Atlas / MCP servers / jkawamoto / Youtube Transcript

Youtube TranscriptCAUTION

mcp/jkawamoto/youtube-transcript-1

MCP server retrieving transcripts of YouTube videos

Verdict
CAUTION
Grade
B
Trust score
89 /100
Exposed tools
2 2r · 0w · 0d
Transport
stdio
License
MIT
Stars
486
01

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://github.com/astral-sh/uv) [](https://github.com/jkawamoto/mcp-youtube-transcript/actions/workflows/python-app.yaml) [](https://github.com/pre-commit/pre-commit) [](https://github.com/jkawamoto/mcp-youtube-transcript/blob/main/LICENSE) [](https://hub.docker.com/mcp/server/youtube_transcript)

This MCP server retrieves transcripts for given YouTube video URLs.

Tools

This MCP server provides the following tools:

get_transcript

Fetches the transcript of a specified YouTube video.

Parameters

  • url (string): The full URL of the YouTube video. This field is required.
  • lang (string, optional): The desired language for the transcript. Defaults to en if not specified.
  • next_cursor (string, optional): Cursor to retrieve the next page of the transcript.

get_timed_transcript

Fetches the transcript of a specified YouTube video with timestamps.

Parameters

  • url (string): The full URL of the YouTube video. This field is required.
  • lang (string, optional): The desired language for the transcript. Defaults to en if not specified.
  • next_cursor (string, optional): Cursor to retrieve the next page of the transcript.

get_video_info

Fetches the metadata of a specified YouTube video.

Parameters

  • url (string): The full URL of the YouTube video. This field is required.

get_available_languages

Retrieves the available languages for the video.

Parameters

  • **
Read from source at commit 56dfa5618dfcOBSERVED · 2026-09-30
02

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude-code
claude mcp add mcp-youtube-transcript -- uvx mcp-youtube-transcript
claude-desktop
{
  "mcpServers": {
    "mcp-youtube-transcript": {
      "command": "uvx",
      "args": [
        "mcp-youtube-transcript"
      ]
    }
  }
}
03

Exposed tools (2)

2 read · 0 write · 0 destructive.

ToolRiskDescription
get_available_languagesreadRetrieves the available languages for the video.
get_video_inforeadRetrieves the video information.
04

Trust audit

CAUTIONgrade B · trust 89/100 Install with care. The audit found things worth knowing before you trust its output.

LayerWhat it checksResult
L0Provenance & inventoryPASS
L1Static analysis of the codeFAIL
L2Instruction surface (what it tells the agent)PASS
L3Class-specific surfacePASS
L4Behavioural (sandbox)SKIPPED

What the source does

Filesystem
none-observed
Network
declared (1 observation(s))
Shell
none-observed
Dependencies
pinned
Secrets in source
none-found

Findings (3)

HIGHNetwork egress · net.tls_off · CWE-200, CWE-319
src/mcp_youtube_transcript/__init__.py:73
http_client.verify = False
Why it matters. certificate verification is disabled
Fix. leave verification on
LOWInventory / provenance · inv.hidden_file · CWE-1104
.mcpbignore
.mcpbignore
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose
LOWInventory / provenance · inv.hidden_file · CWE-1104
.pre-commit-config.yaml
.pre-commit-config.yaml
Why it matters. hidden member outside the usual dotfiles
Fix. review its purpose

Gates applied: no_behavioural_pass.

Audited 2026-09-30 · audit v0.4.1 · source sha 56dfa5618dfcfull audit observations/trust-audit/mcp-server/jkawamoto__youtube-transcript-1.json · Report an issue / request a re-scan
05

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

DateSourceVerdictGradeScoreChange
2026-09-3056dfa5618dfcCAUTIONB89first audit
06

Questions

What is the Youtube Transcript MCP server?

MCP server retrieving transcripts of YouTube videos

What tools does Youtube Transcript expose?

2 in total: 2 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.

Is Youtube Transcript safe to connect to an agent?

With care. The audit graded it B (89/100) and found 3 things worth knowing before you trust this server, listed below with the exact line each was found on.

What credentials does Youtube Transcript need?

No credential environment variables were found in its source, so it appears to need none.

How does Youtube Transcript run?

It speaks stdio, so it runs as a local process your client starts. It is published on PyPI as mcp-youtube-transcript.

How current is this page?

The grade is for one exact copy of the source (56dfa5618dfc), read on 2026-09-30. The repository is watched and re-audited when it changes.

Advertisement