Which integrations are available for this server?

Provides 18 tools for YouTube research, analytics, benchmarking and content strategy using the YouTube Data API v3 and YouTube Analytics API.

How do I use tubemind-secure-mcp?

1. Click on "Deploy Server". 2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state. 3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@tubemind-secure-mcp show me my channel's analytics for last week" That's it! The server will respond to your query, and you can continue using it as needed. Here is a step-by-step guide with screenshots.

tubemind-secure-mcp

by dewtech-technologies

Overview Schema Source Related Servers Discussions Admin

TypeScript

Remote

🎯 Why tubemind-secure-mcp?

Turn Claude into a YouTube growth strategist — without ever handing it your raw OAuth tokens.

⚡ Plug-and-play with Claude Desktop — drop one config block, get 18 production tools.
🔐 Secure by default — tokens encrypted at rest (AES-256-GCM), SSRF guard, rate limiting, audit log, Zod-validated inputs. OWASP Top 10 mapped end-to-end.
📊 Real data, not scraping — official YouTube Data API v3 + YouTube Analytics API. Brand Accounts supported.
🧠 Beyond raw API — built-in heuristics for CTR, retention, keyword difficulty, content gaps, hook angles and N-day content calendars.
🪶 Tiny footprint — 3 runtime deps (@modelcontextprotocol/sdk, googleapis, zod). Node ≥ 20.

Related MCP server: MCP YouTube Intelligence

✨ Overview

tubemind-secure-mcp is a Model Context Protocol (MCP) server that gives Claude Desktop (and any MCP client) 18 production-grade tools for working with YouTube:

🔍 Search & SEO — trending topics, keyword stats, tag suggestions
📺 Video & Channel — list videos, read/update metadata, get tags
📊 Analytics — channel analytics (views, watch time, retention) via YouTube Analytics API
🏆 Benchmark — compare your channel against competitors
🧠 Heuristics — keyword difficulty, title patterns, content gaps, hook angles, CTR potential, retention signals, content calendar
🕵️ Competitor research — competitor video discovery

Built secure by design: OAuth2 (Brand Account ready), AES-256-GCM token encryption at rest, SSRF guard, rate limiting, audit logging, Zod input validation — mapped to OWASP Top 10.

📦 Installation

# Global install
npm install -g tubemind-secure-mcp

# Or run on demand
npx tubemind-secure-mcp

Requires Node.js ≥ 20.

🔐 OAuth Setup (one-time)

YouTube APIs need an OAuth2 token. The package ships with an auth server that walks you through it.

1) Create OAuth credentials in Google Cloud

Go to Google Cloud Console → APIs & Services → Credentials
Enable YouTube Data API v3 and YouTube Analytics API
Create OAuth 2.0 Client ID → Web application
Authorized redirect URI: http://localhost:4000/oauth/callback
Copy the Client ID and Client Secret

2) Configure environment

Copy .env.example to .env and fill in:

YOUTUBE_CLIENT_ID=your-client-id.apps.googleusercontent.com
YOUTUBE_CLIENT_SECRET=your-client-secret
YOUTUBE_REDIRECT_URI=http://localhost:4000/oauth/callback

# Generate with: openssl rand -hex 32
TOKEN_ENCRYPTION_KEY=your-64-char-hex-key

RATE_LIMIT_PER_MINUTE=60
REQUEST_TIMEOUT_MS=10000
AUDIT_LOG_PATH=./logs/audit.log
NODE_ENV=production

3) Run the OAuth flow

pnpm auth
# or: npx tsx --env-file=.env src/auth-server.ts

Open http://localhost:4000, sign in with the Google account that owns the channel (Brand Accounts supported), authorize, and the encrypted token is saved to ./tokens/youtube.token.json.

