Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

io.github.ndesv21/socialclaw

REMOTE · GETSOCIALCLAW.COM · 2 COMPONENTS

Connect any AI agent to 11+ social platforms: schedule, publish & track posts via hosted MCP.

0 this week 79 Trust /100

Last scanned (14 minutes ago)

Scores higher than 79% of remote servers

Unreachable for 2 days in a row. Last reached 3 Nov 2026.

Category Marketing and SEO

Recent critical change

Authorization (2 Oct 2026). See the changelog before you install this server.

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →

Endpoint Security14
Transport & Reachability0
Schema Quality & AI Usability0
  • Schema not yet verified: we couldn't read the endpoint's schema, or could read only part of its tool list.Unverified
Stability & Change Management0
  • Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified
Tool Coverage0
  • Tool coverage not yet verified: we couldn't read the endpoint's tools, or could read only part of the list.Unverified
Tool Safety0
  • Tool safety not yet verified: we couldn't read the endpoint's tools, or could read only part of the list.Unverified
Capabilities0
  • Capabilities not yet verified: we couldn't read the endpoint's capabilities.Unverified

Unverified: 5 categories

Categories scored 0 because we could not verify them: authentication we do not have, an unreachable endpoint, or not enough scan history. We only credit what we can confirm.

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 4 Nov 26 0
    • Endpoint reachability: reachable → unreachable ▼ security
    • HSTS header: fail → unverified ▼ security
    • Stability: pass → unverified ▼ security
    • Tool safety: pass → unverified ▼ security
    • Authorization: fail → unverified ▼ security
    • TLS certificate: pass → unverified ▼ security
    • Transport: pass → fail ▼ security
    • Tool coverage: 100 → unverified ▼ functional
    • Capabilities: pass → unverified ▼ functional
  • 19 Oct 26 0
    • Stability: 0.97 → pass security
  • 18 Oct 26 0
    • Stability: pass → 0.97 functional
  • 2 Oct 26 0
    • Authorization: unverified → fail ▼ critical
    • The server rewrote its instructions, which are the text every model session reads security
    • Tool “get_instagram_comments” rewrote its description, which is the text the model reads security
    • Tool “upload_asset” rewrote its description, which is the text the model reads security
    • Tool “connect_account” rewrote its description, which is the text the model reads security
    • Tool “delete_instagram_comment” is now declared destructive security
    • Tool “cancel_post” is now declared destructive security
    • Destructive annotations: All 3 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation. functional
    • New tool “get_profile” functional
    • “connect_account” reworded the description of “webhookUrl” cosmetic
    • “upload_asset” reworded the description of “sourceUrl” cosmetic
    • “connect_account” reworded the description of “botToken” cosmetic
    • Tool “delete_instagram_comment” changed its title: Delete Instagram comment cosmetic
    • Tool “get_analytics” changed its title: Get analytics cosmetic
    • Tool “get_instagram_account_insights” changed its title: Get Instagram account insights cosmetic
    • Tool “get_instagram_comments” changed its title: Get Instagram comments cosmetic
    • Tool “get_instagram_media_insights” changed its title: Get Instagram media insights cosmetic
    • Tool “get_instagram_messages” changed its title: Get Instagram messages cosmetic
    • Tool “get_instagram_profile” changed its title: Get Instagram profile cosmetic
    • Tool “get_post” changed its title: Get post cosmetic
    • Tool “hide_instagram_comment” changed its title: Hide Instagram comment cosmetic
    • Tool “list_accounts” changed its title: List accounts cosmetic
    • Tool “list_assets” changed its title: List assets cosmetic
    • Tool “list_instagram_conversations” changed its title: List Instagram conversations cosmetic
    • Tool “list_instagram_media” changed its title: List Instagram media cosmetic
    • Tool “list_instagram_mentions” changed its title: List Instagram mentions cosmetic
    • Tool “list_posts” changed its title: List posts cosmetic
    • Tool “post_attempts” changed its title: Post attempts cosmetic
    • Tool “preview_campaign” changed its title: Preview campaign cosmetic
    • Tool “publish_draft” changed its title: Publish draft cosmetic
    • Tool “react_instagram_message” changed its title: React Instagram message cosmetic
    • Tool “refresh_analytics” changed its title: Refresh analytics cosmetic
    • Tool “reply_instagram_comment” changed its title: Reply Instagram comment cosmetic
    • Tool “retry_post” changed its title: Retry post cosmetic
    • Tool “run_status” changed its title: Run status cosmetic
    • Tool “send_instagram_message” changed its title: Send Instagram message cosmetic
    • Tool “upload_asset” changed its title: Upload asset cosmetic
    • Tool “validate_schedule” changed its title: Validate schedule cosmetic
    • Tool “workspace_health” changed its title: Workspace health cosmetic
    • Tool “workspace_usage” changed its title: Workspace usage cosmetic
    • Tool “apply_schedule” changed its title: Apply schedule cosmetic
    • Tool “account_capabilities” changed its title: Account capabilities cosmetic
    • Tool “cancel_post” changed its title: Cancel post cosmetic
    • Tool “connect_account” changed its title: Connect account cosmetic
  • 28 Sept 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 25 Sept 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 19 Sept 26 0
    • HSTS header: unverified → fail ▼ security
    • DNSSEC: unverified → pass ▲ security
    • Injection markers: unverified → pass ▲ security
    • Stability: unverified → pass ▲ security
    • TLS certificate: unverified → pass ▲ security
    • Transport: fail → pass ▲ security
    • Authorization: Authorisation not fully verified: no authorisation is required to call this server, and 32 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe. security
    • Endpoint reachability: unreachable → reachable ▲ functional
    • Tool coverage: unverified → 100 ▲ functional
    • MCP protocol: unverified → pass ▲ functional
  • 18 Sept 26 0
    • Endpoint reachability: reachable → unreachable ▼ security
    • HSTS header: fail → unverified ▼ security
    • Stability: pass → unverified ▼ security
    • Tool safety: pass → unverified ▼ security
    • TLS certificate: pass → unverified ▼ security
    • DNSSEC: pass → unverified ▼ security
    • Transport: pass → fail ▼ security
    • Authorization: Authorisation not yet verified: we couldn't confirm whether this endpoint requires it. security
    • Capabilities: pass → unverified ▼ functional
    • Tool coverage: 100 → unverified ▼ functional
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Probed https://getsocialclaw.com/mcp

