ai.spideriq/media

NPM · @SPIDERIQ/MCP-MEDIA · SCANNED AUG 3

SpiderIQ Media: SpiderMedia files, videos, per-tenant media catalog (read)

Available components

+24 this week 64 64 Trust /100

Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security87

No malware found by supply-chain analysis.Pass
Only part of the dependency tree could be resolved (100 of 104), so this covers what we could see, not the whole tree.Partial
No install/post-install scripts declared.Pass
Only part of the dependency tree could be resolved (100 of 104), so this covers what we could see, not the whole tree. View diagnostics → Partial

Provenance & Transparency19

Repository check failed: the declared repository URL returned HTTP 404. See how to fix → View diagnostics → Fail
Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
Clear OSI-approved license (MIT).Pass
Actively maintained (last published 44 days ago).Pass
Security-disclosure policy not yet verified: we couldn't inspect the source repository.Unverified

Schema Quality & AI Usability73

AI-judged instruction clarity (good).Pass
Context-footprint check failed: tool/resource definitions use about 2061 tokens (~108/item across 19 items; 19 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
Usage-examples check failed: none of the tools include examples. See how to fix → Fail

Stability & Change Management27

Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial

Tool Coverage100

100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
100% of tool parameters carry a description.Pass

Capabilities100

Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · @spideriq/mcp-media

Claude Codex opencode OpenClaw Hermes Other

# add to Claude Code

claude mcp add ai-spideriq-media -- npx -y @spideriq/mcp-media

# add to Codex CLI

codex mcp add ai-spideriq-media -- npx -y @spideriq/mcp-media

// opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "ai-spideriq-media": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@spideriq/mcp-media"
      ],
      "enabled": true
    }
  }
}

# add to OpenClaw

openclaw mcp add ai-spideriq-media --command npx --arg -y --arg @spideriq/mcp-media

# ~/.hermes/config.yaml

mcp_servers:
  ai-spideriq-media:
    command: "npx"
    args: ["-y", "@spideriq/mcp-media"]

// mcp.json

{
  "mcpServers": {
    "ai-spideriq-media": {
      "command": "npx",
      "args": [
        "-y",
        "@spideriq/mcp-media"
      ]
    }
  }
}

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

3 Aug 26 +1

No change was recorded against any check on this day. Stability & Change Management went from 23 to 27. That category is still filling its 30-day observation window: 7 days of observed history at the previous scan, 8 at this one. The score rises as the window fills, whether or not the server changes.
2 Aug 26 +63
- Provenance: unverified → fail ▼ security
- Install scripts: unverified → pass ▲ security
- Known CVEs: unverified → partial ▲ security
- Malware scan: unverified → pass ▲ security
- License: unverified → pass ▲ functional
- Dependency health: unverified → partial ▲ functional
- Maintenance: unverified → pass ▲ functional
- MCP protocol: unverified → pass ▲ functional
- Stability: unverified → 0.23 ▲ functional
- Schema quality: unverified → good ▲ functional
- Tool coverage: unverified → 100 ▲ functional
- Licence: MIT functional
31 Jul 26 −22
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
30 Jul 26 +4
- Malware scan: pass → unverified ▼ security
- Tool coverage: unverified → 100 ▲ functional
28 Jul 26 −22
- Tool coverage: 100 → unverified ▼ functional
- First check of Schema quality: unverified functional
27 Jul 26 40

First indexed and scored.

Show 3 earlier entries Hide earlier entries

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Analysed npm/@spideriq/[email protected]

Provenance none

Ecosystem: npm · Outcome: none

Dependencies 100 packages

100 packages in the resolved dependency tree · 100 deprecated · 29 stale · 1 without a linked repository.

The dependency tree was only partially resolved, so these counts may be incomplete.

MCP tools — 19 exposed · ~2,061 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens

catalog_get_asset ~81

Fetch a single media catalog asset by id. Returns 404 if it does not exist for your tenant. Read-only.

Input Output Examples

Name	Type	Req	Description
asset_id	string	yes	Asset UUID (catalog primary key, from catalog_list_assets)
format	string	—	Response format (default json). yaml/md are token-efficient for agents.
workspace	string	—	Workspace name

No output schema declared.

No examples provided.

catalog_list_assets ~192

List your media catalog assets (newest first, soft-delete aware). Filters AND-combine. The catalog spans every storage tier (seaweedfs/r2/peertube) and asset kind (image/video/doc) — broader than list_files/list_videos, which only see a provisioned bucket. Read-only.

