@nooticr/mcp 1.26.25 → 1.26.26

package/README.md

@@ -93,7 +93,7 @@ them caps that fan-out with an argument.
 | `search_creators` | 2 | People by what they make — designers, developers, photographers, anyone with an audience — found by craft, niche or keyword. Use when you know the kind of person but not their names. Searches TikTok, Instagram and Xiaohongshu; **not** YouTube, Douyin, X, Reddit or LinkedIn, which cannot be creator-searched upstream. |
 | `get_similar_creators` | 2 | Lookalikes for a creator that already works. |
 | `discover_sounds` | 2 | Trending audio with playable previews. Sound is a major ranking signal on TikTok. |
-| `discover_hashtags` | 2 | Trending hashtags with volumes and whether each is rising, cooling or steady. |
+| `discover_hashtags` | 2 | What to tag with. TikTok comes from the Creative Center trend board — volumes plus rising/cooling/steady. The other eight searchable networks have no trend board upstream, so tags are counted across a live sweep of a niche you name: real and current, but a single sample, so no rising/cooling signal. `source` says which you got. LinkedIn cannot be swept. |
 | `find_hook_pattern` | 2 | A creator's recent posts, so their opening lines can be read as a set and turned into fill-in-the-blank templates. One `get_user_posts` call. |
 | `search_mentions` | 2 per network (5 for Xiaohongshu) | **Brand monitoring.** Every *comment* that names a term, across nine networks at once, grouped under the post it was left on. A brand is named far more often in the replies than in a caption, so the comment is the unit — not the post. Takes a `since` date to read a past window, and pages with `offset`/`pageSize` so a nine-network sweep does not arrive all at once. Does not read speech inside a video — `search_spoken_mentions` does, on TikTok, YouTube and Douyin. |
 | `watch_creator` | free | Add a creator to your watchlist. Stores the handle only — nothing is fetched. |
@@ -136,7 +136,6 @@ them caps that fan-out with an argument.
 | Tool | Credits | What it is for |
 |------|---------|----------------|
 | `check_nooticr_credits` | free | Balance and billing URL. |
-| `buy_nooticr_credits` | free | A Stripe Checkout URL for a credit pack. Credits land automatically after payment. |
 | `nooticr_login` | free | Re-link the account when a call fails with an authentication error. |
 | `list_social_connections` | free | What you have connected and what each connection is actually allowed to do — read the account, publish a post, manage comments — as yes, no or **unknown**. Unknown means the grant predates scope recording: treat it as "try it", not as a refusal. Also says which platforms can be linked at all, which is a smaller set than the networks nooticr reads. |
 | `connect_social_account` | free | A link the user opens to connect one account. They approve at the provider in their own browser; nothing is connected until they do, and no credential passes through the tool or the model's context. Each call mints a fresh link — an old one does not work twice. |
@@ -485,7 +484,7 @@ and text** posts.
   lookup or transcript, 2 for discovery and for a tool that makes one fetch, 3
   for the two that fetch frames *and* transcript. Every tool bills from the
   first call. Top up via
-  `buy_nooticr_credits`, `check_nooticr_credits`, or the nooticr dashboard at
+  `check_nooticr_credits`, or the nooticr dashboard at
   `https://nooticr.com/settings?tab=billing`.
 - **Expired refresh token**: the stored refresh token was rejected by the
   nooticr server. Run `npx @nooticr/mcp login` again to re-authenticate.

