Is YTDL RMCP safe to install?

A server's blast radius is the most powerful thing each of its tools can do. This grades the tools it declares, read-only, not whether it is secure.

YTDL RMCP declares no high-impact capabilities that AxioRank flags. A minimal grade means a small blast radius, not an endorsement.

Keyword matches in tool descriptions and schemas. These are shown for transparency and are not part of the grade.

• highShell/command injection×5
• highPayment / fund-movement capability×3

Drop this into your MCP client config (Claude Desktop, Cursor, and others).

{
  "mcpServers": {
    "ai-dinglebear-ytdl-rmcp": {
      "command": "npx",
      "args": [
        "-y",
        "ytdl-rmcp@1.0.2"
      ]
    }
  }
}

The grade reflects the blast radius of what YTDL RMCP declares it can do, read-only, not whether it is secure or trustworthy, and not a judgment of the vendor. Maintain this server? Claim this listing or request a re-scan. See the methodology.