Give your agent video editing in one request.

const file = document.querySelector("input[type=file]").files[0]

const signed = await fetch("https://kinopipe.com/api/v1/uploads", {
  method: "POST",
  headers: {
    Authorization: `Bearer ${process.env.KINOPIPE_API_KEY}`,
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
    filename: "source.mp4",
    contentType: "video/mp4",
    byteSize: file.size,
  }),
}).then((response) => response.json())

const body = new FormData()
for (const [name, value] of Object.entries(signed.upload.fields)) {
  body.append(name, value)
}
body.append("file", file)

await fetch(signed.upload.uploadUrl, { method: "POST", body })

// Use this URL in inputs[].url within 24 hours.
console.log(signed.upload.mediaUrl)

Agent configuration

Add the URL to an OAuth-capable MCP client. KinoPipe opens a secure sign-in and consent screen automatically—no API key to paste. Bearer API keys remain supported for clients that need manual headers.

{
  "mcpServers": {
    "kinopipe": {
      "url": "https://kinopipe.com/mcp"
    }
  }
}

{
  "name": "social-cut",
  "inputs": [{
    "id": "main",
    "url": "https://example.com/source.mp4",
    "filename": "source.mp4"
  }],
  "operations": [
    { "type": "trim", "start": 2, "end": 17 },
    {
      "type": "resize",
      "width": 1080,
      "height": 1920,
      "fit": "cover"
    }
  ],
  "output": { "format": "mp4", "quality": "balanced" }
}

Read job status

Poll the returned statusUrl with the same API key until the status is succeeded or failed.

{
  "ok": true,
  "job": {
    "id": "f7541d5e-…",
    "status": "succeeded",
    "progress": 100,
    "consumedCredits": 3
  },
  "result": {
    "output": {
      "downloadUrl": "https://cdn.kinopipe.com/…",
      "contentType": "video/mp4",
      "byteSize": 437021,
      "filename": "output.mp4"
    },
    "outputs": [{
      "downloadUrl": "https://cdn.kinopipe.com/…",
      "contentType": "video/mp4",
      "byteSize": 437021,
      "filename": "output.mp4"
    }],
    "runtimeMs": 2501
  }
}

Supported operations

Add a webhook to the request

{
  "inputs": [{ "id": "main", "url": "https://example.com/source.mp4" }],
  "options": { "start": 0, "end": 12 },
  "webhook": {
    "url": "https://api.example.com/webhooks/kinopipe",
    "secret": "replace-with-at-least-16-characters",
    "events": ["job.succeeded", "job.failed"]
  }
}

Payload

{
  "id": "6f0462da-…",
  "event": "job.succeeded",
  "createdAt": "2026-08-24T14:42:18.000Z",
  "data": {
    "job": {
      "id": "f7541d5e-…",
      "status": "succeeded",
      "consumedCredits": 3
    },
    "result": {
      "output": { "downloadUrl": "https://cdn.kinopipe.com/…" },
      "runtimeMs": 2501
    }
  }
}

Verify the signature

Read the raw request body. Compute HMAC-SHA256 over timestamp.rawBody and compare it with the v1 value.

import { createHmac, timingSafeEqual } from "node:crypto"

export function verifyKinoPipeWebhook(rawBody, signatureHeader, secret) {
  const fields = Object.fromEntries(
    signatureHeader.split(",").map((part) => part.split("=")),
  )
  const expected = createHmac("sha256", secret)
    .update(`${fields.t}.${rawBody}`)
    .digest("hex")

  const received = Buffer.from(fields.v1 ?? "", "hex")
  const computed = Buffer.from(expected, "hex")

  return received.length === computed.length
    && timingSafeEqual(received, computed)
}

{
  "error": "invalid_webhook",
  "message": "Webhook URL must resolve only to public addresses"
}