Clypt Mcp Server — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Clypt Mcp Server (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Model Context Protocol server for Clypt. Lets AI agents (Claude Desktop, Cursor, Claude Code, any MCP-aware client) submit a podcast URL and receive clips, an optional trailer, show notes, a guest-share link, and the transcript.
Pure shim over the public REST API at https://useclypt.com/api/v1 — three tools, no clever middleware.
| Tool | Wraps | Returns |
|---|---|---|
submit_job | POST /v1/jobs | { id, status: 'queued', ... } — kicks the pipeline. Wall-clock to terminal: ~2-5 min for audio/RSS sources, ~10-12 min for video + trailer. |
get_job | GET /v1/jobs/{id} | Current job state. When status='complete', output contains clips, optional trailer, guest_share_url, show_notes, transcript. When failed, error carries a code + message. |
list_jobs | GET /v1/jobs | Cursor-paginated list of the org's recent jobs. |
The flow is asynchronous: submit_job returns immediately with a queued id; the agent polls get_job until terminal. Once a webhook is registered against your org, job.completed and job.failed events fire on every terminal transition — register via the public API at POST /v1/webhooks (no MCP tool for this yet; coming in a later minor).
With the server configured in Claude Desktop, ask:
Use Clypt to clip this podcast and tell me when it's done: https://feeds.simplecast.com/abc123
Claude will call submit_job, get back a job id, poll get_job until terminal, and surface the clips + trailer + transcript inline. Wall-clock: ~2-5 min for audio/RSS, ~10-12 min for video + trailer.
npm install -g @useclypt/mcp-serverOr run without installing:
npx -y @useclypt/mcp-server~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):
{
"mcpServers": {
"clypt": {
"command": "npx",
"args": ["-y", "@useclypt/mcp-server"],
"env": {
"CLYPT_API_KEY": "clk_live_..."
}
}
}
}Restart Claude Desktop. Then prompt: "Use Clypt to clip this podcast: <RSS or audio URL>".
Same recipe — the binary is mcp-server (or run without global install via npx -y @useclypt/mcp-server) and the only required env var is CLYPT_API_KEY.
If your key starts with clk_test_ instead of clk_live_, every job returns a deterministic fixture instead of running the real pipeline. No transcription cost, no R2 storage cost, no Stripe charges. Useful for wiring up your agent before you commit to real submissions.
Fixture mapping:
source.type='video_url' (any URL) → success fixture with 3 clips + optional trailersource.type='audio_url' / rss_feed_url (URL without "fail") → success fixturetranscription_failed error fixturesource.type='youtube_url' → youtube_ingestion_failed error fixtureinvalid_source_url validation error at submitGet a sandbox key in seconds at useclypt.com/developers/signup — no credit card, no waiting list. Sandbox keys (prefix clk_test_) return deterministic fixtures so you can wire up your agent for free before swapping in a clk_live_ key.
| Variable | Required | Default | Purpose |
|---|---|---|---|
CLYPT_API_KEY | yes | — | Bearer token for the Clypt API. clk_live_* or clk_test_*. |
CLYPT_BASE_URL | no | https://useclypt.com | Override for staging or local development. Trailing slash is stripped. |
npm install
npm run build
npm test # vitest unit tests with mocked fetch
npm run dev # tsc --watchSmoke against the live API with the MCP inspector CLI:
npm run build
CLYPT_API_KEY=clk_test_xxx \
npx @modelcontextprotocol/inspector --cli node dist/index.js --method tools/listMIT — see LICENSE.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.