package/dist/shared/hashtags.js

@@ -0,0 +1,143 @@
+/**
+ * Trending hashtags for the nine networks that have no trend board.
+ *
+ * `discover_hashtags` reads TikTok's Creative Center, which is a real trend
+ * board: it knows post counts, view counts, and whether a tag is rising,
+ * cooling or steady. Nothing equivalent exists upstream for the other nine
+ * networks, so "what should I tag this?" was answerable on one network out of
+ * ten — while `repurpose_post` exists precisely to move a post between
+ * networks, and tagging is part of the conventions it cannot inform (issue #32).
+ *
+ * What is available is a niche sweep the caller is often paying for anyway.
+ * Counting tags across the captions it returns is a current, per-network answer
+ * drawn from real posts. It is weaker than a trend board and weaker in a
+ * specific way — a sample of one search has no rising/cooling signal, because
+ * there is no earlier sample to compare against — so the result says which
+ * source it came from rather than presenting the two as the same measurement.
+ * Same idea as `get_post_transcript` marking `source: "speech-to-text"`.
+ */
+const NUM = /^-?\d+(\.\d+)?$/;
+function views(post) {
+    const raw = post.views;
+    if (typeof raw === "number" && Number.isFinite(raw))
+        return raw;
+    if (typeof raw === "string" && NUM.test(raw.trim()))
+        return Number(raw.trim());
+    return null;
+}
+/**
+ * Tags in one post: the `hashtags` array when the network fills it, plus any
+ * `#tag` written in the caption.
+ *
+ * Both, not either. Instagram and TikTok populate `hashtags`; X, Reddit and
+ * LinkedIn frequently leave it empty while the caption is full of them, and a
+ * tally that trusted only the array returned nothing for exactly the networks
+ * this exists to serve.
+ */
+/**
+ * Scripts where two characters is a word, not an abbreviation.
+ *
+ * The length floor below exists to keep "#1" and "#ad" off the top of a
+ * frequency count, and a flat "three or more" is the wrong way to spell that:
+ * 护肤 is "skincare", スキンケア's stem is two kana, and both are exactly the
+ * networks this widening was for. The first version of this dropped them
+ * silently — an empty answer for Weibo and Xiaohongshu that would have read as
+ * "this niche has no tags".
+ */
+const IDEOGRAPHIC = /[\p{Script=Han}\p{Script=Hiragana}\p{Script=Katakana}\p{Script=Hangul}]/u;
+/** Noise at the top of a frequency count, rather than an answer. */
+function isNoise(tag) {
+    if (/\s/.test(tag) || !tag)
+        return true;
+    // A bare number is never the tag someone searched for.
+    if (/^\p{N}+$/u.test(tag))
+        return true;
+    return tag.length < (IDEOGRAPHIC.test(tag) ? 2 : 3);
+}
+export function tagsIn(post) {
+    const out = new Set();
+    const add = (raw) => {
+        const clean = String(raw ?? "")
+            .replace(/^#/, "")
+            .trim()
+            .toLowerCase();
+        if (!isNoise(clean))
+            out.add(clean);
+    };
+    if (Array.isArray(post.hashtags))
+        for (const tag of post.hashtags)
+            add(tag);
+    for (const field of [post.caption, post.title]) {
+        // Unicode letters and marks, so a Weibo or Xiaohongshu tag is not dropped.
+        // The floor is applied in `add`, not here, so one rule decides it.
+        for (const m of String(field ?? "").matchAll(/#([\p{L}\p{M}\p{N}_]{2,})/gu))
+            add(m[1]);
+    }
+    return [...out];
+}
+/** The median of a list, or null when there is nothing to take one of. */
+function median(values) {
+    if (!values.length)
+        return null;
+    const sorted = [...values].sort((a, b) => a - b);
+    const mid = Math.floor(sorted.length / 2);
+    return sorted.length % 2 ? sorted[mid] : (sorted[mid - 1] + sorted[mid]) / 2;
+}
+/**
+ * Rank the tags in a swept feed by how many posts carry them.
+ *
+ * Ties break on median views rather than total, so one viral post carrying a
+ * tag nobody else uses does not outrank a tag five posts share. `count` caps
+ * the output; a tag used by exactly one post is dropped, because a tag that
+ * appears once is that post's tag and not the niche's — the same reasoning
+ * `find_hook_pattern` applies to a template that fits one post.
+ */
+export function deriveHashtags(posts, count = 20) {
+    const seen = new Map();
+    for (const post of posts) {
+        const v = views(post);
+        const url = typeof post.externalUrl === "string" ? post.externalUrl : null;
+        for (const tag of tagsIn(post)) {
+            const row = seen.get(tag) ?? { posts: 0, views: [], example: null };
+            row.posts += 1;
+            if (v !== null)
+                row.views.push(v);
+            row.example ??= url;
+            seen.set(tag, row);
+        }
+    }
+    return [...seen.entries()]
+        .filter(([, row]) => row.posts > 1)
+        .map(([hashtag, row]) => ({
+        hashtag,
+        posts: row.posts,
+        views: row.views.length ? row.views.reduce((a, b) => a + b, 0) : null,
+        medianViews: median(row.views),
+        example: row.example,
+    }))
+        .sort((a, b) => b.posts - a.posts || (b.medianViews ?? -1) - (a.medianViews ?? -1))
+        .slice(0, Math.max(1, count));
+}
+/**
+ * What the derived result says about itself.
+ *
+ * A caller handed a ranked list of tags will otherwise read it as a trend
+ * board, and act on a "rising" signal that was never measured. Naming the
+ * sample size is the honest version: five posts do not establish that a tag is
+ * popular, and the model is the one that has to decide whether to say so.
+ */
+export function derivedNote(niche, platform, swept, found) {
+    if (!swept) {
+        return (`No posts came back for "${niche}" on ${platform}, so there is nothing to count tags in. ` +
+            "That is a coverage gap here, not evidence the niche is untagged — say so rather than " +
+            "reporting an empty answer as a finding.");
+    }
+    return (`Counted across ${swept} recent ${platform} post${swept === 1 ? "" : "s"} matching "${niche}" — ` +
+        `${found} tag${found === 1 ? "" : "s"} used by more than one of them, ranked by how many posts ` +
+        "carry each. " +
+        "This is a sample of one search, not a trend board: there is no rising/cooling signal here " +
+        "because there is no earlier sample to compare against, and only TikTok has a real one. " +
+        `With ${swept} posts, treat the tail of this list as noise, and say so instead of ranking it ` +
+        "confidently. The `example` on each tag is a post that used it, so any claim you make about a " +
+        "tag can be checked against a real post rather than taken from the count.");
+}

