
Research
/Security News
OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.
tvsub-mcp
Advanced tools
Apple TV.app subtitle overlay with Anthropic API, Claude subscription, and ChatGPT subscription translation
tvsub-mcp is the MCP companion for tvsub, an
experimental subtitle overlay for Apple TV.app on macOS. It lets an MCP client
inspect the current playback item, choose or translate a subtitle file, adjust
its appearance, start or stop the overlay, and calibrate subtitle timing.
Supported player: purchased and rented films in macOS Apple TV.app (Prime Video support is being explored and is not currently available). Subtitle formats: SRT, SMI/SAMI, VTT. Translation runs on your choice of three backends: an Anthropic API key, a signed-in Claude Code CLI (Claude subscription), or a signed-in Codex CLI (ChatGPT subscription) — subscription backends add no API charges.
The server does not download subtitles, bypass DRM, modify video, or launch TV.app. You provide subtitle files that you have the right to use and start playback yourself.
uv for the
recommended uvx installationReplace /absolute/path/to/tvsub with the directory containing tvsub's
build/, config/, src/, and subtitles/ directories.
brew install uv
claude mcp add --transport stdio --scope user tvsub -- \
uvx tvsub-mcp==0.2.1 \
--tvsub-root /absolute/path/to/tvsub
claude mcp get tvsub
claude mcp list
Translation picks a backend automatically: an Anthropic API key if present,
then a signed-in Claude Code CLI, then a signed-in Codex CLI. Set
TVSUB_TRANSLATE_BACKEND (auto, api, claude, codex) or the
backend tool argument to override. With a subscription CLI signed in you
can skip the key entirely. To use the API backend, export your key and
include it when registering the server — or store it once in macOS Keychain
(service kim.youngji.tvsub.anthropic), which the server also reads.
export ANTHROPIC_API_KEY="your-key"
claude mcp add --transport stdio --scope user \
--env ANTHROPIC_API_KEY="$ANTHROPIC_API_KEY" \
tvsub -- uvx tvsub-mcp==0.2.1 \
--tvsub-root /absolute/path/to/tvsub
Other stdio MCP clients can launch the same command:
uvx tvsub-mcp==0.2.1 --tvsub-root /absolute/path/to/tvsub
| Tool | Purpose |
|---|---|
now_playing | Read the current Apple TV.app title, content ID, position, and playback state. |
list_subtitles | List and parse SRT, SMI, SAMI, and VTT files in tvsub's subtitle library. |
load_subtitle | Select a subtitle file for the current content while preserving sync anchors by default. |
translate_subtitle | Estimate or perform an LLM translation with cue and timecode validation. Supports backend selection, glossary injection, and partial retranslation by line or time range. |
set_glossary | Create or update a per-title glossary (names, honorifics, relationships, forbidden translations) that is injected into translation prompts. |
mark_reviewed | Promote a translated subtitle's provenance from ai_draft to user_reviewed. |
list_fonts | List installed macOS fonts and check sample glyph coverage. |
set_style | Change font, size, colors, outline, background, and screen position. |
start_overlay | Start tvsub with the selected subtitle and style. |
stop_overlay | Stop only the overlay process started by this server. |
calibrate_sync | Store one or more dialogue anchors and calculate timing offset and drift. |
status | Summarize playback, overlay, subtitle, style, and calibration state. |
Before translating, call translate_subtitle with dry_run=true to review the
cue count, batch count, and estimated cost. Subscription backends report
$0 (included in subscription). Every translation writes a .provenance.json
sidecar recording backend, hashes, and review status.
api backend uses your Anthropic API key and
all charges are your responsibility; estimates can differ from the final
bill. The claude and codex backends run through your own signed-in
subscription CLIs and add no API charges.python3.12 -m venv .venv
.venv/bin/python -m pip install -e .
.venv/bin/python -m unittest discover -s tests -p 'test_*.py' -v
TVSUB_TEST_PYTHON="$PWD/.venv/bin/python" .venv/bin/python tests/stdio_smoke.py
bash scripts/hygiene-check.sh
Linux can run the unit tests and mock stdio smoke test. Apple TV.app, MediaRemote, CoreText, and the real overlay require macOS.
MIT. See LICENSE.
FAQs
Apple TV.app subtitle overlay with Anthropic API, Claude subscription, and ChatGPT subscription translation
The pypi package tvsub-mcp receives a total of 27 weekly downloads. As such, tvsub-mcp popularity was classified as not popular.
We found that tvsub-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Research
/Security News
Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Security News
Socket joins more than 100 technology, cybersecurity, and financial organizations calling for a global surge in cyber defense.

Product
Enterprise security teams can now detect malware, credential theft, suspicious network activity, and risky updates across Microsoft Edge extensions.