
Security News
Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI Attack
Anthropic found biased reasoning and recklessness drove Claude Mythos 5 to publish malware on PyPI and compromise a security vendor.
@instavar/mcp-server
Advanced tools
Instavar Studio MCP server — drive the full video create→render→approve→publish→metrics workflow from Claude Code or Codex with an API key.
Drive the full Instavar Studio video workflow — create → render → approve → publish → metrics — from Claude Code or Codex, without leaving your terminal.
The server is a thin HTTP client: it authenticates with a per-user API key and talks to the hosted Instavar API. It holds no database connection and stores no data of its own.
{
"mcpServers": {
"instavar": {
"command": "npx",
"args": ["-y", "@instavar/mcp-server"],
"env": { "INSTAVAR_API_KEY": "ik_live_..." }
}
}
}
instavar tools appear.| Var | Required | Default | Purpose |
|---|---|---|---|
INSTAVAR_API_KEY | yes | — | Your key from /studio/settings. Scoped to your org; revocable. |
INSTAVAR_BASE_URL | no | https://instavar.com | Override the API host. |
| Tool | What it does |
|---|---|
list_jobs | List recent jobs (newest first). |
get_job_status | Runs, artifacts, verifications, current video + thumbnail URLs. |
get_video_state | Materialized composition state for a job. |
get_job_metrics | Platform engagement snapshots for a published job. |
get_cost_summary | Infra cost summary (Lambda / RunPod / R2 / WaveSpeed / PoYo). |
create_video_brief | Create a job from a structured brief and start rendering. |
edit_video_brief | Patch a brief and re-render. |
approve_job | Approve a rendered job so it can be published. |
publish_job | Publish an approved job to its connected social destination. |
Writes require a key with the write scope; publish_job requires publish.
npx @instavar/mcp-server --version
npx @instavar/mcp-server --help
MIT
FAQs
Make local videos with Instavar Remotion templates for free, then add an API key for hosted Studio workflows.
The npm package @instavar/mcp-server receives a total of 65 weekly downloads. As such, @instavar/mcp-server popularity was classified as not popular.
We found that @instavar/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Anthropic found biased reasoning and recklessness drove Claude Mythos 5 to publish malware on PyPI and compromise a security vendor.

Research
/Security News
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.