
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
heygen-mcp-server
Advanced tools
A Model Context Protocol (MCP) server that provides tools for interacting with the HeyGen API, specifically for managing assets and folders.
This MCP server implements the following HeyGen API endpoints:
Clone or download this repository
Install dependencies:
npm install
Build the project:
npm run build
You need to set your HeyGen API key as an environment variable:
export HEYGEN_API_KEY="your_api_key_here"
To get your API key:
Add the server to your MCP settings file (typically claude_desktop_config.json or similar):
{
"mcpServers": {
"heygen": {
"command": "node",
"args": [
"/path/to/mcp-servers/heygen/dist/index.js"
],
"env": {
"HEYGEN_API_KEY": "your_api_key_here"
}
}
}
}
Or using npx (no installation required):
{
"mcpServers": {
"heygen": {
"command": "npx",
"args": ["heygen-mcp-server"],
"env": {
"HEYGEN_API_KEY": "your_api_key_here"
}
}
}
}
Or if installed globally (npm install -g heygen-mcp-server):
{
"mcpServers": {
"heygen": {
"command": "heygen-mcp-server",
"env": {
"HEYGEN_API_KEY": "your_api_key_here"
}
}
}
}
Once configured, the HeyGen MCP server will be available to your MCP client. You can use the following tools:
Use the list_assets tool to retrieve all your media assets
Use the delete_asset tool with asset_id parameter to delete a specific asset
Use the list_folders tool to see all your folders
Use the create_folder tool to create a new folder
Optionally specify project_type (default: "mixed")
Use the update_folder tool with folder_id and name parameters to rename a folder
Use the trash_folder tool with folder_id parameter to move a folder to trash
Use the restore_folder tool with folder_id parameter to restore a trashed folder
Use the upload_asset tool with file_path and mime_type parameters
Supported MIME types:
- image/png
- image/jpeg
- audio/mpeg
- video/mp4
- video/webm
Note: File upload functionality requires binary file handling
npm run build
npm run watch
npm run dev
For more information about the HeyGen API, visit:
IMPORTANT: Keep your API key secret and secure! Never commit it to version control or share it publicly. Anyone with access to your API key can make requests on your behalf.
If you suspect your API key has been compromised, contact HeyGen at contact@heygen.com immediately.
MIT
For issues related to:
FAQs
MCP server for HeyGen API - Assets and Folders management
We found that heygen-mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.