package/dist/shared/loading-plans.js

@@ -343,7 +343,6 @@ export const LOADING_PLANS = {
     generate_captions: { label: "Writing the captions", kind: "text", n: 1, steps: [], planAi: true },
     // ─── Account and own-account: free, and free at a zero balance ───
     check_nooticr_credits: { label: "Checking your balance", kind: "text", n: 1, steps: [], free: true },
-    buy_nooticr_credits: { label: "Opening checkout", kind: "text", n: 1, steps: [], free: true },
     nooticr_login: { label: "Getting a sign-in link", kind: "text", n: 1, steps: [], free: true },
     watch_creator: { label: "Adding to your watchlist", kind: "text", n: 1, steps: [], free: true },
     unwatch_creator: { label: "Removing from your watchlist", kind: "text", n: 1, steps: [], free: true },

package/dist/shared/output-schemas.js

@@ -704,9 +704,24 @@ export const OUTPUT_SCHEMAS = {
             hashtag: scalar(),
             posts: scalar(),
             views: scalar(),
-            trend: scalar().describe("rising, cooling or steady."),
+            // Only the derived route computes these two: a trend board reports its
+            // own totals, a counted sample reports the middle post and one example
+            // so a claim about a tag can be checked against a real post.
+            medianViews: scalar().describe("Derived route only — views of the median post carrying it."),
+            example: scalar().describe("Derived route only — a post that used it."),
+            trend: scalar().describe("rising, cooling or steady. Trend board only; a sample has none."),
             url: scalar(),
         })).optional(),
+        // Which of the two routes answered, so a counted sample is not read as a
+        // trend board. Same marker as get_post_transcript's `source`.
+        source: scalar().describe('"trend-board" (tiktok) or "derived-from-sweep" (everywhere else).'),
+        platform: scalar(),
+        niche: scalar().describe("Derived route only — the sweep the tags were counted from."),
+        sweptPosts: scalar().describe("Derived route only — how many posts were counted."),
+        note: scalar().describe("Derived route only — the sample size and what it does not establish."),
+        available: scalar().describe("false when the network cannot be swept at all."),
+        billable: scalar(),
+        reason: scalar(),
         country: scalar(),
         days: scalar(),
         mcpCredits,
@@ -781,13 +796,8 @@ export const OUTPUT_SCHEMAS = {
         // so the description is what steers a reader off it.
         firstFreeRemaining: listOf(z.string())
             .describe("Superseded by firstFreeTools, which carries the same value. Kept for backward compatibility — read firstFreeTools."),
-        billingUrl: scalar(),
         hint: scalar(),
     }),
-    buy_nooticr_credits: open({
-        checkoutUrl: scalar(),
-        packs: listOf(open({})),
-    }),
     nooticr_login: open({
         signedIn: scalar().describe("true when the session is already good and no link is needed."),
         loginUrl: scalar().describe("Only present when a sign-in is actually required."),

package/dist/shared/spend.js

@@ -36,6 +36,28 @@ export const SEARCH_PLATFORMS = [
  * is a credit quoted for a call that never happens.
  */
 export const SPOKEN_PLATFORMS = ["tiktok", "youtube", "douyin"];
+/**
+ * Platforms a niche sweep can reach — the server's DISCOVERABLE_PLATFORMS.
+ *
+ * Named here for the same reason as the list above: more than one place has to
+ * agree on it. `discover_hashtags` counts tags across a sweep for every network
+ * but TikTok, so this list decides both which platforms it accepts and what its
+ * refusal names as the alternatives. LinkedIn is the one absentee — a post URL
+ * and a handle's feed both work there, discovery does not — and a tool that
+ * accepted it would spend a credit to return nothing, which then reads as "this
+ * niche has no tags".
+ */
+export const DISCOVERABLE_PLATFORMS = [
+    "youtube",
+    "tiktok",
+    "instagram",
+    "douyin",
+    "xiaohongshu",
+    "twitter",
+    "bilibili",
+    "reddit",
+    "weibo",
+];
 /** Two per network, except the one that costs an order of magnitude more upstream. */
 export const CREDITS_PER_NETWORK = 2;
 export const XIAOHONGSHU_CREDITS = 5;

