# `pro.socialhive/platform` on anlyon.dev

> Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX].
> No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour.

- Page: https://anlyon.dev/servers/pro.socialhive/platform
- JSON: https://anlyon.dev/api/v1/servers/pro.socialhive/platform
- Version: 1.0.0 (active)
- Publisher: pro.socialhive (domain proven to the MCP Registry)
- Runs: remote (streamable-http)
- Sign-in to list tools: none
- Repository: https://github.com/jalal1985khan/socialhive-mcp
- Metadata from the official MCP Registry, synced 2026-10-21T18:54:31.282Z

Title and description, as the publisher wrote them:

```untrusted-server-text
SocialHive
Social media management, multi-platform publishing, AI generation, and cross-channel analytics.
```

Scanned 2026-10-21T19:15:30.313Z over streamable-http.

**24 tools: 2 do something that can't be undone, 9 change things and 13 only read.**

| Group | Class | Tools | Claude Code |
| --- | --- | --- | --- |
| Deletes or cancels | destructive | 0 | deny |
| Can't be undone | irreversible | 2 | ask |
| Changes things | write | 9 | ask |
| Only reads | read | 13 | allow |

## Exfil surface

144 private-data -> untrusted-input -> outbound paths in this server alone. Denying 2 private-data tools breaks every one: `mcp__platform__get_connected_social_accounts`, `mcp__platform__list_sources`.

| Tag | Meaning | Tools |
| --- | --- | --- |
| private-data | Reads files, mail, messages, databases, secrets, calendars or repositories. | `mcp__platform__get_connected_social_accounts` `mcp__platform__list_sources` |
| untrusted-input | Brings in text someone else can write: web pages, inbound email, messages, issues and comments. | `mcp__platform__create_post` `mcp__platform__get_analytics` `mcp__platform__get_connected_social_accounts` `mcp__platform__get_post` `mcp__platform__import_media` `mcp__platform__list_connected_sites` `mcp__platform__list_posts` `mcp__platform__list_sources` `mcp__platform__publish_article` `mcp__platform__publish_post` `mcp__platform__schedule_post` `mcp__platform__search_source_items` |
| outbound | Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL. | `mcp__platform__adapt_post` `mcp__platform__create_post` `mcp__platform__import_media` `mcp__platform__publish_article` `mcp__platform__publish_post` `mcp__platform__schedule_post` |

| Private data | Untrusted input | Outbound |
| --- | --- | --- |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__create_post` | `mcp__platform__adapt_post` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__create_post` | `mcp__platform__create_post` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__create_post` | `mcp__platform__import_media` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__create_post` | `mcp__platform__publish_article` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__create_post` | `mcp__platform__publish_post` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__create_post` | `mcp__platform__schedule_post` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__get_analytics` | `mcp__platform__adapt_post` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__get_analytics` | `mcp__platform__create_post` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__get_analytics` | `mcp__platform__import_media` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__get_analytics` | `mcp__platform__publish_article` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__get_analytics` | `mcp__platform__publish_post` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__get_analytics` | `mcp__platform__schedule_post` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__get_connected_social_accounts` | `mcp__platform__adapt_post` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__get_connected_social_accounts` | `mcp__platform__create_post` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__get_connected_social_accounts` | `mcp__platform__import_media` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__get_connected_social_accounts` | `mcp__platform__publish_article` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__get_connected_social_accounts` | `mcp__platform__publish_post` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__get_connected_social_accounts` | `mcp__platform__schedule_post` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__get_post` | `mcp__platform__adapt_post` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__get_post` | `mcp__platform__create_post` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__get_post` | `mcp__platform__import_media` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__get_post` | `mcp__platform__publish_article` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__get_post` | `mcp__platform__publish_post` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__get_post` | `mcp__platform__schedule_post` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__import_media` | `mcp__platform__adapt_post` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__import_media` | `mcp__platform__create_post` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__import_media` | `mcp__platform__import_media` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__import_media` | `mcp__platform__publish_article` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__import_media` | `mcp__platform__publish_post` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__import_media` | `mcp__platform__schedule_post` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__list_connected_sites` | `mcp__platform__adapt_post` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__list_connected_sites` | `mcp__platform__create_post` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__list_connected_sites` | `mcp__platform__import_media` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__list_connected_sites` | `mcp__platform__publish_article` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__list_connected_sites` | `mcp__platform__publish_post` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__list_connected_sites` | `mcp__platform__schedule_post` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__list_posts` | `mcp__platform__adapt_post` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__list_posts` | `mcp__platform__create_post` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__list_posts` | `mcp__platform__import_media` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__list_posts` | `mcp__platform__publish_article` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__list_posts` | `mcp__platform__publish_post` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__list_posts` | `mcp__platform__schedule_post` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__list_sources` | `mcp__platform__adapt_post` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__list_sources` | `mcp__platform__create_post` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__list_sources` | `mcp__platform__import_media` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__list_sources` | `mcp__platform__publish_article` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__list_sources` | `mcp__platform__publish_post` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__list_sources` | `mcp__platform__schedule_post` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__publish_article` | `mcp__platform__adapt_post` |
| `mcp__platform__get_connected_social_accounts` | `mcp__platform__publish_article` | `mcp__platform__create_post` |

