Instavar Video Templates and Studio

com.instavar/mcp-serverinstavar.comstreamable-httpv0.6.1Scanned 48 minutes ago

Free Remotion video templates and creative guides; optional hosted Studio rendering and publishing.

20 tools: 8 change things and 12 only read.

Reads private data · 0
Reads text others write · 2
Can send data out · 0
3 findings

Anlyon alternative

8 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

20 tools

Changes things 8Creates or changes something that can be changed back.Claude Code: ask

create_video_briefCreate a private hosted video and start rendering after the user confirms the complete brief and plan usage.Reads text others writeNo findings
Why it is in this group
- The name "create_video_brief" says "create": a word for a change.
- The input takes a statement or command to run (input.script), which can change anything it can reach.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
Description, as the server wrote it
Create a private hosted video and start rendering after the user confirms the complete brief and plan usage. Requires account linking. Automatic supplemental footage defaults to off; set automaticBroll to auto only if the user explicitly requests it. Preserve visual exclusions in scenes[].generationContract.prohibitedChanges, separately from the visible copy. Use real source media or explicitly accepted generated visuals for demonstrations; never silently replace requested footage with text. Plan distinct shots for a story, with each generated motion shot at most 15 seconds. For silent videos set narrationMode off and supply explicit scenes; omit script and any unsupplied caption. publishTarget is an optional layout hint, not a publish action; preserve the accepted aspectRatio. Put exact spoken words in script for narration, never filmmaking directions. Supplied originals must be uploaded and bound; do not replace missing branded media with stock. This is the hosted brief contract, not VideoSpec or paired-announcement source. Preserve requestId when retrying the same request, including after a timeout; use a new UUID for changed content. Returns a queued job, not a finished video. Does not publish.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
- openWorldHint: true
- idempotentHint: true
diagnose_render_errorClassify a local validation or render error and return a safe next step.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Classify a local validation or render error and return a safe next step.
Annotations the server declares
- title: Diagnose render error
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
edit_video_briefPrepare exact title, script or caption changes for an existing private video.1 finding
Why it is in this group
- The name "edit_video_brief" says "edit": a word for a change.
- The input takes a statement or command to run (input.script), which can change anything it can reach.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "edit_video_brief" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "edit_video_brief" says "edit": a word for a change.
  What this check looks for
Description, as the server wrote it
Prepare exact title, script or caption changes for an existing private video. Returns a Studio approval link; this call does not save copy or start a render. The signed-in user must review and approve there. Approval changes the current run, consumes rerender credits and revokes existing review links. Previous run records are retained. Does not publish. Preserve requestId for unchanged retries.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
- idempotentHint: true
get_capabilitiesCall first.1 finding
Why it is in this group
- The name "get_capabilities" says "get": a word for reading.
- The description's first verb is "call": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "get_capabilities" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":false}; The name "get_capabilities" says "get": a word for reading.
  What this check looks for
Description, as the server wrote it
Call first. Reports public planning features and optional account features. Public access metadata does not indicate session authentication; use list_video_projects to verify private read access.
Annotations the server declares
- title: Get capabilities
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
prepare_announcementPrepare one paired announcement-card-v1 template, continue its caller-held project, edit copy or switch frameworks.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Prepare one paired announcement-card-v1 template, continue its caller-held project, edit copy or switch frameworks. Returns source files for local rendering. For the paired announcement-card-v1 or a HyperFrames announcement request, use prepare_announcement. Never infer a framework from creative wording. Omit framework unless the user explicitly chooses one or says no preference. If needs-selection, ask the user. Continue with the latest returned project and expectedRevision; apply edits through edits before switching. Keep the returned project document for later calls. Never describe this caller-held document as a saved hosted project. VideoSpec templates use prepare_video_template in either framework.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
propose_video_storyboardTurn an ordinary video request into a three-beat visual proposal and recommended template.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Turn an ordinary video request into a three-beat visual proposal and recommended template. Pass templateId to preserve an accepted template when changing only the aspect; omit it for a new direction. This tool does not generate images, save a project, render, or publish.
Annotations the server declares
- title: Propose video storyboard
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
review_video_projectOpen a focused review of one private Instavar video after account linking.1 finding
Why it is in this group
- The description's first verb is "open": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "review_video_project" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "open": a word for a change.
  What this check looks for
Description, as the server wrote it
Open a focused review of one private Instavar video after account linking. This tool does not edit, render, approve, or publish.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
scaffold_carousel_deckBuild a deterministic editorial carousel deck from accepted copy.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Build a deterministic editorial carousel deck from accepted copy. This does not render, save, or publish it.
Annotations the server declares
- title: Scaffold carousel deck
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false

