Skip to content

YouTube

by mcp-dir · remote · no sign-in to list tools · v0.1.0 · published by GitHub user mcp-dir

Search, video, channel, playlist, comments, trending and related items from YouTube. Hosted by the p

Final · 1Changes · 28
CompareRegistry entry

35 tools: 1 do something that can't be undone, 28 change things and 6 only read.

Scanned Oct 21, 2026

8 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http youtube https://api.mcp.ai/p_youtube

Findings

Matches of fixed checks, with the text they matched.

6 warn2 info
  • Warnyoutube_hashtag

    The server marks "youtube_hashtag" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "post": a word for a change.

    What this check looks for
  • Warnyoutube_comments

    The server marks "youtube_comments" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "youtube_comments" says "comment": a word for a change.

    What this check looks for
  • Warnyoutube_channel_store

    The server marks "youtube_channel_store" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "youtube_channel_store" says "store": a word for a change.

    What this check looks for
  • Warnyoutube_channel_videos_post

    The server marks "youtube_channel_videos_post" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "youtube_channel_videos_post" says "post": a word for a change.

    What this check looks for
  • Warnyoutube_channel_shorts_post

    The server marks "youtube_channel_shorts_post" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "youtube_channel_shorts_post" says "post": a word for a change.

    What this check looks for
  • Warnyoutube_comment_threads

    The server marks "youtube_comment_threads" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "youtube_comment_threads" says "comment": a word for a change.

    What this check looks for
Show 2 more findings
  • Infoconnect

    The description mentions "credentials".

    Matched text

    description: "...nticated:true and empty pending[]. When credentials are missing, returns connect_url for th..."

    What this check looks for
  • Infomarketplace

    The description mentions "credential".

    Matched text

    description: "...ating the tool list. If the MCP needs a credential/login, invoke returns a connect link; i..."

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

35 tools

Can't be undone 1Claude Code: ask
  • youtube_comment_replyResponde comentários como o canal conectado.No findings

    Why it is in this group

    • The name "youtube_comment_reply" says "comment": a word for a change.
    • The name "youtube_comment_reply" also says "reply": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    Responde comentários como o canal conectado. Aceita VÁRIAS respostas numa chamada (`replies`), e um item que falha não derruba os outros. `parent_id` tem que ser o id de um comentário de TOPO (campo `id` do thread devolvido por youtube_comment_threads), nunca o id de uma resposta. Cada resposta consome 50 unidades da cota da API do YouTube, então responda o que importa em vez de varrer o canal.

    Annotations the server declares

    • title: youtube_comment_reply
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
Changes things 28Claude Code: ask
  • authenticateMCP.AI for IDE agents (Cursor, etc.): log in in the browser, copy the access token.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    MCP.AI for IDE agents (Cursor, etc.): log in in the browser, copy the access token. Best: add it to this server's config as a header `Authorization: Bearer <token>` for a permanent, non-expiring connection. Or paste it here for a session-only login: call with { token: "<jwt>" } after the user pastes, or with no args to get the link.

    Annotations the server declares

    • title: Authenticate
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • marketplaceThe official mcp.ai marketplace — the in-platform catalog of every MCP/tool, AND the way to run them.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Info

      The description mentions "credential".

      Matched text

      description: "...ating the tool list. If the MCP needs a credential/login, invoke returns a connect link; i..."

      What this check looks for
    Description, as the server wrote it
    The official mcp.ai marketplace — the in-platform catalog of every MCP/tool, AND the way to run them. Covers capability requests like "find an MCP that does X", "consulta um CPF", "is there a tool for Y". Core flow: action=search discovers MCPs by intent → describe returns one MCP's full profile (every tool with its id + params, pricing, auth) so you pick the right tool_id → invoke RUNS that tool. KEY: invoke works even when the MCP is NOT installed — it runs the tool pontualmente (one-off), without adding the MCP to the toolkit and without bloating the tool list. If the MCP needs a credential/login, invoke returns a connect link; if it is paid and the wallet is empty, invoke returns a checkout/top-up link (the user opens it, then you retry). Use install only to make an MCP PERMANENT in the active toolkit (its tools then show up natively in future sessions); prefer invoke for a single/occasional use. list_tools lists what is callable right now. subscribe/cancel handle per-MCP billing; report_bug sends feedback; request_mcp asks us to build a NEW MCP when nothing fits. Search/describe flag installed_in_toolkit vs installed_in_workspace. Writes (install/uninstall/subscribe/cancel and the one-off install behind invoke) require workspace owner/admin. It also carries the mcp.ai PROMPT LIBRARY, which is about ready-made prompt TEXT rather than MCPs: search_prompts finds one, get_prompt returns its full text with {{variables}} filled, and publish_prompt saves a prompt and returns a shareable mcp.ai/p/<slug> link that opens without login.

