ffpipe — video conversion, probe & frames
REMOTE · FFPIPE.DEV · SCANNED AUG 20
Convert, probe, and split video into frames — real FFmpeg, paid per job with x402 on Base.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score →
Endpoint Security63
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one. See how to fix → View diagnostics → Partial
- HTTPS enforcement could not be verified: the plaintext port answered with HTTP 406, which proves neither a plaintext path nor enforcement. View diagnostics → Unverified
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability63
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 2831 tokens (~471/item across 6 items; 6 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management10
- Stability observed for 3 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.
remote · ffpipe.dev
claude mcp add --transport http dev-ffpipe-ffpipe https://ffpipe.dev/mcp
[mcp_servers.dev-ffpipe-ffpipe] url = "https://ffpipe.dev/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"dev-ffpipe-ffpipe": {
"type": "remote",
"url": "https://ffpipe.dev/mcp",
"enabled": true
}
}
} openclaw mcp add dev-ffpipe-ffpipe --url https://ffpipe.dev/mcp --transport streamable-http
mcp_servers:
dev-ffpipe-ffpipe:
url: "https://ffpipe.dev/mcp" {
"mcpServers": {
"dev-ffpipe-ffpipe": {
"type": "http",
"url": "https://ffpipe.dev/mcp"
}
}
} The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 19 Aug 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.
- 18 Aug 26 +7
- Authorization: unverified → partial ▲ security
- The server rewrote its instructions, which are the text every model session reads security
- The server changed its declared name: ffpipe-x402-gateway → ffpipe-gateway security
- Tool “get_job_status” rewrote its description, which is the text the model reads security
- Schema quality: 338 → 471 ▼ functional
- Schema quality: 1015 → 1265 ▼ functional
- Stability: unverified → 0.03 ▲ functional
- New tool “extract_frames” functional
- New tool “probe_media” functional
- New tool “get_balance” functional
- 17 Aug 26 56
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Aug 2026 · Probed https://ffpipe.dev/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=ffpipe.dev | CN=WE1,O=Google Trust Services,C=US | 13 Aug 2026 | 11 Nov 2026 | ECDSA 256 | ECDSA-SHA256 | ab781a23184501440e1ec965c393e1cf |
| SANs: ffpipe.dev, staging.ffpipe.dev, *.staging.ffpipe.dev | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
DNSSEC insecure
Validation of ffpipe.dev. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| dev. | present | 60074 | 8 | Verified |
| ffpipe.dev. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://ffpipe.dev/mcp | Verified | 200 | |
| http (plaintext) | http://ffpipe.dev/mcp | Inconclusive | 406 |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.
convert_video ~360
Queue an asynchronous video conversion: fetches sourceUrl (or, with upload: true, waits for you to PUT the bytes to the returned uploadUrl), converts to MP4 scaled to fit maxWidth x maxHeight (defaults 1920x1080, cap 4096). Returns { jobId, status: "queued" | "awaiting_upload", statusUrl, uploadUrl?, uploadExpiresAt? } - poll with get_job_status (jobId + the t token from statusUrl) until finished/error. Download results within 24 hours. Paid: $0.05 USDC via x402 (base mainnet), or a convert-kind retryVoucher.
| Name | Type | Req | Description |
|---|---|---|---|
| maxHeight | integer | – | Max output height, default 1080 |
| maxWidth | integer | – | Max output width, default 1920 |
| retryVoucher | string | – | Retry-voucher credential (`uuid.hmac`) from a failed paid job's status - pays for this call instead of x402. Single use, kind-matched. |
| sourceUrl | string | – | https URL of the input media (<= 100 MiB). Fetched from datacenter IP ranges - prefer a presigned URL from storage you control; no IP literals, no localhost/.internal/.local. Provide EXACTLY ONE of s… |
| upload | boolean | – | Set true to upload the bytes yourself instead of giving a sourceUrl (exactly one of the two). The paid result then returns status awaiting_upload plus uploadUrl and uploadExpiresAt: HTTP PUT the raw… |
No output schema declared.
