
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
@cutpro/mcp
Advanced tools
MCP server that exposes the public CutPro v1 API as tools, so AI clients can drive the full clipping flow: analyze → submit → poll → list clips → render → download, plus balance and templates.
Built to work everywhere and to be token-efficient.
All 34 v1 endpoints are exposed, grouped by resource:
get_workspace, get_balance, get_balance_historylist_videos, delete_video, start_upload, complete_uploadanalyze_video, submit_clipping, list_submissions, get_submission, delete_submissionlist_clips, apply_template, delete_cliplist_templatesrender_clip, list_renders, get_render, get_render_download, cancel_render, get_render_limits, start_bulk_download, get_bulk_downloadcreate_post, list_posts, get_post, update_post, publish_post, retry_post_item, delete_post_item, delete_postlist_connections, get_connectionEach tool carries read-only / write / destructive annotations so clients can plan calls.
list_clips is rating-sorted, capped (limit, default 10), and omits the
long signed URLs unless include_urls: true.bun install
cp .env.example .env # set CUTPRO_API_KEY
API access requires the Pro plan. Generate a key at cut.pro/studio/me/api-keys.
Works with Claude Code, Claude Desktop, Cursor, Windsurf, VS Code, Cline, Zed, and
any other local MCP client. The client launches the process; it speaks MCP over
stdio. Set CUTPRO_API_KEY in the client's env.
Claude Code
claude mcp add cutpro --env CUTPRO_API_KEY=SUA_CHAVE -- npx -y @cutpro/mcp
Claude Desktop / Cursor / Windsurf / VS Code (mcpServers config):
{
"mcpServers": {
"cutpro": {
"command": "npx",
"args": ["-y", "@cutpro/mcp"],
"env": { "CUTPRO_API_KEY": "SUA_CHAVE" }
}
}
}
For local development against unpublished changes, replace npx -y @cutpro/mcp
with bun run /path/to/mcp/src/index.ts.
MCP_TRANSPORT=http PORT=8787 bun run src/index.ts # serves /mcp
The endpoint is stateless. The key is read per request from
Authorization: Bearer <key> or X-Api-Key (env key is the fallback), and
X-Workspace-Id is honored, so one deployment can serve many users.
MCP_TRANSPORT=http PORT=8787 MCP_OAUTH=1 MCP_PUBLIC_URL=https://mcp.cut.pro bun run src/index.ts
With MCP_OAUTH=1 the server becomes a full OAuth 2.1 authorization server
(metadata discovery, Dynamic Client Registration, PKCE, token + refresh,
revocation) using the MCP SDK helpers. The flow:
WWW-Authenticate
header on the 401 from /mcp and registers itself./mcp is protected by bearer auth; each call uses the token's key.MCP_PUBLIC_URL is the public endpoint (e.g. https://mcp.cut.pro); its origin
becomes the OAuth issuer. Set MCP_REDIS_URL (e.g. redis://127.0.0.1:6379) to
back the OAuth state (clients, codes, tokens) with Redis so it survives
restarts and works across multiple instances. Without it, an in-memory store is
used (single instance, state lost on restart).
Hosting: run it on a dedicated host at the root and point a reverse proxy at it:
your-mcp-host { reverse_proxy localhost:8787 }
To connect to the hosted instance: add https://mcp.cut.pro as a custom connector
in ChatGPT or Claude.ai and complete the consent step.
bun run build # outputs dist/index.js
FAQs
CutPro MCP server — wraps the public v1 API as MCP tools for AI clients
The npm package @cutpro/mcp receives a total of 29 weekly downloads. As such, @cutpro/mcp popularity was classified as not popular.
We found that @cutpro/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.