Atlas / MCP servers / ergut / YouTube Transcript

YouTube TranscriptBLOCK

Name: YouTube Transcript
Author: ergut

mcp/ergut/youtube-transcript-8

MCP server by ergut · mcp server · remote mcp server · sse · Audited 2026-10-09

Zero-setup YouTube transcript extraction for Claude. Works on mobile, desktop, and web - no local installation required.

Verdict

BLOCK

Grade

Trust score

69 /100

Exposed tools

1 1r · 0w · 0d

Transport

—

License

MIT

Stars

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

The first remote Model Context Protocol (MCP) server that enables Claude AI to extract transcripts from YouTube videos. This server offers zero-setup access for users on any platform including mobile devices.

[](https://deploy.workers.cloudflare.com/?url=https://github.com/ergut/youtube-transcript-mcp)

🌟 Features

Zero Local Setup: No installation required - works directly from the cloud
Universal Access: Works on desktop, mobile, and web versions of Claude
Smart Caching: Efficient caching system using Cloudflare KV for fast responses
Multi-language Support: Extract transcripts in different languages
Error Handling: Robust error handling with user-friendly messages
Analytics: Built-in request tracking and usage analytics
URL Flexibility: Handles all YouTube URL formats (youtube.com, youtu.be, m.youtube.com, etc.)

🚀 Quick Start

Option 1: Use Our Hosted Server (Recommended)

The easiest way to get started - just add our public server to your Claude Desktop:

For Claude Desktop Users

Open Claude Desktop Settings
Click on "Claude" in the menu bar → "Settings"
Navigate to "Developer" tab
Click "Edit Config"

Add the MCP Server Configuration

Add this to your claude_desktop_config.json:

{
"mcpServers": {
"youtube-transcript": {
"command": "npx",
"args": [
"mcp-remote",
"https://youtube-transcript-mcp.ergut.workers.dev/sse"
]
}
}
}

Restart Claude Desktop

After saving the config file, restart Claude Desktop to load the server.

Verify Installation

Look for the tools icon (🔧) in the chat interface. You should see the `get_tr

Read from source at commit 85eec69e2a7bOBSERVED · 2026-10-09

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code

claude mcp add remote-mcp-github-oauth -- npx -y [email protected]

claude-desktop

{
  "mcpServers": {
    "remote-mcp-github-oauth": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ]
    }
  }
}

Exposed tools (1)

1 read · 0 write · 0 destructive.

Tool	Risk	Description
`get_transcript`	read	Extract transcript from YouTube video URL

Trust audit

BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	FAIL
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: none-observed
Network: declared (5 observation(s))
Shell: declared (2 observation(s))
Dependencies: not all pinned
Secrets in source: none-found

Findings (10)

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

worker-configuration.d.ts:2213

exec(input?: (string | URLPatternInit), baseURL?: string): URLPatternResult | null;

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

HIGHCode injection · code.eval_exec · CWE-78, CWE-94, CWE-95

worker-configuration.d.ts:4648

exec(query: string): Promise<D1ExecResult>;

Why it matters. evaluates text as code

Fix. remove; use a parser or a dispatch table

LOWInventory / provenance · inv.hidden_file · CWE-1104

.dev.vars.example

.dev.vars.example

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose