# video.quiz/api Quiz.Video MCP: list, create, AI-generate, and render quiz and flashcard videos. - **Type:** MCP server - **Trust:** 60/100 (B), scored on the content rubric - **Verification:** community-indexed — nobody has claimed this listing - **Version:** 0.1.0 - **Author:** video.quiz - **License:** Unknown - **Endpoints:** streamable-http https://www.quiz.video/mcp/ - **Source:** https://www.quiz.video - **Endpoint health:** reachable (last checked 2026-10-17T21:26:43.005Z, 7 samples) — uptime is not a security property and is not part of the trust score - **Compatible clients:** claude-code, cursor, copilot, chatgpt, gemini (basis: transport) ## Trust 60/100 (B), scored on the content rubric - Publisher verified: no - Install scripts: nothing suspicious found - Prompt-injection scan: clean - Obfuscation scan: clean - Evidence age: 56 days ## Security scan **Assessment scope:** Hosted endpoint only: Forge can assess who publishes it and whether it answers, not the code behind it. No CVE, dependency or source analysis applies, so nothing here is a clean bill for that code. - **Status:** probed (endpoint answered; no code examined) - **Scanned:** 2026-09-04T16:36:07.912Z - **Version scanned:** live - **CVEs:** no coverage — this entry has no package coordinates to query OSV against, so "no known CVEs" is NOT asserted for it. ## Tools 30 declared. Observed from a live `tools/list` probe. - `get_api_catalog` — Return the Quiz.Video API catalog linkset for agent discovery. - `get_openapi_spec` — Return the Quiz.Video OpenAPI 3.1 specification. - `get_llms_txt` — Return a compact LLM-readable summary of the Quiz.Video API. - `quiz_video_list_quizzes` — List quizzes owned by the authenticated user with optional pagination (page, limit). - `quiz_video_get_quiz` — Fetch a single quiz (including settings and metadata) by id. - `quiz_video_create_quiz` — Create a quiz. Prefer sending themeDescription or themeCustomization so the saved quiz has a custom visual theme; if omitted, the server derives one from the ti - `quiz_video_generate_quiz` — AI-generate and save a quiz from a topic. Prefer providing themeDescription or themeCustomization; when omitted, the server derives and saves a topic-based cust - `quiz_video_update_quiz` — Update a quiz. `updates` accepts any subset of quiz settings (title, description, format, template, timing, music, TTS, publish status, etc.). - `quiz_video_delete_quiz` — Permanently delete a quiz and all of its questions, answers, and hooks. - `quiz_video_list_quiz_questions` — List questions (and their answers) for a quiz. - `quiz_video_add_quiz_questions` — Append one or more questions (with their answers and optional images) to an existing quiz. - `quiz_video_list_quiz_hooks` — List video hooks configured for a quiz. - `quiz_video_create_quiz_hook` — Create a hook for a quiz. `hook` is a pass-through object whose fields follow the HookInput schema (see OpenAPI spec). - `quiz_video_update_quiz_hook` — Update an existing hook on a quiz. Requires quizId and numeric hookId; `updates` is a partial HookInput. - `quiz_video_delete_quiz_hook` — Delete a single hook from a quiz. - `quiz_video_list_flashcard_decks` — List flashcard decks owned by the authenticated user with optional pagination. - `quiz_video_get_flashcard_deck` — Fetch a flashcard deck (including all cards) by id. - `quiz_video_create_flashcard_deck` — Create a flashcard deck. Required: title (3-120 chars) and cards[] (min 1). Optional: description (≤1200 chars), tags (≤50 each). - `quiz_video_delete_flashcard_deck` — Permanently delete a flashcard deck and all of its cards. - `quiz_video_create_render` — Queue a new video render for an existing quiz. Returns the render sessionId; poll quiz_video_get_render until its status is "completed" (typically 1-5 minutes), - `quiz_video_get_render` — Fetch the status and progress of a render session. When status is "completed", the response also contains a signed `videoUrl` (and `filename`) so the agent can - `quiz_video_download_render` — Request a signed download URL for a completed render. - `quiz_video_get_account` — Get the authenticated user's account info, plan, and usage limits. - `quiz_video_list_music` — List available background music tracks. - `quiz_video_list_templates` — List the caller's saved custom templates (and optionally public ones). Templates are reusable scene-based designs that can be applied to many quizzes. - `quiz_video_get_template` — Fetch a single custom template (including the full scenes/layers payload) by id. - `quiz_video_create_template` — Save a new custom template authored in the drag-and-drop editor. Required: template (the CustomTemplate JSON). Optional: name, description, thumbnail, isDefault - `quiz_video_update_template` — Update an existing template. Any subset of fields may be supplied; omitted fields stay unchanged. - `quiz_video_delete_template` — Permanently delete a custom template you own. Quizzes that have a snapshot of this template are unaffected — the snapshot remains in their themeCustomization. - `quiz_video_apply_template` — Apply a snapshot of a custom template to one or more quizzes you own. Sets each quiz's template field to "custom" and writes the snapshot into themeCustomizatio ## Install **Verdict: review** — Installable, but 3 things to check first: No CVE coverage: this entry has no npm/PyPI coordinates to query OSV against, so "no known vulnerabilities" is not a claim that can be made about it. **Cautions** (coverage gaps and advisories — never blocking) - No CVE coverage: this entry has no npm/PyPI coordinates to query OSV against, so "no known vulnerabilities" is not a claim that can be made about it. - Hosted endpoint only: Forge can assess who publishes it and whether it answers, not the code behind it. No CVE, dependency or source analysis applies, so nothing here is a clean bill for that code. - No publisher has proved control of this listing; it is indexed, not vouched for. **Config** (claude-code): ```json "{\n \"mcpServers\": {\n \"api\": {\n \"type\": \"http\",\n \"url\": \"https://www.quiz.video/mcp/\"\n }\n }\n}" ``` ## Blast radius Extensive blast radius — deletes data; runs on someone else's infrastructure. - Floor 35, ceiling 59 (tier: extensive) - This is impact, not likelihood. A high radius is not a defect: a filesystem server is supposed to write files. It is never part of the trust score. ## Machine-readable views of this entry - Signed JSON: https://forgeregistry.com/api/v1/packages/video.quiz%2Fapi - Install plan: https://forgeregistry.com/api/v1/packages/video.quiz%2Fapi/install-plan - Alternatives: https://forgeregistry.com/api/v1/alternatives/video.quiz%2Fapi - HTML page: https://forgeregistry.com/registry/video.quiz%2Fapi - MCP: POST https://forgeregistry.com/api/mcp → `forge_get_package` / `forge_install_plan` ## About this document Generated by Forge (https://forgeregistry.com) — a compact rendering of the same record served, signed, at the JSON URL above. Trust and scan facts are the registry's own measurements; anything Forge did not measure is named as unmeasured rather than omitted.