Only reads 12Looks things up and changes nothing.Show 12 read-only tools

get_carousel_schemaReturn the JSON Schema for deterministic Instavar carousel decks.No findings
Why it is in this group
- The name "get_carousel_schema" says "get": a word for reading.
Description, as the server wrote it
Return the JSON Schema for deterministic Instavar carousel decks.
Annotations the server declares
- title: Get carousel schema
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
get_creative_guideRead practical guidance before drafting concise plain or poetic copy, choosing carousel stories, designing visuals or recording human feedback.No findings
Why it is in this group
- The name "get_creative_guide" says "get": a word for reading.
Description, as the server wrote it
Read practical guidance before drafting concise plain or poetic copy, choosing carousel stories, designing visuals or recording human feedback. Returns guidance for the calling assistant to apply, not generated copy or saved feedback. Omit guideId to list guides.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
get_exampleReturn a valid starter example for one template family.No findings
Why it is in this group
- The name "get_example" says "get": a word for reading.
Description, as the server wrote it
Return a valid starter example for one template family.
Annotations the server declares
- title: Get example
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
get_render_instructionsReturn the clone, install, validate, preview, and render workflow.No findings
Why it is in this group
- The name "get_render_instructions" says "get": a word for reading.
Description, as the server wrote it
Return the clone, install, validate, preview, and render workflow.
Annotations the server declares
- title: Get render instructions
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
get_templateGet one template's purpose, aspect ratios, scene kinds, and example identifier.No findings
Why it is in this group
- The name "get_template" says "get": a word for reading.
Description, as the server wrote it
Get one template's purpose, aspect ratios, scene kinds, and example identifier.
Annotations the server declares
- title: Get template
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
get_video_render_statusCheck the requested private render and its output URL, errors and recovery guidance.Reads text others writeNo findings
Why it is in this group
- The name "get_video_render_status" says "get": a word for reading.
What it can reach
- untrusted-inputThe description's first sentence says "url": it reads web pages, which anyone can write.
Description, as the server wrote it
Check the requested private render and its output URL, errors and recovery guidance. Keep workspaceId from creation. When a video is available, call review_video_project to show playback. A queued or rendering state is not completion. Do not automatically submit another render on failure.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
- idempotentHint: true
get_video_schemaReturn the published JSON Schema for VideoSpec version 1.0.No findings
Why it is in this group
- The name "get_video_schema" says "get": a word for reading.
Description, as the server wrote it
Return the published JSON Schema for VideoSpec version 1.0.
Annotations the server declares
- title: Get video schema
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
list_carousel_templatesList the account-free editorial carousel story structures.No findings
Why it is in this group
- The name "list_carousel_templates" says "list": a word for reading.
Description, as the server wrote it
List the account-free editorial carousel story structures.
Annotations the server declares
- title: List carousel templates
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
list_templatesList the published Remotion template families and optionally filter by output aspect ratio.No findings
Why it is in this group
- The name "list_templates" says "list": a word for reading.
Description, as the server wrote it
List the published Remotion template families and optionally filter by output aspect ratio.
Annotations the server declares
- title: List templates
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
list_video_projectsList recent private Instavar video projects after the user links their account.No findings
Why it is in this group
- The name "list_video_projects" says "list": a word for reading.
Description, as the server wrote it
List recent private Instavar video projects after the user links their account. Returns the currently resolved workspace in accountContext; billing details are included only with billing.read permission. Follow billing.draftCreditCheck: for a shortfall, explain the missing credits, link to billing, preserve the accepted design and do not request creation confirmation until a fresh check shows enough credits. Recorded credits are a read-only snapshot, not a reservation or render eligibility guarantee. Use this before review_video_project when the user has not supplied a project ID. Do not infer current workspace or allowance from an older job.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
prepare_video_templateValidate one VideoSpec against the paired template contract and return local source for the chosen framework, or switch an existing project's framework.No findings
Why it is in this group
- The description's first verb is "validate": a word for reading.
Description, as the server wrote it
Validate one VideoSpec against the paired template contract and return local source for the chosen framework, or switch an existing project's framework. For a VideoSpec template in Remotion or HyperFrames, use prepare_video_template with the VideoSpec. Never infer a framework from creative wording; omit framework unless the user chose one or said no preference, and ask the user on needs-selection. Continue with the returned project: edit project.spec, then call again to regenerate or to switch frameworks. A rejected field is unsupported in both frameworks; fix it rather than dropping it. The tool returns local source and commands; it does not render, save or upload.
Annotations the server declares
- readOnlyHint: true
- destructiveHint: false
- openWorldHint: false
scaffold_video_specReturn a deterministic VideoSpec skeleton.No findings
Why it is in this group
- The description's first verb is "return": a word for reading.
Description, as the server wrote it
Return a deterministic VideoSpec skeleton. This tool does not generate creative copy or write files.
Annotations the server declares
- title: Scaffold video spec
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data or outbound.