And 94 more: every combination of one tool from each row of the table above.

## Findings

No check matched anything in these tool definitions.


## Can't be undone (2)

Sends, pays, publishes or merges: once done, it cannot be taken back. Claude Code: ask.

### `publish_article`

- The name "publish_article" says "publish": a word for a change that another call does not undo.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.
- Tag outbound: The name "publish_article" says "publish": it sends or publishes something to other people.

Description, as the server wrote it:

```untrusted-server-text
Publish (or send as a draft) an article from the workspace library to one or more connected sites. Get site ids from list_connected_sites and article ids from list_articles or create_article. The article must have a body. Publishing again updates the existing post on that site.
```

### `publish_post`

- The name "publish_post" says "publish": a word for a change that another call does not undo.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.
- Tag outbound: The name "publish_post" says "publish": it sends or publishes something to other people.

Description, as the server wrote it:

```untrusted-server-text
Publish an existing draft now (queues it immediately). Approval policy still applies — the post may land in pending_approval instead.
```

## Changes things (9)

Creates or changes something that can be changed back. Claude Code: ask.

### `adapt_post`

- The name "adapt_post" says "post": a word for a change.
- Tag outbound: The name "adapt_post" says "post": it sends or publishes something to other people.

Description, as the server wrote it:

```untrusted-server-text
Rewrite existing copy for another platform's length, tone and conventions. Supports adapting to LinkedIn, X, and other networks. Metered.
```

### `create_article`

- The name "create_article" says "create": a word for a change.

Description, as the server wrote it:

```untrusted-server-text
Save a long-form article or blog post (e.g. generated by ChatGPT, Claude, or an LLM) into the workspace article library. Quota: maximum 10 articles per month via MCP. Can be linked into syndication workflows or published to CMS targets.
```

### `create_post`

- The name "create_post" says "create": a word for a change.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.
- Tag outbound: The name "create_post" says "create" and "post": it writes something other people read.

Description, as the server wrote it:

```untrusted-server-text
Create and optionally publish a post for LinkedIn, X, Instagram, Facebook, YouTube, TikTok, etc. Supports post copy text, image attachments (Base64 data or URLs), and video. When publishNow is true, the post is published immediately to the social accounts (available to admin-approved users). Without publishNow or scheduledAt, it is saved as a draft.
```

### `generate_image`

- The name "generate_image" says "generate": a word for a change.

Description, as the server wrote it:

```untrusted-server-text
Generate an image into the media library and return its asset id (attach with create_post.mediaIds). quality 'free' uses the free provider; 'hq' costs credits.
```

### `generate_text`

- The name "generate_text" says "generate": a word for a change.

Description, as the server wrote it:

```untrusted-server-text
Write social copy in the workspace brand voice. Returns one or more variants. Metered (free daily allowance, then 1 credit).
```

### `import_media`

- The name "import_media" says "import": a word for a change.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.
- Tag outbound: The input takes a URL (input.url): a request to a URL can carry data to whoever runs it.

Description, as the server wrote it:

```untrusted-server-text
Import an image or video from an external public URL into the workspace media library and return its asset id (to attach with create_post.mediaIds).
```

### `propose_workflow`

- Nothing in its name or description says what it does, so it is counted as a write.

