@omnisocials/mcp-server 1.24.0 → 1.28.0

package/README.md

@@ -108,10 +108,10 @@ OmniSocials accepts the following channel IDs in `create_post`, `create_and_publ
 | `youtube` | YouTube | Shorts |
 | `tiktok` | TikTok | Posts and reels |
 | `pinterest` | Pinterest | Pins (requires `board_id`) |
-| `x` | X (Twitter) | Posts |
-| `threads` | Threads | Posts |
-| `bluesky` | Bluesky | Posts |
-| `mastodon` | Mastodon | Posts |
+| `x` | X (Twitter) | Posts, chained threads via `x.thread_parts` |
+| `threads` | Threads | Posts, chained threads via `threads.thread_parts` |
+| `bluesky` | Bluesky | Posts, chained threads via `bluesky.thread_parts` |
+| `mastodon` | Mastodon | Posts, chained threads via `mastodon.thread_parts` |
 
 ## Available Tools
 

package/build/client.d.ts

@@ -9,6 +9,9 @@ export declare function formatDate(iso: string | null): string;
 export declare function formatDateTime(iso: string | null): string;
 export declare function truncate(value: unknown, len: number): string;
 export declare function capitalize(str: string): string;
+/** Breakdown objects (reactions by type, traffic sources, ...) rendered as
+ * "Label: a 12, b 3" lines under the metric table. */
+export declare function metricBreakdownRows(m: Record<string, unknown> | null | undefined): Array<[string, string]>;
 export declare function sortMetricLabels(labels: string[]): string[];
 /**
  * Flatten a raw per-platform metrics object into ordered [label, value] rows,
@@ -100,6 +103,28 @@ export interface MastodonPostOptions {
 export interface MastodonPostOptionsUpdate {
     thread_parts?: MastodonThreadPartInput[] | null;
 }
+export interface ThreadsThreadPartInput {
+    /** Part text, 1 to 500 characters. */
+    text: string;
+    /** Optional per-part media as Library IDs from upload_media (max 10,
+     * images and/or videos). Entries may be `{ id, alt }`. */
+    media_ids?: MediaIdEntry[];
+    /** Optional per-part media as external URLs (max 10, images and/or
+     * videos). Entries may be `{ url, alt }`. */
+    media_urls?: MediaUrlEntry[];
+}
+export interface ThreadsPostOptions {
+    /** Provide 2 to 25 parts to publish as a thread. Omit for a single post.
+     * When set, the Threads caption is taken from part 1. */
+    thread_parts?: ThreadsThreadPartInput[];
+}
+/**
+ * Update-side variant: `thread_parts: null` clears the thread (revert to a
+ * single post); `undefined` leaves the existing thread untouched.
+ */
+export interface ThreadsPostOptionsUpdate {
+    thread_parts?: ThreadsThreadPartInput[] | null;
+}
 /** Non-sponsored LinkedIn poll: question + 2-4 options + duration. */
 export interface LinkedInPollFields {
     question: string;
@@ -146,6 +171,7 @@ export interface CreatePostInput {
     x?: XPostOptions;
     bluesky?: BlueskyPostOptions;
     mastodon?: MastodonPostOptions;
+    threads?: ThreadsPostOptions;
     google_business?: Record<string, unknown>;
     hashtag_set?: string;
     hashtag_placement?: "caption_append" | "first_comment";
@@ -181,6 +207,10 @@ export declare class OmniSocialsClient {
         media_ids?: MediaIdEntry[] | Record<string, MediaIdEntry[]>;
         media_urls?: MediaUrlEntry[] | Record<string, MediaUrlEntry[]>;
         type?: string;
+        link_url?: string;
+        link_title?: string;
+        link_description?: string;
+        link_thumbnail_url?: string;
         location_id?: string;
         collaborators?: string[];
         user_tags?: Array<{
@@ -200,6 +230,7 @@ export declare class OmniSocialsClient {
         x?: XPostOptionsUpdate;
         bluesky?: BlueskyPostOptionsUpdate;
         mastodon?: MastodonPostOptionsUpdate;
+        threads?: ThreadsPostOptionsUpdate;
         google_business?: Record<string, unknown>;
     }): Promise<ApiResponse<ApiPost>>;
     deletePost(id: string): Promise<ApiResponse<unknown>>;

package/build/client.js

@@ -107,14 +107,60 @@ const METRIC_LABELS = [
     ["quotes", "Quotes"],
     ["bookmarks", "Bookmarks"],
     ["replies", "Replies"],
-    ["reactions", "Reactions"],
     ["total_reactions", "Total reactions"],
     ["favorites", "Favorites"],
     ["plays", "Plays"],
     ["engagement", "Engagements"],
+    ["link_clicks", "Link clicks"],
+    ["profile_visits", "Profile visits"],
+    ["follows", "Follows from post"],
+    ["pin_clicks", "Pin clicks"],
+    ["outbound_clicks", "Outbound clicks"],
+    ["video_views", "Video views"],
+    ["engaged_views", "Engaged views"],
+    ["avg_watch_time", "Avg. watch time (s)"],
+    ["total_watch_time", "Total watch time (s)"],
+    ["watch_time_percentage", "Watched (%)"],
+    ["completion_rate", "Completion rate (%)"],
+    ["skip_rate", "Skip rate (%)"],
+    ["replays", "Replays"],
+    ["subscribers_gained", "Subscribers gained"],
+    ["subscribers_lost", "Subscribers lost"],
+    ["duration", "Duration (s)"],
 ];
-// Context keys that ride along in stored metrics — not counters.
-const NON_COUNTER_KEYS = new Set(["create_time"]);
+// Context keys that ride along in stored metrics, not counters.
+const NON_COUNTER_KEYS = new Set(["create_time", "story_slide_index"]);
+/** Breakdown objects (reactions by type, traffic sources, ...) rendered as
+ * "Label: a 12, b 3" lines under the metric table. */
+export function metricBreakdownRows(m) {
+    const LABELS = {
+        reactions: "Reactions by type",
+        clicks_breakdown: "Clicks by type",
+        profile_activity_breakdown: "Profile actions",
+        navigation_breakdown: "Story navigation",
+        completion_analysis: "Story completion",
+        traffic_sources: "Traffic sources",
+        impression_sources: "Where it was seen",
+        audience_types: "Viewer types",
+        audience_countries: "Top countries",
+        impressions_breakdown: "Impressions by surface",
+        online_followers: "Followers online by hour (UTC)",
+    };
+    const rows = [];
+    for (const [key, label] of Object.entries(LABELS)) {
+        const v = m?.[key];
+        if (!v || typeof v !== "object" || Array.isArray(v))
+            continue;
+        const parts = Object.entries(v)
+            .filter(([, n]) => Number.isFinite(Number(n)))
+            .sort((a, b) => Number(b[1]) - Number(a[1]))
+            .slice(0, 8)
+            .map(([k, n]) => `${k.replace(/_/g, " ")} ${Number(n) <= 1 && key.endsWith("_sources") ? `${Math.round(Number(n) * 100)}%` : formatNumber(Number(n))}`);
+        if (parts.length)
+            rows.push([label, parts.join(", ")]);
+    }
+    return rows;
+}
 /** Canonical position of a metric label — for sorting totals rows collected
  * across platforms back into METRIC_LABELS order (unknown labels sink). */
 const LABEL_ORDER = new Map(METRIC_LABELS.map(([, label], i) => [label, i]));

package/build/index.js

@@ -29,7 +29,7 @@ const sessionState = { activeIndex: 0 };
 const getActiveClient = () => workspaceClients[sessionState.activeIndex].client;
 const server = new McpServer({
     name: "OmniSocials",
-    version: "1.24.0",
+    version: "1.28.0",
 });
 // Register all tools - pass getter function so tools always use the active workspace's client
 registerPostTools(server, getActiveClient);

package/build/metrics.d.ts

@@ -16,6 +16,8 @@ type Metrics = Record<string, unknown> | null | undefined;
 export declare function getEngagement(platform: string, metrics: Metrics): number;
 /** Best-available impressions ("how many times seen") for a post's metrics. */
 export declare function getImpressions(platform: string, metrics: Metrics): number;
+/** Unique accounts reached, when the platform reports it (0 otherwise). */
+export declare function getReach(platform: string, metrics: Metrics): number;
 /**
  * Engagement rate as a percentage (0-100), suppressed below the impression
  * floor and capped at 100%.