TLS unreached
DNSSEC secure

Validation of getsocialclaw.com. — Secure

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
com. present 19718 13 Verified
getsocialclaw.com. present 7835 13 Verified
getsocialclaw.com. Verified address RRset verified with the apex keys
Authentication Inconclusive

We could not reach the endpoint well enough to judge its authorisation posture.

Result Inconclusive

Background: How OAuth 2.1 works in the 2026 MCP spec →

Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://getsocialclaw.com/mcp Unreachable
http (plaintext) http://getsocialclaw.com/mcp HTTPS enforced
MCP tools · 34 exposed · ~2,865 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
account_capabilities ~72

Get publish capabilities and provider rules for connected accounts: what media is allowed, text limits, and whether publishing is currently possible. Pass accountId for one account, or provider to filter, or neither for all.

NameTypeReqDescription
accountIdstring–Optional account id.
providerstring–Optional provider filter.

No output schema declared.

No examples provided.

apply_schedule ~155

Create a publishing run from a schedule document. Posts are scheduled or published through connected accounts. Send an idempotencyKey so retries do not create duplicate runs.

NameTypeReqDescription
idempotencyKeystring–Stable key to deduplicate retries.
scheduleobjectyesSocialClaw schedule document. Minimal shape: { timezone, posts: [{ account, name, description, publish_at, media_link? }] }. Campaign documents use { timezone, campaigns: [...] }. Per-post provider s…

No output schema declared.

No examples provided.

cancel_post ~24

Cancel a scheduled post before it publishes.

NameTypeReqDescription
postIdstringyes–

No output schema declared.

No examples provided.

connect_account ~182

Start connecting one of the user's own social accounts to their SocialClaw workspace. For most providers this returns an authorizeUrl; give it to the user so they sign in with the provider themselves (SocialClaw never sees their password). Telegram and Discord have no sign-in page: Telegram takes the bot token and chat id of a bot the user created and made admin of their channel, and Discord takes a webhook URL the user created for their channel. Only pass values the user gave you for this purpose.