package/dist/shared/tools-def.js

@@ -81,8 +81,8 @@ export const TOOL_DEFINITIONS = [
     {
         name: "discover_hashtags",
         title: "Discover Hashtags",
-        description: "Trending TikTok hashtags from the Creative Center trend board, with post counts, view counts and whether each is rising, cooling or steady. Filter by country and time window. Use to find what to tag, or to spot a wave early. Consumes 2 nooticr credits.",
-        inputSchema: z.object({ country: z.string().optional().describe("2-letter country code (default US)."), days: z.number().int().optional().describe("Window in days: 7, 30 or 120 (default 7)."), count: z.number().int().optional().describe("Max hashtags (default 20)."), industryId: z.string().optional().describe("Optional TikTok industry id to filter by.") }).strict(),
+        description: "What to tag a post with, on any network that can be searched. TikTok is read from the Creative Center trend board: post counts, view counts, and whether each tag is rising, cooling or steady. The other eight — instagram, youtube, douyin, xiaohongshu, twitter, bilibili, reddit, weibo — have no trend board upstream, so the tags are counted across a live sweep of the niche you name, which needs `niche` set and returns no rising/cooling signal because there is no earlier sample to compare against. The result says which of the two it is in `source`; do not present a counted sample as a trend board. One network cannot be swept at all: linkedin. Filter by country and time window on TikTok. Consumes 2 nooticr credits either way. Use to find what to tag, or to spot a wave early.",
+        inputSchema: z.object({ platform: z.string().optional().describe("Network to tag for. Defaults to tiktok, the only one with a real trend board. Anything else counts tags across a sweep and needs `niche`. linkedin cannot be swept."), niche: z.string().optional().describe("Topic to sweep, required for every platform but tiktok — the tags are counted from the posts a search for this returns, so without it there is nothing to count."), country: z.string().optional().describe("2-letter country code (default US). TikTok only."), days: z.number().int().optional().describe("Window in days: 7, 30 or 120 (default 7). TikTok only."), count: z.number().int().optional().describe("Max hashtags (default 20)."), industryId: z.string().optional().describe("Optional TikTok industry id to filter by.") }).strict(),
     },
     {
         name: "analyze_post_fast",
@@ -189,13 +189,7 @@ export const TOOL_DEFINITIONS = [
     {
         name: "check_nooticr_credits",
         title: "Check Nooticr Credits",
-        description: "Check your MCP credit balance, billing URL and pack size. New users get 20 free credits. No cost — call anytime to see remaining credits before running other tools. Use before a run of paid calls to confirm the balance covers it.",
-        inputSchema: z.object({}).strict(),
-    },
-    {
-        name: "buy_nooticr_credits",
-        title: "Buy Nooticr Credits",
-        description: "Buy an MCP credit pack via Stripe Checkout. Returns a secure checkout URL — open it in your browser to pay. Credits are added automatically after payment. Use when the balance is short and the user has agreed to top up. No cost to call.",
+        description: "Check your nooticr credit balance. No cost to call — call anytime to see remaining credits before running other tools. Nothing here sells or tops up credits: this server offers no purchase of any kind, so when the balance is short, say that it is and that topping up happens on the nooticr website, and do not offer a link or a price. Use before a run of paid calls to confirm the balance covers it.",
         inputSchema: z.object({}).strict(),
     },
     {

