Skip to content

AutoPoster AI

by autoposter.ai · remote · no sign-in to list tools · v1.0.0 · published by ai.autoposter

Multi-platform social media post creation, scheduling, and publishing.

Deletes · 1Final · 1Changes · 5

14 tools: 1 can delete or cancel things, 1 do something that can't be undone, 5 change things and 7 only read.

Scanned Oct 21, 2026

2 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http autoposter https://agent.autoposter.ai/mcp

Findings

Matches of fixed checks, with the text they matched.

1 warn1 info
  • The server marks "autoposter_get_media_upload_url" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"openWorldHint":true}; The name "autoposter_get_media_upload_url" says "get": a word for reading.

    What this check looks for
  • The description mentions "credentials".

    Matched text

    description: "...esented by this request's authenticated credentials. The opaque id is unique within this ap..."

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

14 tools

Deletes or cancels 1Claude Code: deny
  • autoposter_delete_postDeletes or cancels a draft, scheduled, or pending post by ID.No findings

    Why it is in this group

    • The name "autoposter_delete_post" says "delete": a word for removing or ending something.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Deletes or cancels a draft, scheduled, or pending post by ID.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • openWorldHint: false
Can't be undone 1Claude Code: ask
  • autoposter_publish_draftApproves and immediately publishes an existing draft or pending post.No findings

    Why it is in this group

    • The name "autoposter_publish_draft" says "publish": a word for a change that another call does not undo.
    Description, as the server wrote it
    Approves and immediately publishes an existing draft or pending post. Requires an API key with direct publish permission.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: true
Changes things 5Claude Code: ask
  • autoposter_draft_postCreates a draft post for human review.No findings

    Why it is in this group

    • The name "autoposter_draft_post" says "post": a word for a change.
    Description, as the server wrote it
    Creates a draft post for human review. If API key lacks direct publish, post is saved as pending_approval and notifications are sent to workspace approvers. Accepts mediaUrls (public URLs) or files (AI-generated images or uploaded files from chat up to 100MB). For large video files over 100MB, tell the user to provide a direct public file URL or use autoposter_get_media_upload_url.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: true
  • autoposter_get_media_upload_urlOnly for clients that can perform an HTTP PUT or multipart POST (not chat-only clients such as Gemini): if you cannot make that request yourself, use autoposter_create_upload_link …1 finding

    Why it is in this group

    • The name "autoposter_get_media_upload_url" says "get": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    Findings

    • Warn

      The server marks "autoposter_get_media_upload_url" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"openWorldHint":true}; The name "autoposter_get_media_upload_url" says "get": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Only for clients that can perform an HTTP PUT or multipart POST (not chat-only clients such as Gemini): if you cannot make that request yourself, use autoposter_create_upload_link instead. Generates a presigned S3 upload URL for direct, high-speed upload of videos or images up to 5GB without size limits or timeouts. Returns direct PUT url, POST upload fields, and public CDN URL.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: true
  • autoposter_schedule_postSchedules a post for a future date/time.No findings

    Why it is in this group

    • The name "autoposter_schedule_post" says "schedule": a word for a change.
    Description, as the server wrote it
    Schedules a post for a future date/time. Automatically converts local time using workspace/user timezone into UTC. Accepts mediaUrls (public URLs) or files (AI-generated images or uploaded files from chat up to 100MB). For large video files over 100MB, tell the user to provide a direct public file URL or use autoposter_get_media_upload_url.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: true
  • autoposter_upload_mediaUploads an image or video to Auto Poster media library.No findings

    Why it is in this group

    • The name "autoposter_upload_media" says "upload": a word for a change.
    Description, as the server wrote it
    Uploads an image or video to Auto Poster media library. Accepts files generated in ChatGPT (e.g. DALL-E images in /mnt/data/), uploaded files, or public image URLs. Direct chat download limit is 100MB. For larger videos or files (>100MB), tell the user to provide a direct public file URL or use autoposter_get_media_upload_url for direct S3 upload up to 5GB. If the image exists only in the chat or on the user's device and cannot be sent here, use autoposter_create_upload_link instead.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • openWorldHint: true
Only reads 7Claude Code: allow
  • autoposter_get_postRetrieves a single post by ID including its state (drafts, pending_approval, queued, posted) and live link receipts.No findings

    Why it is in this group

    • The name "autoposter_get_post" says "get": a word for reading.
    Description, as the server wrote it
    Retrieves a single post by ID including its state (drafts, pending_approval, queued, posted) and live link receipts.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • autoposter_get_post_statusChecks delivery status of a post and returns live platform links/receipts once published.No findings

    Why it is in this group

    • The name "autoposter_get_post_status" says "get": a word for reading.
    Description, as the server wrote it
    Checks delivery status of a post and returns live platform links/receipts once published.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • autoposter_get_rulesReturns platform publishing constraints including character limits, media format requirements, and guidelines.No findings

    Why it is in this group

    • The name "autoposter_get_rules" says "get": a word for reading.
    Description, as the server wrote it
    Returns platform publishing constraints including character limits, media format requirements, and guidelines.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • autoposter_list_accountsLists all connected social media accounts (X, LinkedIn, Instagram, TikTok, YouTube, Threads, Bluesky, Pinterest, Facebook) in the current Autoposter workspace.No findings

    Why it is in this group

    • The name "autoposter_list_accounts" says "list": a word for reading.
    Description, as the server wrote it
    Lists all connected social media accounts (X, LinkedIn, Instagram, TikTok, YouTube, Threads, Bluesky, Pinterest, Facebook) in the current Autoposter workspace.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • autoposter_list_mediaLists media files (images and videos) stored in the workspace media library with public CDN URLs.No findings

    Why it is in this group

    • The name "autoposter_list_media" says "list": a word for reading.
    Description, as the server wrote it
    Lists media files (images and videos) stored in the workspace media library with public CDN URLs.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • autoposter_list_postsLists posts in the workspace.No findings

    Why it is in this group

    • The name "autoposter_list_posts" says "list": a word for reading.
    Description, as the server wrote it
    Lists posts in the workspace. Supports filtering by state ('drafts', 'scheduled', 'queued', 'posted', 'failed', 'pending_approval'), caption text search, and limit.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false
  • get_profileReturn the profile represented by this request's authenticated credentials.1 finding

    Why it is in this group

    • The name "get_profile" says "get": a word for reading.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...esented by this request's authenticated credentials. The opaque id is unique within this ap..."

      What this check looks for
    Description, as the server wrote it
    Return the profile represented by this request's authenticated credentials. The opaque id is unique within this app and remains unchanged across token refresh, reconnection, and display-metadata changes.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http autoposter https://agent.autoposter.ai/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__autoposter__autoposter_list_accounts",
      "mcp__autoposter__autoposter_get_rules",
      "mcp__autoposter__autoposter_get_post_status",
      "mcp__autoposter__autoposter_get_post",
      "mcp__autoposter__autoposter_list_posts",
      "mcp__autoposter__autoposter_list_media",
      "mcp__autoposter__get_profile"
    ],
    "ask": [
      "mcp__autoposter__autoposter_upload_media",
      "mcp__autoposter__autoposter_get_media_upload_url",
      "mcp__autoposter__autoposter_create_upload_link",
      "mcp__autoposter__autoposter_draft_post",
      "mcp__autoposter__autoposter_schedule_post",
      "mcp__autoposter__autoposter_publish_draft"
    ],
    "deny": [
      "mcp__autoposter__autoposter_delete_post"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as autoposter. Review it before you use it.