// SCAN REPORT

Ytmcp

19 tools. 1 can modify or destroy data without limits.

1 destructive tool with no built-in limits. Policy required.

Last updated: 28 Jun 2026

1 can modify or destroy data

18 read-only

19 tools total

Community server · catalogue entry verified 28/06/2026

How to control Ytmcp ↓

TOOL MAP

What Ytmcp exposes to your agents

Read (18) Write / Execute (0) Destructive / Financial (1)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Ytmcp tools

Destructive · High revoke_oauth_token Revoke the stored OAuth token and sign the user out of the YouTube MCP server. Calls Google

1 of Ytmcp's 19 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Ytmcp

PolicyLayer is an MCP gateway — it sits between your AI agents and Ytmcp, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "revoke_oauth_token": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Cap read operations

{
  "get_channel_metadata": {
    "limits": [
      {
        "counter": "get_channel_metadata_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Ytmcp — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON YTMCP →

Instant setup, no code required.

FULL CATALOGUE

All 19 Ytmcp tools

DESTRUCTIVE 1 tools

Destructive revoke_oauth_token Revoke the stored OAuth token and sign the user out of the YouTube MCP server. Calls Google

READ 18 tools

Read get_channel_metadata Fetch channel profile, statistics, and content details by channel ID or @handle. Returns snippet (title, descr Read get_video_metadata Fetch full metadata for one or more YouTube videos by ID, or retrieve the most popular videos chart. Returns s Read get_video_transcript Download the full spoken transcript of a YouTube video as clean plain text using yt-dlp — no API credentials r Read list_channel_activities Get a chronological feed of a channel Read list_channel_members List current paying members of the authenticated user Read list_channel_sections Get the shelf and section layout of a YouTube channel page (e.g., Read list_comment_replies Fetch replies to a specific comment thread using parent_comment_id, or fetch individual comments by comma-sepa Read list_membership_levels List the membership tier pricing levels configured for the authenticated user Read list_playlist_items List video entries inside a YouTube playlist in order. Returns snippet (title, description, position, videoOwn Read list_playlists List playlists belonging to a channel or fetch specific playlists by ID. Returns snippet (title, description, Read list_subscriptions List a channel Read list_supported_languages List all languages supported by YouTube (e.g., for caption and UI localization). Returns items[].snippet.hl (l Read list_supported_regions List all geographic regions supported by YouTube content targeting. Returns items[].snippet.gl (region code, e Read list_trending_videos Fetch the currently most popular videos on YouTube for a given region and optional category. Returns snippet ( Read list_video_captions List available caption track metadata for a video (requires API Key or OAuth). Returns items[].snippet with la Read list_video_categories List standard YouTube video category names and IDs for a given region (e.g., Read list_video_comments Fetch top-level comment threads for a video or all comments on a channel. Returns snippet.topLevelComment (aut Read search_content Search YouTube for videos, channels, or playlists. Returns items[].id (videoId/channelId/playlistId) and items

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Ytmcp

Can an AI agent delete data through the Yt MCP server? +

Yes. The Ytmcp server exposes 1 destructive tools including revoke_oauth_token. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How many tools does the Yt MCP server expose? +

19 tools across 2 categories: Destructive, Read. 18 are read-only. 1 can modify, create, or delete data.

How do I enforce a policy on Ytmcp? +

Register the Yt MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Ytmcp tool call.

Deterministic rules across all 19 Ytmcp tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON YTMCP →

Instant setup, no code required.

19 Ytmcp tools catalogued and risk-classified — across an index of 43,000+ MCP servers.