
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
reclip-mcp
Advanced tools
A self-hosted, open-source video and audio downloader with a clean web UI. Paste links from YouTube, TikTok, Instagram, Twitter/X, and 1000+ other sites — download as MP4 or MP3.
https://github.com/user-attachments/assets/419d3e50-c933-444b-8cab-a9724986ba05

Artist - Track.mp3 or Channel - Title.mp4).You don't need to install Python or use the terminal. Download the pre-built standalone executable for your operating system:
Note: The native apps contain a bundled server and PyWebView browser. Simply open the app and it will launch right in its own native window!
git clone https://github.com/yagyaanshK/reclip.git
cd reclip
On Windows:
Double-click start_windows.bat.
On Mac / Linux:
./reclip.sh
Open http://localhost:8899 in your browser.
To manually compile ReClip into a standalone executable:
build_windows.bat -> Output in dist/./build_unix.sh -> Output in dist/Or with Docker:
docker build -t reclip . && docker run -p 8899:8899 reclip
SS, MM:SS, or HH:MM:SS.000ReClip also exposes a structured local CLI for shell scripts and AI agents. Install it in a Python 3.10+ environment with uv:
uv tool install reclip-mcp
Then run:
reclip inspect "https://example.com/media" --json
reclip download "https://example.com/media" --format mp4 --quality 1080p --output downloads --json
reclip clip "https://example.com/media" --start 01:20:15.500 --end 01:25:00 --format mp3 --output downloads --json
reclip sites --json
All JSON responses contain an ok field. Failures include a stable machine-readable error code and a human-readable message. Downloads occur locally and return the absolute output path, filename, byte size, format, source URL, and clip range.
Configure an MCP host to install and start ReClip over stdio without cloning the repository:
{
"mcpServers": {
"reclip": {
"command": "uvx",
"args": ["reclip-mcp"],
"env": {
"RECLIP_MCP_DOWNLOAD_DIR": "/absolute/path/to/downloads"
}
}
}
}
Use the absolute path to uvx if the MCP host does not inherit your shell PATH. The server exposes inspect_media, download_media, download_clip, and list_supported_sites. Download tools require explicit user authorization and can write only to RECLIP_MCP_DOWNLOAD_DIR, which defaults to ~/Downloads/ReClip.
For development from a checkout, run python -m pip install . and configure the host to execute python -m reclip_mcp.
Anything yt-dlp supports, including:
YouTube, TikTok, Instagram, Twitter/X, Reddit, Facebook, Vimeo, Twitch, Dailymotion, SoundCloud, Loom, Streamable, Pinterest, Tumblr, Threads, LinkedIn, and many more.
flask, yt-dlp, yt-dlp-ejs, pycryptodomex, pywebview, pyinstaller, imageio-ffmpegThis tool is intended for personal use only. Please respect copyright laws and the terms of service of the platforms you download from. The developers are not responsible for any misuse of this tool.
FAQs
Local-first CLI and MCP tools for inspecting and downloading permitted media
The pypi package reclip-mcp receives a total of 258 weekly downloads. As such, reclip-mcp popularity was classified as not popular.
We found that reclip-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.