Input Output Examples

Name	Type	Req	Description
folder	string	—	Filter by exact DAM folder path
format	string	—	Response format (default json). yaml/md are token-efficient for agents.
kind	string	—	Filter by asset class
limit	number	—	Page size 1-500 (default 50)
offset	number	—	Pagination offset (default 0)
status	string	—	Filter by status
storage_tier	string	—	Filter by storage tier
tags	array	—	Assets carrying ALL given tags
workspace	string	—	Workspace name

No output schema declared.

No examples provided.

catalog_search_assets ~131

Search your media catalog. q substring-matches key/folder; tags overlaps (ANY); kind narrows by type. All optional + AND-combined, newest first. Read-only.

Input Output Examples

Name	Type	Req	Description
format	string	—	Response format (default json). yaml/md are token-efficient for agents.
kind	string	—	Filter by asset class
limit	number	—	Page size 1-500 (default 50)
q	string	—	Case-insensitive substring match on key/folder
tags	array	—	Assets sharing ANY given tag
workspace	string	—	Workspace name

No output schema declared.

No examples provided.

check_access_status ~152

Check the status of a PAT access request. Returns 'pending', 'active', 'denied', 'expired', or 'revoked' (matches the backend PATRequestStatus enum). Once status==='active', the token is saved to ~/.spideriq/credentials.json automatically. Multi-brand approvals save one entry per workspace under client_id, with the first aliased as 'default' so existing tools (upload_local_file, etc.) keep working without --workspace.

Input Output Examples

Name	Type	Req	Description
api_url	string	—	API URL (default: https://spideriq.ai)
poll_token	string	yes	Poll token from request_access
request_id	string	yes	Request ID from request_access

No output schema declared.

No examples provided.

delete_file ~104

Delete a file from your SpiderMedia bucket by storage key.

Input Output Examples

Name	Type	Req	Description
key	string	yes	File storage key (from list_files response)
project	string	—	Optional project — a website inside the workspace (proj_xxx) — to scope this call to. Sent as the X-Project-Id header. If omitted, the spideriq.json / SPIDERIQ_PROJECT_ID binding (or the workspace de…
workspace	string	—	Workspace name

No output schema declared.

No examples provided.

get_api_info ~33

Get information about the SpiderIQ API and your connection.

Input Output Examples

Name	Type	Req	Description
workspace	string	—	Workspace name (default: default)

No output schema declared.

No examples provided.

get_auth_status ~33

Check if you are authenticated and get current user info.

Input Output Examples

Name	Type	Req	Description
workspace	string	—	Workspace name (default: default)

No output schema declared.

No examples provided.

get_media_stats ~92

Get media storage statistics (file counts, storage used, by type).

Input Output Examples

Name	Type	Req	Description
project	string	—	Optional project — a website inside the workspace (proj_xxx) — to scope this call to. Sent as the X-Project-Id header. If omitted, the spideriq.json / SPIDERIQ_PROJECT_ID binding (or the workspace de…
workspace	string	—	Workspace name

No output schema declared.

No examples provided.

get_queue_stats ~48

Get statistics about job queues (pending jobs, consumers, etc.).

Input Output Examples

Name	Type	Req	Description
format	string	—	Response format (default: json)
workspace	string	—	Workspace name (default: default)

No output schema declared.

No examples provided.

get_video_status ~101

Get processing status for a video (encoding, ready, failed).

Input Output Examples

Name	Type	Req	Description
project	string	—	Optional project — a website inside the workspace (proj_xxx) — to scope this call to. Sent as the X-Project-Id header. If omitted, the spideriq.json / SPIDERIQ_PROJECT_ID binding (or the workspace de…
video_id	string	yes	Video ID
workspace	string	—	Workspace name

No output schema declared.

No examples provided.

health_check ~51

Check if the SpiderIQ API is healthy and responsive.

Input Output Examples

Name	Type	Req	Description
api_url	string	—	API URL (default: https://spideriq.ai)
workspace	string	—	Workspace name (default: default)

No output schema declared.

No examples provided.

import_from_url ~171

Import file(s) from URL into your SpiderMedia bucket. Supports single URL or batch. Auto-proxies Instagram/Facebook/Twitter CDN URLs.