Description, as the server wrote it:

```untrusted-server-text
Propose an automation workflow as a graph (nodes + edges). The graph is validated and saved as a DRAFT version that a human must review and activate in Workflow Studio; it never runs on its own. Call list_node_types first for valid node types and config schemas.
```

### `schedule_post`

- The name "schedule_post" says "schedule": a word for a change.
- Tag untrusted-input: The server marks it openWorldHint: true: it reaches things outside the server's own data.
- Tag outbound: The name "schedule_post" says "schedule" and "post": it writes something other people read.

Description, as the server wrote it:

```untrusted-server-text
Schedule an existing draft (or move a scheduled post) to an ISO 8601 time. Approval policy still applies.
```

### `upload_media`

- The name "upload_media" says "upload": a word for a change.

Description, as the server wrote it:

```untrusted-server-text
Upload an image, video, or PDF directly using base64 data (or data URI) into the workspace media library and return its asset id (to attach with create_post.mediaIds).
```

## Only reads (13)

Looks things up and changes nothing. Claude Code: allow.

### `get_analytics`

- The name "get_analytics" says "get": a word for reading.
- Tag untrusted-input: The description's first sentence says "post": it reads posts, which other people can write.

Description, as the server wrote it:

```untrusted-server-text
Workspace performance for the last N days: impressions, engagements, posts, follower change, top posts and recommended posting slots.
```

### `get_article`

- The name "get_article" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Get full details and Markdown body of an article in the workspace library by its ID.
```

### `get_connected_social_accounts`

- The name "get_connected_social_accounts" says "get": a word for reading.
- Tag private-data: The description's first sentence says "get" and "thread": it reads messages.
- Tag untrusted-input: The description's first sentence says "get" and "thread": it reads messages, which other people can write.

Description, as the server wrote it:

```untrusted-server-text
Get all connected social media accounts (LinkedIn, X, YouTube, Instagram, Facebook, TikTok, Threads) for the workspace with account IDs, platforms, connection status, and automationEnabled status.
```

### `get_post`

- The name "get_post" says "get": a word for reading.
- Tag untrusted-input: The name "get_post" says "get" and "post": it reads posts, which other people can write. The description's first sentence says "get" and "post": it reads posts, which other people can write.

Description, as the server wrote it:

```untrusted-server-text
Get one post with its body, per-channel variants, status and metrics.
```

### `list_articles`

- The name "list_articles" says "list": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
List long-form articles in the workspace library with their id, title, status, word count, summary, and last updated time.
```

### `list_channels`

- The name "list_channels" says "list": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
List the social accounts connected to this workspace with their ids, platform, handle, health, and automationEnabled status. Use channel ids when creating posts.
```

### `list_connected_sites`

- The name "list_connected_sites" says "list": a word for reading.
- Tag untrusted-input: The description's first sentence says "list" and "website": it reads web pages, which anyone can write.

Description, as the server wrote it:

```untrusted-server-text
List the websites connected to this workspace for article publishing (SocialHive blog, WordPress, Ghost, Dev.to, ...). Use an id from here as destinationIds in publish_article.
```

### `list_media`

- The name "list_media" says "list": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
List or search media assets (images, videos) in the workspace media library. Returns asset ids to attach with create_post.mediaIds.
```

### `list_node_types`

- The name "list_node_types" says "list": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Catalog of workflow node types (triggers, sources, AI, control, destinations) with their config schemas. Read before calling propose_workflow.
```

### `list_posts`

- The name "list_posts" says "list": a word for reading.
- Tag untrusted-input: The name "list_posts" says "list" and "post": it reads posts, which other people can write. The description's first sentence says "list" and "post": it reads posts, which other people can write.

Description, as the server wrote it:

```untrusted-server-text
List posts in the workspace, newest first. Filter by status (draft, pending_approval, scheduled, published, failed) or free text.
```

### `list_sources`

- The name "list_sources" says "list": a word for reading.
- Tag private-data: The description's first sentence says "list" and "document": it reads documents.
- Tag untrusted-input: The description's first sentence says "list" and "rss": it reads web pages, which anyone can write.

Description, as the server wrote it:

```untrusted-server-text
List content data sources (RSS feeds, sitemaps, web pages, documents) with counts of unused items.
```

### `list_workflows`

- The name "list_workflows" says "list": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
List automation workflows with status and last run.
```

### `search_source_items`

- The name "search_source_items" says "search": a word for reading.
- Tag untrusted-input: The description's first sentence says "fetch" and "url": it reads web pages, which anyone can write.