package/build/metrics.js

@@ -43,24 +43,33 @@ export function getEngagement(platform, metrics) {
         case "youtube":
             return sum("likes", "comments", "shares");
         case "x":
-            // X's engagement total includes bookmarks (saves).
+            // X's engagement total includes bookmarks (saves). A native
+            // non_public_metrics.engagements value, when stored, wins above.
             return sum("likes", "comments", "reposts", "quotes", "bookmarks");
         case "threads":
             // Threads stores replies (not comments) as the comment-equivalent.
-            return num(m.likes) + (num(m.comments) || num(m.replies)) + num(m.reposts) + num(m.quotes);
+            return (num(m.likes) +
+                (num(m.comments) || num(m.replies)) +
+                num(m.reposts) +
+                num(m.quotes) +
+                num(m.shares));
         case "bluesky":
-            return sum("likes", "comments", "reposts", "quotes");
+            return sum("likes", "comments", "reposts", "quotes", "bookmarks");
         case "mastodon":
-            return sum("likes", "comments", "reposts");
+            return sum("likes", "comments", "reposts", "quotes");
         case "reddit":
             // likes == upvote score; shares == crossposts.
             return sum("likes", "comments", "shares");
         case "instagram":
-            return sum("likes", "comments", "saves", "shares");
+            // Stories carry total_interactions (replies, shares, profile taps)
+            // instead of likes/comments; use it when present.
+            return num(m.total_interactions) || sum("likes", "comments", "saves", "shares");
         case "tiktok":
-            return sum("likes", "comments", "shares");
+            // favorites == saves on TikTok (Business API only).
+            return sum("likes", "comments", "shares", "favorites");
         case "pinterest":
-            return sum("saves", "pin_clicks", "outbound_clicks");
+            // likes == TOTAL_REACTIONS, comments == TOTAL_COMMENTS.
+            return sum("saves", "pin_clicks", "outbound_clicks", "likes", "comments");
         case "google_business":
             // engagement is precomputed at account level; nothing to sum per post.
             return pre;
@@ -78,8 +87,9 @@ export function getImpressions(platform, metrics) {
             // number and exceeds unique `reach`. Prefer it; fall back for old rows.
             return num(m.views) || num(m.impressions) || num(m.reach);
         case "facebook":
-            // Facebook exposes reach/impressions; video posts also report video_views.
-            return num(m.reach) || num(m.impressions) || num(m.video_views) || num(m.views);
+            // views == post_media_view (total), reach == unique viewers. Prefer the
+            // total like every other platform; video posts also report video_views.
+            return num(m.views) || num(m.video_views) || num(m.impressions) || num(m.reach);
         case "linkedin":
         case "linkedin_page":
         case "pinterest":
@@ -96,6 +106,11 @@ export function getImpressions(platform, metrics) {
             return num(m.views) || num(m.impressions) || num(m.reach);
     }
 }
+/** Unique accounts reached, when the platform reports it (0 otherwise). */
+export function getReach(platform, metrics) {
+    const m = metrics || {};
+    return num(m.reach) || num(m.unique_impressions) || num(m.members_reached);
+}
 /**
  * Engagement rate as a percentage (0-100), suppressed below the impression
  * floor and capped at 100%.

package/build/tools/accounts.js

@@ -1,7 +1,7 @@
 import { z } from "zod";
 import { fetchImageAsBase64, capitalize } from "../client.js";
 export function registerAccountTools(server, getClient) {
-    server.tool("list_accounts", "List all connected social media accounts in the workspace. Each account includes its platform, display name, channel ID (used for create_post), supported content_types (post, story, reel), and `needs_reconnect` (true when the OAuth token has been revoked/expired and the user must reconnect before posts can succeed; also reflected in `status` as `needs_reconnect` instead of `active`). Pinterest accounts include a `boards` array with `{id, name}` — use the board `id` as `board_id` when creating Pinterest posts. X accounts with Premium include `platform_details` with `subscription_type` (e.g. \"Premium\", \"PremiumPlus\"). LinkedIn appears as two independent platforms: `linkedin` for a personal profile and `linkedin_page` for a company page. A workspace can have both connected at the same time and post to each separately. Call this to help users pick which platforms to post to.", {}, async () => {
+    server.tool("list_accounts", "List all connected social media accounts in the workspace. Each account includes its platform, display name, channel ID (used for create_post), supported content_types (post, story, reel), and `needs_reconnect` (true when the OAuth token has been revoked/expired and the user must reconnect before posts can succeed; also reflected in `status` as `needs_reconnect` instead of `active`). Pinterest accounts include a `boards` array with `{id, name}` — use the board `id` as `board_id` when creating Pinterest posts. X accounts with Premium include `platform_details` with `subscription_type` (e.g. \"Premium\", \"PremiumPlus\"). LinkedIn appears as two independent platforms: `linkedin` for a personal profile and `linkedin_page` for a company page. A workspace can have both connected at the same time and post to each separately. Call this to help users pick which platforms to post to.", {}, { title: "List Connected Accounts", readOnlyHint: true, destructiveHint: false, openWorldHint: false }, async () => {
         const result = await getClient().listAccounts();
         if (result.error) {
             return {
@@ -63,7 +63,7 @@ export function registerAccountTools(server, getClient) {
     });
     server.tool("get_account", "Get details of a specific connected social media account.", {
         id: z.string().describe("The account ID"),
-    }, async ({ id }) => {
+    }, { title: "Get Account Details", readOnlyHint: true, destructiveHint: false, openWorldHint: false }, async ({ id }) => {
         const result = await getClient().getAccount(id);
         if (result.error) {
             return {