Input Output Examples

Name	Type	Req	Description
folder	string	—	Target folder (e.g., "ads", "logos")
project	string	—	Optional project — a website inside the workspace (proj_xxx) — to scope this call to. Sent as the X-Project-Id header. If omitted, the spideriq.json / SPIDERIQ_PROJECT_ID binding (or the workspace de…
url	string	—	Single URL to import
urls	array	—	Batch URLs to import [{url, filename?}]
use_proxy	boolean	—	Force proxy for CDN URLs (default: auto-detect)
workspace	string	—	Workspace name

No output schema declared.

No examples provided.

list_files ~126

List files in your SpiderMedia bucket.

Input Output Examples

Name	Type	Req	Description
limit	number	—	Max results (default: 20)
offset	number	—	Offset for pagination
project	string	—	Optional project — a website inside the workspace (proj_xxx) — to scope this call to. Sent as the X-Project-Id header. If omitted, the spideriq.json / SPIDERIQ_PROJECT_ID binding (or the workspace de…
type	string	—	Filter by file type (image, video, document)
workspace	string	—	Workspace name

No output schema declared.

No examples provided.

list_videos ~110

List videos in your SpiderMedia bucket.

Input Output Examples

Name	Type	Req	Description
limit	number	—	Max results (default: 20)
offset	number	—	Offset for pagination
project	string	—	Optional project — a website inside the workspace (proj_xxx) — to scope this call to. Sent as the X-Project-Id header. If omitted, the spideriq.json / SPIDERIQ_PROJECT_ID binding (or the workspace de…
workspace	string	—	Workspace name

No output schema declared.

No examples provided.

list_workspaces ~19

List all configured workspaces and their authentication status.

Input Output Examples

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

logout ~25

Remove stored authentication credentials.

Input Output Examples

Name	Type	Req	Description
workspace	string	—	Workspace name (default: default)

No output schema declared.

No examples provided.

media_derive ~236

Resolve (or lazily create + cache) a resized/cropped/reformatted IMAGE derivative of a catalog asset, returning its CDN URL. First call for a spec derives + caches in R2; identical repeats return cache_hit=true with no work. Source scope = images on the r2 tier (non-image / non-r2 → 422). fmt=auto (default) picks avif when supported else webp. Read-only on the source (never mutates the original).

Input Output Examples

Name	Type	Req	Description
asset_id	string	yes	Asset UUID (from catalog_list_assets/catalog_search_assets)
fit	string	—	Resize/crop strategy (default cover)
fmt	string	—	Output format (default auto → webp)
format	string	—	Response format (default json). yaml/md are token-efficient for agents.
h	number	—	Target height in px (1-4096)
q	number	—	Encode quality 1-100 (default 82; png ignores it)
w	number	—	Target width in px (1-4096)
workspace	string	—	Workspace name

No output schema declared.

No examples provided.

media_derive_srcset ~236

Build a responsive srcset for a catalog IMAGE asset — one derivative per requested width — returning the ready-to-use "<url> 400w, <url> 800w, …" string plus per-width entries. Each width derives through the same engine (cache/dedup applies). widths is capped at 8, each 1-4096. Source scope = images on the r2 tier (non-image / non-r2 → 422). Read-only.

Input Output Examples

Name	Type	Req	Description
asset_id	string	yes	Asset UUID (from catalog_list_assets/catalog_search_assets)
fit	string	—	Resize/crop strategy (default cover)
fmt	string	—	Output format shared across widths (default auto → webp)
format	string	—	Response format (default json). yaml/md are token-efficient for agents.
q	number	—	Encode quality 1-100 (default 82)
widths	array	yes	Target widths in px (≤8 entries, each 1-4096), e.g. [400,800,1200]
workspace	string	—	Workspace name

No output schema declared.

No examples provided.

request_access ~120

Request access to SpiderIQ API. This sends an approval email to the admin. After calling this, use check_access_status to poll for approval. Once approved, the token is automatically saved for subsequent API calls.

Input Output Examples

Name	Type	Req	Description
api_url	string	—	API URL (default: https://spideriq.ai)
email	string	yes	Admin email address (the person who will approve access)
project	string	—	Project name (shown in approval email)
scopes	array	—	Requested permission scopes (default: jobs:submit, jobs:read)

No output schema declared.

No examples provided.

On this page

Handy links

Scoring key

80+ high trust
60–79 medium
below 60 low

How we score

Score history · last 30 days

27 Jul 3 Aug