# WeCut (npm · wecut)

Local video editing for AI agents: cut, caption, analyse, reuse viral formats. FFmpeg, no cloud.

- Trust score: 71/100 (medium)
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-10-24

## Components

- npm · `wecut`: 71/100 (this document), [markdown](https://verifymcp.io/servers/13kailouis-stack-wecut/wecut.md), [page](https://verifymcp.io/servers/13kailouis-stack-wecut/wecut)

## Channel facts

- Registry: `npm`
- Package: `wecut`
- Version: `0.1.0`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-10-24.

- **Supply Chain Security**: 100/100
  - No malware found by supply-chain analysis.
  - No known CVEs affecting this package version or its production dependencies.
  - No install/post-install scripts declared.
  - 0 of 6 dependencies flagged as unhealthy.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (Apache-2.0).
  - Actively maintained (last published 0 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 79/100
  - 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).
  - AI-judged instruction clarity (good).
  - Context-footprint check failed: tool/resource definitions use about 1482 tokens (~114/item across 13 items; 13 tools + 0 resources), over budget; trim descriptions and params.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 0/100
  - Stability not yet verified: not enough scan history yet (needs a 30-day window).
- **Tool Coverage**: 93/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 79% of tool parameters carry a description.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - We read all 13 captured tool definition(s), and no name or description among them implies an irreversible operation.
  - An AI judge read all 14 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a current MCP spec version (2026-07-28).

**Unverified: 1 category.** A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

## Install

### How do I install the WeCut MCP server?

WeCut runs locally as an npm package, launched with npx -y wecut. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add 13kailouis-stack-wecut -- npx -y wecut
```

### Cursor

```json
{
  "mcpServers": {
    "13kailouis-stack-wecut": {
      "command": "npx",
      "args": [
        "-y",
        "wecut"
      ]
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "13kailouis-stack-wecut": {
      "command": "npx",
      "args": [
        "-y",
        "wecut"
      ]
    }
  }
}
```

### Codex

```bash
codex mcp add 13kailouis-stack-wecut -- npx -y wecut
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "13kailouis-stack-wecut": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "wecut"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add 13kailouis-stack-wecut --command npx --arg -y --arg wecut
```

### Hermes

```yaml
mcp_servers:
  13kailouis-stack-wecut:
    command: "npx"
    args: ["-y", "wecut"]
```

### Netclaw

```json
{
  "McpServers": {
    "13kailouis-stack-wecut": {
      "Transport": "stdio",
      "Command": "npx",
      "Arguments": [
        "-y",
        "wecut"
      ]
    }
  }
}
```

### Vellum

```bash
assistant mcp add 13kailouis-stack-wecut -t stdio -c npx -a -y wecut
```

### Other

```json
{
  "mcpServers": {
    "13kailouis-stack-wecut": {
      "command": "npx",
      "args": [
        "-y",
        "wecut"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-10-24 (score 71, +15)

- [security improvement] Malware scan: unverified → pass

### 2026-10-23 (score 56)

First indexed and scored.

## MCP tools (13)

### `wecut_doctor` (~42 tokens)

Check FFmpeg

Check that FFmpeg is installed and has what WeCut needs (libass, xfade, an H.264 encoder). Run once before the first render.

### `wecut_probe` (~51 tokens)

Inspect media files

Duration, width, height, fps, rotation and audio for video, image or audio files in the workspace. Use the durations for clip from/to.

Input parameters:

- `files` (array, required): Paths relative to the workspace.

### `wecut_validate` (~108 tokens)

Check a project

Check a project against the media without rendering. Returns the finished duration and size, or every error with a JSON pointer (e.g. /clips/0/to) and a hint on how to fix it.

Input parameters:

- `project` (object): The WeCut project (format "1") as a JSON object. wecut_schema has the full format; wecut_example shows working projects.
- `projectFile` (string): Instead of project: path of a project .json file inside the workspace.

### `wecut_preview` (~135 tokens)

Look at frames

Render a few still frames (540p JPEG) at chosen times of the finished video and return them as images, so you can check framing, text size and captions before rendering. Also saved under out/preview/.

Input parameters:

- `at` (array): Times in seconds of the finished video. Default: 10%, 50% and 90%.
- `project` (object): The WeCut project (format "1") as a JSON object. wecut_schema has the full format; wecut_example shows working projects.
- `projectFile` (string): Instead of project: path of a project .json file inside the workspace.

### `wecut_render` (~155 tokens)

Render video

Render the project to output.file (MP4 or GIF) inside the workspace, overwriting an earlier render with the same name. The result is checked with ffprobe. Sends progress notifications when the call has a progressToken.

