Skip to content

SocialCrawl

by RidioDevelopment · remote · local (npm) · no sign-in to list tools · v1.10.0 · published by GitHub user RidioDevelopment

One API for 65 platforms and 572 endpoints: social, commerce, retail, jobs, finance, web scraping.

Deletes · 1Changes · 5

7 tools: 1 can delete or cancel things, 5 change things and 1 only read.

Scanned Oct 21, 2026

4 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http socialcrawl https://mcp.socialcrawl.dev/mcp

Findings

Matches of fixed checks, with the text they matched.

4 warn
  • The server marks "socialcrawl_find" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "socialcrawl_find" says "find": a word for reading.

    What this check looks for
  • The input schema at properties.params.additionalProperties.anyOf[1].items.$ref contains a 47-character base64 string.

    Matched text

    inputSchema.properties.params.additionalProperties.anyOf[1].items.$ref: "#/properties/params/additionalProperties/anyOf/0"

    What this check looks for
  • The input schema at properties.params.additionalProperties.anyOf[1].items.$ref contains a 47-character base64 string.

    Matched text

    inputSchema.properties.params.additionalProperties.anyOf[1].items.$ref: "#/properties/params/additionalProperties/anyOf/0"

    What this check looks for
  • The input schema at properties.params.additionalProperties.anyOf[1].items.$ref contains a 47-character base64 string.

    Matched text

    inputSchema.properties.params.additionalProperties.anyOf[1].items.$ref: "#/properties/params/additionalProperties/anyOf/0"

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

7 tools

Deletes or cancels 1Claude Code: deny
  • socialcrawl_manageStateful work by area + action: monitors (scheduled recipes, webhooks, alerts), cohorts (mention search over your own panel of accounts), web (scrape, search, crawl and agent jobs,…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Stateful work by area + action: monitors (scheduled recipes, webhooks, alerts), cohorts (mention search over your own panel of accounts), web (scrape, search, crawl and agent jobs, change monitors, browser sessions) and jobs (Prism background jobs). A wrong field is refused free with the rules. Managing is free; scrapes, jobs, queries and monitor runs bill credits. dry_run: true validates and quotes a create/update and never creates it. rows_new alerts need track (id=monitors).

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: true
Changes things 5Claude Code: ask
  • socialcrawl_accountFree checks: balance (with this session's spend), transactions (itemised ledger; the receipts for one request_id), status (platform health; read it before retrying a 502/503) and f…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Free checks: balance (with this session's spend), transactions (itemised ledger; the receipts for one request_id), status (platform health; read it before retrying a 502/503) and freshness (whether this server's bundled catalogue is behind the API).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • socialcrawl_collectWalk a paged endpoint (id, platform+resource or path) to `items` unique rows, the last page or max_credits: cursors supplied, duplicates dropped, stops on a 402, refused free when …1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.

    Findings

    • Warn

      The input schema at properties.params.additionalProperties.anyOf[1].items.$ref contains a 47-character base64 string.

      Matched text

      inputSchema.properties.params.additionalProperties.anyOf[1].items.$ref: "#/properties/params/additionalProperties/anyOf/0"

      What this check looks for
    Description, as the server wrote it
    Walk a paged endpoint (id, platform+resource or path) to `items` unique rows, the last page or max_credits: cursors supplied, duplicates dropped, stops on a 402, refused free when one page exceeds max_credits. Small results come back whole. result_id (+offset, limit, format) reads a stored result, free. Spends credits.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • socialcrawl_estimateExact credits before you spend: one call (id, platform+resource or path, plus the params you will send; calls for a job total; items for a walk) or a plan of several calls.1 finding

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The input schema at properties.params.additionalProperties.anyOf[1].items.$ref contains a 47-character base64 string.

      Matched text

      inputSchema.properties.params.additionalProperties.anyOf[1].items.$ref: "#/properties/params/additionalProperties/anyOf/0"

      What this check looks for
    Description, as the server wrote it
    Exact credits before you spend: one call (id, platform+resource or path, plus the params you will send; calls for a job total; items for a walk) or a plan of several calls. Uses the API's estimator when available, else the bundled pricing. A platform slug gives its price table; no id gives the pricing overview. Free.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • socialcrawl_findStart here: a task in plain words -> the best endpoints (3 by default) of 646, each with the params the task supplies (URLs and @handles resolved), the params still missing, the cr…1 finding

    Why it is in this group

    • The name "socialcrawl_find" says "find": a word for reading.
    • The description's first verb is "start": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "socialcrawl_find" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":true}; The name "socialcrawl_find" says "find": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Start here: a task in plain words -> the best endpoints (3 by default) of 646, each with the params the task supplies (URLs and @handles resolved), the params still missing, the credit cost and the exact call. With no task it lists platforms, or one platform's endpoints. Free; no key needed.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • socialcrawl_requestCall one endpoint (platform+resource, or id, or path).1 finding

    Why it is in this group

    • The name "socialcrawl_request" says "request": a word for a change.

    Findings

    • Warn

      The input schema at properties.params.additionalProperties.anyOf[1].items.$ref contains a 47-character base64 string.

      Matched text

      inputSchema.properties.params.additionalProperties.anyOf[1].items.$ref: "#/properties/params/additionalProperties/anyOf/0"

      What this check looks for
    Description, as the server wrote it
    Call one endpoint (platform+resource, or id, or path). Validated locally first (a bad call is free), quoted, refused above max_credits and confirmed above the threshold. A large page is cut at row boundaries; socialcrawl_collect result_id reads the rest. Spends credits; needs SOCIALCRAWL_API_KEY.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
Only reads 1Claude Code: allow
  • socialcrawl_endpointRead before calling: one endpoint's purpose, params, where the rows are and up to 25 response fields, cost rule, paging, latency, timeout, next endpoints and a sample link.No findings

    Why it is in this group

    • The description's first verb is "read": a word for reading.
    Description, as the server wrote it
    Read before calling: one endpoint's purpose, params, where the rows are and up to 25 response fields, cost rule, paging, latency, timeout, next endpoints and a sample link. id (or platform+resource, path), a platform slug (its endpoints) or a guide topic. Free.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.10.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http socialcrawl https://mcp.socialcrawl.dev/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__socialcrawl__socialcrawl_endpoint"
    ],
    "ask": [
      "mcp__socialcrawl__socialcrawl_find",
      "mcp__socialcrawl__socialcrawl_estimate",
      "mcp__socialcrawl__socialcrawl_request",
      "mcp__socialcrawl__socialcrawl_collect",
      "mcp__socialcrawl__socialcrawl_account"
    ],
    "deny": [
      "mcp__socialcrawl__socialcrawl_manage"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as socialcrawl. Review it before you use it.