package/dist/shared/tools.js

@@ -11,10 +11,11 @@ import { NooticrError } from "./nooticr.js";
 import { NOOTICR_UI_TEMPLATE } from "./ui-template.js";
 import { registerPrompts } from "./prompts.js";
 import { OUTPUT_SCHEMAS, anyObject } from "./output-schemas.js";
+import { deriveHashtags, derivedNote } from "./hashtags.js";
 import { createTaskStore, registerSlowTool } from "./tasks.js";
 import { COMMENT_CATEGORIES, COMMENT_SENTIMENTS, platformFromUrl, reviewGuidance, toEvidence, } from "./comment-review.js";
 import { costSentence, EVIDENCE_PLANS, fetchBillingNote, frameIndex, framesToBlocks, planCalls, scoreDraftGuidance, } from "./evidence.js";
-import { confirmSpend, declinedResult, searchMentionsCost, SEARCH_PLATFORMS, } from "./spend.js";
+import { confirmSpend, declinedResult, searchMentionsCost, SEARCH_PLATFORMS, DISCOVERABLE_PLATFORMS, } from "./spend.js";
 import { BackendWatchStore, MemoryWatchStore, registerWatchlist, } from "./watchlist.js";
 import { registerJobTools } from "./jobs.js";
 import { registerBrandWatch } from "./brand-watch.js";
@@ -24,7 +25,7 @@ import { loadingPlansJson } from "./loading-plans.js";
 import { registerHandoff } from "./handoff.js";
 import { registerCollabTools } from "./collab.js";
 /** Current MCP server version — bumped on every deploy for traceability. */
-export const MCP_SERVER_VERSION = "1.26.25";
+export const MCP_SERVER_VERSION = "1.26.26";
 /** MCP Apps extension identifier */
 const UI_EXTENSION = "io.modelcontextprotocol/ui";
 /** MIME type for MCP Apps HTML resources */
@@ -183,12 +184,6 @@ const RAW_URL_KEYS = new Set([
     "videoFallbackUrl",
     "thumbnailFallbackUrl",
     "musicFallbackUrl",
-    // Not a media asset — a Stripe Checkout link buy_nooticr_credits returns.
-    // Without this it fell through to the generic string branch below (which
-    // proxies *any* https:// string regardless of key name) and got rewritten
-    // into a /media/proxy?url=... link, a URL meant to serve image/video
-    // bytes, not redirect to a payment page.
-    "checkoutUrl",
 ]);
 /**
  * Whether a URL already points at one of our own media endpoints.
@@ -256,6 +251,32 @@ export function proxyUrls(obj) {
     }
     return obj;
 }
+const structuredOf = (res) => (res.structured ?? {});
+/** A structured result this server computed rather than proxied. */
+function toStructured(value) {
+    return {
+        content: [{ type: "text", text: JSON.stringify(value, null, 2) }],
+        structuredContent: value,
+    };
+}
+/**
+ * A refusal that spent nothing, said as a result rather than an error.
+ *
+ * An `isError` here would be read by a host as the call having gone wrong, and
+ * the model would retry it — the same paid call, refused for the same reason.
+ * A plain result carrying the reason is what lets it pick a different argument
+ * instead, and `billable: false` is what keeps the backend from charging for a
+ * call that answered nothing.
+ */
+function unbilled(reason) {
+    return toStructured({ available: false, billable: false, reason, mcpCredits: { cost: 0 } });
+}
+/** Tag a proxied result with where its numbers came from. */
+function withSource(result, source, platform) {
+    if (!result.structuredContent)
+        return result;
+    return { ...result, structuredContent: { ...result.structuredContent, source, platform } };
+}
 async function toToolResult(proxy) {
     // MCP Apps views (ChatGPT & Claude) render the interactive HTML card, which
     // already embeds all thumbnails/videos. Claude's Apps bridge rejects a tool
@@ -481,7 +502,6 @@ export function createMcpServer(rawMakeClient, opts) {
         "niche_report",
         "find_hook_pattern",
         "check_nooticr_credits",
-        "buy_nooticr_credits",
         "understand_social_post",
         // The catch-up draws its new posts through the same gallery view; the two
         // state tools have nothing to show and stay view-less, like nooticr_login.
@@ -1567,10 +1587,15 @@ export function createMcpServer(rawMakeClient, opts) {
     });
     server.registerTool("discover_hashtags", {
         title: "Discover Hashtags",
-        description: "Trending TikTok hashtags from the Creative Center trend board, with post counts, view counts " +
-            "and whether each is rising, cooling or steady. Filter by country and time window. Use to find " +
-            "what to tag, or to spot a wave early. Consumes 2 nooticr credits." +
-            "Use to find what to tag, or to spot a wave early.",
+        description: "What to tag a post with, on any network that can be searched. TikTok is read from the " +
+            "Creative Center trend board: post counts, view counts, and whether each tag is rising, " +
+            "cooling or steady. The other eight — instagram, youtube, douyin, xiaohongshu, twitter, " +
+            "bilibili, reddit, weibo — have no trend board upstream, so the tags are counted across a " +
+            "live sweep of the niche you name, which needs `niche` set and returns no rising/cooling " +
+            "signal because there is no earlier sample to compare against. The result says which of the " +
+            "two it is in `source`; do not present a counted sample as a trend board. One network cannot " +
+            "be swept at all: linkedin. Filter by country and time window on TikTok. " +
+            "Consumes 2 nooticr credits either way. Use to find what to tag, or to spot a wave early.",
         _meta: {
             ui: { resourceUri: uiResource("discover_hashtags") },
             "ui/resourceUri": uiResource("discover_hashtags"),
@@ -1582,16 +1607,66 @@ export function createMcpServer(rawMakeClient, opts) {
         outputSchema: OUTPUT_SCHEMAS.discover_hashtags,
         inputSchema: z
             .object({
-            country: z.string().optional().describe("2-letter country code (default US)."),
-            days: z.number().int().optional().describe("Window in days: 7, 30 or 120 (default 7)."),
+            platform: z
+                .string()
+                .optional()
+                .describe("Network to tag for. Defaults to tiktok, the only one with a real trend board. Anything " +
+                "else counts tags across a sweep and needs `niche`. linkedin cannot be swept."),
+            niche: z
+                .string()
+                .optional()
+                .describe("Topic to sweep, required for every platform but tiktok — the tags are counted from the " +
+                "posts a search for this returns, so without it there is nothing to count."),
+            country: z.string().optional().describe("2-letter country code (default US). TikTok only."),
+            days: z.number().int().optional().describe("Window in days: 7, 30 or 120 (default 7). TikTok only."),
             count: z.number().int().optional().describe("Max hashtags (default 20)."),
             industryId: z.string().optional().describe("Optional TikTok industry id to filter by."),
