globalion-video-renderBLOCK
MCP server that renders Hyperplexed-style motion-graphics MP4s from a script. Free msedge-tts voice, Remotion animations, no watermark. Sign in with Google, get an API key, paste the URL into Claude Desktop.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Built by **Shreyas** · Shipped by **Globalion**
An MCP server that turns a script into a Hyperplexed-style motion-graphics MP4. Plug the URL into Claude Desktop, Cursor, or any MCP-compatible agent and it gains a render_video tool.
- No watermark. Ever.
- Free voice (Microsoft Edge Neural TTS). Optional ElevenLabs upgrade via
env var.
- Motion graphics via Remotion — same engine
Fireship-style channels use.
- MCP over streamable-HTTP — one URL, no local installation for the user.
Hosted for free at [video-render.regiq.in](https://video-render.regiq.in) (20 renders/day per Google account) or self-host with the Docker Compose below.
Use it (hosted)
- Visit https://video-render.regiq.in and sign in with Google.
- Copy your API key from the dashboard.
- Add to Claude Desktop's
claude_desktop_config.json:
{
"mcpServers": {
"video-render": {
"url": "https://video-render.regiq.in/api/mcp",
"headers": {
"Authorization": "Bearer YOUR_KEY_HERE"
}
}
}
}- Restart Claude Desktop. Ask it: *"Make a 30-second promo video for X,
Fireship style, then hand me the MP4."*
The agent will call plan_video_scenes, show you the plan, and — on your confirmation — call render_video and return a downloadable MP4 URL.
Tools
Both tools take the same ScenePlan shape:
{
title: string;
targetDurationSec: number; // 5..180
script: string; // Clau7a87c15364b1OBSERVED · 2026-10-11Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add video-render-mcp --env ELEVENLABS_API_KEY=${ELEVENLABS_API_KEY} --env GOOGLE_CLIENT_SECRET=${GOOGLE_CLIENT_SECRET} --env STRIPE_SECRET_KEY=${STRIPE_SECRET_KEY} --env STRIPE_WEBHOOK_SECRET=${STRIPE_WEBHOOK_SECRET} -- npx -y [email protected]{
"mcpServers": {
"video-render-mcp": {
"command": "npx",
"args": [
"-y",
"[email protected]"
],
"env": {
"ELEVENLABS_API_KEY": "${ELEVENLABS_API_KEY}",
"GOOGLE_CLIENT_SECRET": "${GOOGLE_CLIENT_SECRET}",
"STRIPE_SECRET_KEY": "${STRIPE_SECRET_KEY}",
"STRIPE_WEBHOOK_SECRET": "${STRIPE_WEBHOOK_SECRET}"
}
}
}
}Exposed tools (2)
2 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
plan_video_scenes | read | Draft a ScenePlan for a motion-graphics video. Fill title, targetDurationSec (5-180s), a script sized to ~150 wpm × duration, 1-12 scenes, voice, and accent. Returns the plan verbatim — call render_video with it when the user approves.\n\n |
render_video | read | Enqueue an async render of an MP4 from a ScenePlan. Returns immediately with { jobId, status: |
Trust audit
BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- UNDECLARED (1 observation(s))
- Network
- declared (3 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- found
Findings (5)
DATABASE_URL="postgresql://admin:admin@db:5432/video_render_mcp"
DATABASE_URL: postgresql://admin:admin@db:5432/video_render_mcp
&& rm -rf /var/lib/apt/lists/*
@auth/prisma-adapter, @prisma/client, @remotion/bundler, @remotion/cli, @remotion/renderer, msedge-tts, next-auth, remotion
public/demo.mp4
Gates applied: no_behavioural_pass.
7a87c15364b1full audit observations/trust-audit/mcp-server/globalion__video-render-mcp.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-11 | 7a87c15364b1 | BLOCK | D | 69 | first audit |
Questions
What is the globalion-video-render MCP server?
MCP server that renders Hyperplexed-style motion-graphics MP4s from a script. Free msedge-tts voice, Remotion animations, no watermark. Sign in with Google, get an API key, paste the URL into Claude Desktop.
What tools does globalion-video-render expose?
2 in total: 2 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is globalion-video-render safe to connect to an agent?
No — not without reading the findings first. The audit graded it D (69/100) and found 2 critical or high issues in the source. Each one is listed on this page with the file and line it is on.
What credentials does globalion-video-render need?
It reads ELEVENLABS_API_KEY, GOOGLE_CLIENT_SECRET, STRIPE_SECRET_KEY and STRIPE_WEBHOOK_SECRET from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does globalion-video-render run?
It speaks streamable-http, so it runs as a service you connect to over the network. It is published on npm as video-render-mcp at 0.1.0.
How current is this page?
The grade is for one exact copy of the source (7a87c15364b1), read on 2026-10-11. The repository is watched and re-audited when it changes.