🤖 Use with Claude Desktop

Add to claude_desktop_config.json:

macOS: ~/Library/Application Support/Claude/claude_desktop_config.json Windows: %APPDATA%\Claude\claude_desktop_config.json

{
  "mcpServers": {
    "tubemind": {
      "command": "npx",
      "args": ["-y", "tubemind-secure-mcp"],
      "env": {
        "YOUTUBE_CLIENT_ID": "your-client-id.apps.googleusercontent.com",
        "YOUTUBE_CLIENT_SECRET": "your-client-secret",
        "YOUTUBE_REDIRECT_URI": "http://localhost:4000/oauth/callback",
        "TOKEN_ENCRYPTION_KEY": "your-64-char-hex-key",
        "RATE_LIMIT_PER_MINUTE": "60",
        "REQUEST_TIMEOUT_MS": "10000",
        "AUDIT_LOG_PATH": "./logs/audit.log",
        "NODE_ENV": "production"
      }
    }
  }
}

Restart Claude Desktop. The 18 tools will appear automatically.

🛠️ Tools

Category	Tool	Description
Search	`search_trending_topics`	Discover trending topics by region/category
	`get_keyword_stats`	Search volume signals for keywords
	`suggest_tags`	Tag recommendations from a seed
Video	`get_video_tags`	Read tags from a video
	`update_video_metadata`	Update title/description/tags (write scope)
	`list_channel_videos`	Paginate channel uploads
Analytics	`get_channel_analytics`	Views, watch time, retention (Analytics API)
	`score_best_publish_window`	Best day/hour heatmap to publish
Benchmark	`benchmark_channel`	Compare channel vs. peers
Heuristics	`estimate_keyword_difficulty`	Difficulty score 0–100
	`analyze_title_patterns`	Common patterns in top videos
	`detect_content_gaps`	Topics competitors cover that you don't
Heuristics+	`estimate_ctr_potential`	CTR estimate from title/thumbnail signals
	`suggest_hook_angles`	Hook angles for a topic
	`find_trending_keywords`	Rising-momentum keywords
	`analyze_retention_signals`	Retention-shaping factors
	`generate_content_calendar`	N-day content plan
Competitor	`get_competitor_videos`	Top videos from a competitor channel

All inputs are validated with Zod. All errors return safe messages (stack traces only when NODE_ENV=development).

🔒 Security

tubemind-secure-mcp is built secure-by-default. See SECURITY.md for the full posture mapped to OWASP Top 10.

Control	Implementation
A01 — Broken Access Control	OAuth2 scopes least-privilege, audit log per call
A02 — Cryptographic Failures	AES-256-GCM at rest for tokens, secrets via env only
A03 — Injection	Zod schemas on every tool input
A04 — Insecure Design	Rate limit, request timeout, SSRF guard (host whitelist)
A05 — Misconfiguration	`.env.example` template, no defaults that leak
A07 — AuthN Failures	OAuth2 PKCE-style flow, encrypted token storage
A08 — Software/Data Integrity	Pinned deps, `pnpm audit` in CI, dependabot
A09 — Logging Failures	Audit log of every tool call (timestamp, tool, success)
A10 — SSRF	Outbound calls restricted to `googleapis.com` family

Found a vulnerability? Email wleandro.oliveira@gmail.com — 72h response.

🧰 Local development

pnpm install
pnpm dev          # tsx watch on src/index.ts
pnpm build        # tsc → dist/
pnpm typecheck
pnpm test
pnpm audit:security

📜 License

MIT © Wanderson Leandro de Oliveira / Dewtech

Available Tools

18 tools

analyze_retention_signalsA

Analisa proxies de retenção (engagement rate, amplification, duração, capítulos) dos top vídeos do nicho. Identifica padrões estruturais dos vídeos com alta retenção e gera recomendações de roteiro.

Inputs: niche (required), minViews, regionCode, videoCount.

analyze_title_patternsA

Analisa os padrões estruturais dos títulos dos vídeos mais bem-sucedidos em um nicho. Identifica fórmulas recorrentes (número, pergunta, como-fazer, contraste, urgência) e retorna os templates que dominam o nicho.

