Secure MCP server for YouTube intelligence — 18 tools, OAuth2, OWASP Top 10 controls.

stdiocommunityservice

Package Details

Transportstdio

Environment Variables

YOUTUBE_CLIENT_ID(str)
Required

Google OAuth2 Client ID for YouTube Data API v3 + Analytics API

YOUTUBE_CLIENT_SECRET(str)
RequiredSecret

Google OAuth2 Client Secret

YOUTUBE_REDIRECT_URI(str)
Default:http://localhost:4000/oauth/callback

OAuth2 redirect URI (must match Google Cloud Console)

TOKEN_ENCRYPTION_KEY(str)
RequiredSecret

64-char hex key for AES-256-GCM token encryption at rest. Generate with: openssl rand -hex 32

RATE_LIMIT_PER_MINUTE(str)
Default:60

Max tool invocations per minute

REQUEST_TIMEOUT_MS(str)
Default:10000

HTTP request timeout (ms)

AUDIT_LOG_PATH(str)
Default:./logs/audit.log

Path to the audit log file

NODE_ENV(str)
Default:production

production | development