Reads private data0: Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write2: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; create_video_brief
get_video_render_status
Can send data out0: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

3 warn

Warnget_capabilities
The server marks "get_capabilities" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":false}; The name "get_capabilities" says "get": a word for reading.
What this check looks for
Warnreview_video_project
The server marks "review_video_project" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "open": a word for a change.
What this check looks for
Warnedit_video_brief
The server marks "edit_video_brief" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "edit_video_brief" says "edit": a word for a change.
What this check looks for

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 0.6.1. Values in angle brackets are yours to fill in.

claude mcp add --transport http instavar https://instavar.com/api/mcp/templates

claude mcp add --transport http instavar https://instavar.com/api/mcp/templates

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__instavar__get_creative_guide",
      "mcp__instavar__prepare_video_template",
      "mcp__instavar__list_carousel_templates",
      "mcp__instavar__get_carousel_schema",
      "mcp__instavar__list_templates",
      "mcp__instavar__get_template",
      "mcp__instavar__get_video_schema",
      "mcp__instavar__get_example",
      "mcp__instavar__scaffold_video_spec",
      "mcp__instavar__get_render_instructions",
      "mcp__instavar__list_video_projects",
      "mcp__instavar__get_video_render_status"
    ],
    "ask": [
      "mcp__instavar__prepare_announcement",
      "mcp__instavar__get_capabilities",
      "mcp__instavar__scaffold_carousel_deck",
      "mcp__instavar__propose_video_storyboard",
      "mcp__instavar__diagnose_render_error",
      "mcp__instavar__review_video_project",
      "mcp__instavar__create_video_brief",
      "mcp__instavar__edit_video_brief"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as instavar. Review it before you use it.

Capability tags behind 2 rules

mcp__instavar__create_video_brief untrusted-input
mcp__instavar__get_video_render_status untrusted-input

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/com.instavar/mcp-server/verify?hash=ab66e16c6103259d0e7806a67c9f93cd584db23a9ce6038bbab7a3cc0ddb094e" | jq -e '.changed == false'

Pinned hash ab66e16c6103, from Oct 26, 2026, 10:17 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/com.instavar/mcp-server/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/com.instavar/mcp-server.svg)](https://anlyon.dev/servers/com.instavar/mcp-server)

Source: MCP Registry · repository. Synced Oct 26, 2026, 10:17 UTC.