Inputs: niche (required), regionCode, videoCount.

benchmark_channelA

Compara seu canal autenticado com 1 a 3 canais concorrentes. Retorna tabela comparativa com inscritos, views totais, views médias por vídeo, engagement rate e views/inscritos. Mostra onde você está à frente e onde está atrás.

Inputs: competitorChannelIds (required).

detect_content_gapsA

Identifica subtópicos do nicho que estão sendo buscados mas pouco explorados pelos criadores. Classifica cada subtópico como Gap Real (entre agora), Oportunidade ou Saturado. Equivalente ao "Content Gaps" do VidIQ.

Inputs: niche (required), regionCode, yourChannelId.

estimate_ctr_potentialA

Estima o CTR potencial de até 5 títulos candidatos usando heurísticas de copywriting. Pontua cada título de 0–100 e classifica como Alto, Médio ou Baixo potencial. Lista pontos positivos e melhorias por título.

Inputs: niche (required), titles (required), regionCode.

estimate_keyword_difficultyA

Calcula um score de dificuldade (0–100) para ranquear um vídeo em uma keyword no YouTube. Analisa views/dia, tamanho dos canais concorrentes e idade dos vídeos ranqueados. Substitui o "Competition Score" do VidIQ sem dados proprietários.

Inputs: keyword (required), maxVideos, regionCode.

find_trending_keywordsA

Detecta keywords emergentes no nicho analisando padrões de vídeos recentes, views e tamanho dos canais. Classifica cada keyword como Emergente, Crescendo ou Estável.

Inputs: niche (required), regionCode, maxKeywords.

generate_content_calendarA

Gera um calendário de conteúdo de 14 a 30 dias para o nicho. Identifica gaps e keywords emergentes, sugere títulos usando padrões dos top vídeos e organiza por semana com dias e horários ideais.

Inputs: niche (required), periodDays, regionCode, postsPerWeek, +1 more.

get_channel_analyticsB

Retorna métricas reais do canal autenticado via YouTube Analytics API: views, likes, comentários, inscritos ganhos, minutos assistidos e duração média. Agrupa por dia no período informado.

Inputs: endDate (required), startDate (required), metrics.

get_competitor_videosA

Lista os vídeos de um canal concorrente com título, views, likes, duração e data. Útil para analisar estratégia de conteúdo de competidores. Requer o Channel ID (começa com UC).

Inputs: channelId (required), order, maxResults.

get_keyword_statsA

Analisa uma keyword no YouTube: retorna os top vídeos ranqueados, estimativa de dificuldade baseada em tamanho dos canais e idade dos vídeos, e sugestões de ângulos com menor concorrência.

Inputs: keyword (required), maxVideos, regionCode.

get_video_tagsA

Extrai as tags de qualquer vídeo público do YouTube pelo ID do vídeo.

Inputs: videoId (required).

list_channel_videosA

Lista os vídeos de um canal YouTube com título, views, likes e data de publicação. Use channelId para Brand Accounts (ex: canal @dewtech = UC_x33Gz4LvnOZuC_4v7Qucg). Sem channelId usa o canal da conta autenticada.

Inputs: order, channelId, maxResults.

score_best_publish_windowA

Analisa os vídeos do canal autenticado e retorna o melhor dia e horário para publicar novos vídeos, baseado em views/dia dos vídeos já publicados. Agrupa por dia da semana + faixa horária e retorna top 3 melhores e 2 piores slots.

Inputs: videoCount.

search_trending_topicsA

Busca vídeos em alta no YouTube para um tema ou keyword. Retorna título, canal, views e link de cada vídeo encontrado.

Inputs: query (required), order, maxResults, regionCode.

suggest_hook_anglesA

Gera 5 ângulos de gancho (hook) para a abertura de um vídeo. Usa padrões detectados nos vídeos mais populares do tópico para priorizar o gancho mais eficaz no nicho.