NameTypeReqDescription
botTokenstring–Telegram only: token of the user's own bot, from @BotFather.
chatIdstring–Telegram chat target, e.g. @yourchannel (telegram only).
providerstringyesProvider to connect.
webhookUrlstring–Discord only: webhook URL the user created in their channel settings.

No output schema declared.

No examples provided.

delete_instagram_comment ~50

Permanently delete an Instagram comment on the user's media. Prefer hide_instagram_comment when unsure.

NameTypeReqDescription
accountstringyesInstagram connected-account id or handle.
commentIdstringyes–

No output schema declared.

No examples provided.

get_analytics ~70

Get analytics snapshots for a post, an account, or a run. scope must be post, account, or run; id is the matching identifier.

NameTypeReqDescription
idstringyes–
scopestringyes–
windowstring–Optional analytics window, e.g. 7d.

No output schema declared.

No examples provided.

get_asset ~73

Get one media asset from the user's SocialClaw library by id, including its status (uploading, ready, or failed), import progress, and publicUrl. Use it after upload_asset returns status uploading, until the asset is ready.

NameTypeReqDescription
assetIdstringyesAsset id returned by upload_asset or list_assets.

No output schema declared.

No examples provided.

get_instagram_account_insights ~91

Get an Instagram account's insight trend (a daily time series, e.g. reach) over the last N days.

NameTypeReqDescription
accountstringyesInstagram connected-account id or handle.
daysnumber–Window in days (2-30, default 14).
metricstring–Account metric, default reach (e.g. reach, profile_views, accounts_engaged).

No output schema declared.

No examples provided.

get_instagram_comments ~110

Read the comments and replies people left on one of the user's own Instagram posts, so the user can review and answer them. Use list_instagram_media first to get a mediaId.

NameTypeReqDescription
accountstringyesInstagram connected-account id or handle.
afterstring–Pagination cursor from a previous response.
limitnumber–Max comments to return (default 25, capped at 100).
mediaIdstringyesThe IG media id from list_instagram_media.

No output schema declared.

No examples provided.

get_instagram_media_insights ~88

Get analytics for one Instagram post (reach, likes, comments, saved, shares, views). Use list_instagram_media for the mediaId.

NameTypeReqDescription
accountstringyesInstagram connected-account id or handle.
mediaIdstringyes–
mediaProductTypestring–Optional: FEED, REELS, or STORY — refines which metrics are requested.

No output schema declared.

No examples provided.

get_instagram_messages ~80

Read the messages in an Instagram direct-message conversation.

NameTypeReqDescription
accountstringyesInstagram connected-account id or handle.
afterstring–Pagination cursor from a previous response.
conversationIdstringyesConversation id from list_instagram_conversations.
limitnumber–Max messages (default 25, capped at 100).

No output schema declared.

No examples provided.

get_instagram_profile ~40

Get an Instagram account's profile stats: followers, follows, media count, bio.

NameTypeReqDescription
accountstringyesInstagram connected-account id or handle.

No output schema declared.

No examples provided.

get_post ~27

Get one post including its delivery state and provider identifiers.

NameTypeReqDescription
postIdstringyes–

No output schema declared.

No examples provided.

get_profile ~36

Identify the connected SocialClaw workspace: its stable id, name, and plan. Use it to confirm which workspace you are acting on.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

hide_instagram_comment ~67

Hide or unhide an Instagram comment on the user's media. Set hidden=false to unhide.

NameTypeReqDescription
accountstringyesInstagram connected-account id or handle.
commentIdstringyes–
hiddenboolean–true to hide (default), false to unhide.

No output schema declared.

No examples provided.

list_accounts ~66

List connected social accounts in the SocialClaw workspace. Optionally filter by provider (x, facebook, instagram_business, instagram, threads, linkedin, linkedin_page, pinterest, tiktok, telegram, discord, youtube, reddit, wordpress).

NameTypeReqDescription
providerstring–Optional provider filter.

No output schema declared.

