ffpipe — video conversion, probe & frames
REMOTE · FFPIPE.DEV · SCANNED OCT 15
Convert, probe, and split video into frames — real FFmpeg, paid per job with x402 on Base.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security63
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- No authorisation is required to call this server. Every tool declares its destructiveHint and none is destructive, so open access doesn't expose one. See how to fix → View diagnostics → Partial
- HTTPS enforcement could not be verified: the plaintext port answered with HTTP 405, which proves neither a plaintext path nor enforcement. View diagnostics → Unverified
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability63
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 2925 tokens (~487/item across 6 items; 6 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
- No destabilizing schema changes in the last 30 days.Pass
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 6 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 7 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
How do I install the ffpipe — video conversion, probe & frames MCP server?
ffpipe — video conversion, probe & frames is a hosted endpoint at https://ffpipe.dev/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · ffpipe.dev
claude mcp add --transport http dev-ffpipe-ffpipe 'https://ffpipe.dev/mcp'
{
"mcpServers": {
"dev-ffpipe-ffpipe": {
"url": "https://ffpipe.dev/mcp"
}
}
} {
"servers": {
"dev-ffpipe-ffpipe": {
"type": "http",
"url": "https://ffpipe.dev/mcp"
}
}
} [mcp_servers.dev-ffpipe-ffpipe] url = "https://ffpipe.dev/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"dev-ffpipe-ffpipe": {
"type": "remote",
"url": "https://ffpipe.dev/mcp",
"enabled": true
}
}
} openclaw mcp add dev-ffpipe-ffpipe --url 'https://ffpipe.dev/mcp' --transport streamable-http
mcp_servers:
dev-ffpipe-ffpipe:
url: "https://ffpipe.dev/mcp" {
"McpServers": {
"dev-ffpipe-ffpipe": {
"Transport": "http",
"Url": "https://ffpipe.dev/mcp"
}
}
} assistant mcp add dev-ffpipe-ffpipe -t streamable-http -u 'https://ffpipe.dev/mcp'
{
"mcpServers": {
"dev-ffpipe-ffpipe": {
"type": "http",
"url": "https://ffpipe.dev/mcp"
}
}
} The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 30 Sept 26 0
- Tool “get_job_status” rewrote its description, which is the text the model reads security
- 28 Sept 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 25 Sept 26 0
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
- 17 Sept 26 0
- Tool “extract_frames” rewrote its description, which is the text the model reads security
- 16 Sept 26 +1
- Stability: 0.97 → pass security
- 14 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 90 to 93. That category is still filling its 30-day observation window: 27 days of observed history at the previous scan, 28 at this one. The score rises as the window fills, whether or not the server changes.
- 12 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 83 to 87. That category is still filling its 30-day observation window: 25 days of observed history at the previous scan, 26 at this one. The score rises as the window fills, whether or not the server changes.
- 8 Sept 26 0
- Tool “convert_video” rewrote its description, which is the text the model reads security
- Tool “extract_frames” rewrote its description, which is the text the model reads security
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 15 Oct 2026 · Probed https://ffpipe.dev/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=ffpipe.dev | CN=WE1,O=Google Trust Services,C=US | 11 Oct 2026 | 9 Jan 2027 | ECDSA 256 | ECDSA-SHA256 | fe01bbb02a0d5a690e14f7925b755345 |
| SANs: ffpipe.dev, *.ffpipe.dev | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of ffpipe.dev. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| dev. | present | 60074 | 8 | Verified |
| ffpipe.dev. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://ffpipe.dev/mcp | Verified | 200 | |
| http (plaintext) | http://ffpipe.dev/mcp | Inconclusive | 405 |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
convert_video ~360
Queue an asynchronous video conversion: fetches sourceUrl (or, with upload: true, waits for you to PUT the bytes to the returned uploadUrl), converts to MP4 scaled to fit maxWidth x maxHeight (defaults 1920x1080, cap 4096). Returns { jobId, status: "queued" | "awaiting_upload", statusUrl, uploadUrl?, uploadExpiresAt? } - poll with get_job_status (jobId + the t token from statusUrl) until finished/error. Download results within 24 hours. Paid: $0.02 USDC via x402 (base mainnet), or a convert-kind retryVoucher.
| Name | Type | Req | Description |
|---|---|---|---|
| maxHeight | integer | – | Max output height, default 1080 |
| maxWidth | integer | – | Max output width, default 1920 |
| retryVoucher | string | – | Retry-voucher credential (`uuid.hmac`) from a failed paid job's status - pays for this call instead of x402. Single use, kind-matched. |
| sourceUrl | string | – | https URL of the input media (<= 100 MiB). Fetched from datacenter IP ranges - prefer a presigned URL from storage you control; no IP literals, no localhost/.internal/.local. Provide EXACTLY ONE of s… |
| upload | boolean | – | Set true to upload the bytes yourself instead of giving a sourceUrl (exactly one of the two). The paid result then returns status awaiting_upload plus uploadUrl and uploadExpiresAt: HTTP PUT the raw… |
No output schema declared.
