Back to Browse

Postforme Mcp Pro MCP Server

Developer ToolsUse Caution4.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Publish, schedule and analyze social posts across 9 platforms via the Post for Me API.

About

Publish, schedule and analyze social posts across 9 platforms via the Post for Me API.

Security Report

4.2
Use Caution4.2High Risk

This MCP server has solid security practices for its purpose: API key authentication is required and properly stored in environment variables, input validation uses Zod schemas, and sensitive operations are properly gated. The server appropriately restricts file uploads to known media types and validates remote URLs against SSRF attacks. Minor code quality improvements around error handling and logging would strengthen the implementation, but no critical vulnerabilities were identified. Supply chain analysis found 8 known vulnerabilities in dependencies (0 critical, 8 high severity). Package verification found 1 issue.

7 files analyzed Β· 14 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

What You'll Need

Set these up before or after installing:

Post for Me API key (Dashboard - Settings - API Keys).Required

Environment variable: POSTFORME_API_KEY

Set to 'true' to block all write tools.Optional

Environment variable: POSTFORME_READONLY

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-helbertparanhos-postforme-mcp-pro": {
      "env": {
        "POSTFORME_API_KEY": "your-postforme-api-key-here",
        "POSTFORME_READONLY": "your-postforme-readonly-here"
      },
      "args": [
        "-y",
        "postforme-mcp-pro"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

postforme-mcp-pro πŸ“±

The most complete Post for Me MCP server β€” publish, schedule, edit, delete and analyze social posts across 9 platforms from any MCP client.

npm version License: MIT GitHub Stars GitHub Forks GitHub Issues Glama Quality

TypeScript Node.js MCP Claude Code Cursor Claude Desktop

Instagram YouTube LinkedIn Buy Me A Coffee Strat Academy

postforme-mcp-pro wraps the Post for Me API in 27+ fully-typed MCP tools (one per operation) plus a postforme_raw escape hatch and a readonly safety mode. Unlike the official MCP β€” which exposes only a doc-search + sandboxed code-execution tool ("code mode") β€” every operation here is a first-class, directly-callable tool, so the model can post, schedule and pull analytics without writing SDK code.

Platforms: Instagram Β· Facebook Β· TikTok Β· YouTube Β· X Β· LinkedIn Β· Pinterest Β· Bluesky Β· Threads

Why this server

  • 27+ typed tools β€” create_post, schedule_post, publish_now, create_draft, upload_media, list_account_feeds, list_post_results, account & webhook management, and more.
  • High-level shortcuts β€” publish_now / schedule_post / create_draft / reschedule_post / upload_media collapse common multi-step flows into one call.
  • One-step media upload β€” upload_media takes a local file path or a public URL, gets a signed URL, uploads the bytes, and hands back a media_url ready to attach.
  • Per-platform tuning β€” platform_configurations models Instagram Reels, X polls, TikTok privacy, YouTube visibility, etc., and stays permissive for new options.
  • Readonly safety mode β€” POSTFORME_READONLY=true blocks every write; great for analytics-only sessions.
  • postforme_raw β€” call any endpoint for 100% API coverage, even brand-new ones.
  • Resilient client β€” Bearer auth, retries on 429/5xx with backoff, actionable error messages.

Install

npm install
npm run build

Or run published (after release) without cloning:

npx -y postforme-mcp-pro

Configuration

Copy .env.example β†’ .env and set your key:

VariableRequiredDescription
POSTFORME_API_KEYβœ…Your Post for Me API key (Dashboard β†’ Settings β†’ API Keys).
POSTFORME_BASE_URLβ€”Override the API base URL for self-hosted/open-source deployments. Default https://api.postforme.dev.
POSTFORME_READONLYβ€”true blocks all write tools (only reads + postforme_raw GET run).
POSTFORME_DISABLE_RAWβ€”true removes the postforme_raw tool.
POSTFORME_TIMEOUT_MSβ€”Per-request timeout (default 60000).
POSTFORME_MAX_RETRIESβ€”Max retries on 429/5xx/network (default 3).