No examples provided.
extract_frames ~810
Queue an asynchronous frame extraction - the tool to reach for when you need to SEE a video: fetches sourceUrl (or, with upload: true, waits for you to PUT the bytes to the returned uploadUrl) and extracts still frames as jpeg, webp or png. mode is REQUIRED and picks the sampling (all, every_nth, interval, keyframes, evenly_spaced, timestamps); there is no default because every candidate implies a rate you did not ask for. A finished job's resultUrl is a JSON MANIFEST: source display dimensions, fps, rotation, an echo of your parameters, frame_count, and one entry per frame with index, pts_time (seconds in the source) and its own download url on this gateway - fetch the manifest, then the frames you want. Up to 1000 frames per job; "all"/"interval" on a long source can exceed that and fail fast, so prefer interval, evenly_spaced or timestamps. Unreadable input, audio-only files and still images FAIL here (probe_media diagnoses those). Download within 24 hours. Paid: $0.03 USDC via x402 (base mainnet), or a frames-kind retryVoucher.
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | evenly_spaced only: how many frames to spread across the window. |
| endTime | number | – | Window end in seconds (0 or omitted = to the end); must exceed startTime. |
| format | string | – | Image format of each frame, default jpeg (small and accepted by every vision API). png is lossless. |
| fps | number | – | interval only: frames per second, may be below 1 (0.5 = one frame every two seconds). |
| maxFrames | integer | – | Ceiling on frames produced, default and hard limit 1000. A request whose sampling would exceed it fails before any decoding. |
| maxOutputHeight | integer | – | Fit box height, same rules as maxOutputWidth. |
| maxOutputWidth | integer | – | Fit box width applied to the source's DISPLAY dimensions: aspect preserved, never upscaled, oriented to the input. 0 = no limit on this axis. |
| mode | string | yes | How to pick frames (required): "all" every frame; "every_nth" every Nth decoded frame (needs n); "interval" a fixed rate in seconds (needs fps, may be below 1); "keyframes" keyframes only, cheap on l… |
| n | integer | – | every_nth only: keep every Nth DECODED frame (a frame index, not a time). |
| quality | integer | – | Encoder quality for jpeg/webp, default 85; ignored for png. |
| retryVoucher | string | – | Retry-voucher credential (`uuid.hmac`) from a failed paid job's status - pays for this call instead of x402. Single use, kind-matched. |
| sourceUrl | string | – | https URL of the input media (<= 100 MiB). Fetched from datacenter IP ranges - prefer a presigned URL from storage you control; no IP literals, no localhost/.internal/.local. Provide EXACTLY ONE of s… |
| startTime | number | – | Window start in seconds (default 0). |
| timestamps | array | – | timestamps only: seconds into the source, one accurate frame each. Sorted for you. |
| upload | boolean | – | Set true to upload the bytes yourself instead of giving a sourceUrl (exactly one of the two). The paid result then returns status awaiting_upload plus uploadUrl and uploadExpiresAt: HTTP PUT the raw… |
No output schema declared.
No examples provided.
get_balance Check your credit balance (free) ~145
Free. Reports the credit balance of the account this client is connected to, plus what one credit is worth, what each operation costs in credits, the monthly free allowance and whether a card is on file to unlock it. Takes no input: it reads the account behind the credential your client already connected with. If you have a connected account, paid tools are funded from this balance and never present a payment challenge - so call this to find out how much work you can still queue, and top up at the account page named in the answer. Anonymous callers (x402 buyers, who pay per call instead) have no balance and get an unauthorized error; either way nothing here is charged.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_job_status Get job status (free) ~186
Free status lookup for a job accepted by convert_video / probe_media / extract_frames. Requires the job's ownership token - the `t` query parameter of the statusUrl returned at acceptance (store the whole statusUrl; it cannot be regenerated). Status goes [awaiting_upload ->] queued -> finished | error; awaiting_upload jobs report uploadExpiresAt but NEVER the uploadUrl (that credential is handed out exactly once, in the acceptance result); finished jobs carry resultUrl/thumbnailUrl/durationMs (served by this gateway, free to re-download within 24 hours of completion; GET them following redirects); a failed charged job carries retryVoucher. A bad token and an unknown jobId both answer not_found, deliberately.
| Name | Type | Req | Description |
|---|---|---|---|
| jobId | string | yes | Job id from the acceptance |
| token | string | yes | Ownership token - the `t` query parameter of statusUrl |
No output schema declared.