package/build/tools/analytics.js

@@ -1,10 +1,10 @@
 import { z } from "zod";
-import { formatNumber, capitalize, metricRows, sortMetricLabels } from "../client.js";
+import { formatNumber, capitalize, metricRows, metricBreakdownRows, sortMetricLabels } from "../client.js";
 import { getEngagement, getImpressions, getEngagementRate, MIN_IMPRESSIONS_FOR_ENGAGEMENT_RATE, } from "../metrics.js";
 export function registerAnalyticsTools(server, getClient) {
-    server.tool("get_post_analytics", "Get analytics/statistics for a specific published post. Renders every metric the platform reported — impressions, reach, views, saves, likes, comments, shares, clicks, engagements, and more — per platform.", {
+    server.tool("get_post_analytics", "Get analytics/statistics for a specific published post. Renders every metric the platform reported — impressions, reach, views, saves, likes, comments, shares, clicks, engagements, and more — per platform. TikTok videos also carry average_time_watched, full_video_watched_rate, total_time_watched, favorites and reach when the workspace enabled TikTok comments (Business API authorization).", {
         post_id: z.string().describe("The numeric OmniSocials post id (the `id` field from list_posts). NOT a platform post id such as a YouTube video id or tweet id."),
-    }, async ({ post_id }) => {
+    }, { title: "Get Post Analytics", readOnlyHint: true, destructiveHint: false, openWorldHint: false }, async ({ post_id }) => {
         const result = await getClient().getPostAnalytics(post_id);
         if (result.error) {
             return {
@@ -55,9 +55,11 @@ export function registerAnalyticsTools(server, getClient) {
             perPlatform.push({
                 platform,
                 rows,
+                breakdowns: metricBreakdownRows(m),
                 engagements,
                 denom,
                 note: typeof m.note === "string" ? m.note : undefined,
+                storySlides: Array.isArray(entry?.story_slides) ? entry.story_slides : undefined,
             });
         }
         if (!totalsByLabel.has("Engagements"))
@@ -87,8 +89,24 @@ export function registerAnalyticsTools(server, getClient) {
                 md += `| **${label}** | ${formatNumber(n)} |\n`;
             }
             md += renderRate(p.engagements, p.denom);
+            for (const [label, text] of p.breakdowns) {
+                md += `| **${label}** | ${text} |\n`;
+            }
             if (p.note)
                 md += `\n_${p.note}_\n`;
+            // Multi-slide stories: the platform table above is the sum; show each
+            // slide on its own so the user can see which slide held attention.
+            if (p.storySlides && p.storySlides.length > 1) {
+                md += `\n_${p.storySlides.length} story slides (totals above are the sum):_\n`;
+                for (const slide of p.storySlides) {
+                    const sm = slide.metrics || {};
+                    const slideRows = metricRows(sm);
+                    md += `\n**Story ${slide.index + 1}**\n\n| Metric | Value |\n|--------|-------|\n`;
+                    for (const [label, n] of slideRows) {
+                        md += `| **${label}** | ${formatNumber(n)} |\n`;
+                    }
+                }
+            }
         }
         return {
             content: [{ type: "text", text: md }],
@@ -100,7 +118,7 @@ export function registerAnalyticsTools(server, getClient) {
             .min(1)
             .max(100)
             .describe("Numeric OmniSocials post ids (the `id` field from list_posts), up to 100. NOT platform post ids such as YouTube video ids or tweet ids."),
-    }, async ({ post_ids }) => {
+    }, { title: "Get Bulk Post Analytics", readOnlyHint: true, destructiveHint: false, openWorldHint: false }, async ({ post_ids }) => {
         const result = await getClient().getPostsAnalytics(post_ids);
         if (result.error) {
             return {
@@ -127,7 +145,7 @@ export function registerAnalyticsTools(server, getClient) {
                 // them). Likes/comments/shares stay as display columns only.
                 impressions += getImpressions(name, m);
                 engagements += getEngagement(name, m);
-                likes += Number(m.likes ?? m.favorites ?? m.reactions ?? 0);
+                likes += (Number(m.likes ?? m.favorites ?? 0) || 0);
                 comments += Number(m.comments ?? m.replies ?? 0);
                 shares += Number(m.shares ?? m.retweets ?? m.reposts ?? 0);
             }
@@ -159,7 +177,7 @@ export function registerAnalyticsTools(server, getClient) {
         period: z.string().optional().describe("Rolling window: 7d, 30d, 90d (default: 30d). Ignored if start_date/end_date are provided."),
         start_date: z.string().optional().describe('Custom start date. Accepts "YYYY-MM-DD" (e.g. "2026-04-01") or "YYYY-MM" month-shorthand (e.g. "2026-04" → first of the month).'),
         end_date: z.string().optional().describe('Custom end date. Same formats as start_date; "YYYY-MM" expands to the last day of the month.'),
-    }, async (params) => {
+    }, { title: "Get Analytics Overview", readOnlyHint: true, destructiveHint: false, openWorldHint: false }, async (params) => {
         const result = await getClient().getAnalyticsOverview(params);
         if (result.error) {
             return {
@@ -205,10 +223,10 @@ export function registerAnalyticsTools(server, getClient) {
             content: [{ type: "text", text: md }],
         };
     });
-    server.tool("get_account_analytics", "Get account-level analytics (followers, subscribers, etc.) for connected social accounts. IMPORTANT metric semantics: account-level `impressions` for LinkedIn (profile and page) are LIFETIME cumulative totals across ALL of the account's content — including posts published outside OmniSocials — as of the snapshot date, NOT a daily or windowed count. They cannot be compared to a windowed export (e.g. LinkedIn's native 90-day analytics). Other platforms may not report account-level impressions at all. Each metrics object carries a `note` explaining its scope where semantics are non-obvious — always relay that note to the user.", {
+    server.tool("get_account_analytics", "Get account-level analytics for connected social accounts: followers, following, posts, and the day values the platform reports for the snapshot date (impressions/views, reach, engagement, profile_views, link_clicks, follows_gained, follows_lost, Google Business calls/direction_requests/website_clicks/average_rating/review_count, Pinterest monthly_views). Rows with day values carry `period: \"daily\"`. Audience objects appear when available: `demographics` (+ demographics_unit) and `online_followers` (UTC hour to followers online). Metric semantics: LinkedIn profile rows keep a lifetime total under `impressions_lifetime` and `period: \"lifetime\"` when no daily breakdown is served. A missing key means the platform does not report it. Each metrics object carries a `note` explaining its scope where semantics are non-obvious; always relay that note to the user.", {
         platform: z.string().optional().describe("Filter by platform (e.g., instagram, youtube)"),
         date: z.string().optional().describe("Date to get analytics for (YYYY-MM-DD, defaults to today)"),
-    }, async (params) => {
+    }, { title: "Get Account Analytics", readOnlyHint: true, destructiveHint: false, openWorldHint: false }, async (params) => {
         const result = await getClient().getAccountAnalytics(params);
         if (result.error) {
             return {
@@ -240,21 +258,43 @@ export function registerAnalyticsTools(server, getClient) {
                     ? `${formatNumber(m.subscribers)} subs`
                     : "—";
             const details = [];
-            if (m.posts !== undefined)
-                details.push(`${formatNumber(m.posts)} posts`);
-            if (m.following !== undefined)
-                details.push(`${formatNumber(m.following)} following`);
-            if (m.impressions !== undefined)
-                details.push(`${formatNumber(m.impressions)} impressions`);
-            if (m.engagement !== undefined)
-                details.push(`${formatNumber(m.engagement)} engagements`);
-            if (m.total_views !== undefined)
-                details.push(`${formatNumber(m.total_views)} views`);
-            if (m.total_videos !== undefined)
-                details.push(`${m.total_videos} videos`);
+            const ACCOUNT_DETAIL_KEYS = [
+                ["posts", "posts"],
+                ["following", "following"],
+                ["impressions", "views"],
+                ["reach", "reach"],
+                ["engagement", "engagements"],
+                ["profile_views", "profile views"],
+                ["link_clicks", "link clicks"],
+                ["follows_gained", "new followers"],
+                ["follows_lost", "lost followers"],
+                ["accounts_engaged", "accounts engaged"],
+                ["video_views", "video views"],
+                ["watch_time_minutes", "min watched"],
+                ["monthly_views", "monthly views"],
+                ["total_views", "lifetime views"],
+                ["total_videos", "videos"],
+                ["listed", "listed"],
+                ["average_rating", "rating"],
+                ["review_count", "reviews"],
+                ["calls", "calls"],
+                ["direction_requests", "direction requests"],
+                ["website_clicks", "website clicks"],
+                ["bookings", "bookings"],
+                ["mentions", "mentions"],
+            ];
+            for (const [key, label] of ACCOUNT_DETAIL_KEYS) {
+                const v = m[key];
+                if (v === undefined || v === null || !Number.isFinite(Number(v)))
+                    continue;
+                details.push(`${key === "average_rating" ? Number(v).toFixed(1) : formatNumber(Number(v))} ${label}`);
+            }
             if (m.subscribers !== undefined && m.followers !== undefined) {
                 details.push(`${formatNumber(m.subscribers)} subscribers`);
             }
+            if (typeof m.period === "string") {
+                details.push(`(${m.period})`);
+            }
             md += `| ${capitalize(a.platform)} | ${followers} | ${details.join(", ") || "—"} |\n`;
             // Scope notes (e.g. "LinkedIn impressions are lifetime totals") must
             // reach the user, or lifetime counters get read as windowed numbers.
@@ -269,10 +309,10 @@ export function registerAnalyticsTools(server, getClient) {
             content: [{ type: "text", text: md }],
         };
     });
-    server.tool("get_best_times", "Get recommended posting times (day + hour) for one platform, computed from the workspace's own posting history: publish time × engagement of every post published there, recency-weighted and outlier-damped, bucketed in the user's timezone. Returns the top 3 recommended slots plus a per-day breakdown. When the workspace has fewer than 15 analyzed posts on the platform, industry-average defaults are returned instead (`basis: defaults`) with how many more posts unlock personalized recommendations — tell the user that so the numbers aren't mistaken for their own audience data. Use this before scheduling when the user asks 'when should I post?' or hasn't specified a time. Requires the analytics:read scope.", {
+    server.tool("get_best_times", "Get recommended posting times (day + hour) for one platform, computed from the workspace's own posting history: publish time × engagement of every post published there, recency-weighted and outlier-damped, bucketed in the user's timezone, and blended with when the account's followers are online when the platform provides that (Instagram, TikTok Business; `basis: own_data_and_audience`, response carries `audience_online`). Returns the top 3 recommended slots plus a per-day breakdown. When the workspace has fewer than 15 analyzed posts on the platform, the audience-online profile alone is used (`basis: audience`) or industry-average defaults are returned (`basis: defaults`) with how many more posts unlock personalized recommendations — tell the user that so the numbers aren't mistaken for their own audience data. Use this before scheduling when the user asks 'when should I post?' or hasn't specified a time. Requires the analytics:read scope.", {
         platform: z.string().describe("Platform identifier, e.g. instagram, tiktok, linkedin, linkedin_page, x, facebook, youtube, pinterest, threads, bluesky, mastodon, google_business"),
         timezone: z.string().optional().describe("IANA timezone for the buckets (e.g. Europe/Amsterdam). Defaults to the account's timezone."),
-    }, async (params) => {
+    }, { title: "Get Best Times to Post", readOnlyHint: true, destructiveHint: false, openWorldHint: false }, async (params) => {
         const result = await getClient().getBestTimes(params);
         if (result.error) {
             return {
@@ -318,6 +358,12 @@ export function registerAnalyticsTools(server, getClient) {
         if (d.basis === "defaults") {
             md += `\n_Not enough posting history on ${platformLabel} yet (${d.sample_size} analyzed post${d.sample_size === 1 ? "" : "s"}). These are cross-industry averages — publish ${d.posts_needed} more post${d.posts_needed === 1 ? "" : "s"} to unlock recommendations from this audience's own data._\n`;
         }
+        else if (d.basis === "audience") {
+            md += `\n_Not enough posting history on ${platformLabel} yet (${d.sample_size} analyzed post${d.sample_size === 1 ? "" : "s"}), so these times come from when this account's followers are online. Publish ${d.posts_needed} more post${d.posts_needed === 1 ? "" : "s"} to blend in your own results._\n`;
+        }
+        else if (d.basis === "own_data_and_audience") {
+            md += `\n_Based on ${d.sample_size} ${platformLabel} posts from the last ${d.window_days} days, blended with when this account's followers are online (metric: ${d.metric}, times in ${d.timezone})._\n`;
+        }
         else {
             md += `\n_Based on ${d.sample_size} ${platformLabel} posts from the last ${d.window_days} days (metric: ${d.metric}, times in ${d.timezone})._\n`;
         }