Test locally

npx @modelcontextprotocol/inspector node dist/index.js

Add to Claude Code

.claude/settings.json β†’ mcpServers:

"postforme": {
  "command": "node",
  "args": ["projects/postforme-mcp-pro/dist/index.js"],
  "env": { "POSTFORME_API_KEY": "pfm_xxx" }
}

Add to Claude Desktop

%APPDATA%\Claude\claude_desktop_config.json (Windows) / ~/Library/Application Support/Claude/claude_desktop_config.json (macOS):

"postforme": {
  "command": "node",
  "args": ["/abs/path/projects/postforme-mcp-pro/dist/index.js"],
  "env": { "POSTFORME_API_KEY": "pfm_xxx" }
}

Cursor uses the same config shape in its MCP file.

Tools

Social accounts

ToolDescription
list_social_accountsList connected accounts (filter by platform/username).
get_social_accountGet one account by id.
create_social_accountConnect an account by supplying credentials.
update_social_accountUpdate stored credentials/metadata.
create_auth_urlStart the OAuth connect flow (returns a URL).
disconnect_social_accountRevoke access for an account.
list_account_feedsAnalytics: recent feed + engagement metrics for an account.

Posts

ToolDescription
create_postCreate a post (publish now, schedule, or draft) across accounts.
publish_nowShortcut: publish immediately.
schedule_postShortcut: schedule for an ISO-8601 time.
create_draftShortcut: save as draft.
get_postGet a post by id.
list_postsList posts (filter by status).
update_postEdit caption/media/accounts/schedule/config.
reschedule_postShortcut: change a scheduled time.
delete_postDelete a post.

Results & previews

ToolDescription
list_post_resultsAnalytics: per-platform publish outcomes.
get_post_resultOne post result by id.
create_post_previewPreview how a post renders per platform.

Media

ToolDescription
create_media_upload_urlGet a signed upload URL (2-step flow).
upload_mediaOne-step: upload a local file or remote URL β†’ returns media_url.

Webhooks

ToolDescription
list_webhooks Β· get_webhook Β· create_webhook Β· update_webhook Β· delete_webhookManage event subscriptions.

Escape hatch

ToolDescription
postforme_rawCall any /v1/... endpoint directly (method, path, params, body).

Companion skill

/postforme (in skill/SKILL.md) orchestrates these tools into guided workflows: post, schedule, campaign, analytics, accounts, media. Copy it into .claude/skills/ to use it in Claude Code.

Example

You: post "LanΓ§amos a v2 πŸš€" no instagram e no x, com a imagem ./hero.png
β†’ list_social_accounts            (get the instagram + x account ids)
β†’ upload_media { file_path: "./hero.png" }   β†’ media_url
β†’ create_post_preview             (optional, confirm look)
β†’ publish_now { social_accounts: [...], caption: "...", media: [{ url: media_url }] }
β†’ list_post_results               (report success/links per platform)

Comparison with the official MCP

postforme-mcp-proofficial post-for-me-mcp
Tool model27 typed tools, one per operation2 tools (doc-search + code-execution sandbox)
CallsDirect tool callsModel must write SDK code in a sandbox
Shortcutspublish_now / schedule_post / create_draft / upload_mediaβ€”
SafetyPOSTFORME_READONLY mode + SSRF/file-read hardeningβ€”
Escape hatchpostforme_raw (any /v1 endpoint)code execution
Companion skill/postforme guided workflowsβ€”

Security

upload_media hardens remote fetches against SSRF (DNS resolution + public-unicast IP validation, no redirects, size cap) and restricts local file reads to recognized media extensions (optionally to POSTFORME_MEDIA_DIR). postforme_raw paths are validated to stay on the versioned API surface. See REVIEW.md for the full audit.

License

MIT Β© Helbert Paranhos / Strat Academy

Reviews

No reviews yet

Be the first to review this server!