ViralCat
by viral-cat.com · remote · no sign-in to list tools · v1.0.0 · published by com.viral-cat
Schedule and publish social posts across platforms, with drafts, media uploads and analytics.
21 tools: 1 can delete or cancel things, 1 do something that can't be undone, 13 change things and 6 only read.
Scanned Oct 21, 2026
- Deletes or cancels1Claude Code: deny: see these tools
- Can't be undone1Claude Code: ask: see these tools
- Changes things13Claude Code: ask: see these tools
- Only reads6Claude Code: allow: see these tools
1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http viral-cat https://viral-cat.com/api/mcp/mcpFindings
Matches of fixed checks, with the text they matched.
The description mentions "credentials".
What this check looks forMatched text
description: "...ublish or touch content, only refreshes credentials; safe to retry. Never exposes tokens."
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
21 tools
Deletes or cancels 1Claude Code: deny
cancel_postWRITE (safe): cancel a queued post, or move it to a new slot.No findings
Why it is in this group
- The name "cancel_post" says "cancel": a word for removing or ending something.
Description, as the server wrote it WRITE (safe): cancel a queued post, or move it to a new slot. Omit scheduled_date to CANCEL (status -> cancelled; the publisher ignores it). Pass scheduled_date to RESCHEDULE to that time instead (ISO 8601, at least 15 minutes out; a draft keeps its draft status). Works on draft or scheduled posts (cancel or reschedule); also works on FAILED posts but cancel-only (omit scheduled_date) — this is the way to clear a dead failed-post backlog, since failed has no other exit. Posts already posting/posted/cancelled are immutable. Get post ids from content_queue, list_posts or diagnose_failures.
Can't be undone 1Claude Code: ask
post_performancePublish-outcome metrics over a rolling window (default 30 days): posted/failed/cancelled totals, success rate, per-platform breakdown, and the most recent published posts with perm…No findings
Why it is in this group
- The name "post_performance" says "post": a word for a change.
- The description's first verb is "publish": a word for a change that another call does not undo.
Description, as the server wrote it Publish-outcome metrics over a rolling window (default 30 days): posted/failed/cancelled totals, success rate, per-platform breakdown, and the most recent published posts with permalinks plus their latest stored engagement snapshot (views/likes/comments/shares; available for youtube/tiktok/twitter/threads). Snapshots are stored, not live: call refresh_post_metrics first if the numbers must be current. Optionally scope by brand_id and/or platform.
Changes things 13Claude Code: ask
campaign_summaryPer-brand campaign rollup (brands are ViralCat's campaign unit): posted/scheduled/failed/draft counts, platforms used, next scheduled date, last posted date, and auto-post settings…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Per-brand campaign rollup (brands are ViralCat's campaign unit): posted/scheduled/failed/draft counts, platforms used, next scheduled date, last posted date, and auto-post settings. Optionally scope to one brand_id.
content_queueThe forward content pipeline: drafts awaiting approval first, then scheduled posts in publish order.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it The forward content pipeline: drafts awaiting approval first, then scheduled posts in publish order. Use to review what is queued before it goes out, and to find draft ids for schedule_post.
create_brandWRITE (gated): create a brand (content profile) so create_draft and schedule_post have something to target.No findings
Why it is in this group
- The name "create_brand" says "create": a word for a change.
Description, as the server wrote it WRITE (gated): create a brand (content profile) so create_draft and schedule_post have something to target. Every other write here needs a brand_id, so an agent had no way to set one up. Returns the brand_id and the Drive folder the publisher will read its media from (Viral-Cat/_Res/{name}/Vids). Publishes nothing and reaches no audience.
create_draftWRITE (safe): create a DRAFT post for a brand.No findings
Why it is in this group
- The name "create_draft" says "create": a word for a change.
Description, as the server wrote it WRITE (safe): create a DRAFT post for a brand. Drafts are never picked up by the publisher, so nothing goes live; a human approves in the dashboard or promotes it later with schedule_post. scheduled_date is a proposed slot (default: 7 days out).
create_media_uploadWRITE (gated): open a Google Drive upload session for media you hold locally, so a clip rendered on your own machine never has to be published publicly just so ViralCat can fetch i…No findings
Why it is in this group
- The name "create_media_upload" says "create": a word for a change.
Description, as the server wrote it WRITE (gated): open a Google Drive upload session for media you hold locally, so a clip rendered on your own machine never has to be published publicly just so ViralCat can fetch it back. Returns an uploadUrl - PUT the bytes to it yourself (no auth header) and Drive stores the file; the response Location/id is the fileId for create_draft or schedule_post. When brand is given the file lands in the folder the generator actually reads for that media type: Viral-Cat/_Res/{brand}/Imgs for an image, Vids for a video, Music for audio. Without brand it defaults to the Viral-Cat folder. Video, image or audio up to 100MB. Publishes nothing and reaches no audience.
diagnose_failuresGroup failed posts by platform + normalized failure reason: counts, date range, affected brands, a sample raw error, a recoverable flag (retry_failed_posts can re-queue it) and a c…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it Group failed posts by platform + normalized failure reason: counts, date range, affected brands, a sample raw error, a recoverable flag (retry_failed_posts can re-queue it) and a concrete suggested fix per group. Answers "what is broken and why" in one call. Read-only.
reconnect_platformWRITE (safe): attempt a server-side token refresh for a platform whose access token has lapsed, updating the stored connection's token/expiry.1 finding
Why it is in this group
- The description's first verb is "write": a word for a change.