         })
             .strict(),
     }, async (args, extra) => {
         const client = await makeClient({ ...extra, arguments: args });
+        const platform = (args.platform || "tiktok").toLowerCase();
+        // TikTok keeps the trend board it always had — a real rising/cooling signal
+        // is worth more than a count, so nothing routes away from it.
+        if (platform === "tiktok") {
+            try {
+                const { platform: _p, niche: _n, ...board } = args;
+                const result = await toToolResult(await client.callTool("discover_hashtags", board));
+                return withSource(result, "trend-board", platform);
+            }
+            catch (err) {
+                return toolError("discover_hashtags failed", err);
+            }
+        }
+        // Everything else is derived, and two things make that impossible rather
+        // than merely worse. Refuse both before spending a credit: a paid call that
+        // cannot answer is the failure mode the platform-claims tests exist for.
+        if (!DISCOVERABLE_PLATFORMS.includes(platform)) {
+            return unbilled(`${platform} cannot be swept for posts, so there is no sample to count tags in and no trend ` +
+                `board upstream either. Searchable networks: ${DISCOVERABLE_PLATFORMS.join(", ")}. Nothing was charged.`);
+        }
+        if (!args.niche?.trim()) {
+            return unbilled(`Only tiktok has a trend board. Tags for ${platform} are counted across a sweep, so this ` +
+                "needs `niche` set to the topic to sweep. Nothing was charged.");
+        }
         try {
-            return await toToolResult(await client.callTool("discover_hashtags", { ...args }));
+            const res = await client.callTool("discover_social_posts", {
+                niche: args.niche,
+                platform,
+                limit: 30,
+            });
+            const structured = structuredOf(res);
+            const posts = Array.isArray(structured.posts) ? structured.posts : [];
+            const hashtags = deriveHashtags(posts, args.count ?? 20);
+            return toStructured({
+                hashtags,
+                platform,
+                niche: args.niche,
+                source: "derived-from-sweep",
+                sweptPosts: posts.length,
+                note: derivedNote(args.niche, platform, posts.length, hashtags.length),
+                mcpCredits: structured.mcpCredits ?? null,
+            });
         }
         catch (err) {
             return toolError("discover_hashtags failed", err);
@@ -1903,8 +1978,11 @@ export function createMcpServer(rawMakeClient, opts) {
     });
     server.registerTool("check_nooticr_credits", {
         title: "Check Nooticr Credits",
-        description: "Check your nooticr credit balance, billing URL and pack size. No cost — call anytime to see remaining credits before running other tools." +
-            "No cost to call. Use before a run of paid calls to confirm the balance covers it.",
+        description: "Check your nooticr credit balance. No cost to call — call anytime to see remaining credits " +
+            "before running other tools. Nothing here sells or tops up credits: this server offers no purchase " +
+            "of any kind, so when the balance is short, say that it is and that topping up happens on the " +
+            "nooticr website, and do not offer a link or a price. " +
+            "Use before a run of paid calls to confirm the balance covers it.",
         _meta: {
             ui: { resourceUri: uiResource("check_nooticr_credits") },
             "ui/resourceUri": uiResource("check_nooticr_credits"),
@@ -1918,35 +1996,31 @@ export function createMcpServer(rawMakeClient, opts) {
     }, async (_args, extra) => {
         const client = await makeClient(extra);
         try {
-            return await toToolResult(await client.callTool("check_nooticr_credits", {}));
+            const proxy = await client.callTool("check_nooticr_credits", {});
+            // The backend still returns a billing URL, because the dashboard and the
+            // website both use it. It is dropped here rather than passed through: a
+            // link to buy credits is a link to buy a digital good, and this server
+            // must offer no purchase path at all — not a checkout, and not a pointer
+            // to one. Stripped at the edge, so the backend needs no change and no
+            // other consumer of it does either.
+            //
+            // Dropped from the proxy result BEFORE toToolResult, not from what it
+            // returns. toToolResult also serialises the payload into the text block,
+            // so stripping the structured half afterwards left the URL in the text a
+            // model reads — which the guard in tests/site.test.ts caught on its first
+            // run, and is the whole reason it asserts on the serialised result rather
+            // than on `structuredContent` alone.
+            const structured = proxy.structured;
+            if (structured && "billingUrl" in structured) {
+                const { billingUrl: _dropped, ...rest } = structured;
+                return await toToolResult({ ...proxy, structured: rest });
+            }
+            return await toToolResult(proxy);
         }
         catch (err) {
             return toolError("check_nooticr_credits failed", err);
         }
     });
-    server.registerTool("buy_nooticr_credits", {
-        title: "Buy Nooticr Credits",
-        description: "Buy an MCP credit pack via Stripe Checkout. Returns a secure checkout URL — open it in your browser to pay. Credits are added automatically after payment. No cost to call." +
-            "Use when the balance is short and the user has agreed to top up.",
-        _meta: {
-            ui: { resourceUri: uiResource("buy_nooticr_credits") },
-            "ui/resourceUri": uiResource("buy_nooticr_credits"),
-            // ChatGPT reads only this one, and reads it to find the
-            // text/html+skybridge twin rather than the Claude resource.
-            "openai/outputTemplate": appsSdkResource("buy_nooticr_credits"),
-        },
-        annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: true },
-        outputSchema: OUTPUT_SCHEMAS.buy_nooticr_credits,
-        inputSchema: z.object({}).strict(),
-    }, async (_args, extra) => {
-        const client = await makeClient(extra);
-        try {
-            return await toToolResult(await client.callTool("buy_nooticr_credits", {}));
-        }
-        catch (err) {
-            return toolError("buy_nooticr_credits failed", err);
-        }
-    });
     server.registerTool("nooticr_login", {
         title: "Nooticr Login",
         description: "Get a fresh login URL to re-authenticate your MCP session. Call this tool when you need to reconnect or when the session has expired. No cost to call." +