No examples provided.
extract_frames ~893
Queue an asynchronous frame extraction - the tool to reach for when you need to SEE a video: fetches sourceUrl (or, with upload: true, waits for you to PUT the bytes to the returned uploadUrl) and extracts still frames as jpeg, webp or png. mode is REQUIRED and picks the sampling (all, every_nth, interval, keyframes, evenly_spaced, timestamps); there is no default because every candidate implies a rate you did not ask for. A finished job's resultUrl is a JSON MANIFEST: source display dimensions, fps, rotation, an echo of your parameters, frame_count, and one entry per frame with index, pts_time (seconds in the source) and its own download url on this gateway - fetch the manifest, then the frames you want. Need just ONE frame at a moment - a thumbnail, poster frame or screenshot at a given second? Use mode "timestamps" with a single value, e.g. timestamps=[5], format=jpeg; the result is still a one-entry manifest pointing at that image (if you would rather have the image bytes returned directly instead of via a manifest, tell us with leave_feedback - demand decides whether we add it). Up to 1000 frames per job; "all"/"interval" on a long source can exceed that and fail fast, so prefer interval, evenly_spaced or timestamps. Unreadable input, audio-only files and still images FAIL here (probe_media diagnoses those). Download within 24 hours. Paid: $0.01 USDC via x402 (base mainnet), or a frames-kind retryVoucher.
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | evenly_spaced only: how many frames to spread across the window. |
| endTime | number | – | Window end in seconds (0 or omitted = to the end); must exceed startTime. |
| format | string | – | Image format of each frame, default jpeg (small and accepted by every vision API). png is lossless. |
| fps | number | – | interval only: frames per second, may be below 1 (0.5 = one frame every two seconds). |
| maxFrames | integer | – | Ceiling on frames produced, default and hard limit 1000. A request whose sampling would exceed it fails before any decoding. |
| maxOutputHeight | integer | – | Fit box height, same rules as maxOutputWidth. |
| maxOutputWidth | integer | – | Fit box width applied to the source's DISPLAY dimensions: aspect preserved, never upscaled, oriented to the input. 0 = no limit on this axis. |
| mode | string | yes | How to pick frames (required): "all" every frame; "every_nth" every Nth decoded frame (needs n); "interval" a fixed rate in seconds (needs fps, may be below 1); "keyframes" keyframes only, cheap on l… |
| n | integer | – | every_nth only: keep every Nth DECODED frame (a frame index, not a time). |
| quality | integer | – | Encoder quality for jpeg/webp, default 85; ignored for png. |
| retryVoucher | string | – | Retry-voucher credential (`uuid.hmac`) from a failed paid job's status - pays for this call instead of x402. Single use, kind-matched. |
| sourceUrl | string | – | https URL of the input media (<= 100 MiB). Fetched from datacenter IP ranges - prefer a presigned URL from storage you control; no IP literals, no localhost/.internal/.local. Provide EXACTLY ONE of s… |
| startTime | number | – | Window start in seconds (default 0). |
| timestamps | array | – | timestamps only: seconds into the source, one accurate frame each. Sorted for you. |
| upload | boolean | – | Set true to upload the bytes yourself instead of giving a sourceUrl (exactly one of the two). The paid result then returns status awaiting_upload plus uploadUrl and uploadExpiresAt: HTTP PUT the raw… |
No output schema declared.
No examples provided.
get_balance Check your credit balance (free) ~145
Free. Reports the credit balance of the account this client is connected to, plus what one credit is worth, what each operation costs in credits, the monthly free allowance and whether a card is on file to unlock it. Takes no input: it reads the account behind the credential your client already connected with. If you have a connected account, paid tools are funded from this balance and never present a payment challenge - so call this to find out how much work you can still queue, and top up at the account page named in the answer. Anonymous callers (x402 buyers, who pay per call instead) have no balance and get an unauthorized error; either way nothing here is charged.
Input schema present but exposes no named parameters.
No output schema declared.
No examples provided.
get_job_status Get job status (free) ~197
Free status lookup for a job accepted by convert_video / probe_media / extract_frames. Requires the job's ownership token - the `t` query parameter of the statusUrl returned at acceptance (store the whole statusUrl; it cannot be regenerated). Status goes [awaiting_upload ->] queued -> finished | error; awaiting_upload jobs report uploadExpiresAt but NEVER the uploadUrl (that credential is handed out exactly once, in the acceptance result); finished jobs carry resultUrl/thumbnailUrl/durationMs (always served by this gateway, never a redirect; free to re-download within 24 hours of completion); a failed charged job (including one that could not be queued after payment) carries retryVoucher. A bad token and an unknown jobId both answer not_found, deliberately.
| Name | Type | Req | Description |
|---|---|---|---|
| jobId | string | yes | Job id from the acceptance |
| token | string | yes | Ownership token - the `t` query parameter of statusUrl |
No output schema declared.
