": "${ANTHROPIC_API_KEY}",
        "BRIDGE_CEP_TOKEN": "${BRIDGE_CEP_TOKEN}",
        "MCP_CEP_TOKEN": "${MCP_CEP_TOKEN}",
        "OPENAI_API_KEY": "${OPENAI_API_KEY}"
      }
    }
  }
}
03

Exposed tools (8)

7 read · 1 write · 0 destructive.

ToolRiskDescription
AudioreadAudio mixing, levels, effects, Essential Sound
CollaborationreadReview comments, delivery checklists, versioning
ColorreadColor grading, Lumetri Color, LUTs, color matching
DiagnosticsreadPerformance monitoring, health checks, debugging
EffectswriteApply and manage video/audio effects
TemplatesreadSequence, effect, export presets and templates
onereadfirst
threereadlast
04

Trust audit

BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codeFAIL
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
declared (5 observation(s))
Network
declared (10 observation(s))
Shell
declared (2 observation(s))
Dependencies
not all pinned
Secrets in source
found

Findings (19)

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95
cep-panel/src/host/core.jsx:1221
var result = eval(script);
Why it matters. evaluates text as code
Fix. remove; use a parser or a dispatch table
HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95
cep-panel/src/host/core.jsx:1232
var result = eval(args.script);
Why it matters. evaluates text as code
Fix. remove; use a parser or a dispatch table
MEDIUMHard-coded secrets · secret.generic · CWE-798, CWE-321
ts-bridge/src/grpc/execute-edl.test.ts:15
const token = "execute-edl-test-token-0123456789abcdef";
MEDIUMHard-coded secrets · secret.generic · CWE-798, CWE-321
ts-bridge/src/grpc/server.test.ts:7
const TOKEN = "0123456789abcdef0123456789abcdef";
LOWInventory / provenance · inv.hidden_file · CWE-1104
cep-panel/.debug
.debug
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWFilesystem / path · fs.traversal · CWE-22, CWE-59
ts-bridge/src/grpc/execute-edl.test.ts:16
const protoRoot = fileURLToPath(new URL("../../../proto/definitions/", import.meta.url));
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
docs/observability.md:16
curl http://127.0.0.1:9091/metrics
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
docs/observability.md:17
curl http://127.0.0.1:9091/livez
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
docs/observability.md:18
curl -i http://127.0.0.1:9091/readyz
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
docs/observability.md:19
curl -i http://127.0.0.1:9091/health/premiere-bridge
LOWNetwork egress · net.raw_ip · CWE-200, CWE-319
npm-package/test/distribution.test.cjs:60
return fetch(`http://127.0.0.1:${server.address().port}${new URL(url).pathname}`, options);
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
cep-panel/package.json
ws
Why it matters. 1 dependency range(s) float
Fix. pin exact versions or ship a lockfile
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
cli/package.json
@anthropic-ai/sdk, @modelcontextprotocol/sdk, openai, @types/node, tsx, typescript
Why it matters. 6 dependency range(s) float
Fix. pin exact versions or ship a lockfile
LOWSupply chain · supply.unpinned · CWE-829, CWE-1357
ts-bridge/package.json
@grpc/grpc-js, @grpc/proto-loader, nice-grpc, nice-grpc-common, winston, ws, @types/node, @types/ws
Why it matters. 11 dependency range(s) float
Fix. pin exact versions or ship a lockfile
INFOInventory / provenance · inv.oversize · CWE-1104
cep-panel/src/host/premiere.jsx
cep-panel/src/host/premiere.jsx
Why it matters. 1506398 bytes not read
INFOPrompt injection · prompt.credential_read · CWE-94, CWE-1427
docs/npm-distribution.md:63
components. The Go server does not load `.env` or launch the other services.
Why it matters. asks the agent to read credentials
INFOPrompt injection · prompt.credential_read · CWE-94, CWE-1427
docs/observability.md:13
The address must use a literal loopback IP and a port from 1–65535; `[::1]:9091` also works. Wildcard, public, and hostname bindings are rejected. Use a distinct port for each MCP process. A port conf
Why it matters. asks the agent to read credentials
INFOPrompt injection · prompt.credential_read · CWE-94, CWE-1427
npm-package/README.md:14
**This package installs only the Go MCP server.** Editing Premiere still requires the TypeScript bridge, the CEP panel, and Adobe Premiere Pro on macOS or Windows. Media analysis and intelligence tool
Why it matters. asks the agent to read credentials
INFOSupply chain · prompt.pipe_to_shell · CWE-829, CWE-1357
docs/USER_MANUAL.md:83
| [Rust](https://rustup.rs/) | 1.85+ | Media processing engine | `curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs \| sh` |

Gates applied: no_behavioural_pass.

Audited 2026-10-07 · audit v0.4.1 · source sha 11b5f5a28f5ffull audit observations/trust-audit/mcp-server/ayushozha__adobe-premiere-pro-1.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-10-0711b5f5a28f5fBLOCKD69first audit
06

Questions

What is the Adobe Premiere Pro MCP server?

An open-source bridge between AI assistants and Adobe Premiere Pro, for supported editing workflows. Go, Rust, Python, and TypeScript.

What tools does Adobe Premiere Pro expose?

8 in total: 7 read-only, 1 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is Adobe Premiere Pro safe to connect to an agent?

No — not without reading the findings first. The audit graded it D (69/100) and found 2 critical or high issues in the source. Each one is listed on this page with the file and line it is on.

What credentials does Adobe Premiere Pro need?

It reads ANTHROPIC_API_KEY, BRIDGE_CEP_TOKEN, MCP_CEP_TOKEN, OPENAI_API_KEY and PREMIERE_MCP_TOKEN_FILE from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.

How current is this page?

The grade is for one exact copy of the source (11b5f5a28f5f), read on 2026-10-07. The repository is watched and re-audited when it changes.

Advertisement