package/dist/shared/ui-template.js

@@ -42,7 +42,6 @@ export const NOOTICR_UI_TEMPLATE = `<!DOCTYPE html>
     discover_sounds:"Discover Sounds",
     understand_social_post:"Understand Social Post",
     check_nooticr_credits:"Check Credits",
-    buy_nooticr_credits:"Buy Credits",
     compose_sequence:"Compose Sequence",
     overlay_bake:"Overlay Bake",
     spawn_variants:"Spawn Variants",
@@ -66,7 +65,6 @@ export const NOOTICR_UI_TEMPLATE = `<!DOCTYPE html>
     discover_sounds:"Trending sounds and music on TikTok/Instagram.",
     understand_social_post:"The same frames and transcript, for a description of what happens on screen.",
     check_nooticr_credits:"View your Nooticr credit balance and usage.",
-    buy_nooticr_credits:"Purchase additional Nooticr credits.",
     compose_sequence:"AI-powered content composition for social posts.",
     overlay_bake:"Bake text/image overlays onto video or image.",
     spawn_variants:"Generate multiple content variants from a single seed.",
@@ -3691,20 +3689,45 @@ export const NOOTICR_UI_TEMPLATE = `<!DOCTYPE html>
         +"</div></div>";
       return;}
 
-    // Trending hashtags
+    // Trending hashtags. Two sources with different evidence behind them: the
+    // TikTok trend board, which measures direction over time, and a count
+    // across one niche sweep, which cannot. The header names which, and a
+    // counted row draws no trend arrow — an arrow for a direction nobody
+    // measured is the view asserting something the tool did not.
     if(d.hashtags&&Array.isArray(d.hashtags)){
-      if(!d.hashtags.length){app.innerHTML='<div class="empty-state fade-in"><div class="icon">#</div><div class="text">No trending hashtags found</div></div>';return;}
+      var derived=d.source==="derived-from-sweep";
+      var where=derived
+        ?esc(String(d.platform||"")||"this network")+" · counted across "+fmtNum(d.sweptPosts||0)+" post"+((d.sweptPosts===1)?"":"s")+(d.niche?' matching "'+esc(d.niche)+'"':"")
+        :"TikTok trend board · "+esc(d.country||"US")+" · last "+(d.days||7)+" days";
+      if(!d.hashtags.length){
+        app.innerHTML='<div class="empty-state fade-in"><div class="icon">#</div><div class="text">'
+          +esc(d.reason||(derived?"No tag was used by more than one post in that sweep":"No trending hashtags found"))
+          +'</div><div class="sub" style="font-size:11.5px;color:var(--muted);margin-top:6px">'+where+"</div></div>";
+        return;}
       var hr=d.hashtags.slice(0,30).map(function(t){
         var dir=t.trend==="rising"?["▲","var(--green)"]:t.trend==="cooling"?["▼","var(--red)"]:["▬","var(--muted)"];
-        return '<a href="'+esc(t.url||"#")+'" target="_blank" rel="noopener" class="comment-row" style="text-decoration:none">'
+        var stat=fmtNum(t.posts||0)+" post"+((t.posts===1)?"":"s");
+        // A counted sample reports the middle post, because one outlier in a
+        // 30-post sweep moves a total and not a median.
+        if(derived){if(t.medianViews!=null)stat+=" · median "+fmtNum(t.medianViews)+" views";}
+        else if(t.views!=null)stat+=" · "+fmtNum(t.views)+" views";
+        var href=t.url||t.example||"";
+        var open=href?'<a href="'+esc(href)+'" target="_blank" rel="noopener" class="comment-row" style="text-decoration:none">':'<div class="comment-row">';
+        return open
           +'<div style="flex:1;min-width:0"><div style="font-size:13.5px;font-weight:600">#'+esc(t.hashtag)+"</div>"
-          +'<div style="font-size:11.5px;color:var(--muted)">'+fmtNum(t.posts||0)+" posts · "+fmtNum(t.views||0)+" views</div></div>"
-          +'<span style="font-size:11px;font-weight:700;color:'+dir[1]+';white-space:nowrap">'+dir[0]+" "+esc(t.trend||"")+"</span></a>";
+          +'<div style="font-size:11.5px;color:var(--muted)">'+stat+"</div></div>"
+          +(t.trend?'<span style="font-size:11px;font-weight:700;color:'+dir[1]+';white-space:nowrap">'+dir[0]+" "+esc(t.trend)+"</span>":"")
+          +(href?"</a>":"</div>");
       }).join("");
       app.innerHTML='<div class="card card-wide fade-in"><div class="card-body">'
-        +'<div style="display:flex;align-items:center;gap:7px;font-size:16px;font-weight:700">#<span>Trending hashtags</span></div>'
-        +'<div class="faint" style="font-size:11.5px;color:var(--muted);margin:2px 0 10px">TikTok · '+esc(d.country||"US")+" · last "+(d.days||7)+" days</div>"
-        +hr+"</div></div>";
+        +'<div style="display:flex;align-items:center;gap:7px;font-size:16px;font-weight:700">#<span>'+(derived?"Tags in this niche":"Trending hashtags")+"</span></div>"
+        +'<div class="faint" style="font-size:11.5px;color:var(--muted);margin:2px 0 10px">'+where+"</div>"
+        +hr
+        // The caveat goes in front of the person too, not only into the
+        // context handed to the model: a ranked list reads as a trend whatever
+        // the payload says, so the sentence saying it is not sits under it.
+        +(derived&&d.note?'<div class="faint" style="font-size:11.5px;color:var(--muted);margin-top:12px;line-height:1.6">'+esc(d.note)+"</div>":"")
+        +"</div></div>";
       return;}
 
