# justtranscribe-mcp Transcribe public videos & audio (YouTube, TikTok, IG) into accurate, timestamped text via API. - **Type:** MCP server - **Trust:** 85/100 (A), scored on the package rubric - **Verification:** verified (build provenance) - **Version:** 0.1.1 - **Author:** io.github.bramontiventures - **License:** Unknown - **npm:** justtranscribe-mcp - **Endpoints:** streamable-http https://justtranscribe.ai/api/mcp - **Source:** https://github.com/bramontiventures/justtranscribe-mcp - **Endpoint health:** reachable (last checked 2026-09-24T04:43:25.867Z, 4 samples) — uptime is not a security property and is not part of the trust score - **Compatible clients:** claude-code, cursor, copilot, chatgpt, gemini (basis: transport) ## Trust 85/100 (A), scored on the package rubric - Publisher verified: no - Build provenance: verified attestation - npm trusted publishing (OIDC): yes - Install scripts: nothing suspicious found - Prompt-injection scan: not run - Obfuscation scan: not run - Evidence age: 7 days ## Security scan - **Status:** clean - **Scanned:** 2026-09-28T06:48:32.468Z - **Version scanned:** 0.1.3 - **CVEs:** none found by OSV at scan time ## Tools 7 declared. Statically extracted from the shipped source — a floor on the surface, not a census. - `justtranscribe` - `transcribe_url` — Transcribe a public video/audio URL (YouTube, TikTok, Instagram, Facebook, Pinterest, Google Drive). Waits up to ~25s so short videos come back in one call; if - `get_transcript` — Fetch a transcript by id, waiting up to ~25s if it is still processing: status, metadata, and the plain text once complete. Set include_segments for timestamped - `list_transcripts` — List this account's transcripts, newest first. Use sort="completedAt" for finished transcripts ordered by completion. - `export_transcript` — Export a completed transcript as text: txt (paragraphs), srt/vtt (subtitles), md (Markdown), csv (one row per segment). PDF/DOCX are binary — use the REST API o - `delete_transcript` — Permanently delete a transcript and its stored media. This cannot be undone. - `get_account` — Identify the account behind the API key, with the current beta limits. ## Install **Verdict: install** — No blocking findings and no open coverage gaps — safe to install as configured. **Config** (claude-code): ```json "{\n \"mcpServers\": {\n \"justtranscribe\": {\n \"command\": \"npx\",\n \"args\": [\n \"-y\",\n \"justtranscribe-mcp\"\n ],\n \"env\": {\n \"JUSTTRANSCRIBE_API_KEY\": \"\"\n }\n }\n }\n}" ``` **Credentials it will ask for** (names only — Forge never holds a value): - `JUSTTRANSCRIBE_API_KEY` — Justtranscribe API Key (required) Placeholders only. Forge never holds, brokers, or transmits a credential value — replace each in your own config file. Do not send a value back to Forge; no Forge endpoint accepts one. - This entry needs 1 credential (1 required). The generated config carries placeholders, so it will fail in the editor rather than at runtime if they are left unset. ## Blast radius Extensive blast radius — deletes data; runs locally and hosted. - Floor 54, ceiling 54 (tier: extensive) - This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score. ## Machine-readable views of this entry - Signed JSON: https://forgeregistry.com/api/v1/packages/justtranscribe-mcp - Install plan: https://forgeregistry.com/api/v1/packages/justtranscribe-mcp/install-plan - Alternatives: https://forgeregistry.com/api/v1/alternatives/justtranscribe-mcp - HTML page: https://forgeregistry.com/registry/justtranscribe-mcp - MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan` ## About this document Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.