    Annotations the server declares

    • title: Marketplace
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • report_bugReport a bug, missing feature, or send feedback.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Report a bug, missing feature, or send feedback. Include the conversation array with recent messages for reproduction.

    Annotations the server declares

    • title: Report Bug
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • youtube_apiEscape hatch: call any path on the YouTube backend.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Escape hatch: call any path on the YouTube backend. Pass path (e.g. /search), optional method (default GET), query map, and JSON body for POST. Prefer the named youtube_* tools when available; this is for routes not in the manifest.

    Annotations the server declares

    • title: youtube_api
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • youtube_channel_aboutChannel description, links, country, subscriber count, banner.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Channel description, links, country, subscriber count, banner. Bulk support: accepts ids for batched execution.

    Annotations the server declares

    • title: youtube_channel_about
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • youtube_channel_communityCommunity posts tab for a channel.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Community posts tab for a channel. Bulk support: accepts ids for batched execution.

    Annotations the server declares

    • title: youtube_channel_community
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • youtube_channel_homeChannel home page payload (featured shelves + meta).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Channel home page payload (featured shelves + meta). Bulk support: accepts ids for batched execution.

    Annotations the server declares

    • title: youtube_channel_home
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • youtube_channel_playlistsChannel playlists tab.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Channel playlists tab. Bulk support: accepts ids for batched execution.

    Annotations the server declares

    • title: youtube_channel_playlists
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • youtube_channel_shortsChannel shorts tab.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Channel shorts tab. Bulk support: accepts ids for batched execution.

    Annotations the server declares

    • title: youtube_channel_shorts
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • youtube_channel_shorts_postPOST variant of channel shorts.1 finding

    Why it is in this group

    • The name "youtube_channel_shorts_post" says "post": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "youtube_channel_shorts_post" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "youtube_channel_shorts_post" says "post": a word for a change.

      What this check looks for
    Description, as the server wrote it
    POST variant of channel shorts. Requires a `params` continuation token from a prior GET response. Skip in daily smoke (no synthetic params). Bulk support: accepts ids for batched execution.

    Annotations the server declares

    • title: youtube_channel_shorts_post
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • youtube_channel_storeStore / merch shelf for a channel.1 finding

    Why it is in this group

    • The name "youtube_channel_store" says "store": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "youtube_channel_store" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "youtube_channel_store" says "store": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Store / merch shelf for a channel. Bulk support: accepts ids for batched execution.

    Annotations the server declares

    • title: youtube_channel_store
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • youtube_channel_videosChannel videos tab.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Channel videos tab. Bulk support: accepts ids for batched execution.

    Annotations the server declares

    • title: youtube_channel_videos
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • youtube_channel_videos_postPOST variant of channel videos.1 finding

    Why it is in this group

    • The name "youtube_channel_videos_post" says "post": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "youtube_channel_videos_post" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "youtube_channel_videos_post" says "post": a word for a change.

      What this check looks for
    Description, as the server wrote it
    POST variant of channel videos. Requires a `params` continuation token captured from a prior GET response — used to fetch deeper pages or filtered shelves that the GET surface can't address. Skip in daily smoke (no synthetic params). Bulk support: accepts ids for batched execution.