package/build/tools/hashtag-sets.js

@@ -1,6 +1,6 @@
 import { z } from "zod";
 export function registerHashtagSetTools(server, getClient) {
-    server.tool("list_hashtag_sets", "List the saved hashtag sets in this workspace. Apply one to a new post by passing its name via create_post (hashtag_set) — the tags are appended to the captions or, with hashtag_placement='first_comment', posted as the auto first comment.", {}, async () => {
+    server.tool("list_hashtag_sets", "List the saved hashtag sets in this workspace. Apply one to a new post by passing its name via create_post (hashtag_set) — the tags are appended to the captions or, with hashtag_placement='first_comment', posted as the auto first comment.", {}, { title: "List Hashtag Sets", readOnlyHint: true, destructiveHint: false, openWorldHint: false }, async () => {
         const result = await getClient().listHashtagSets();
         if (result.error) {
             return {
@@ -28,7 +28,7 @@ export function registerHashtagSetTools(server, getClient) {
     server.tool("create_hashtag_set", "Save a reusable, named group of hashtags (e.g. 'Fitness Brand' -> #fitness #gym #workout). Tags may include or omit the leading '#'; they are deduped case-insensitively and kept in order (max 100). Then apply the set to any new post via create_post (hashtag_set).", {
         name: z.string().describe("Set name, unique per workspace, e.g. 'Fitness Brand'"),
         hashtags: z.array(z.string()).describe('Tags in order, with or without the leading "#", e.g. ["fitness", "#gym", "workout"]'),
-    }, async (params) => {
+    }, { title: "Create Hashtag Set", readOnlyHint: false, destructiveHint: false, openWorldHint: false }, async (params) => {
         const result = await getClient().createHashtagSet(params);
         if (result.error) {
             return {
@@ -52,7 +52,7 @@ export function registerHashtagSetTools(server, getClient) {
         set_id: z.string().describe("The hashtag set id (from list_hashtag_sets)"),
         name: z.string().optional().describe("New name for the set"),
         hashtags: z.array(z.string()).optional().describe("Full replacement tag list, in order"),
-    }, async ({ set_id, name, hashtags }) => {
+    }, { title: "Update Hashtag Set", readOnlyHint: false, destructiveHint: false, openWorldHint: false }, async ({ set_id, name, hashtags }) => {
         const result = await getClient().updateHashtagSet(set_id, { name, hashtags });
         if (result.error) {
             return {
@@ -74,7 +74,7 @@ export function registerHashtagSetTools(server, getClient) {
     });
     server.tool("delete_hashtag_set", "Delete a saved hashtag set. Posts that already used it keep their hashtags — the tags were merged into their captions at create time.", {
         set_id: z.string().describe("The hashtag set id (from list_hashtag_sets)"),
-    }, async ({ set_id }) => {
+    }, { title: "Delete Hashtag Set", readOnlyHint: false, destructiveHint: true, openWorldHint: false }, async ({ set_id }) => {
         const result = await getClient().deleteHashtagSet(set_id);
         if (result.error) {
             return {