Input parameters:

- `out` (string): Override output.file (must end in .mp4 or .gif).
- `preset` (string): draft = 540p fast check, final = default, high = slower and sharper.
- `project` (object): The WeCut project (format "1") as a JSON object. wecut_schema has the full format; wecut_example shows working projects.
- `projectFile` (string): Instead of project: path of a project .json file inside the workspace.

### `wecut_list` (~43 tokens)

List styles and names

Names usable in a project: text styles, caption styles, fonts, transitions, filters, effects, motions, ratios and text animations.

Input parameters:

- `what` (string)

### `wecut_schema` (~45 tokens)

Project format

The JSON Schema of the WeCut project format, with a description of every field. what=recipe gives the recipe (template) format instead.

Input parameters:

- `what` (string)

### `wecut_example` (~65 tokens)

Example project

A complete working project to copy from: podcast-clip (cuts + karaoke captions + ducked music), slideshow (photos with motion and transitions) or product-promo (contain + blur, logo, text). Omit name to list them.

Input parameters:

- `name` (string)

### `wecut_analyze` (~144 tokens)

Analyse a video

Measure a video that worked: shots and pace, cuts in the first 3 s, flashes, beat and tempo, pauses, a silent platform outro, and (with a transcript) words per minute and the hook's words. Returns a sheet of frames, one per shot, as an image: look at it for the headline card, text style, framing and captions. Use the result to pick or write a recipe.

Input parameters:

- `file` (string, required): Video in the workspace.
- `frames` (integer): Frames on the sheet (default 12).
- `transcript` (string): Word timings for it (.json, .srt, .vtt), optional.

### `wecut_recipe_list` (~53 tokens)

List recipes

Recipes are templates: the shape of an edit without its content (sections such as hook and body, text slots, caption and music style). Lists the built-in ones and the workspace's own (recipes/*.json).

### `wecut_recipe_show` (~46 tokens)

Show a recipe

A recipe in full, with the roles its clips can feed, its text slots, and its default music.

Input parameters:

- `name` (string, required): Recipe name or workspace .json path.

### `wecut_recipe_apply` (~220 tokens)

Apply a recipe

Turn a recipe plus new material into a project: clips (each with an optional role such as hook or body), words for the text slots, a transcript for captions, and music (replaces the recipe's own track; "none" drops it). Returns the project (saved with write); then wecut_preview and wecut_render it.

Input parameters:

- `captionSrc` (string)
- `clips` (array, required)
- `music` (string): Audio file, a video whose sound is used, or "none".
- `output` (string): Render target (.mp4 or .gif).
- `recipe` (string|object, required): Built-in name, workspace .json path, or a recipe object (wecut.recipe/1).
- `texts` (object): Words per slot, e.g. {"headline": {"text": "...", "emphasis": ["key words"]}}.
- `transcript` (string): Word timings of captionSrc (or of the source used longest).
- `write` (string): Save the project here (.json).

### `wecut_recipe_from_project` (~136 tokens)

Save a project as a recipe

Make a reusable template from a finished project: sections, transitions, text slots (current words kept as defaults), caption style, effects, and its music as the default track.

Input parameters:

- `name` (string)
- `project` (object): The WeCut project (format "1") as a JSON object. wecut_schema has the full format; wecut_example shows working projects.
- `projectFile` (string): Instead of project: path of a project .json file inside the workspace.
- `write` (string): Save it here, e.g. recipes/my-style.json, so wecut_recipe_list finds it.

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/13kailouis-stack-wecut/wecut#diagnostics

## Score history

- 2026-10-24: 71
- 2026-10-23: 56

## Common questions

### What is the WeCut MCP server?

WeCut is an MCP server listed in the public MCP registry as io.github.13kailouis-stack/wecut. Local video editing for AI agents: cut, caption, analyse, reuse viral formats. FFmpeg, no cloud. This page covers its npm package (wecut).

### Is the WeCut MCP server safe to use?

WeCut scores 71 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 24 October 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the WeCut MCP server expose?

WeCut exposes 13 tools: wecut_doctor, wecut_probe, wecut_validate, wecut_preview, wecut_render, and 8 more. Their descriptions and schemas cost roughly 1,243 tokens of context every time the server is loaded.

### Is the WeCut MCP server still maintained?

WeCut is still listed as active in the MCP registry. We last reached this channel on 24 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

### What licence is the WeCut MCP server under?

WeCut declares the Apache-2.0 licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.

## Links

- npm package: https://www.npmjs.com/package/wecut
- Socket report: https://socket.dev/npm/package/wecut
- Repository: https://github.com/13kailouis-stack/wecut
- Changelog RSS feed: https://verifymcp.io/servers/13kailouis-stack-wecut/wecut.xml
- Changelog JSON feed: https://verifymcp.io/servers/13kailouis-stack-wecut/wecut.json
- HTML version of this page: https://verifymcp.io/servers/13kailouis-stack-wecut/wecut