Inputs: niche (required), videoTopic (required), regionCode, targetAudience.

suggest_tagsA

Sugere tags estratégicas para um vídeo analisando os top vídeos que ranqueiam para uma keyword. Extrai padrões de tags e agrupa por relevância.

Inputs: keyword (required), regionCode, videoCount.

update_video_metadataA

Aplica título, descrição e tags otimizados em um vídeo já publicado no canal autenticado.

Inputs: tags (required), title (required), videoId (required), description (required), +1 more.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

Deploy Server

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

TDQS

A3.7/5.0

Scored 2026-08-11 08:15 across 18 tools

Disambiguation3/5

Most tools have distinct purposes, but list_channel_videos and get_competitor_videos are nearly identical (both list videos for a channel), and the trend/keyword research tools (search_trending_topics, find_trending_keywords, get_keyword_stats) overlap in functionality, which could cause misselection.

Naming Consistency5/5

All tool names follow a consistent verb_noun snake_case pattern (e.g., get_keyword_stats, analyze_title_patterns, generate_content_calendar), making them predictable and easy to distinguish.

Tool Count3/5

At 18 tools, the server is on the heavier side for a niche tool, but each tool serves a specific function within YouTube content optimization, so the count is still understandable.

Completeness4/5

The server covers most key aspects of YouTube SEO research, optimization, and publishing, but lacks video-level analytics and direct video retrieval, which are minor gaps given the tool's focus.

Maintenance

ActivityNo data

ResponsivenessOutdated data

Resources

Related MCP Connectors

YouTube Transcript, Comments & Video Data API MCP Server
io.youtubeapi
Real-time YouTube transcripts, comments, channels & video search MCP. Local npx or hosted OAuth.
Entertainment & Media Social Media Search
1
https://mcp.youtubeapi.io/v1/mcp
ScriptHaul API
com.scripthaul
YouTube discovery, transcripts, library search, and monitors with API keys or OAuth.
Entertainment & Media Search
1
https://api.scripthaul.com/mcp
Mamitsu MCPA
com.usemamitsu
OAuth-enabled MCP server that extracts structured data from public social media posts.
Social Media Web Scraping
11
https://usemamitsu.com/mcp
YoutubeA
io.github.pipeworx-io
YouTube MCP — wraps the YouTube Data API v3 (BYO API key)
Entertainment & Media Search App Automation
502
https://gateway.pipeworx.io/youtube/mcp

Related MCP Servers

yt-fetch
Entertainment & Media Search
smith-nathanh
F
license
Not graded
quality
D
maintenance
An MCP server that enables interaction with the YouTube Data API, allowing users to search videos, get video and channel details, analyze trends, and fetch video transcripts.
Updated a year ago (2025-07-27 15:40 UTC)
-
MCP YouTube Intelligence
Multimedia Processing Text Summarization Search
JangHyuckYun
A
license
A
quality
C
maintenance
An MCP server for intelligent YouTube video analysis that provides token-optimized summaries, sentiment analysis, and entity extraction from transcripts. It enables AI assistants to perform video reporting, channel monitoring, and comprehensive YouTube searches through structured data tools.
Updated 11 days ago (2026-11-04 23:27 UTC)
10
53
Apache 2.0
youtube-mcp
Entertainment & Media Social Media Content Management Systems
kpfitzgerald
A
license
A
quality
D
maintenance
A FastMCP server providing 25 tools for interacting with the YouTube Data API v3 and YouTube Analytics API. It enables comprehensive management of videos, channels, playlists, and comments, alongside retrieval of performance analytics.
Updated 4 months ago (2026-07-06 09:13 UTC)
25
MIT
YouTube MCP Server
Entertainment & Media Social Media Content Management Systems
pauling-ai
A
license
A
quality
B
maintenance
A comprehensive MCP server integrating YouTube Data, Analytics, and Reporting APIs, providing 40 tools for channel management, analytics, video publishing, transcripts, SEO, and comments.
Updated 23 days ago (2026-10-23 18:58 UTC)
40
31
MIT