package/build/tools/inbox.js

@@ -29,7 +29,7 @@ export function registerInboxTools(server, getClient) {
             .string()
             .optional()
             .describe("Pagination cursor from a previous response"),
-    }, async (params) => {
+    }, { title: "List Inbox Conversations", readOnlyHint: true, destructiveHint: false, openWorldHint: false }, async (params) => {
         const query = {};
         if (params.platform)
             query.platform = params.platform;
@@ -78,7 +78,7 @@ export function registerInboxTools(server, getClient) {
             .optional()
             .describe("Max messages per page (1-100, default 50)"),
         cursor: z.string().optional().describe("Pagination cursor"),
-    }, async ({ conversation_id, limit, cursor }) => {
+    }, { title: "Get Inbox Conversation", readOnlyHint: true, destructiveHint: false, openWorldHint: false }, async ({ conversation_id, limit, cursor }) => {
         const query = {};
         if (limit !== undefined)
             query.limit = String(limit);
@@ -117,7 +117,7 @@ export function registerInboxTools(server, getClient) {
     });
     server.tool("mark_inbox_read", "Mark all incoming messages in a conversation as read.", {
         conversation_id: z.string().describe("The conversation ID to mark read"),
-    }, async ({ conversation_id }) => {
+    }, { title: "Mark Inbox Message Read", readOnlyHint: false, destructiveHint: false, openWorldHint: false }, async ({ conversation_id }) => {
         const result = await getClient().markInboxRead(conversation_id);
         if (result.error) {
             return {
@@ -143,7 +143,7 @@ export function registerInboxTools(server, getClient) {
         text: z
             .string()
             .describe("The reply text (max 2000 characters; TikTok comments max 150)"),
-    }, async ({ conversation_id, text }) => {
+    }, { title: "Reply to Inbox Message", readOnlyHint: false, destructiveHint: false, openWorldHint: true }, async ({ conversation_id, text }) => {
         const result = await getClient().replyToInboxConversation(conversation_id, {
             text,
         });

package/build/tools/media.js

@@ -6,7 +6,7 @@ export function registerMediaTools(server, getClient) {
         offset: z.string().optional().describe("Offset for pagination"),
         search: z.string().optional().describe('Find a file by name or filename, e.g. "play5get50". Use this before uploading to check if the graphic already exists.'),
         folder_id: z.string().optional().describe('Only return media in this folder id (from list_folders). Use "root" for unfiled items.'),
-    }, async (params) => {
+    }, { title: "List Media Library", readOnlyHint: true, destructiveHint: false, openWorldHint: false }, async (params) => {
         const result = await getClient().listMedia(params);
         if (result.error) {
             return {
@@ -72,7 +72,7 @@ When the user provides an image in the conversation (not a URL), use base64_data
         filename: z.string().optional().describe("Optional filename for the uploaded media"),
         name: z.string().optional().describe('Human-readable label so you can find this asset by name later instead of re-uploading it, e.g. "pp-play5get50". Strongly recommended on every upload.'),
         folder: z.string().optional().describe('Optional folder name to file this asset under (created at the top level if it does not exist), e.g. "win-graphics". See list_folders.'),
-    }, async (params) => {
+    }, { title: "Upload Media", readOnlyHint: false, destructiveHint: false, openWorldHint: false }, async (params) => {
         let result;
         if (params.base64_data && params.mime_type) {
             result = await getClient().uploadMediaFromBase64({
@@ -147,7 +147,7 @@ When the user provides an image in the conversation (not a URL), use base64_data
         if (compatibility && compatibility.compatible === false && compatibility.summary) {
             md += `\n\n⚠️ **${compatibility.summary}** It will still post to your other connected platforms. Ask the user whether to continue before adding it to a post.`;
         }
-        md += `\n\nUse this Media ID with \`media_ids\` when creating posts (including inside \`x.thread_parts[].media_ids\`). The public URL above also works anywhere \`media_urls\` is accepted. To attach alt text (an accessibility description), pass \`{ id: "<Media ID>", alt: "..." }\` instead of the bare ID — delivered to Mastodon, Bluesky, X, Pinterest, Instagram (images) and LinkedIn (images).`;
+        md += `\n\nUse this Media ID with \`media_ids\` when creating posts (including inside \`x.thread_parts[].media_ids\`, \`bluesky.thread_parts[].media_ids\`, \`mastodon.thread_parts[].media_ids\` and \`threads.thread_parts[].media_ids\`). The public URL above also works anywhere \`media_urls\` is accepted. To attach alt text (an accessibility description), pass \`{ id: "<Media ID>", alt: "..." }\` instead of the bare ID — delivered to Mastodon, Bluesky, X, Pinterest, Instagram (images) and LinkedIn (images).`;
         return {
             content: [{ type: "text", text: md }],
         };
@@ -159,7 +159,7 @@ Provide ONE of: a public 'url' (its size/type is read via a HEAD request), an ex
         media_id: z.string().optional().describe("Id of an already-uploaded library item to check."),
         size_bytes: z.number().optional().describe("File size in bytes (use with mime when you already know them)."),
         mime: z.string().optional().describe("MIME type, e.g. 'video/mp4' (use with size_bytes)."),
-    }, async (params) => {
+    }, { title: "Check Media Compatibility", readOnlyHint: true, destructiveHint: false, openWorldHint: false }, async (params) => {
         if (!params.url && !params.media_id && !(params.size_bytes && params.mime)) {
             return {
                 content: [{ type: "text", text: "Error: Provide one of 'url', 'media_id', or 'size_bytes' + 'mime'." }],
@@ -197,7 +197,7 @@ Provide ONE of: a public 'url' (its size/type is read via a HEAD request), an ex
         id: z.string().describe("The media ID to update"),
         name: z.string().optional().describe('New human-readable label, e.g. "pp-play5get50". Pass an empty string to clear it.'),
         folder_id: z.string().optional().describe('Move the file into this folder id (from list_folders). Pass an empty string to move it to the root ("All media").'),
-    }, async ({ id, name, folder_id }) => {
+    }, { title: "Update Media", readOnlyHint: false, destructiveHint: false, openWorldHint: false }, async ({ id, name, folder_id }) => {
         const body = {};
         if (name !== undefined)
             body.name = name;
@@ -224,7 +224,7 @@ Provide ONE of: a public 'url' (its size/type is read via a HEAD request), an ex
             ],
         };
     });
-    server.tool("list_folders", "List the media-library folders in this workspace (Finder-style organization). Returns each folder's id, name, parent, and item count. Use a folder id with list_media (folder_id) or update_media (folder_id), or a folder name with upload_media (folder).", {}, async () => {
+    server.tool("list_folders", "List the media-library folders in this workspace (Finder-style organization). Returns each folder's id, name, parent, and item count. Use a folder id with list_media (folder_id) or update_media (folder_id), or a folder name with upload_media (folder).", {}, { title: "List Media Folders", readOnlyHint: true, destructiveHint: false, openWorldHint: false }, async () => {
         const result = await getClient().listFolders();
         if (result.error) {
             return { content: [{ type: "text", text: `Error (${result.error.code}): ${result.error.message}` }] };
@@ -243,7 +243,7 @@ Provide ONE of: a public 'url' (its size/type is read via a HEAD request), an ex
     server.tool("create_folder", "Create a media-library folder. Use it to organize assets (e.g. a 'win-graphics' folder), then upload into it with upload_media (folder) or move files with update_media (folder_id).", {
         name: z.string().describe("Folder name, e.g. 'win-graphics'"),
         parent_id: z.string().optional().describe("Optional parent folder id to nest under (from list_folders). Omit for a top-level folder."),
-    }, async ({ name, parent_id }) => {
+    }, { title: "Create Media Folder", readOnlyHint: false, destructiveHint: false, openWorldHint: false }, async ({ name, parent_id }) => {
         const result = await getClient().createFolder({ name, parent_id });
         if (result.error) {
             return { content: [{ type: "text", text: `Error (${result.error.code}): ${result.error.message}` }] };