No examples provided.
leave_feedback Request a capability / report a problem (free) ~299
Tell us what you needed. If ffpipe does not offer the operation you came for - another output format, extracting a frame, a different transformation entirely - say so here: these requests are aggregated and they drive directly what gets built next, so a one-line "I wanted X" is genuinely useful to us. Also the place for bug reports and any other feedback. Free, unauthenticated, and one-way: nothing is returned but an acknowledgement, and no job is created. Include jobId if a specific job prompted this (context only - it is not checked and is not required), and contact if you want a reply. Message limit 2000 characters.
| Name | Type | Req | Description |
|---|---|---|---|
| contact | string | – | Optional. An email or handle to reply at, up to 200 characters. Omit it and the submission stays anonymous. |
| jobId | string | – | Optional job id this relates to. Context only - ownership is NOT checked and no token is needed. |
| message | string | yes | What you wanted, what went wrong, or what you think. Plain text, 1 to 2000 characters. Be concrete: "needed a single frame as a jpeg at a given timestamp" is worth more to us than "more features". |
| type | string | – | What this is: "feature_request" for a capability ffpipe does not offer yet, "bug" for something broken, "feedback" for anything else. Defaults to "feedback". |
No output schema declared.
No examples provided.
probe_media ~713
Queue an asynchronous media inspection: fetches sourceUrl (or, with upload: true, waits for you to PUT the bytes to the returned uploadUrl) and returns its technical metadata as a downloadable file. In the default json format the result is the full raw analysis plus one added top-level "ffpipe_summary" object: container, duration_s, size_bytes, has_video, has_audio, video_codec, audio_codec, coded_width/height, display_width/height, rotation, fps, is_hdr, audio_channels, audio_sample_rate. USE display_width/display_height as the size the picture actually is - phones store portrait video as a landscape frame plus a rotation flag. A file that cannot be decoded is still a SUCCESS whose result carries the diagnosis. Returns { jobId, status, statusUrl, ... } - poll with get_job_status until finished/error, then download resultUrl within 24 hours. Paid: $0.01 USDC via x402 (base mainnet), or a probe-kind retryVoucher.
| Name | Type | Req | Description |
|---|---|---|---|
| countFrames | boolean | – | Count frames exactly. Requires decoding the whole file - slow on long sources. |
| countPackets | boolean | – | Count packets exactly. Same cost caveat as countFrames. |
| outputFormat | string | – | Format of the delivered analysis, default json. Only json carries the ffpipe_summary block; the rest are raw. flat is delivered as .txt. |
| readIntervals | string | – | Limit the analysis to a window, e.g. "%+60" (first 60 seconds), "30%+10" (10 seconds from 0:30), "%+#500" (first 500 packets). |
| retryVoucher | string | – | Retry-voucher credential (`uuid.hmac`) from a failed paid job's status - pays for this call instead of x402. Single use, kind-matched. |
| sections | array | – | Which sections to report. Default: format, streams, chapters. |
| selectStreams | string | – | Restrict the analysis to matching streams, e.g. "v:0" (first video stream) or "a" (all audio). |
| showEntries | string | – | Keep only the named fields, e.g. "frame=pict_type,pts_time,key_frame" or "format=duration". Section and field names only. |
| showFrames | boolean | – | Report per-FRAME detail. Large: a bounded window is applied for you unless you send readIntervals. Pair with showEntries to keep only the fields you need. |
| showPackets | boolean | – | Report per-PACKET detail. Same bounded-window treatment as showFrames. |
| sourceUrl | string | – | https URL of the input media (<= 100 MiB). Fetched from datacenter IP ranges - prefer a presigned URL from storage you control; no IP literals, no localhost/.internal/.local. Provide EXACTLY ONE of s… |
| summary | boolean | – | Keep the normalized ffpipe_summary block (json only). Default true; send false for byte-exact raw output. |
| upload | boolean | – | Set true to upload the bytes yourself instead of giving a sourceUrl (exactly one of the two). The paid result then returns status awaiting_upload plus uploadUrl and uploadExpiresAt: HTTP PUT the raw… |
No output schema declared.
No examples provided.