Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A Model Context Protocol (MCP) server that turns long videos into viral clips with AI. It exposes the full CutPro API as tools, so an LLM can run the whole flow: analyze a video, clip the best moments, render the final MP4, and publish to TikTok, Instagram and YouTube.
list_clips is rating sorted, capped, and omits long signed URLs unless asked.Most clients use the same JSON. Add your API key under env:
{
"mcpServers": {
"cutpro": {
"command": "npx",
"args": ["-y", "@cutpro/mcp"],
"env": { "CUTPRO_API_KEY": "<your-api-key>" }
}
}
}<img src="https://img.shields.io/badge/VS_Code-Install_Server-0098FF?style=flat-square&logo=visualstudiocode&logoColor=white" alt="Install in VS Code"> <img src="https://img.shields.io/badge/Cursor-Install_Server-000000?style=flat-square&logo=cursor&logoColor=white" alt="Install in Cursor"> <img src="https://img.shields.io/badge/LM_Studio-Install_Server-4A26C9?style=flat-square" alt="Install in LM Studio"> <img src="https://img.shields.io/badge/Goose-Install_Server-1A1A1A?style=flat-square" alt="Install in Goose">
After installing via a button, add your CUTPRO_API_KEY to the server's env.
<details> <summary>Claude Code</summary>
claude mcp add cutpro --env CUTPRO_API_KEY=<your-api-key> -- npx -y @cutpro/mcp</details>
<details> <summary>Claude Desktop</summary>
Add to claude_desktop_config.json (Settings, Developer, Edit Config):
{
"mcpServers": {
"cutpro": {
"command": "npx",
"args": ["-y", "@cutpro/mcp"],
"env": { "CUTPRO_API_KEY": "<your-api-key>" }
}
}
}</details>
<details> <summary>Cursor / Windsurf / VS Code (manual)</summary>
Add the standard config above to the client's MCP settings (mcp.json / mcpServers). </details>
<details> <summary>Cline</summary>
Open the MCP Servers panel, choose Configure, and add the standard config above. </details>
<details> <summary>Gemini CLI</summary>
gemini mcp add cutpro npx -y @cutpro/mcp -e CUTPRO_API_KEY=<your-api-key></details>
<details> <summary>Codex</summary>
Add to ~/.codex/config.toml:
[mcp_servers.cutpro]
command = "npx"
args = ["-y", "@cutpro/mcp"]
env = { "CUTPRO_API_KEY" = "<your-api-key>" }</details>
<details> <summary>ChatGPT and Claude.ai (hosted, no install)</summary>
Use the hosted server. Add a custom connector pointing to:
https://mcp.cut.proYou authorize with your CutPro API key on a consent page (OAuth), so no local setup is needed. </details>
The server is configured with environment variables.
| Variable | Description | Required |
|---|---|---|
CUTPRO_API_KEY | Your CutPro API key (Pro plan). | Yes (stdio) |
CUTPRO_WORKSPACE_ID | Selects the workspace for multi-workspace keys. | No |
CUTPRO_API_URL | Override the API base URL. Defaults to https://api.cut.pro/api/v1. | No |
<details> <summary>Self-hosting the remote (Streamable HTTP + OAuth)</summary>
| Variable | Description |
|---|---|
MCP_TRANSPORT=http / PORT | Serve Streamable HTTP at the root instead of stdio. |
MCP_OAUTH=1 | Enable the full OAuth 2.1 layer (discovery, DCR, PKCE) for browser clients. |
MCP_PUBLIC_URL | Public endpoint, e.g. https://mcp.cut.pro. Its origin becomes the OAuth issuer. |
MCP_REDIS_URL | Back OAuth state with Redis so it survives restarts and scales across instances. |
MCP_TRANSPORT=http PORT=8787 MCP_OAUTH=1 \
MCP_PUBLIC_URL=https://mcp.cut.pro MCP_REDIS_URL=redis://127.0.0.1:6379 \
npx -y @cutpro/mcpIn OAuth mode the user authorizes with their own API key on a consent page; the access token maps server side to that key. Without MCP_REDIS_URL, an in-memory store is used (single instance, state lost on restart). </details>
<details> <summary>Workspace and balance</summary>
</details>
<details> <summary>Videos and uploads</summary>
</details>
<details> <summary>Clipping</summary>
</details>
<details> <summary>Clips and templates</summary>
</details>
<details> <summary>Renders</summary>
</details>
<details> <summary>Posts and connections</summary>
</details>
Each tool carries read-only / write / destructive annotations so clients can plan calls.
io.github.getcutpro/cutproMIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.