package/build/tools/posts.js

@@ -1,7 +1,7 @@
 import { z } from "zod";
 import { formatDateTime, truncate, capitalize, formatNumber, metricRows } from "../client.js";
 // Shared media entry schemas — every media list (flat arrays, per-platform
-// records, and x/bluesky/mastodon thread parts) accepts either a plain string
+// records, and x/bluesky/mastodon/threads thread parts) accepts either a plain string
 // or an object carrying `alt`: an accessibility description (alt text, max
 // 1500 chars) for that file. Alt text is delivered to Mastodon (media
 // description — the community strongly values alt text), Bluesky (embed alt),
@@ -131,6 +131,11 @@ const TIKTOK_OPTIONS = z.object({
     brand_content_toggle: z.boolean().optional().describe("Paid partnership disclosure (promotes a third-party brand)."),
     brand_organic_toggle: z.boolean().optional().describe("Your own brand disclosure (promotes your own business)."),
     auto_add_music: z.boolean().optional().describe("Photo carousels only. When true, TikTok auto-selects a soundtrack. Defaults to false to avoid unsuitable tracks."),
+    first_comment: z
+        .string()
+        .max(150)
+        .optional()
+        .describe("Text auto-posted as the first comment on the TikTok video right after it publishes (max 150 characters). Requires the workspace's TikTok comments authorization ('Enable comments' on the TikTok channel card); without it first_comment_result is failed with an explanatory error. The video must be public with comments allowed. If TikTok returns the final video id a few minutes after publish, the comment posts automatically once it resolves (first_comment_result.pending is true meanwhile). On update_post pass an empty string to clear it."),
 }).optional().describe("TikTok options");
 const PINTEREST_OPTIONS = z.object({
     board_id: z.string().optional().describe("Pinterest board ID. Required for Pinterest. Use get_account to list boards."),
@@ -165,6 +170,11 @@ const MASTODON_THREAD_PART = z.object({
     media_ids: z.array(mediaIdEntry).max(4).optional().describe("Per-status media as Library IDs from upload_media (max 4). Each entry is a plain ID string or { id, alt } to attach alt text (set as the media description — the Mastodon community strongly values alt text on images)."),
     media_urls: z.array(mediaUrlEntry).max(4).optional().describe("Per-status media as external URLs (max 4). Each entry is a plain URL string or { url, alt } to attach alt text (set as the media description — the Mastodon community strongly values alt text on images)."),
 });
+const THREADS_THREAD_PART = z.object({
+    text: z.string().min(1).max(500).describe("Part text (1 to 500 characters)."),
+    media_ids: z.array(mediaIdEntry).max(10).optional().describe("Per-part media as Library IDs from upload_media (max 10 combined with media_urls; images and videos can be mixed in one carousel). Each entry is a plain ID string or { id, alt }."),
+    media_urls: z.array(mediaUrlEntry).max(10).optional().describe("Per-part media as external URLs (max 10 combined with media_ids; images and videos can be mixed in one carousel). Each entry is a plain URL string or { url, alt }."),
+});
 const GOOGLE_BUSINESS_OPTIONS = z.object({
     topic_type: z.enum(["STANDARD", "EVENT", "OFFER"]).optional().describe("Local post type. Defaults to STANDARD. ALERT is reserved by Google and not exposed."),
     cta: z.object({
@@ -245,10 +255,10 @@ function postAppUrl(p) {
 }
 export function registerPostTools(server, getClient) {
     server.tool("list_posts", "List all posts in the workspace. Optionally filter by status. The content column shows a preview of the default caption; if a post has per-platform overrides (e.g. a custom X version), the preview is suffixed with *(per-platform)* — call `get_post` to see every variant.", {
-        status: z.string().optional().describe("Filter by status: draft, scheduled, published, failed"),
+        status: z.string().optional().describe("Filter by status: draft, in_approval, scheduled, posting, published, failed, warning. in_approval = waiting for a reviewer in an approval workflow."),
         limit: z.string().optional().describe("Max results to return (default: 20)"),
         offset: z.string().optional().describe("Offset for pagination"),
-    }, async (params) => {
+    }, { title: "List Posts", readOnlyHint: true, destructiveHint: false, openWorldHint: false }, async (params) => {
         const result = await getClient().listPosts(params);
         if (result.error) {
             return {
@@ -272,13 +282,28 @@ export function registerPostTools(server, getClient) {
                 ? (contentObj.default || Object.values(contentObj).find((v) => typeof v === "string" && v) || "")
                 : (typeof p.content === "string" ? p.content : "");
             const hasOverrides = !!contentObj && Object.keys(contentObj).filter((k) => k !== "default" && typeof contentObj[k] === "string" && contentObj[k]).length > 0;
-            const xParts = p.x?.thread_parts;
-            const threadParts = Array.isArray(xParts) ? xParts : [];
+            // Thread preview: the first thread platform carrying 2+ parts wins
+            // (X, Bluesky, Mastodon, Threads share one shape).
+            const threadSources = [
+                ["X", p.x?.thread_parts],
+                ["Bluesky", p.bluesky?.thread_parts],
+                ["Mastodon", p.mastodon?.thread_parts],
+                ["Threads", p.threads?.thread_parts],
+            ];
+            let threadLabel = "";
+            let threadParts = [];
+            for (const [label, parts] of threadSources) {
+                if (Array.isArray(parts) && parts.length >= 2) {
+                    threadLabel = label;
+                    threadParts = parts;
+                    break;
+                }
+            }
             const isThread = threadParts.length >= 2;
             let content;
             if (isThread && !rawContent) {
                 const first = typeof threadParts[0]?.text === "string" ? threadParts[0].text : "";
-                content = truncate(first, 32) + ` *(X thread, ${threadParts.length} parts)*`;
+                content = truncate(first, 32) + ` *(${threadLabel} thread, ${threadParts.length} parts)*`;
             }
             else {
                 content = truncate(rawContent, hasOverrides ? 35 : 50) + (hasOverrides ? " *(per-platform)*" : "");
@@ -294,7 +319,7 @@ export function registerPostTools(server, getClient) {
     });
     server.tool("get_post", "Get details of a specific post by ID — content, channels, media (with URLs + any per-media alt text), first comment, Instagram collaborators/user tags/location/Trial Reel state/Reel cover (thumbnail_type + thumb_offset in ms), dates and live URLs, enough to fully verify a scheduled post without opening the dashboard. When a post has per-platform caption overrides (e.g. a shorter X version alongside the default), every variant is rendered as its own labeled block under `### Content` so you can see exactly what each platform will publish. X threads are rendered under `### X Thread` with each tweet labeled in publish order — read this to see the full chained tweet text, since thread-only posts have no caption in `content`. A LinkedIn poll is rendered under `### LinkedIn Profile Poll` and/or `### LinkedIn Page Poll` (independent per channel) with the question, options, and duration. After publishing, includes `published_urls` — a map of platform → live URL for each platform that successfully posted (e.g. facebook, instagram, linkedin, x). Useful for polling: when a post's status is `published`, read `published_urls` to surface the live links.", {