    Annotations the server declares

    • title: youtube_channel_videos_post
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • youtube_comment_deleteApaga DEFINITIVAMENTE um comentário (não tem desfazer).No findings

    Why it is in this group

    • The name "youtube_comment_delete" says "comment": a word for a change.
    Description, as the server wrote it
    Apaga DEFINITIVAMENTE um comentário (não tem desfazer). Só funciona em comentário do próprio canal ou em vídeo do canal conectado. Para esconder sem apagar, prefira youtube_comment_moderate com `rejected`. Custa 50 unidades da cota. Bulk support: accepts comment_ids for batched execution.

    Annotations the server declares

    • title: youtube_comment_delete
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • youtube_comment_moderateModera comentários no canal conectado: publica (`published`), segura para revisão (`heldForReview`) ou rejeita (`rejected`).No findings

    Why it is in this group

    • The name "youtube_comment_moderate" says "comment": a word for a change.
    Description, as the server wrote it
    Modera comentários no canal conectado: publica (`published`), segura para revisão (`heldForReview`) ou rejeita (`rejected`). `ban_author` só é aceito junto de `rejected`. Vale apenas para comentários em vídeos do próprio canal. Custa 50 unidades por comentário.

    Annotations the server declares

    • title: youtube_comment_moderate
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • youtube_comment_postPublica um comentário NOVO de topo em um vídeo, como o canal conectado.No findings

    Why it is in this group

    • The name "youtube_comment_post" says "comment": a word for a change.
    Description, as the server wrote it
    Publica um comentário NOVO de topo em um vídeo, como o canal conectado. Para responder alguém, use youtube_comment_reply. Custa 50 unidades da cota. Bulk support: accepts video_ids for batched execution.

    Annotations the server declares

    • title: youtube_comment_post
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • youtube_comment_threadsComentários de TOPO pela API oficial, com as respostas já existentes.1 finding

    Why it is in this group

    • The name "youtube_comment_threads" says "comment": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "youtube_comment_threads" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "youtube_comment_threads" says "comment": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Comentários de TOPO pela API oficial, com as respostas já existentes. É daqui que sai o `parent_id` usado em youtube_comment_reply (o id do thread), então prefira esta tool a youtube_comments quando a intenção for responder. Sem `video_id`, traz os comentários do canal conectado inteiro (bom para 'o que ainda não respondi'). Custa 1 unidade da cota. Bulk support: accepts video_ids, channel_ids for batched execution.

    Annotations the server declares

    • title: youtube_comment_threads
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • youtube_comment_updateEdita o texto de um comentário ou resposta PUBLICADO pelo canal conectado (corrigir um erro sem apagar e repostar, o que perderia as curtidas e o encadeamento).No findings

    Why it is in this group

    • The name "youtube_comment_update" says "comment": a word for a change.
    Description, as the server wrote it
    Edita o texto de um comentário ou resposta PUBLICADO pelo canal conectado (corrigir um erro sem apagar e repostar, o que perderia as curtidas e o encadeamento). Só funciona em comentário de autoria do próprio canal. Custa 50 unidades da cota. Bulk support: accepts comment_ids for batched execution.

    Annotations the server declares

    • title: youtube_comment_update
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • youtube_commentsTop-level comments thread for a video.1 finding

    Why it is in this group

    • The name "youtube_comments" says "comment": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "youtube_comments" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "youtube_comments" says "comment": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Top-level comments thread for a video. Bulk support: accepts ids for batched execution.

    Annotations the server declares

    • title: youtube_comments
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • youtube_downloadStream/download metadata for a video (formats, audio/video URLs, status).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Stream/download metadata for a video (formats, audio/video URLs, status). Bulk support: accepts ids for batched execution.

    Annotations the server declares

    • title: youtube_download
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • youtube_hashtagPosts under a hashtag (without leading #).1 finding

    Why it is in this group

    • The description's first verb is "post": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "youtube_hashtag" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "post": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Posts under a hashtag (without leading #).

    Annotations the server declares

    • title: youtube_hashtag
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • youtube_home_feedYouTube home feed (anonymous, geo/lang aware).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    YouTube home feed (anonymous, geo/lang aware).

    Annotations the server declares

    • title: youtube_home_feed
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • youtube_hypeYouTube Hype: viral / hyped videos feed.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    YouTube Hype: viral / hyped videos feed.

