
Security News
GitHub to Block pull_request_target Workflows by Default Starting December 2
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.
@runapi.ai/vidu-mcp
Advanced tools
RunAPI Vidu MCP server for video generation: create tasks, poll results, and check pricing across 2 model variants from Claude Code, Codex, Cursor, and VS Code.
Vidu API access for AI agents: run video generation operations, poll asynchronous results, and check pricing through one focused MCP server.
Works with Claude Code, Codex, Cursor, Windsurf, VS Code, Roo Code, and any MCP-compatible host.
Install | Tools | Models | Agent Prompts | Configuration | Links
@runapi.ai/vidu-mcp is a focused Model Context Protocol server for the Vidu model line on RunAPI.
It gives MCP-compatible assistants direct access to 2 endpoints and 2 model variants without loading the full RunAPI catalog.
Use this per-model server when an agent should stay scoped to Vidu. Use @runapi.ai/mcp when one assistant should discover every RunAPI model line.
Add it to Claude Code:
claude mcp add vidu -s user -- npx -y @runapi.ai/vidu-mcp
Use project scope when the server should be shared with a repository:
claude mcp add vidu -s project -- npx -y @runapi.ai/vidu-mcp
Codex, Cursor, Windsurf, VS Code, Roo Code, and other MCP hosts can use the same stdio command:
{
"mcpServers": {
"vidu": {
"command": "npx",
"args": ["-y", "@runapi.ai/vidu-mcp"]
}
}
}
check_pricing works before sign-in. For task creation and status polling, ask your assistant to call the login tool. It opens a browser login and saves credentials to ~/.config/runapi/config.json, the same file used by runapi login.
Headless and CI hosts can still set RUNAPI_API_KEY before starting the MCP host.
Ready-made examples are in examples/ for Claude, Cursor, Windsurf, VS Code, and Roo Code.
| Tool | Auth | Purpose |
|---|---|---|
image_to_video | Yes | Create a Vidu image to video task and optionally wait for a terminal status. Returns the task id, status, and output URLs. |
reference_to_video | Yes | Create a Vidu reference to video task and optionally wait for a terminal status. Returns the task id, status, and output URLs. |
get_task | Yes | Fetch the current status and latest payload for an existing task. |
check_pricing | No | Look up current pricing for a Vidu model and endpoint. |
Vidu covers 2 model variants across 2 endpoints. Each tool accepts the models listed for it:
| Tool | Models |
|---|---|
image_to_video | vidu-q4-image-to-video |
reference_to_video | vidu-q4-reference-to-video |
Model availability can change between releases. Use check_pricing or the Vidu model page for the current catalog view.
Ask your assistant in natural language; it can inspect pricing, create the task, and return the task id plus output URLs.
Run a Vidu image to video task with RunAPI.
The assistant can call check_pricing, then image_to_video, and return the task id, status, and output URLs.
Create the task but don't wait for it to finish.
The assistant calls the create tool with wait: false and returns the task id. Check on it later with get_task.
Check current Vidu pricing, then create the task if it matches my request.
The assistant calls check_pricing and can link to the Vidu model page for the canonical catalog entry.
The server resolves auth in this order:
RUNAPI_API_KEY environment variable, useful for headless and CI hosts~/.config/runapi/config.json, created by the MCP login tool or runapi logincheck_pricingThe config file is normally managed by login. A pre-provisioned headless config can use:
{
"apiKey": "your_runapi_key"
}
Do not commit real API keys.
| Resource | URL |
|---|---|
| Vidu model page | https://runapi.ai/models/vidu |
| npm package | @runapi.ai/vidu-mcp |
| GitHub repository | runapi-ai/vidu-mcp |
| RunAPI MCP overview | runapi.ai/mcp |
| RunAPI docs | runapi.ai/docs |
Licensed under the Apache License, Version 2.0.
FAQs
RunAPI Vidu MCP server for video generation: create tasks, poll results, and check pricing across 2 model variants from Claude Code, Codex, Cursor, and VS Code.
The npm package @runapi.ai/vidu-mcp receives a total of 29 weekly downloads. As such, @runapi.ai/vidu-mcp popularity was classified as not popular.
We found that @runapi.ai/vidu-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.

Security News
/Application Security
A practical guide to securing GitHub Actions against supply chain attacks, covering malicious pull requests, credential theft, dependency risks, and release pipelines.

Security News
Composer 2.11 adds dependency cooldowns, joining package managers that delay new releases to reduce supply chain risks while allowing urgent security updates.