Youtube Mcp

io.github.miller-joePublished by GitHub account miller-joev0.1.2Updated Oct 24, 2026

MCP server for YouTube creator-ops with a ComfyUI bridge for AI thumbnail generation.

Overview

AI-generated overview

An OAuth-authenticated YouTube creator-ops MCP server that lets an assistant edit videos, captions, playlists and comments, read channel analytics, and set AI-d

What you can do
List and inspect the channel's videos and Shorts, and update titles, descriptions, tags, category or privacy, or delete a video with a title-match guard. List, upload and delete caption tracks. Create playlists and add videos to them. Read comment threads, reply to comments, and hold, approve or reject them. Query channel and Shorts analytics over a date range. When a ComfyUI URL is configured, generate a thumbnail and set it on a video in one call.
When to use it
For channel owners who want an assistant to do real write operations on their own YouTube channel — metadata edits, comment moderation, playlist upkeep, caption uploads and analytics lookups — rather than read-only public data. Also useful when AI-generated thumbnails should be pushed to YouTube without leaving the chat.
Requirements
Runs locally via npx or Docker (Node 20+). Needs a Google account with a YouTube channel, a Google Cloud project with the YouTube Data API v3 and YouTube Analytics API enabled, and a Desktop-app OAuth client. Credentials come from YOUTUBE_CLIENT_SECRET_FILE or YOUTUBE_CLIENT_ID plus YOUTUBE_CLIENT_SECRET; a one-time interactive auth flow stores a refresh token at YOUTUBE_TOKEN_FILE. Optional COMFYUI_URL enables the thumbnail bridge.
Before you install
The server holds OAuth refresh tokens that grant write access to the channel, stored on disk at the token file path; protect that file. Tools can permanently delete videos and caption tracks, change metadata and privacy, post replies and moderate comments — all real, visible actions on a live channel. The requested scopes include youtube.upload and youtube.force-ssl. API quota is limited (10,000 units/day), and write operations cost more. The thumbnail bridge sends prompts to the configured Comf

Installation

In SourceWeft

  1. Open Youtube Mcp in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

youtube-mcp

OAuth-authenticated YouTube MCP for channel owners. Edit video metadata, reply to and moderate comments, manage playlists, query channel analytics, and generate or set AI thumbnails via a ComfyUI bridge. Goes beyond the read-only Data API v3 wrappers that dominate this space.

[youtube-mcp MCP server]

[GitHub Sponsors] [Ko-fi]

The pitch

Most existing YouTube MCPs use an API key against Data API v3. Search videos, fetch public metadata, read-only. This one uses OAuth 2.0 (Authorization Code + PKCE) so it can actually write to your channel: update video titles, descriptions and tags, reply to comments, moderate spam, manage playlists. It also hits the separate YouTube Analytics API for channel stats, and generates a thumbnail via ComfyUI and pushes it to YouTube in a single MCP call.

Claude, use generate_and_set_thumbnail on video abc123:  prompt: "cyberpunk hacker at keyboard, neon blue and pink, high contrast"

ComfyUI renders 1280×720, youtube-mcp fetches the bytes, and POSTs to thumbnails.set. Done.

Install

bash
# npx, no installnpx @miller-joe/youtube-mcp --help
# Dockerdocker run -p 9120:9120 \  -e YOUTUBE_CLIENT_ID=... \  -e YOUTUBE_CLIENT_SECRET=... \  -e YOUTUBE_TOKEN_FILE=/token/token.json \  -v $PWD/token:/token \  ghcr.io/miller-joe/youtube-mcp:latest

Setup: Google Cloud one-time (~10 min)

  1. Google account plus YouTube channel. Use a personal account, not a workspace one you might lose.

  2. Google Cloud project at https://console.cloud.google.com. Call it whatever you want (e.g. youtube-mcp).

  3. Enable APIs:

    • YouTube Data API v3
    • YouTube Analytics API
  4. OAuth consent screen: External, App name, support email. In Scopes, add:

    • youtube.upload
    • youtube.force-ssl
    • yt-analytics.readonly
  5. Stay in Testing mode. Add yourself as a test user (required). As the project owner, your refresh token won't expire.

  6. Create OAuth Client ID: Application type = Desktop app. Download the JSON.

  7. Run the interactive auth flow:

    bash
    npx @miller-joe/youtube-mcp --auth --client-secret-file ./client_secret.json

    A browser opens, you log in to the Google account tied to your YouTube channel, and grant the requested scopes. On success, a refresh token is saved to ~/.config/youtube-mcp/token.json.

  8. Start the server:

    bash
    npx @miller-joe/youtube-mcp --client-secret-file ./client_secret.json

    Or provide the client credentials via env: YOUTUBE_CLIENT_SECRET_FILE, or YOUTUBE_CLIENT_ID + YOUTUBE_CLIENT_SECRET.

Connect an MCP client

bash
claude mcp add --transport http youtube http://localhost:9120/mcp

Or point your MCP gateway at the Streamable HTTP endpoint.