Findings
- Info
The description mentions "credentials".
What this check looks forMatched text
description: "...ublish or touch content, only refreshes credentials; safe to retry. Never exposes tokens."
Description, as the server wrote it WRITE (safe): attempt a server-side token refresh for a platform whose access token has lapsed, updating the stored connection's token/expiry. Works without a browser when a refresh token is on file (twitter/youtube/google_drive self-heal this way); returns needsManualReauth + a dashboard link when the platform genuinely requires a manual browser reconnect (e.g. threads). Cannot publish or touch content, only refreshes credentials; safe to retry. Never exposes tokens.
refresh_post_metricsWRITE (gated): fetch current engagement (views/likes/comments/shares) for already-published posts and store today's snapshot, then read it back with post_performance.No findings
Why it is in this group
- The name "refresh_post_metrics" says "post": a word for a change.
Description, as the server wrote it WRITE (gated): fetch current engagement (views/likes/comments/shares) for already-published posts and store today's snapshot, then read it back with post_performance. This is the only way to update the numbers without opening the dashboard Stats tab. Supported platforms: youtube, tiktok, twitter, threads; LinkedIn and the rest expose no engagement API. A 60-minute cooldown applies per account and protects X's free-tier read quota, so a call inside it returns skipped:true and changes nothing. Publishes nothing and reaches no audience.
reschedule_postWRITE (gated): move ONE post to a new future slot (ISO 8601, at least 15 minutes out).No findings
Why it is in this group
- The name "reschedule_post" says "reschedule": a word for a change.
Description, as the server wrote it WRITE (gated): move ONE post to a new future slot (ISO 8601, at least 15 minutes out). Unlike cancel_post this also accepts FAILED posts: a failed post is re-queued (status -> scheduled, error cleared). Draft and scheduled posts keep their status. Refuses posts that would structurally fail again (archived brand, incompatible media, Facebook with no Page).
retry_failed_postsWRITE (gated): bulk re-queue recoverable failed posts (default reason classes: token_expired, missed_window, platform_transient_error, drive_media_missing).No findings
Why it is in this group
- The name "retry_failed_posts" says "post": a word for a change.
Description, as the server wrote it WRITE (gated): bulk re-queue recoverable failed posts (default reason classes: token_expired, missed_window, platform_transient_error, drive_media_missing). dry_run DEFAULTS TO TRUE and only returns the plan; pass dry_run=false to actually reschedule. Retries are staggered per platform (spacing_minutes apart) and capped at limit, so a bulk retry cannot dogpile a platform API. Posts that would structurally fail again (archived brand, incompatible media, Facebook with no Page) are skipped with the reason. Use diagnose_failures first to see what is recoverable.
schedule_postWRITE (gated): queue a post for FUTURE publishing, at least 15 minutes out (immediate posting is not available over MCP).No findings
Why it is in this group
- The name "schedule_post" says "schedule": a word for a change.
Description, as the server wrote it WRITE (gated): queue a post for FUTURE publishing, at least 15 minutes out (immediate posting is not available over MCP). Either pass post_id to promote an existing draft, or brand_id + platform to create a new scheduled post. The publishing cron sends it at the scheduled time.
update_brandWRITE (gated): correct a brand's content profile: description, taglines, hashtags, CTA and website links, content type, and the auto-post switch.No findings
Why it is in this group
- The name "update_brand" says "update": a word for a change.
Description, as the server wrote it WRITE (gated): correct a brand's content profile: description, taglines, hashtags, CTA and website links, content type, and the auto-post switch. This is the repair path for a brand carrying wrong copy, which otherwise makes every caption for it wrong, and the off switch for a brand whose generator is posting against your content rules. Only the fields you pass change; the rest keep their stored values. Cannot rename a brand (the name also names its Drive media folder) and cannot touch posting frequency/day or discount settings. Queues nothing and publishes nothing itself.
upload_mediaWRITE (gated): fetch a public media URL and store it in the connected Google Drive, returning the Drive fileId to pass to create_draft or schedule_post.No findings
Why it is in this group
- The name "upload_media" says "upload": a word for a change.