No examples provided.

list_assets ~178

List media (images/videos) the user has uploaded to their SocialClaw library, newest first. Each asset includes a publicUrl usable directly as media_link in validate_schedule/apply_schedule. Use this to find a previously uploaded file (e.g. from the dashboard) to post. Optionally filter by kind (image/video), mime, or a text query over filename/id.

NameTypeReqDescription
kindstring–Filter by media kind: image or video.
limitnumber–Maximum assets to return. Defaults to 24, capped at 48.
mimestring–Optional mime prefix filter, e.g. video/mp4.
querystring–Optional text match over filename, id, kind, mime, or url.
sortstring–created_desc (default, newest first) or created_asc.

No output schema declared.

No examples provided.

list_instagram_conversations ~105

List the Instagram direct-message conversations for an account, most recent first. Each conversation includes `counterpart` (the other person's {id, username}) — use its id as the recipientId when replying; `participants` also lists the account itself.

NameTypeReqDescription
accountstringyesInstagram connected-account id or handle.
afterstring–Pagination cursor from a previous response.
limitnumber–Max conversations (default 25, capped at 100).

No output schema declared.

No examples provided.

list_instagram_media ~94

List an Instagram account's recent posts (caption, permalink, timestamp, comment count) so you can find one to read or moderate comments on. account is the connected-account id or handle.

NameTypeReqDescription
accountstringyesInstagram connected-account id or handle.
afterstring–Pagination cursor from a previous response.
limitnumber–Max media to return (default 25, capped at 100).

No output schema declared.

No examples provided.

list_instagram_mentions ~47

List recent @mentions of the workspace's Instagram accounts (captured from Instagram mention webhooks).

NameTypeReqDescription
limitnumber–Max mentions (default 30, capped at 100).

No output schema declared.

No examples provided.

list_posts ~104

List posts in the workspace with optional filters.

NameTypeReqDescription
accountstring–Account handle filter.
campaignIdstring––
limitnumber–Maximum posts to return. Defaults to 20 and is capped at 50.
offsetnumber–Offset for paging through results.
providerstring––
runIdstring––
statusstring–e.g. scheduled, published, action_required, failed, canceled.

No output schema declared.

No examples provided.

post_attempts ~35

List publish attempts for a post, including provider errors. Use this to debug failed posts.

NameTypeReqDescription
postIdstringyes–

No output schema declared.

No examples provided.

preview_campaign ~123

Preview how a campaign schedule document expands into concrete posts and steps without creating anything.

NameTypeReqDescription
scheduleobjectyesSocialClaw schedule document. Minimal shape: { timezone, posts: [{ account, name, description, publish_at, media_link? }] }. Campaign documents use { timezone, campaigns: [...] }. Per-post provider s…

No output schema declared.

No examples provided.

publish_draft ~54

Publish a previously created draft run, optionally at a given ISO-8601 start time.

NameTypeReqDescription
runIdstringyesDraft run id.
startAtstring–Optional ISO-8601 publish start time.

No output schema declared.

No examples provided.

react_instagram_message ~84

React to a received Instagram direct message (e.g. love).

NameTypeReqDescription
accountstringyesInstagram connected-account id or handle.
conversationIdstringyes–
messageIdstringyes–
reactionstring–Reaction name, default love.
recipientIdstringyesThe other participant's Instagram-scoped user id (IGSID).

No output schema declared.

No examples provided.

refresh_analytics ~106

Fetch fresh analytics for a published post from the provider and store a new snapshot, then return it. Supported providers: Instagram, TikTok, YouTube, Reddit, X, Pinterest, Snapchat (others return an unsupported snapshot). Call this before get_analytics when you need current numbers rather than the last stored snapshot.

NameTypeReqDescription
postIdstringyesThe published post id to refresh.
windowstring–Optional analytics window, e.g. 7d (default lifetime).

No output schema declared.

No examples provided.

reply_instagram_comment ~51

Reply to an Instagram comment on the user's media.

NameTypeReqDescription
accountstringyesInstagram connected-account id or handle.
commentIdstringyes–
messagestringyesThe reply text.

No output schema declared.

No examples provided.

retry_post ~21

Retry a failed post.

