YouTube & Shorts Transcript Scraper — SRT, VTT & Viral Hooks

cyber_supply_chain_security_dossier

Read-only

5-Source Parallel Security Dossier: Joins crt.sh SSL Certs + Google deps.dev OpenSSF Scorecard + FIRST.org EPSS + CISA KEV + OSV.dev CVEs in <400ms with a 0-100 Security Posture Score.

Tool call template

This tool declares no required parameters. Add optional parameters from the input schema as needed.

{
  "id": 1,
  "jsonrpc": "2.0",
  "method": "tools/call",
  "params": {
    "arguments": {},
    "name": "cyber_supply_chain_security_dossier"
  }
}

Input Schema

Name	Required	Description	Default
`cve`	No	CVE ID for EPSS + CISA KEV check (e.g. CVE-2024-3094)
`domain`	No	Target domain for crt.sh subdomain/SSL recon (e.g. stripe.com)
`package`	No	Package name for OSV CVE audit (e.g. requests, jinja2)
`ecosystem`	No	Ecosystem (PyPI, npm, Go)	PyPI
`github_repo`	No	GitHub owner/repo for OpenSSF Scorecard (e.g. psf/requests)

Schema Changelog

Changes observed during successful MCP inspections.

First observedNov 10, 2026

TDQS

B3.1/5.0

Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The annotations already declare read-only, open-world, and non-destructive behavior, so the safety profile is covered. The description adds that the tool runs five sources in parallel and produces a 0-100 score, but it omits output shape, partial-result behavior, and what happens when parameters are omitted.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single front-loaded sentence that identifies the composite nature and sources efficiently. The latency and score claims add some marketing flavor, but they do not materially obscure the core purpose.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a multi-source dossier with five optional parameters and no output schema, the description is too thin. It does not explain the returned dossier structure, how the security posture score is formed, or how zero or partial parameter combinations behave.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, and each parameter already has an example and source mapping in the schema. The description lists the five sources but does not add parameter-level meaning beyond what the schema provides, so it meets the baseline only.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific composite operation: joining five named security sources into a dossier with a posture score. It is clear that this is an aggregation tool rather than a single-source lookup, though it does not explicitly contrast itself with the sibling source-specific tools.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description offers no when-to-use guidance, no exclusions, and no mention of alternatives such as the individual crt.sh, EPSS, KEV, OSV, or deps.dev tools. An agent is left to infer whether to use this composite or call the source-specific siblings.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

All YouTube & Shorts Transcript Scraper — SRT, VTT & Viral Hooks tools Inspect

Try in Browser

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources

Need Help?