    Annotations the server declares

    • title: youtube_hype
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • youtube_my_channelsLista os canais do YouTube conectados (os que podem responder e moderar comentários), com id, nome e estatísticas.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Lista os canais do YouTube conectados (os que podem responder e moderar comentários), com id, nome e estatísticas. Use antes de responder para confirmar de qual canal a resposta vai sair. Custa 1 unidade da cota.

    Annotations the server declares

    • title: youtube_my_channels
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • youtube_playlistPlaylist items by playlist id.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Playlist items by playlist id. Bulk support: accepts ids for batched execution.

    Annotations the server declares

    • title: youtube_playlist
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Only reads 6Claude Code: allow
  • connectReturns connection status and URLs.1 finding

    Why it is in this group

    • The description's first verb is "return": a word for reading.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...nticated:true and empty pending[]. When credentials are missing, returns connect_url for th..."

      What this check looks for
    Description, as the server wrote it
    Returns connection status and URLs. When all providers are connected, returns authenticated:true and empty pending[]. When credentials are missing, returns connect_url for the toolkit and per-install URLs.

    Annotations the server declares

    • title: Connection Status
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • show_versionShow the current MCP platform and adapter versions.No findings

    Why it is in this group

    • The name "show_version" says "show": a word for reading.
    Description, as the server wrote it
    Show the current MCP platform and adapter versions.

    Annotations the server declares

    • title: Show Version
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • toolkit_infoReturns the current toolkit state: installed MCPs, their connection status, the accounts connected to each one, and how many catalog tools each exposes.No findings

    Why it is in this group

    • The description's first verb is "return": a word for reading.
    Description, as the server wrote it
    Returns the current toolkit state: installed MCPs, their connection status, the accounts connected to each one, and how many catalog tools each exposes.

    Annotations the server declares

    • title: Toolkit Info
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • youtube_resolve_urlResolve a YouTube URL or share link to its videoId / pageType.No findings

    Why it is in this group

    • The name "youtube_resolve_url" says "resolve": a word for reading.
    Description, as the server wrote it
    Resolve a YouTube URL or share link to its videoId / pageType.

    Annotations the server declares

    • title: youtube_resolve_url
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 0.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http youtube https://api.mcp.ai/p_youtube

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__youtube__youtube_search",
      "mcp__youtube__youtube_resolve_url",
      "mcp__youtube__youtube_channel_search",
      "mcp__youtube__show_version",
      "mcp__youtube__connect",
      "mcp__youtube__toolkit_info"
    ],
    "ask": [
      "mcp__youtube__youtube_home_feed",
      "mcp__youtube__youtube_trending",
      "mcp__youtube__youtube_download",
      "mcp__youtube__youtube_hype",
      "mcp__youtube__youtube_hashtag",
      "mcp__youtube__youtube_playlist",
      "mcp__youtube__youtube_comments",
      "mcp__youtube__youtube_video_related",
      "mcp__youtube__youtube_channel_home",
      "mcp__youtube__youtube_channel_about",
      "mcp__youtube__youtube_channel_videos",
      "mcp__youtube__youtube_channel_shorts",
      "mcp__youtube__youtube_channel_playlists",
      "mcp__youtube__youtube_channel_community",
      "mcp__youtube__youtube_channel_featured",
      "mcp__youtube__youtube_channel_store",
      "mcp__youtube__youtube_channel_videos_post",
      "mcp__youtube__youtube_channel_shorts_post",
      "mcp__youtube__youtube_api",
      "mcp__youtube__youtube_my_channels",
      "mcp__youtube__youtube_comment_threads",
      "mcp__youtube__youtube_comment_reply",
      "mcp__youtube__youtube_comment_post",
      "mcp__youtube__youtube_comment_update",
      "mcp__youtube__youtube_comment_moderate",
      "mcp__youtube__youtube_comment_delete",
      "mcp__youtube__report_bug",
      "mcp__youtube__marketplace",
      "mcp__youtube__authenticate"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as youtube. Review it before you use it.