NameTypeReqDescription
postIdstringyes–

No output schema declared.

No examples provided.

run_status ~28

Get the status summary of a publishing run and its posts.

NameTypeReqDescription
runIdstringyes–

No output schema declared.

No examples provided.

send_instagram_message ~179

Send an Instagram direct message — a text reply, or an image/video attachment via attachment_url. Only allowed within 24 hours of the recipient's last message unless a message tag (e.g. HUMAN_AGENT) is supplied.

NameTypeReqDescription
accountstringyesInstagram connected-account id or handle.
attachment_typestring–Attachment type: image (default), video, or audio.
attachment_urlstring–Public URL of an image/video to send as an attachment.
conversationIdstringyesConversation id (for routing/storage).
recipientIdstringyesThe recipient's Instagram-scoped user id (IGSID).
tagstring–Optional message tag, e.g. HUMAN_AGENT, to reply outside the 24h window.
textstring–Message body (omit when sending an attachment).

No output schema declared.

No examples provided.

upload_asset ~231

Add an image or video to the user's SocialClaw media library so it can be attached to a post. Pass exactly one of: file (a file the user attached in this chat), sourceUrl (a direct public http(s) link to the image or video file, not a web page), or contentBase64 (small files only). Files up to 1 GB are supported through file or sourceUrl. The result is the asset: when status is ready, use its publicUrl as media_link in validate_schedule/apply_schedule. Large videos may come back with status uploading; then call get_asset with the asset id until status is ready (or failed) before scheduling.

NameTypeReqDescription
contentBase64string–Base64-encoded file content. Small files only; prefer file or sourceUrl.
fileobject–A file the user attached in the conversation.
filenamestring–Optional filename including extension, e.g. launch.png. Inferred from the file or URL when omitted.
sourceUrlstring–Direct public http(s) URL of the image or video file.

No output schema declared.

No examples provided.

validate_schedule ~136

Validate a schedule document against provider rules, media limits, account state, and publish times WITHOUT creating any posts. Always run this before apply_schedule.

NameTypeReqDescription
scheduleobjectyesSocialClaw schedule document. Minimal shape: { timezone, posts: [{ account, name, description, publish_at, media_link? }] }. Campaign documents use { timezone, campaigns: [...] }. Per-post provider s…

No output schema declared.

No examples provided.

workspace_health ~41

Get workspace health, including connection state across providers. Pass provider to check one provider's connections.

NameTypeReqDescription
providerstring–Optional provider to check connection health for.

No output schema declared.

No examples provided.

workspace_usage ~17

Get workspace usage counters and plan entitlement consumption.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

Install

How do I install the io.github.ndesv21/socialclaw MCP server?

io.github.ndesv21/socialclaw is a hosted endpoint at https://getsocialclaw.com/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

remote · getsocialclaw.com

# add to Claude Code
claude mcp add --transport http ndesv21-socialclaw 'https://getsocialclaw.com/mcp'
Common questions

What is the io.github.ndesv21/socialclaw MCP server?

io.github.ndesv21/socialclaw is an MCP server listed in the public MCP registry as io.github.ndesv21/socialclaw. Connect any AI agent to 11+ social platforms: schedule, publish & track posts via hosted MCP. This page covers its hosted endpoint (https://getsocialclaw.com/mcp).

Is the io.github.ndesv21/socialclaw MCP server safe to use?

io.github.ndesv21/socialclaw scores 79 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the io.github.ndesv21/socialclaw MCP server expose?

io.github.ndesv21/socialclaw exposes 34 tools: list_accounts, account_capabilities, connect_account, upload_asset, get_asset, and 29 more. Their descriptions and schemas cost roughly 2,865 tokens of context every time the server is loaded.

Does the io.github.ndesv21/socialclaw MCP server require authentication?

Its publisher declares that io.github.ndesv21/socialclaw requires credentials, so you will need to authorise it in your MCP client. We have not been able to confirm that against the live endpoint.

Is the io.github.ndesv21/socialclaw MCP server still maintained?

io.github.ndesv21/socialclaw is still listed in the MCP registry, though our most recent checks did not reach this channel. We last reached this channel on 3 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.