         id: z.string().describe("The post ID"),
-    }, async ({ id }) => {
+    }, { title: "Get Post", readOnlyHint: true, destructiveHint: false, openWorldHint: false }, async ({ id }) => {
         const result = await getClient().getPost(id);
         if (result.error) {
             return {
@@ -425,6 +450,24 @@ export function registerPostTools(server, getClient) {
                 md += `\n`;
             }
         }
+        // Threads (Meta) thread: when present, the canonical post text lives here, not in `content`.
+        const rawThreadsParts = p.threads?.thread_parts;
+        const threadsThreadParts = Array.isArray(rawThreadsParts) ? rawThreadsParts : [];
+        if (threadsThreadParts.length >= 2) {
+            md += `\n\n### Threads Thread (${threadsThreadParts.length} parts)\n\n`;
+            for (let i = 0; i < threadsThreadParts.length; i++) {
+                const part = threadsThreadParts[i] || {};
+                const text = typeof part.text === "string" ? part.text : "";
+                md += `**${i + 1}/${threadsThreadParts.length}.** ${text}\n`;
+                if (Array.isArray(part.media_urls) && part.media_urls.length) {
+                    for (const entry of part.media_urls) {
+                        const alt = typeof entry === "object" && entry?.alt ? ` — alt: "${entry.alt}"` : "";
+                        md += `  - ${mediaUrlOf(entry) || "*(no url)*"}${alt}\n`;
+                    }
+                }
+                md += `\n`;
+            }
+        }
         // LinkedIn poll(s): independent per channel, mutually exclusive with
         // media/link-share on that channel, so surface each prominently
         // rather than leaving callers to infer it's a poll.
@@ -450,6 +493,23 @@ export function registerPostTools(server, getClient) {
                 md += `- **${capitalize(platform.replace(/_/g, " "))}**: ${url}\n`;
             }
         }
+        // Multi-slide stories: one story per slide on the platform. Show every
+        // slide's own URL in publish order (published_urls only has slide 1).
+        const storySlides = (p.story_slides && typeof p.story_slides === "object" && !Array.isArray(p.story_slides))
+            ? p.story_slides
+            : {};
+        const slideEntries = Object.entries(storySlides).filter(([, list]) => Array.isArray(list) && list.length > 0);
+        if (slideEntries.length) {
+            md += `\n\n### Story Slides\n\n`;
+            for (const [platform, list] of slideEntries) {
+                md += `**${capitalize(platform.replace(/_/g, " "))}** (${list.length} slide${list.length === 1 ? "" : "s"})\n`;
+                list.forEach((slide, i) => {
+                    const n = (typeof slide.index === "number" ? slide.index : i) + 1;
+                    md += `- Slide ${n}${slide.media_type ? ` (${slide.media_type})` : ""}: ${slide.url || slide.native_post_id || "(no url)"}\n`;
+                });
+                md += `\n`;
+            }
+        }
         // Per-platform publish errors (status failed/warning). Point at
         // retry_post — only the failed platforms are re-published.
         const postErrors = (p.errors && typeof p.errors === "object" && !Array.isArray(p.errors))
@@ -467,7 +527,7 @@ export function registerPostTools(server, getClient) {
         }
         // First comments: nested under each platform object by the API. Show the
         // configured text plus, once published, the outcome (posted/failed/skipped).
-        const firstCommentPlatforms = ["instagram", "facebook", "linkedin", "linkedin_page", "youtube"];
+        const firstCommentPlatforms = ["instagram", "facebook", "linkedin", "linkedin_page", "youtube", "tiktok"];
         const firstCommentRows = [];
         for (const platform of firstCommentPlatforms) {
             const opts = p[platform];
@@ -535,7 +595,7 @@ IMPORTANT — Before calling this tool, make sure you have all required informat
 2. **Channels**: Which platforms to post to? Use list_accounts to show available options if needed.
 3. **Schedule**: When should it be published? (Or save as draft?)
 4. **Media** (REQUIRED for some types):
-   - Stories: ALWAYS require an image or video. Ask the user which image/video to use. Use list_media to show their uploaded media, or ask for an external URL.
+   - Stories: ALWAYS require an image or video. A story takes 1 to 10 media items: EACH item is one slide and publishes as its own story on Instagram/Facebook, in the order given (more than 10 returns 400). Ask the user which media to use and in what order. Use list_media to show their uploaded media, or ask for external URLs. Story videos are max 60s per slide.
    - Reels: ALWAYS require a video (MP4/MOV) — NOT an image. Passing an image to a Reel returns a 400 validation_error. To share an image, use post_type "Post" instead. Ask the user which video to use; use list_media to find available videos.
    - Instagram posts: ALWAYS require at least one image or video.
    - TikTok posts: ALWAYS require at least one image or video.
@@ -564,6 +624,7 @@ IMPORTANT — Before calling this tool, make sure you have all required informat
    - YouTube: Title, privacy status, tags?
    - TikTok: Privacy level?
    - **X threads vs long-form**: A chained "thread" (the user explicitly asks for one) → pass \`x.thread_parts\` as an array of 2–25 \`{ text }\` objects (each ≤ 280 chars); the \`content\` field is then ignored for X. A single **long-form** post on a Premium / Premium+ account → just put the full text (up to 25,000 chars) in \`content\` — no threading needed (check \`platform_details.subscription_type\` via list_accounts). On free / Basic, X caps a single post at 280 chars, so either split into a thread or shorten. Never cram "1/", "2/" prefixes into \`content\` — that posts one tweet, not a thread.
+   - **Bluesky, Mastodon and Threads chains**: the same \`thread_parts\` shape works under \`bluesky\`, \`mastodon\` and \`threads\` (each an array of 2 to 25 \`{ text, media_ids?, media_urls? }\` objects); parts after the first publish as replies to the previous part and \`content\` is then ignored for that platform. Threads: 2 to 25 parts, 500 characters per part, up to 10 media per part (images and videos can be mixed). Bluesky: 300 characters per part, 4 media. Mastodon: 500 characters per part (instance-dependent), 4 media.
    - **X posts containing a link cost credits**: X's API bills posts whose text contains a URL at a premium, and OmniSocials passes that through as prepaid credits at X's exact rate (20 credits ≈ $0.20 per URL-containing tweet; threads are charged per part that contains a link). The create response includes a \`warnings\` entry (\`x_url_post_credits\`) with the cost and current balance — relay it to the user. Credits are only deducted after the post successfully publishes; a failed publish is never charged. If the balance can't cover it at publish time, only the X target fails (message says to top up at https://app.omnisocials.com/credits) and the post can be retried after topping up. Posts without links stay free — never remove a user's link to dodge the fee without asking them. Scheduling is also gated up front: every scheduled X link post reserves its cost, and a create/schedule that would push the reserved total past the balance is refused with a 402 \`x_credits_insufficient\` error (details carry credits_required / credits_balance / credits_reserved) — tell the user to top up or remove the link, don't silently retry.
 