No examples provided.
leave_feedback Request a capability / report a problem (free) ~299
Tell us what you needed. If ffpipe does not offer the operation you came for - another output format, extracting a frame, a different transformation entirely - say so here: these requests are aggregated and they drive directly what gets built next, so a one-line "I wanted X" is genuinely useful to us. Also the place for bug reports and any other feedback. Free, unauthenticated, and one-way: nothing is returned but an acknowledgement, and no job is created. Include jobId if a specific job prompted this (context only - it is not checked and is not required), and contact if you want a reply. Message limit 2000 characters.
| Name | Type | Req | Description |
|---|---|---|---|
| contact | string | – | Optional. An email or handle to reply at, up to 200 characters. Omit it and the submission stays anonymous. |
| jobId | string | – | Optional job id this relates to. Context only - ownership is NOT checked and no token is needed. |
| message | string | yes | What you wanted, what went wrong, or what you think. Plain text, 1 to 2000 characters. Be concrete: "needed a single frame as a jpeg at a given timestamp" is worth more to us than "more features". |
| type | string | – | What this is: "feature_request" for a capability ffpipe does not offer yet, "bug" for something broken, "feedback" for anything else. Defaults to "feedback". |
No output schema declared.
No examples provided.
probe_media ~713
Queue an asynchronous media inspection: fetches sourceUrl (or, with upload: true, waits for you to PUT the bytes to the returned uploadUrl) and returns its technical metadata as a downloadable file. In the default json format the result is the full raw analysis plus one added top-level "ffpipe_summary" object: container, duration_s, size_bytes, has_video, has_audio, video_codec, audio_codec, coded_width/height, display_width/height, rotation, fps, is_hdr, audio_channels, audio_sample_rate. USE display_width/display_height as the size the picture actually is - phones store portrait video as a landscape frame plus a rotation flag. A file that cannot be decoded is still a SUCCESS whose result carries the diagnosis. Returns { jobId, status, statusUrl, ... } - poll with get_job_status until finished/error, then download resultUrl within 24 hours. Paid: $0.01 USDC via x402 (base mainnet), or a probe-kind retryVoucher.
| Name | Type | Req | Description |
|---|---|---|---|
| countFrames | boolean | – | Count frames exactly. Requires decoding the whole file - slow on long sources. |
| countPackets | boolean | – | Count packets exactly. Same cost caveat as countFrames. |
| outputFormat | string | – | Format of the delivered analysis, default json. Only json carries the ffpipe_summary block; the rest are raw. flat is delivered as .txt. |
| readIntervals | string | – | Limit the analysis to a window, e.g. "%+60" (first 60 seconds), "30%+10" (10 seconds from 0:30), "%+#500" (first 500 packets). |
| retryVoucher | string | – | Retry-voucher credential (`uuid.hmac`) from a failed paid job's status - pays for this call instead of x402. Single use, kind-matched. |
| sections | array | – | Which sections to report. Default: format, streams, chapters. |
| selectStreams | string | – | Restrict the analysis to matching streams, e.g. "v:0" (first video stream) or "a" (all audio). |
| showEntries | string | – | Keep only the named fields, e.g. "frame=pict_type,pts_time,key_frame" or "format=duration". Section and field names only. |
| showFrames | boolean | – | Report per-FRAME detail. Large: a bounded window is applied for you unless you send readIntervals. Pair with showEntries to keep only the fields you need. |
| showPackets | boolean | – | Report per-PACKET detail. Same bounded-window treatment as showFrames. |
| sourceUrl | string | – | https URL of the input media (<= 100 MiB). Fetched from datacenter IP ranges - prefer a presigned URL from storage you control; no IP literals, no localhost/.internal/.local. Provide EXACTLY ONE of s… |
| summary | boolean | – | Keep the normalized ffpipe_summary block (json only). Default true; send false for byte-exact raw output. |
| upload | boolean | – | Set true to upload the bytes yourself instead of giving a sourceUrl (exactly one of the two). The paid result then returns status awaiting_upload plus uploadUrl and uploadExpiresAt: HTTP PUT the raw… |
No output schema declared.
No examples provided.
What is the ffpipe — video conversion, probe & frames MCP server?
ffpipe — video conversion, probe & frames is an MCP server listed in the public MCP registry as dev.ffpipe/ffpipe. Convert, probe, and split video into frames, real FFmpeg, paid per job with x402 on Base. This page covers its hosted endpoint (https://ffpipe.dev/mcp).
Is the ffpipe — video conversion, probe & frames MCP server safe to use?
ffpipe — video conversion, probe & frames scores 79 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the ffpipe — video conversion, probe & frames MCP server expose?
ffpipe — video conversion, probe & frames exposes 6 tools: convert_video, probe_media, extract_frames, get_job_status, get_balance, leave_feedback. Their descriptions and schemas cost roughly 2,607 tokens of context every time the server is loaded.
Does the ffpipe — video conversion, probe & frames MCP server require authentication?
No. We connected to ffpipe — video conversion, probe & frames without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the ffpipe — video conversion, probe & frames MCP server still maintained?
ffpipe — video conversion, probe & frames is still listed as active in the MCP registry. We last reached this channel on 15 October 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.