Description, as the server wrote it:

```untrusted-server-text
Fetch recent items from one data source (title, url, excerpt). Use them as raw material for posts.
```

## Claude Code permissions

For `.claude/settings.json`, assuming the server is installed as `platform`:

```json
{
  "permissions": {
    "allow": [
      "mcp__platform__list_channels",
      "mcp__platform__get_connected_social_accounts",
      "mcp__platform__list_posts",
      "mcp__platform__get_post",
      "mcp__platform__list_articles",
      "mcp__platform__get_article",
      "mcp__platform__get_analytics",
      "mcp__platform__list_sources",
      "mcp__platform__search_source_items",
      "mcp__platform__list_workflows",
      "mcp__platform__list_node_types",
      "mcp__platform__list_media",
      "mcp__platform__list_connected_sites"
    ],
    "ask": [
      "mcp__platform__generate_text",
      "mcp__platform__adapt_post",
      "mcp__platform__generate_image",
      "mcp__platform__import_media",
      "mcp__platform__upload_media",
      "mcp__platform__create_post",
      "mcp__platform__schedule_post",
      "mcp__platform__publish_post",
      "mcp__platform__create_article",
      "mcp__platform__publish_article",
      "mcp__platform__propose_workflow"
    ],
    "deny": []
  }
}
```

Capability tags behind the rules (a read tagged outbound is asked about):

- `mcp__platform__get_connected_social_accounts`: private-data, untrusted-input
- `mcp__platform__list_posts`: untrusted-input
- `mcp__platform__get_post`: untrusted-input
- `mcp__platform__get_analytics`: untrusted-input
- `mcp__platform__list_sources`: private-data, untrusted-input
- `mcp__platform__search_source_items`: untrusted-input
- `mcp__platform__adapt_post`: outbound
- `mcp__platform__import_media`: untrusted-input, outbound
- `mcp__platform__create_post`: untrusted-input, outbound
- `mcp__platform__schedule_post`: untrusted-input, outbound
- `mcp__platform__publish_post`: untrusted-input, outbound
- `mcp__platform__list_connected_sites`: untrusted-input
- `mcp__platform__publish_article`: untrusted-input, outbound

## Remote posture

What an anonymous client saw at the remote endpoint, last 2026-10-22T15:12:42.863Z, unchanged since 2026-10-22T15:12:42.863Z. No credentials were sent and no tool was called. Values are shown as the endpoint returned them. Method: https://anlyon.dev/methodology#remote-posture

| Fact | Observed |
| --- | --- |
| Reachable | `yes` |
| HTTP status of an anonymous initialize | `200` |
| tools/list served without credentials | `yes` |
| Tools that change things, listed without credentials | `11` |
| Protocol version | `2025-06-18` |
| WWW-Authenticate on 401 | `not observed` |
| resource_metadata in WWW-Authenticate | `none` |
| RFC 9728 protected resource metadata | `https://platform.socialhive.pro/.well-known/oauth-protected-resource` |
| Authorization servers | `https://platform.socialhive.pro` |
| Legacy HTTP+SSE transport | `no` |
| Dynamic client registration | `yes` |
| Client ID metadata documents | `no` |

- **high** Tools that change things, listed to anyone ([unauth-remote-writes](https://anlyon.dev/methodology#unauth-remote-writes))

```untrusted-server-text
The endpoint served tools/list without credentials, and the list has 11 tools that change things (2 irreversible, 9 write). Whether a call also works without credentials was not tested: tools are never called.

https://platform.socialhive.pro/api/mcp: tools/list returned 24 tools to an anonymous client, including publish_post (irreversible), publish_article (irreversible), generate_text (write), adapt_post (write), generate_image (write) and 6 more
```