io.github.dewtech-technologies/tubemind-secure-mcp

io.github.dewtech-technologies/tubemind-secure-mcp

Secure MCP server for YouTube intelligence — 18 tools, OAuth2, OWASP Top 10 controls.

Connect this server

Add this to your MCP client config — claude_desktop_config.json (Claude Desktop) or .cursor/mcp.json (Cursor).Suits: Claude Desktop · Cursor.

{
  "mcpServers": {
    "tubemind-secure-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "tubemind-secure-mcp@0.1.3"
      ],
      "env": {
        "YOUTUBE_CLIENT_ID": "<your YOUTUBE_CLIENT_ID>",
        "YOUTUBE_CLIENT_SECRET": "<your YOUTUBE_CLIENT_SECRET>",
        "YOUTUBE_REDIRECT_URI": "http://localhost:4000/oauth/callback",
        "TOKEN_ENCRYPTION_KEY": "<your TOKEN_ENCRYPTION_KEY>",
        "RATE_LIMIT_PER_MINUTE": "60",
        "REQUEST_TIMEOUT_MS": "10000",
        "AUDIT_LOG_PATH": "./logs/audit.log",
        "NODE_ENV": "production"
      }
    }
  }
}
Environment variables
  • YOUTUBE_CLIENT_IDrequiredGoogle OAuth2 Client ID for YouTube Data API v3 + Analytics API
  • YOUTUBE_CLIENT_SECRETrequiredsecretGoogle OAuth2 Client Secret
  • YOUTUBE_REDIRECT_URIOAuth2 redirect URI (must match Google Cloud Console)
  • TOKEN_ENCRYPTION_KEYrequiredsecret64-char hex key for AES-256-GCM token encryption at rest. Generate with: openssl rand -hex 32
  • RATE_LIMIT_PER_MINUTEMax tool invocations per minute
  • REQUEST_TIMEOUT_MSHTTP request timeout (ms)
  • AUDIT_LOG_PATHPath to the audit log file
  • NODE_ENVproduction | development

A starting point — check the repository for exact arguments and setup. Restart your client after editing the config.

Category
Developer Tools
Version
0.1.3
Registry
active
Published
5/7/2026
Browse all Developer Tools →

Add the badge to your site

Show visitors that io.github.dewtech-technologies/tubemind-secure-mcp is listed here — it’s also the link we check for a free listing.

io.github.dewtech-technologies/tubemind-secure-mcp — listed on Serverdex

HTML — for your website

<a href="https://serverdex.io/server/io-github-dewtech-technologies-tubemind-secure-mcp?utm_source=badge"><img src="https://serverdex.io/brand/badge.svg" alt="io.github.dewtech-technologies/tubemind-secure-mcp — listed on Serverdex" width="123" height="40" loading="lazy"></a>

Recommended. A dofollow link from your own domain is the one that counts for search engines, and it's the link we check for a free listing.

Markdown — for your README

[![io.github.dewtech-technologies/tubemind-secure-mcp — listed on Serverdex](https://serverdex.io/brand/badge.svg)](https://serverdex.io/server/io-github-dewtech-technologies-tubemind-secure-mcp?utm_source=badge)

Nice for visibility, but GitHub marks README links nofollow, so it doesn't pass authority. Use the HTML badge on your site as well.