Youtube Music Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Youtube Music Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Model Context Protocol server for YouTube Music integration. Allows AI assistants to search for music and create/manage playlists on your YouTube account.
https://www.googleapis.com/auth/youtubeYouTube Music MCP (or any name)client_secret.json in the project root# Clone the repository
git clone https://github.com/leosakharoff/youtube-music-mcp.git
cd youtube-music-mcp
# Create virtual environment
python -m venv venv
source venv/bin/activate # On Windows: venv\Scripts\activate
# Install dependencies
pip install -e .python -m src.authThis opens a browser window for Google sign-in. After authorizing, your credentials are saved to token.json (gitignored).
Add to your Claude Desktop config:
macOS: ~/Library/Application Support/Claude/claude_desktop_config.json Windows: %APPDATA%\Claude\claude_desktop_config.json
{
"mcpServers": {
"youtube-music": {
"command": "/path/to/youtube-music-mcp/venv/bin/python",
"args": ["-m", "src.server"],
"cwd": "/path/to/youtube-music-mcp"
}
}
}claude mcp add youtube-music "python -m src.server" --cwd /path/to/youtube-music-mcpDeploy to Render for use with Claude web/iOS without your computer running.
pip install -r requirements.txtpython -m src.server_remotecat token.json | base64YOUTUBE_TOKEN_B64 = (your base64 string)https://your-service.onrender.comhttps://your-service.onrender.com/sseNote: Render free tier sleeps after 15 min of inactivity. First request may take ~30s to wake up.
Once connected to Claude, try:
| Tool | Description |
|---|---|
search_youtube_music | Search for tracks (returns videoId for adding to playlists) |
create_playlist | Create a new playlist (private, public, or unlisted) |
add_to_playlist | Add videos to an existing playlist |
get_my_playlists | List your YouTube playlists |
get_playlist_details | Get all tracks from a playlist |
search_and_add | Search for songs and add top results to a playlist |
update_playlist | Update playlist title and/or description |
delete_playlist | Delete a playlist (cannot be undone) |
Your Google Cloud app is in testing mode. Add your email as a test user:
Delete token.json and run python -m src.auth again.
YouTube Data API has quotas. If you hit limits:
# Install dev dependencies
pip install -e ".[dev]"
# Run tests
pytest tests/ -v
# Format code
black src/ tests/
ruff check src/ tests/client_secret.json and token.json contain sensitive credentialsMIT License
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.