
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
Model Context Protocol (MCP) server for soclip.dev - allow AI assistants like Claude Desktop and Cursor to extract social video media direct links and metadata.
soclip-mcp connects LLMs with the Soclip API to analyze and retrieve direct video download URLs and metadata from TikTok, YouTube, Instagram, X/Twitter, and more.
Get your API key at https://soclip.dev.
Docs for
soclip-mcp@0.1.1— last updated 2026-08-07. Plain-text docs for AI agents: https://soclip.dev/llms.txt
Add soclip to your claude_desktop_config.json (located at ~/Library/Application Support/Claude/claude_desktop_config.json on macOS or %APPDATA%\Claude\claude_desktop_config.json on Windows):
{
"mcpServers": {
"soclip": {
"command": "npx",
"args": ["-y", "soclip-mcp"],
"env": {
"SOCLIP_API_KEY": "your-api-key-here"
}
}
}
}
Add to your Cursor MCP settings (.cursor/mcp.json or Cursor Settings -> Features -> MCP Servers):
{
"mcpServers": {
"soclip": {
"command": "npx",
"args": ["-y", "soclip-mcp"],
"env": {
"SOCLIP_API_KEY": "your-api-key-here"
}
}
}
}
Note: If you have already set up your key using the CLI (soclip config set-key <key>), soclip-mcp will automatically read ~/.soclip/config.json if SOCLIP_API_KEY is not present in env.
get_video_mediaExtract direct video download URLs and detailed metadata from a social media video URL. Costs 2 credits ($0.002) per request.
url (string, required): The video link (e.g. TikTok, YouTube, Instagram, X/Twitter, etc.).get_balanceCheck your current account remaining credit balance.
soclip-cliMIT License © 2026 soclip
FAQs
Model Context Protocol (MCP) server for Soclip social video downloader API
The npm package soclip-mcp receives a total of 15 weekly downloads. As such, soclip-mcp popularity was classified as not popular.
We found that soclip-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.