     // Comment analysis
@@ -3815,32 +3838,6 @@ export const NOOTICR_UI_TEMPLATE = `<!DOCTYPE html>
         +(tier?'<span class="tier-badge">'+esc(tier)+"</span>":"")+"</div>"
         +'<div style="font-size:36px;font-weight:800;margin:10px 0;letter-spacing:-1px">'+bal+"</div>"
         +'<div style="font-size:13px;color:var(--muted)">credits remaining</div>'+freeHtml+"</div>";return;}
-    // Checkout. Real packs/prices, not the three hardcoded tiers this used
-    // to show regardless of what the backend actually returned — and each
-    // card is a real <a href> now, so the existing generic anchor handler
-    // (search this file for "cannot navigate the top-level window") opens
-    // the real checkoutUrl via ui/open-link. There was no click handler at
-    // all before this: .pack{cursor:pointer} in the CSS promised a click
-    // that did nothing.
-    if(d.checkoutUrl||d.packs){
-      var checkoutUrl=d.checkoutUrl||"#";
-      var packList=Array.isArray(d.packs)?d.packs:[];
-      var packHtml=function(p,featured){
-        var name=(p&&(p.name||p.label||p.title))||"Credits";
-        var price=(p&&(p.price||p.priceLabel||p.cost))||"";
-        var credits=p&&p.credits!=null?fmtNum(p.credits)+" credits":(p&&(p.description||p.credit))||"";
-        return '<a href="'+esc(checkoutUrl)+'" target="_blank" rel="noopener" class="'+(featured?"pack-featured":"pack")+'" style="text-decoration:none;color:inherit;display:block">'
-          +'<div class="text-sm font-semibold">'+esc(name)+'</div>'
-          +(price?'<div class="mt-2 text-2xl font-extrabold">'+esc(price)+"</div>":"")
-          +(credits?'<div class="mt-2 text-xs text-muted">'+esc(credits)+"</div>":"")+"</a>";
-      };
-      var cards=packList.length
-        ? packList.map(function(p,i){return packHtml(p,i===1);}).join("")
-        : packHtml({name:"Buy credits",description:"Opens Stripe Checkout"},true);
-      app.innerHTML='<div class="card card-wide fade-in"><div class="card-body">'
-        +'<div class="mb-3 text-base font-bold">🛒 Credit Packs</div>'
-        +'<div class="grid grid-cols-3 gap-2">'+cards
-        +"</div></div></div>";return;}
     // Hooks (show_hooks) — quote() gives each one its own Copy button.
     if(d.hooks&&Array.isArray(d.hooks)){
       if(!d.hooks.length){app.innerHTML='<div class="empty-state fade-in"><div class="icon">💬</div><div class="text">No hooks yet</div></div>';return;}

package/package.json

@@ -1,8 +1,17 @@
 {
   "name": "@nooticr/mcp",
   "mcpName": "com.nooticr/mcp",
-  "version": "1.26.25",
+  "version": "1.26.26",
   "description": "MCP server for nooticr - fetch, discover and understand TikTok/Instagram/YouTube/X/Reddit/LinkedIn/Weibo posts with AI (media metadata, niche discovery, brand monitoring, hook & viral analysis)",
+  "homepage": "https://mcp.nooticr.com",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Nooticr/nooticr-mcp.git"
+  },
+  "bugs": {
+    "url": "https://github.com/Nooticr/nooticr-mcp/issues"
+  },
+  "author": "Nooticr <support@nooticr.com>",
   "type": "module",
   "main": "dist/index.js",
   "files": [
@@ -35,7 +44,8 @@
     "contract:manifest": "node scripts/contract-check.mjs --from=../nooticr-server/platform-capabilities.json",
     "test:mutation": "node scripts/mutation-guard.mjs",
     "test:invariants": "node scripts/invariant-guard.mjs",
-    "verify:deep": "npm run verify && npm run test:mutation && npm run test:invariants"
+    "verify:deep": "npm run verify && npm run test:mutation && npm run test:invariants",
+    "check:submission": "node scripts/check-submission-schema.mjs"
   },
   "keywords": [
     "mcp",