Description, as the server wrote it WRITE (gated): fetch a public media URL and store it in the connected Google Drive, returning the Drive fileId to pass to create_draft or schedule_post. This uploads to YOUR OWN Drive; it publishes nothing and reaches no audience. Accepts video, image or audio up to 100MB. With brand, files land in the folder the generator actually reads for that media type: Viral-Cat/_Res/{brand}/Imgs for an image, Vids for a video, Music for audio. Without brand it defaults to the Viral-Cat folder, and folder_id overrides both.
Only reads 6Claude Code: allow
get_brand_detailsFull content profile for one brand: description, taglines, hashtags, CTA/website URL, niche (category/subcategory), content type, target platforms, and active discount.No findings
Why it is in this group
- The name "get_brand_details" says "get": a word for reading.
Description, as the server wrote it Full content profile for one brand: description, taglines, hashtags, CTA/website URL, niche (category/subcategory), content type, target platforms, and active discount. Use this to write on-brand captions BEFORE calling create_draft or schedule_post. Read-only; returns no secrets.
get_pipeline_summaryHigh-level snapshot of the posting pipeline: active brand count, a status breakdown (how many scheduled/posted/failed/etc.), a per-platform breakdown, how many posts are due in the…No findings
Why it is in this group
- The name "get_pipeline_summary" says "get": a word for reading.
Description, as the server wrote it High-level snapshot of the posting pipeline: active brand count, a status breakdown (how many scheduled/posted/failed/etc.), a per-platform breakdown, how many posts are due in the next 7 days, and the next scheduled date. Use for 'how's the pipeline?' style questions.
list_brandsList brands (content profiles), newest first, with per-brand post counts (posted/scheduled) and the next scheduled date.No findings
Why it is in this group
- The name "list_brands" says "list": a word for reading.
Description, as the server wrote it List brands (content profiles), newest first, with per-brand post counts (posted/scheduled) and the next scheduled date. Use to see which brands exist and how active each is. Excludes archived brands. Returns `total` (all active brands) next to `count` (rows returned): when `truncated` is true the roster was cut off by `limit`, so raise it (max 50) before concluding a brand does not exist.
list_connectionsList connected platform accounts (channels) and their health: platform, account username, connected flag, posting-enabled flag, and token expiry.No findings
Why it is in this group
- The name "list_connections" says "list": a word for reading.
Description, as the server wrote it List connected platform accounts (channels) and their health: platform, account username, connected flag, posting-enabled flag, and token expiry. Use to check which platforms are wired up and whether any connection has expired. Never returns access or refresh tokens.
list_postsList posts across all platforms, newest scheduled first.No findings
Why it is in this group
- The name "list_posts" says "list": a word for reading.
Description, as the server wrote it List posts across all platforms, newest scheduled first. Each row is one publication on one platform. Filter by status (draft|scheduled|posting|posted|failed|cancelled) and/or platform (youtube|tiktok|instagram|...). Returns caption, brand name, permalink, error message when present, and publishWarning for posts that succeeded with an anomaly (e.g. published without media).
preflight_checkREAD-ONLY: validate a post BEFORE it is scheduled or published, so a problem is caught up front instead of discovered as a failure afterwards.No findings
Why it is in this group
- The description's first verb is "read": a word for reading.
Description, as the server wrote it READ-ONLY: validate a post BEFORE it is scheduled or published, so a problem is caught up front instead of discovered as a failure afterwards. Checks the exact things that produced the failed-post backlog: incompatible media for the platform (e.g. video to Pinterest), a disconnected or unrefreshable platform token (LinkedIn has no refresh token on this API tier and needs a manual browser reconnect roughly every 60 days — that's an expected state, not a bug), Facebook posting to an account with no Page (impossible via the Graph API), content referencing an already-passed date/season/promo code, and X/Twitter free-tier monthly write-cap headroom. Pass post_id to check one existing post; omit it to scan the forward queue (draft + scheduled, soonest first) and return only posts that have at least one issue.
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http viral-cat https://viral-cat.com/api/mcp/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__viral-cat__list_brands",
"mcp__viral-cat__get_brand_details",
"mcp__viral-cat__list_posts",
"mcp__viral-cat__get_pipeline_summary",
"mcp__viral-cat__list_connections",
"mcp__viral-cat__preflight_check"
],
"ask": [
"mcp__viral-cat__post_performance",
"mcp__viral-cat__content_queue",
"mcp__viral-cat__campaign_summary",
"mcp__viral-cat__diagnose_failures",
"mcp__viral-cat__create_draft",
"mcp__viral-cat__schedule_post",
"mcp__viral-cat__retry_failed_posts",
"mcp__viral-cat__reschedule_post",
"mcp__viral-cat__refresh_post_metrics",
"mcp__viral-cat__reconnect_platform",
"mcp__viral-cat__upload_media",
"mcp__viral-cat__create_media_upload",
"mcp__viral-cat__create_brand",
"mcp__viral-cat__update_brand"
],
"deny": [
"mcp__viral-cat__cancel_post"
]
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as viral-cat. Review it before you use it.