This release patches 1 CVE for security teams tracking exposure across their dependency inventory.
Topics
+4 more
Affected surfaces
Summary
AI summaryEdit Mind adds a public REST API, MCP server for AI assistants, and access token management.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
REST API exposes video library endpoints for programmatic access. REST API exposes video library endpoints for programmatic access. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low |
— |
| Feature | Medium |
MCP server wraps REST API as tools for AI assistants like Claude and Cursor. MCP server wraps REST API as tools for AI assistants like Claude and Cursor. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low |
— |
| Feature | Medium |
Access token management allows creation with custom names, scopes, and expiry. Access token management allows creation with custom names, scopes, and expiry. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low |
— |
| Feature | Medium |
Install script simplifies setup of Edit Mind and MCP server. Install script simplifies setup of Edit Mind and MCP server. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low |
— |
| Feature | Medium |
REST API exposes endpoints to list, retrieve videos, search scenes, manage collections, get suggestions, and serve media. REST API exposes endpoints to list, retrieve videos, search scenes, manage collections, get suggestions, and serve media. Source: granite4.1:30b@2026-05-20-audit Confidence: low |
— |
| Feature | Medium |
MCP server provides AI‑assistant tools for searching video scenes, browsing videos/collections, retrieving suggestions, and displaying media inline. MCP server provides AI‑assistant tools for searching video scenes, browsing videos/collections, retrieving suggestions, and displaying media inline. Source: granite4.1:30b@2026-05-20-audit Confidence: low |
— |
| Feature | Low |
Access token management allows creating tokens with custom names, expiry dates, and fine‑grained scopes; tracks last use details. Access token management allows creating tokens with custom names, expiry dates, and fine‑grained scopes; tracks last use details. Source: granite4.1:30b@2026-05-20-audit Confidence: low |
— |
| Bugfix | Medium |
Video transcoding codec errors now display clear failure reasons in UI. Video transcoding codec errors now display clear failure reasons in UI. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: high |
— |
| Bugfix | Medium |
Video chat results no longer fail due to race condition loading metadata. Video chat results no longer fail due to race condition loading metadata. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low |
— |
| Bugfix | Medium |
Model selection fixed to correctly prioritize backends. Model selection fixed to correctly prioritize backends. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low |
— |
| Bugfix | Medium |
Job progress tracking added for embedding and analysis stages. Job progress tracking added for embedding and analysis stages. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low |
— |
| Bugfix | Medium |
Worker reliability improved with lock management, stall detection, sequential embedding. Worker reliability improved with lock management, stall detection, sequential embedding. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low |
— |
| Bugfix | Medium |
Path validator issues resolved. Path validator issues resolved. Source: granite4.1:8b-q6_K@2026-05-19 Confidence: low |
— |
| Bugfix | Medium |
Race condition causing video chat results to fail rendering is fixed. Race condition causing video chat results to fail rendering is fixed. Source: granite4.1:30b@2026-05-20-audit Confidence: low |
— |
| Bugfix | Medium |
Model selection logic now correctly prioritizes available backends. Model selection logic now correctly prioritizes available backends. Source: granite4.1:30b@2026-05-20-audit Confidence: low |
— |
Full changelog
Overview
This release delivers the most-requested feature, CLI and API access to your Edit Mind library (closes #109), alongside an MCP server for AI assistant integration, access token management, and a batch of reliability fixes.
Features
REST API (/api/v0)
Edit Mind now exposes a public REST API from the background-jobs service so you can query your library programmatically:
| Endpoint | Description |
|---|---|
| GET /api/v0/videos | List videos with metadata and thumbnails |
| GET /api/v0/videos/:id | Get a single video with all its scenes |
| POST /api/v0/search | Semantic search across video scenes |
| GET /api/v0/collections | List AI-generated collections |
| GET /api/v0/collections/:id | Get a collection with its video items |
| GET /api/v0/suggestions | Search suggestions and popular queries |
| GET /api/v0/media | Serve media files (images, thumbnails) |
All routes are protected by Bearer token authentication with scope-based authorization.
MCP Server
A standalone MCP server (edit-mind-mcp) wraps the REST API and exposes your video library as tools for AI assistants like Claude and Cursor:
search_video_scenes— semantic search with location and aspect ratio filterslist_videos/get_video— browse and inspect your librarylist_collections/get_collection— explore AI-generated collectionsget_suggestions— discover available contentview_media— display thumbnail images inline in the AI chat
The MCP binary is bundled into a single file and attached to every release. To add it to Claude Code, run the install script:
curl -fsSL https://raw.githubusercontent.com/IliasHad/edit-mind/main/scripts/install-mcp.sh | bash
Access Token Management
Create and manage personal access tokens from the Settings page. Each token supports:
- Custom name with optional expiry date
- Fine-grained scope selection
- Last-used tracking (timestamp, IP, user-agent)
Install Script
A new scripts/install-mcp.sh makes it easy to set up Edit Mind and its MCP server on your machine or server.
Bug Fixes
- Video transcoding codec errors now surface in the UI with a clear failure reason instead of silently failing (#130)
- Video chat results no longer fail to render due to a race condition when loading video metadata (#131)
- Job progress tracking added for embedding and analysis stages for better visibility into processing status
- Worker reliability improved with better lock management, stall detection, and sequential embedding processing
- Model selection fixed to correctly prioritize backends
- Path validator issues resolved
Full Changelog: https://github.com/IliasHad/edit-mind/compare/v0.21.0...v0.22.0
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About edit-mind
Local-first AI video intelligence platform. Index your video library with multi-modal analysis (YOLO, DeepFace, Whisper), search semantically via natural language, Docker-ready.
Beta — feedback welcome: [email protected]