
Research
/Security News
Mini Shai-Hulud Campaign Hits Red Hat Cloud Services npm Packages
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.
@echosaw/mcp-server
Advanced tools
Echosaw MCP Server - Media intelligence for AI assistants. Connect your LLM to Echosaw and analyze media directly within your workflow.
DEPRECATED: The local stdio MCP server is deprecated. Use the remote MCP server at
https://mcp.echosaw.cominstead. See MCP Integration Guide for setup instructions. The remote server uses OAuth 2.0 and requires no local installation.
Echosaw MCP Server — AI assistant integration for media intelligence.
The Echosaw MCP server connects AI assistants (Claude Desktop, Cursor, and other MCP-compatible clients) to Echosaw's media intelligence platform. Submit media for analysis, check status, retrieve intelligence reports, and download source files — all from within your AI-powered development environment.
@modelcontextprotocol/sdk)npm install -g @echosaw/mcp-server
| Variable | Required | Default | Description |
|---|---|---|---|
ECHOSAW_API_KEY | Yes | — | Your Echosaw API key |
ECHOSAW_API_URL | No | https://api.echosaw.com | API base URL (override for gamma/staging) |
Add the following to your Claude Desktop configuration file (claude_desktop_config.json):
{
"mcpServers": {
"echosaw": {
"command": "echosaw-mcp",
"env": {
"ECHOSAW_API_KEY": "your-api-key"
}
}
}
}
Add to your Cursor MCP settings:
{
"mcpServers": {
"echosaw": {
"command": "echosaw-mcp",
"env": {
"ECHOSAW_API_KEY": "your-api-key"
}
}
}
}
| Tool | Description |
|---|---|
echosaw_analyze_media | Upload an audio, video, or image file to Echosaw for asynchronous media analysis. Returns a job ID used to track processing and retrieve results. |
echosaw_analyze_media_url | Submit a publicly accessible or authorized media URL to Echosaw for asynchronous analysis without uploading the file directly. Returns a job ID used to track processing and retrieve results. |
echosaw_check_job_status | Retrieve the current processing state of an Echosaw analysis job, including whether the job is queued, processing, completed, or failed. |
echosaw_get_analysis_results | Retrieve structured analysis results generated by Echosaw for a completed job, including summaries, transcripts, detected entities, events, and other intelligence outputs. Supports an optional section parameter (summary, transcript, safety, insights, metadata, downloads, all) to reduce response size. |
echosaw_download_media | Generate a presigned download URL for the source media file associated with a completed analysis job. The URL is valid for 1 hour. |
The remote MCP server at https://mcp.echosaw.com includes additional tools: echosaw_search_media, echosaw_list_media (supports server-side filters for mediaType (VIDEO/AUDIO/IMAGE), job status (e.g. COMPLETE), report sentiment (positive/negative/neutral/mixed), and Public Library visibility (isPublic: true/false) in addition to limit and folderPath), echosaw_get_profile, echosaw_list_folders, echosaw_create_folder, echosaw_move_media, echosaw_rename_folder, echosaw_delete_folder, echosaw_set_media_visibility (toggle Public Library visibility for a media item; requires COMPLETE status; blocked with moderation flags returned when content fails safety checks).
All tools return a standardized JSON response:
| Field | Type | Description |
|---|---|---|
| success | boolean | Whether the operation succeeded |
| tool | string | The tool that produced this response |
| responseVersion | string | Response schema version (currently "1.0") |
| data | object | Tool-specific result data |
| message | string? | Human-readable summary |
| error | string? | Error description (when success is false) |
| nextAction | object? | Suggested next tool to call |
Submit a file for analysis:
"Analyze the video at /Users/me/Downloads/interview.mp4"
The assistant calls echosaw_analyze_media with the path and mediaType: "video", returning a mediaId.
Check processing status:
"What's the status of that analysis?"
The assistant calls echosaw_check_job_status with the mediaId.
Retrieve results:
"Show me the results"
Once complete, the assistant calls echosaw_get_analysis_results to retrieve the full intelligence report including transcript, safety analysis, content insights, and metadata.
Download source media:
"Get me a download link for that video"
The assistant calls echosaw_download_media to get a presigned URL valid for 1 hour.
# Clone and build
cd lib/mcp-server
npm install
npm run build
# Run directly
ECHOSAW_API_KEY=your-key node dist/bin/echosaw-mcp.js
FAQs
Echosaw MCP Server - Media intelligence for AI assistants. Connect your LLM to Echosaw and analyze media directly within your workflow.
We found that @echosaw/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.

Research
/Security News
The North Korean malware loader hides in a Packagist-listed package and its GitHub branch to fetch and execute remote code in a likely Contagious Interview-style lure.

Security News
The Rust project is moving toward formal rules on LLM use in contributions after months of internal debate over maintainer burden, code quality, and contributor experience.