Tubask

OAuth & accounts

Every MCP client connection is linked to your Tubask account via OAuth 2.0. This ties usage to your API key, plan, and billing — without sharing passwords with the AI client.

How it works

  1. You add the MCP URL to Claude, Cursor, or another client.
  2. On the first tool call, the server responds with an authorization challenge.
  3. Your browser opens the Tubask signup or sign-in page.
  4. You review the request and choose Allow or Deny.
  5. A confirmation screen returns you to your AI client automatically.
  6. Subsequent requests use that token — no browser popup unless it expires.

MCP OAuth during signup

New users: signup → authorize → confirm (three screens, two clicks). If your free trial is exhausted, you'll add a YouTube API key before authorizing.

Keep the client tab open while authorizing in the browser — some clients need a retry after OAuth completes.

MCP clients by plan

  • Free — 1 connected MCP client at a time (e.g. Cursor or Claude).
  • Pro — up to 10 clients on the same account.
  • Team — unlimited clients.

Re-authorizing the same client does not count as a second connection. To switch clients on Free, revoke the old one in Settings or upgrade your plan.

One account, multiple clients (Pro+)

Pro and Team plans can connect Claude Code, Cursor, and Claude Desktop to the same Tubask account. Usage aggregates under your account for quota and billing.

Session expiry

If you see authorization expired or oauth_expired on the Connect page:

  • Remove and re-add the MCP connector in your client, or click Connect again in Cursor.
  • Complete OAuth in the browser when prompted.
  • Ensure you're signed into the correct Tubask account.

Switching accounts

To link a client to a different Tubask account, disconnect the MCP server in your client settings, sign out of Tubask in your browser, then reconnect and OAuth with the new account.

Security properties

  • Passwords are never sent to or stored by the MCP client.
  • Sessions use signed, time-limited cookies on the web app.
  • MCP tools are read-only — no posting, liking, or account changes on YouTube.

More detail in Security.