Skip to content

io.github.IsaiahDupree/socialbridge-mcp

by IsaiahDupree · remote · no sign-in to list tools · v1.0.0 · published by GitHub user IsaiahDupree

Unified social-media data across 10 networks: profiles, posts, search, comments, cross-search.

Changes · 7

10 tools: 7 change things and 3 only read.

Scanned Oct 21, 2026

7 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http socialbridge https://socialbridge-mcp.vercel.app/mcp

Findings

Matches of fixed checks, with the text they matched.

3 warn4 info
  • The server marks "social_posts" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "social_posts" says "post": a word for a change.

    What this check looks for
  • The server marks "social_comments" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "social_comments" says "comment": a word for a change.

    What this check looks for
  • The server marks "threads_post" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "threads_post" says "post": a word for a change.

    What this check looks for
  • The description mentions "credentials".

    Matched text

    description: "...Reddit, and Facebook need operator-side credentials (returns credentials_required until set..."

    What this check looks for
  • The description mentions "credentials".

    Matched text

    description: "...Reddit, and Facebook need operator-side credentials; LinkedIn is quarantined. For a keyless..."

    What this check looks for
  • The description mentions "credentials".

    Matched text

    description: "...Reddit, and Facebook need operator-side credentials (returns credentials_required until set..."

    What this check looks for
Show 1 more finding

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

10 tools

Changes things 7Claude Code: ask
  • facebook_adsMeta (Facebook/Instagram) Ad Library records as the unified Ad[] (id, pageName, adCreativeBody, adSnapshotUrl, startDate, currency, spend + impression ranges).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Meta (Facebook/Instagram) Ad Library records as the unified Ad[] (id, pageName, adCreativeBody, adSnapshotUrl, startDate, currency, spend + impression ranges). Provide q OR pageId. GATED — needs operator-side FACEBOOK_ACCESS_TOKEN (with ads_read); returns credentials_required until set.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • reddit_historyKeyless full-history pull via Arctic Shift — a user's or subreddit's posts, or a keyword search across Reddit history, returned as the unified Post[].No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Keyless full-history pull via Arctic Shift — a user's or subreddit's posts, or a keyword search across Reddit history, returned as the unified Post[]. Provide at least one of username, subreddit, or q. Optional before/after bound the window by epoch-seconds or ISO timestamp.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • snapchat_spotlightA creator's public Snapchat Spotlight feed as the unified Post[] with real view/comment/share counts.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    A creator's public Snapchat Spotlight feed as the unified Post[] with real view/comment/share counts. Keyless.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • social_commentsComments / replies on one post as the unified Comment[] schema, tagged with its platform.2 findings

    Why it is in this group

    • The name "social_comments" says "comment": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...Reddit, and Facebook need operator-side credentials; Snapchat comments are not supported ke..."

      What this check looks for
    • Warn

      The server marks "social_comments" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "social_comments" says "comment": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Comments / replies on one post as the unified Comment[] schema, tagged with its platform. Provide url OR postId. Keyless on TikTok, YouTube, and Threads (and a single tweet via syndication on Twitter/X). Instagram, Reddit, and Facebook need operator-side credentials; Snapchat comments are not supported keyless; LinkedIn is quarantined.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • social_postsAn account's recent posts / videos / tweets / threads / pins as the unified Post[] schema (id, url, author, text, createdAt, like/comment/share/view counts, mediaType, mediaUrls, h…2 findings

    Why it is in this group

    • The name "social_posts" says "post": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...Reddit, and Facebook need operator-side credentials; LinkedIn is quarantined. For a keyless..."

      What this check looks for
    • Warn

      The server marks "social_posts" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "social_posts" says "post": a word for a change.

      What this check looks for
    Description, as the server wrote it
    An account's recent posts / videos / tweets / threads / pins as the unified Post[] schema (id, url, author, text, createdAt, like/comment/share/view counts, mediaType, mediaUrls, hashtags), tagged with its platform. Keyless on Instagram, TikTok, YouTube, Pinterest, Snapchat, and Threads. Twitter/X, Reddit, and Facebook need operator-side credentials; LinkedIn is quarantined. For a keyless Reddit history pull use reddit_history.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • threads_postFetch a single thread by shortcode or URL, including its replies, as the unified Post (with replies).1 finding

    Why it is in this group

    • The name "threads_post" says "post": a word for a change.
    • The input takes a statement or command to run (input.code), which can change anything it can reach.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "threads_post" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "threads_post" says "post": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Fetch a single thread by shortcode or URL, including its replies, as the unified Post (with replies). Provide code OR url. Keyless.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • youtube_transcriptAvailable caption-language list (and cue segments where retrievable) for a YouTube video.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Available caption-language list (and cue segments where retrievable) for a YouTube video. Provide url OR videoId. Keyless. NOTE: actual cue text is BotGuard-gated keyless, so it is reported honestly (available:false, empty segments) rather than fabricated.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
Only reads 3Claude Code: allow
  • search_allThe wedge no incumbent offers: fan one search query out across the requested platforms (default: all keyless, non-disabled) in parallel, merge the unified Post[], and tag each resu…No findings

    Why it is in this group

    • The name "search_all" says "search": a word for reading.
    Description, as the server wrote it
    The wedge no incumbent offers: fan one search query out across the requested platforms (default: all keyless, non-disabled) in parallel, merge the unified Post[], and tag each result with its platform. Gated / disabled / unsupported / throttled engines are listed under "skipped" with an honest reason — the call still returns whatever came back.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • social_profileFetch one account profile from any supported network as the unified Profile schema (id, username, displayName, bio, url, followers, following, postCount, verified, avatarUrl, exter…1 finding

    Why it is in this group

    • The description's first verb is "fetch": a word for reading.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...Reddit, and Facebook need operator-side credentials (returns credentials_required until set..."

      What this check looks for
    Description, as the server wrote it
    Fetch one account profile from any supported network as the unified Profile schema (id, username, displayName, bio, url, followers, following, postCount, verified, avatarUrl, externalUrl), tagged with its platform. Keyless on Instagram, TikTok, YouTube, Pinterest, Snapchat, and Threads. Twitter/X, Reddit, and Facebook need operator-side credentials (returns credentials_required until set); LinkedIn is quarantined (platform_disabled).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http socialbridge https://socialbridge-mcp.vercel.app/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__socialbridge__social_profile",
      "mcp__socialbridge__social_search",
      "mcp__socialbridge__search_all"
    ],
    "ask": [
      "mcp__socialbridge__social_posts",
      "mcp__socialbridge__social_comments",
      "mcp__socialbridge__reddit_history",
      "mcp__socialbridge__facebook_ads",
      "mcp__socialbridge__youtube_transcript",
      "mcp__socialbridge__threads_post",
      "mcp__socialbridge__snapchat_spotlight"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as socialbridge. Review it before you use it.