Configuration

CLI flagEnv varDefaultNotes
--client-secret-fileYOUTUBE_CLIENT_SECRET_FILE(none)Path to Google OAuth JSON
--client-idYOUTUBE_CLIENT_ID(none)Alternative to the secret file
--client-secretYOUTUBE_CLIENT_SECRET(none)Alternative to the secret file
--token-fileYOUTUBE_TOKEN_FILE~/.config/youtube-mcp/token.jsonRefresh token storage
--hostMCP_HOST0.0.0.0Bind host (HTTP mode only)
--portMCP_PORT9120Bind port (HTTP mode only)
--stdioMCP_TRANSPORT=stdio(unset)Speak MCP over stdio instead of HTTP. Use when launched as a subprocess by a stdio-first MCP client (Claude Desktop, mcp-inspector).
--comfyui-urlCOMFYUI_URL(unset, bridge disabled)ComfyUI HTTP URL for bridge tools
(no flag)COMFYUI_DEFAULT_CKPTsd_xl_base_1.0.safetensorsDefault checkpoint for bridge tool

Transports

The server speaks streamable HTTP by default (great for Claude Code, MetaMCP, raw fetch). Pass --stdio (or set MCP_TRANSPORT=stdio) to switch into stdio mode, which is what stdio-first clients like Claude Desktop and the MCP Inspector expect:

json
// claude_desktop_config.json{  "mcpServers": {    "youtube": {      "command": "npx",      "args": ["-y", "@miller-joe/youtube-mcp", "--stdio"],      "env": {        "YOUTUBE_CLIENT_SECRET_FILE": "/path/to/client_secret.json",        "YOUTUBE_TOKEN_FILE": "/path/to/token.json"      }    }  }}

Stdio mode skips the OAuth-token preflight check — the server boots even without a stored token and surfaces auth errors at tool-call time. Run youtube-mcp --auth --client-secret-file <path> once in HTTP mode to seed the refresh token before pointing Claude Desktop at it.

Tools

Videos

  • list_my_videos: paginated list of the authenticated channel's uploads.
  • get_video: full detail for one video.
  • update_video_metadata: title, description, tags, category, privacy.
  • delete_video: permanently delete a video. Requires confirm_video_title to match the current title exactly, as a guard against deleting the wrong video.

Captions

  • list_captions: list caption tracks on a video (language, name, status, draft flag).
  • upload_caption: upload an SRT or WebVTT caption track to a video.
  • delete_caption: delete a caption track.

Shorts

  • list_my_shorts: find Shorts in recent uploads (filters by duration ≤60s).
  • get_shorts_analytics: YouTube Analytics query restricted to Shorts (creatorContentType==SHORTS).

Playlists

  • create_playlist: create a playlist (default private).
  • add_to_playlist: add a video to an existing playlist.

Comments

  • list_comments: top-level comment threads on a video.
  • reply_to_comment: reply to a top-level comment.
  • moderate_comment: hold, approve, or reject a comment.

Analytics

  • query_channel_analytics: date-ranged metrics with optional dimensions and filters.

Bridge (when COMFYUI_URL is configured)

  • generate_and_set_thumbnail: generate a thumbnail via ComfyUI and set it on a video in one call.

Quota notes

YouTube Data API free tier = 10,000 units/day. Key operation costs:

  • videos.list, commentThreads.list: 1 unit each.
  • videos.update, comments.insert, thumbnails.set: 50 units each.
  • videos.insert (upload): 1,600 units, so about 6 uploads per day on the free tier.

Most creator-ops workflows stay well under the free cap.

Architecture

┌────────────────┐     ┌──────────────────┐     ┌─────────────────┐│  MCP client    │────▶│  youtube-mcp     │────▶│  YouTube APIs   ││  (Claude etc.) │◀────│  (this server)   │◀────│  (Data/Analytics)│└────────────────┘     └────────┬─────────┘     └─────────────────┘                                │                                │ (bridge tools only)                                ▼                       ┌──────────────────┐                       │  ComfyUI         │                       │  (txt2img)       │                       └──────────────────┘

OAuth refresh tokens are cached locally and refreshed just-in-time before expiry. The bridge tool downloads image bytes from ComfyUI internally, so ComfyUI does not need to be publicly reachable.

Development

bash
git clone https://github.com/miller-joe/youtube-mcpcd youtube-mcpnpm installnpm run devnpm run buildnpm test

Requires Node 20+.

Roadmap

Shipped:

  • Videos: list, get, update metadata, delete with title-match confirm guard.
  • Captions: upload, list, delete.
  • Shorts: list_my_shorts (duration filter) and get_shorts_analytics (creatorContentType==SHORTS).
  • Playlists: create, add-to.
  • Comments: list, reply, moderate.
  • Analytics: channel analytics query.
  • ComfyUI thumbnail bridge: generate_and_set_thumbnail.

Planned:

  • Video upload (video_upload) with resumable-upload support.
  • Reporting API for bulk historical data exports.

License

MIT © Joe Miller

Support

If this saves you time, consider supporting development:

[GitHub Sponsors] [Ko-fi]

Source: README.md at commit 13f70c4

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v0.1.2LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts