Y

Yap MCP

founden-bot/yap · v1.0.0 · Tools & Integrations

by founden-botAwesome AI Plugins

MCP server: transcribes local audio and video files on your own computer for Claude Code, Cursor and other MCP clients, with on-device speech recognition, no upload and no API key

Protect this install with HOL Guard

Guard checks the skills and MCP servers a plugin adds on your machine and asks you before a risky action runs. The scores above are free, and no plan changes them.

Is Yap MCP a fit?

From the plugin's manifest and HOL's scan. Anything the plugin does not declare is shown as not declared.

Works with

  • Claude Code
  • MCP
  • Cursor
  • Antigravity CLI
  • Agent Plugin
  • 1 skill
  • 1 MCP server

Before you install

Sign-in
Not declared
Declared access
Not declared
License
MIT

Check before relying on it

  • Some security checks did not finish: Cisco skill scan and Cisco MCP scan. See the evidence
  • The publisher has not verified ownership on HOL.

What is Yap MCP?

Yap MCP is a published tools & integrations plugin for AI coding agents that works with Claude Code, MCP, Cursor, Antigravity CLI and Agent Plugin, developed by founden-bot and distributed through the HOL AI plugin registry. MCP server: transcribes local audio and video files on your own computer for Claude Code, Cursor and other MCP clients, with on-device speech recognition, no upload and no API key.

Canonical slug
founden-bot/yap
Version
v1.0.0 · updated Nov 2, 2026

Registry snapshot

Owner verification
Not verified
Marketplace source
.claude-plugin/marketplace.json
Scanner
HOL plugin scanner
Security result
Partial scan
Digest verified
Yes
1 bundled skillRead, copy or download each SKILL.mdOpen skills

Trust and security

Trust & reputation

79

HOL Trust Score

Per-metric points (0–100 each) combined via a weighted average into the overall score.

Installability
100/100
Maintenance
100/100
MCP server setup
100/100
Plugin Security
90/100
Provenance
70/100
Publisher Quality
75/100

Provenance

Plugin root
.
Source repo
https://github.com/founden-bot/yap-mcp
Source commit
ebb20c9b6b5d…
Publisher verified
No
Owner verified
Not owner verified
Agent Plugins 1.0
Ready (structural check)

Continuous scanner CI not detected

This plugin remains listed. Its overall trust score is reduced by 10% because security checks are not maintained in the source repository's CI.

Optional: maintain the scanner in the source repository's CI to receive the full trust score. Listing does not require that change.

README badge not detected

Plugin owners can add the HOL badge to the repository README from Guard Plugins. Distribution, not security evidence. It adds a 2% engagement adjustment to the overall trust score and never changes the security result.

Partial scan
Security result
90
Score from finished checks
0
High findings

Some checks did not finish: Cisco skill scan and Cisco MCP scan. No blocking issue was found in the checks that did finish, but this is not a passed scan.

Provider
codex-plugin-scanner
Grade
A · Excellent
Version
3.24.2
codex:hol-plugin-scanner-7C90OV / cisco-skill-scanner: failedcodex:hol-plugin-scanner-7C90OV / cisco-mcp-scanner: unavailable

[claude:.] Claude Plugin

18/18

5 checks

[claude:.] Security

20/20

6 checks

[claude:.] Operational Security

3/6

5 checks

[claude:.] Code Quality

10/10

2 checks

[codex:.] Manifest Validation

25/31

9 checks

[codex:.] Security

20/20

9 checks

[codex:.] Operational Security

3/6

5 checks

[codex:.] Best Practices

9/12

5 checks

[codex:.] Marketplace

N/A

3 checks · not applicable

[codex:.] Skill Security

5/5

4 checks

[codex:.] Code Quality

10/10

2 checks

[gemini:.] Gemini Extension

10/10

3 checks

[gemini:.] Security

20/20

6 checks

[gemini:.] Operational Security

3/6

5 checks

[gemini:.] Code Quality

10/10

2 checks

Published advisories

None matched in GitHub security advisories, checked . This covers published advisories only, not problems nobody has reported.

GitHub security advisories are those the source repository has published.

Findings

lowoperational-securityDEPENDABOT_MISSINGReported 3 times

Automation or dependency surfaces exist, but .github/dependabot.yml is missing.

Add Dependabot updates for GitHub Actions and dependency manifests.

infomanifest-validationPLUGIN_JSON_INTERFACE_SHORTDESCRIPTION

The interface object is missing a valid "shortDescription" value.

Add a valid "shortDescription" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_LONGDESCRIPTION

The interface object is missing a valid "longDescription" value.

Add a valid "longDescription" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_CATEGORY

The interface object is missing a valid "category" value.

Add a valid "category" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_CAPABILITIES

The interface object is missing a valid "capabilities" value.

Add a valid "capabilities" field to the interface metadata.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_WEBSITEURL

The interface field "websiteURL" must use HTTPS or point to a safe in-repo asset.

Update "websiteURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_PRIVACYPOLICYURL

The interface field "privacyPolicyURL" must use HTTPS or point to a safe in-repo asset.

Update "privacyPolicyURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_TERMSOFSERVICEURL

The interface field "termsOfServiceURL" must use HTTPS or point to a safe in-repo asset.

Update "termsOfServiceURL" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_COMPOSERICON

The interface field "composerIcon" must use HTTPS or point to a safe in-repo asset.

Update "composerIcon" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_LOGO

The interface field "logo" must use HTTPS or point to a safe in-repo asset.

Update "logo" to use HTTPS or an existing relative asset path.

infomanifest-validationPLUGIN_JSON_INTERFACE_ASSET_SCREENSHOTS

The interface field "screenshots" must use HTTPS or point to a safe in-repo asset.

Update "screenshots" to use HTTPS or an existing relative asset path.

infobest-practicesCODEXIGNORE_MISSING

A .codexignore file helps prevent accidental inclusion of local artifacts and secrets.

Add a .codexignore file with generated assets, local state, and secret paths.

Install guidance

Install in Claude Code

Install through the Claude Code plugin marketplace.

Claude Code plugin docs

Optional: install HOL Guard for Claude Code first, so it can check this plugin's tools on your machine before Claude Code uses them.

  1. 1

    Add the marketplace

    Run this inside a Claude Code session. It registers the marketplace manifest shipped at the repository root. If the repository ships none, add the generated entry from the Advanced section below first.

    claude code
  2. 2

    Install the plugin

    Installs the yap entry from the yap marketplace.

    claude code
  3. 3

    Scripted alternative

    Non-interactive equivalent for scripts and CI pipelines. Add --scope project to pin the install to one repository.

    shell
  4. 4

    Check it is installed

    Lists installed plugins. The entry should appear as enabled.

    shell

To remove it later, run claude plugin uninstall yap@yap.

Did setup work in Claude Code?

No setup reports for Claude Code yet. Self-reported by signed-in visitors. Copying a command is not counted, and most installs are never reported.

Attested installs: Fewer than 10 attested installs of this plugin in week 2026-W44, so no number is shown. Counted from opt-in HOL Guard install reports, once per machine and runtime, and never mixed with the answers above. How install reports work.

Loading reviews

Plugin manifest

{
  "name": "yap",
  "version": "1.0.0",
  "description": "Private, on-device speech to text: transcribe local audio files and search your Yap dictations. No upload, no API key.",
  "author": {
    "name": "Yap (O-mega Enterprise Inc.)",
    "email": "[email protected]",
    "url": "https://yapapp.cc"
  },
  "homepage": "https://yapapp.cc/mcp",
  "repository": "https://github.com/founden-bot/yap-mcp",
  "license": "MIT",
  "keywords": [
    "speech-to-text",
    "transcription",
    "audio",
    "dictation",
    "offline",
    "privacy",
    "mcp"
  ],
  "interface": {
    "displayName": "yap",
    "developerName": "founden-bot"
  },
  "skills": "./",
  "mcpServers": "./.registry/mcp.json",
  "holManifestOrigin": "repository",
  "registryIndexVersion": 9
}

Marketplace source

Repo URL
https://github.com/founden-bot/yap-mcp
Marketplace path
.claude-plugin/marketplace.json
Source path
.
Install policy
Unspecified

Skills

1 SKILL.md file ship with this plugin. Preview, copy, or download each one, then install them with the Skills CLI.

Share
skills-cli
  • transcribe-recordings

    skills/transcribe-recordings/SKILL.md

    Turn local voice memos, meeting, interview, lecture or podcast recordings into transcripts, notes, summaries or action items, privately on the user's computer, using the Yap MCP tools (transcribe_audio, search_dictations). Use when the user mentions an audio or video file, a recording, a voice memo, or something they dictated earlier.

    SKILL.md content is not in this snapshot. Open the raw file to copy it from the source repository.

File inventory

.claude-plugin/marketplace.json

file

657 bytes

58a2bdf332736187…

.claude-plugin/plugin.json

file

512 bytes

042b3b598112e44e…

.codex-plugin/plugin.json

plugin-manifest

637 bytes

78a719dbf373887d…

.mcp.json

file

107 bytes

f0b2e63b7841781b…

.registry/mcp.json

mcp-config

87 bytes

57e565f76667b673…

gemini-extension.json

file

282 bytes

6cb4495c023f0540…

LICENSE

file

1,472 bytes

a537d4210a75d87b…

package-lock.json

file

64,494 bytes

84e15e66a375a6dd…

package.json

file

1,491 bytes

16c9fe69f3f03538…

plugin.json

file

587 bytes

cac0621514bdab97…

README.md

file

4,246 bytes

a83eccc2d5bd158b…

SECURITY.md

file

438 bytes

8174eb599ecd2c44…

skills/transcribe-recordings/SKILL.md

skill

2,412 bytes

0b376bfe15e0f2ff…

Yap MCP — Frequently asked questions

What is Yap MCP?
Yap MCP is an AI plugin in the HOL registry. MCP server: transcribes local audio and video files on your own computer for Claude Code, Cursor and other MCP clients, with on-device speech recognition, no upload and no API key.
How do I install Yap MCP?
Install Yap MCP in your harness: Claude Code — /plugin marketplace add founden-bot/yap-mcp; Cursor — npx [email protected] add founden-bot/yap-mcp; Antigravity CLI — npx [email protected] add founden-bot/yap-mcp. Full step-by-step guidance is on the HOL plugin page.
How do I install Yap MCP in HOL Guard?
To install Yap MCP in HOL Guard, start with hol-guard plugin install founden-bot/yap --apply. The complete step-by-step install guide for HOL Guard is on the HOL plugin page.
How do I install Yap MCP in Claude Code?
To install Yap MCP in Claude Code, start with /plugin marketplace add founden-bot/yap-mcp. The complete step-by-step install guide for Claude Code is on the HOL plugin page.
How do I install Yap MCP in Cursor?
To install Yap MCP in Cursor, start with npx [email protected] add founden-bot/yap-mcp. The complete step-by-step install guide for Cursor is on the HOL plugin page.
How is the Trust Score for Yap MCP computed?
Yap MCP has a HOL Trust Score of 79 out of 100. The score is a weighted sum of six components from a static scan of the source, capped for high-severity findings and adjusted by two disclosed policies. Memberships and payments are not inputs, and a scan is not a safety guarantee. Full breakdown: https://hol.org/registry/plugins/founden-bot%2Fyap/trust
Who publishes Yap MCP?
Yap MCP is published by founden-bot and listed on HOL.

Directory acceptance

Listed in 0 of 5 directory lists

Read from the list each directory publishes on GitHub. Being listed means the directory accepted the plugin; it is not a HOL security rating.

Lists last read . HOL re-reads them every day.

Submitting it? Check it against each directory's rules

Install signal

HOL cannot see every install. These are separate signals from different sources, so they are not added together. Counts under each floor show as <N.

Install commands issued here
<5
HOL Guard install commands issued from this listing, last 28 days.
Opt-in install reports
<10
Machines that reported installing it through HOL Guard in week 2026-W44. Reporting is opt-in, so most installs are not counted.
HOL Guard workspaces
<5
Workspaces that approved it or include it in an approved-plugin feed, as of today.

Reviews and similar plugins