Skip to content
VS Code

tubemind secure mcp for VS Code

io.github.dewtech-technologies/tubemind-secure-mcp

Secure MCP server for YouTube intelligence — 18 tools, OAuth2, OWASP Top 10 controls.

client:VS Code transport:stdio runtime:npm

Install tubemind secure mcp in VS Code

.vscode/mcp.json

{
  "inputs": [
    {
      "type": "promptString",
      "id": "youtube-client-id",
      "description": "YOUTUBE_CLIENT_ID",
      "password": true
    },
    {
      "type": "promptString",
      "id": "youtube-client-secret",
      "description": "YOUTUBE_CLIENT_SECRET",
      "password": true
    },
    {
      "type": "promptString",
      "id": "youtube-redirect-uri",
      "description": "YOUTUBE_REDIRECT_URI",
      "password": true
    },
    {
      "type": "promptString",
      "id": "token-encryption-key",
      "description": "TOKEN_ENCRYPTION_KEY",
      "password": true
    },
    {
      "type": "promptString",
      "id": "rate-limit-per-minute",
      "description": "RATE_LIMIT_PER_MINUTE",
      "password": true
    },
    {
      "type": "promptString",
      "id": "request-timeout-ms",
      "description": "REQUEST_TIMEOUT_MS",
      "password": true
    },
    {
      "type": "promptString",
      "id": "audit-log-path",
      "description": "AUDIT_LOG_PATH",
      "password": true
    },
    {
      "type": "promptString",
      "id": "node-env",
      "description": "NODE_ENV",
      "password": true
    }
  ],
  "servers": {
    "tubemind-secure-mcp": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "tubemind-secure-mcp"
      ],
      "env": {
        "YOUTUBE_CLIENT_ID": "${input:youtube-client-id}",
        "YOUTUBE_CLIENT_SECRET": "${input:youtube-client-secret}",
        "YOUTUBE_REDIRECT_URI": "${input:youtube-redirect-uri}",
        "TOKEN_ENCRYPTION_KEY": "${input:token-encryption-key}",
        "RATE_LIMIT_PER_MINUTE": "${input:rate-limit-per-minute}",
        "REQUEST_TIMEOUT_MS": "${input:request-timeout-ms}",
        "AUDIT_LOG_PATH": "${input:audit-log-path}",
        "NODE_ENV": "${input:node-env}"
      }
    }
  }
}

VS Code prompts for each input the first time the server starts, so no secret is written to the file. VS Code docs

tubemind secure mcp in other clients