 Do NOT call this tool without media when creating stories, reels, Instagram posts, TikTok posts, or Pinterest posts — it will fail.
@@ -580,7 +641,7 @@ Do NOT call this tool without media when creating stories, reels, Instagram post
             z.array(mediaUrlEntry),
             z.record(z.string(), z.array(mediaUrlEntry)),
         ]).superRefine(pinterestImageCap).optional().describe("External image/video URLs — flat array (same for all platforms) or object with platform keys: { default: [...], instagram: [...], pinterest: [...] }. Each entry is a plain URL string or { url, alt } to attach alt text (accessibility description, max 1500 chars) to that file — delivered to Mastodon, Bluesky, X, Pinterest, Instagram (images) and LinkedIn (images). Max 10 total (Pinterest: max 5 images per carousel pin), each file ≤ 100 MB. When using per-platform format, 'default' is the fallback for selected platforms without their own key. Pass an empty array (e.g. facebook: []) to opt a platform out of media. For files over 100 MB (up to 1 GB): upload_media with method 'url' first, then pass the returned media id in `media`."),
-        type: z.enum(["post", "story", "reel"]).optional().describe("Content type: 'post' (default), 'story' (Instagram/Facebook/Snapchat), 'reel' (Instagram/Facebook/YouTube/TikTok)"),
+        type: z.enum(["post", "story", "reel"]).optional().describe("Content type: 'post' (default), 'story' (Instagram/Facebook/Snapchat; 1 to 10 media items, each one a slide published in order), 'reel' (Instagram/Facebook/YouTube/TikTok)"),
         link_url: z.string().optional().describe("URL to share as a rich preview card on platforms that support link-share posts (LinkedIn and Facebook). The URL renders as a tile with thumbnail / title / description instead of plain text. Ignored on platforms that don't support link shares, and ignored on posts that already have media attached (media wins)."),
         link_title: z.string().optional().describe("Optional title for the link-share preview. LinkedIn uses this when set; Facebook ignores it and fetches OG metadata server-side. Omit to let LinkedIn auto-fetch the page title."),
         link_description: z.string().optional().describe("Optional description for the link-share preview. LinkedIn uses this when set; Facebook auto-fetches the OG description."),
@@ -589,7 +650,7 @@ Do NOT call this tool without media when creating stories, reels, Instagram post
         collaborators: z.array(z.string()).max(3).optional().describe("Instagram only. Up to 3 public Instagram usernames to invite as co-authors (the 'Collab' feature). Works on image, carousel, and reel posts — NOT Stories. Invited users get an invite in the Instagram app; once they accept, the post also appears on their profile and feed. A leading '@' is stripped; usernames are case-insensitive. Private or non-existent usernames are rejected by Instagram at publish time with a clear error. Ignored by other platforms."),
         user_tags: z.array(USER_TAG_ENTRY).optional().describe("Instagram only. Tag public accounts at x/y positions on a PHOTO (not video/reels/stories). For a single image omit image_index; for a carousel, set image_index to the slide each tag belongs to. Private/non-existent usernames are rejected at publish time. Ignored by other platforms."),
         hashtag_set: z.string().optional().describe("Name of a saved hashtag set (from list_hashtag_sets, matched case-insensitively) to apply. The set's tags are merged in ONCE at create time — tags already in a caption are skipped, and Instagram's 30-hashtag cap returns a clear hashtag_limit_exceeded error. When the user says 'add my usual hashtags', check list_hashtag_sets first."),
-        hashtag_placement: z.enum(["caption_append", "first_comment"]).optional().describe("Where the set's tags land. caption_append (default): appended to each target caption after a blank line. first_comment: posted as the auto first comment on Instagram/Facebook/LinkedIn/LinkedIn Page/YouTube (appended after any explicit first_comment); platforms without a comment API fall back to caption_append. Stories always use captions."),
+        hashtag_placement: z.enum(["caption_append", "first_comment"]).optional().describe("Where the set's tags land. caption_append (default): appended to each target caption after a blank line. first_comment: posted as the auto first comment on Instagram/Facebook/LinkedIn/LinkedIn Page/YouTube/TikTok (TikTok only when the workspace enabled TikTok comments) (appended after any explicit first_comment); platforms without a comment API fall back to caption_append. Stories always use captions."),
         hashtag_platforms: z.array(z.string()).optional().describe("Optional subset of the post's channels to apply the hashtag set to (e.g. [\"instagram\", \"tiktok\"]). Defaults to all selected channels."),
         pinterest: PINTEREST_OPTIONS,
         youtube: z.object({
@@ -632,8 +693,11 @@ Do NOT call this tool without media when creating stories, reels, Instagram post
         mastodon: z.object({
             thread_parts: z.array(MASTODON_THREAD_PART).min(2).max(25).optional().describe("Publish as a chained Mastodon thread instead of a single status. Provide 2–25 parts; each is posted in order as a native reply to the previous status (in_reply_to_id). Attach media to any part via media_ids (from upload_media) or media_urls — max 4 per part. For a single status, omit thread_parts and use content."),
         }).optional().describe("Mastodon options"),
+        threads: z.object({
+            thread_parts: z.array(THREADS_THREAD_PART).min(2).max(25).optional().describe("Publish as a chained Threads (Meta) thread instead of a single post. Provide 2 to 25 parts; parts after the first are posted as replies to the previous part. Each part holds up to 500 characters and up to 10 media (images and videos can be mixed) via media_ids (from upload_media) or media_urls. When set, the Threads caption is taken from part 1 and content is ignored for Threads. For a single post, omit thread_parts and use content."),
+        }).optional().describe("Threads (Meta) options"),
         google_business: GOOGLE_BUSINESS_OPTIONS,
-    }, async (params) => {
+    }, { title: "Create Post", readOnlyHint: false, destructiveHint: false, openWorldHint: false }, async (params) => {
         const result = await getClient().createPost({ ...params, source: "mcp" });
         if (result.error) {
             return {
@@ -702,7 +766,7 @@ IMPORTANT — Before calling this tool, make sure you have all required informat
 1. **Content/caption**: What text? If captions differ per platform, use one call with an object: { "default": "fallback", "linkedin": "long", "threads": "short" }.
 2. **Channels**: Which platforms? Use list_accounts if needed.
 3. **Media** (REQUIRED for some types — same rules as create_post):
-   - Stories: ALWAYS need an image or video.
+   - Stories: ALWAYS need an image or video. Up to 10 media items; each one is a slide, published as its own story in order.
    - Reels: ALWAYS need a video (MP4/MOV), NOT an image — passing an image returns a 400 validation_error. Use post_type "Post" to share an image.
    - Instagram/TikTok posts: ALWAYS need at least one image or video.
    - Pinterest: ALWAYS need an image + board_id.
@@ -710,7 +774,7 @@ IMPORTANT — Before calling this tool, make sure you have all required informat
    - **Max items per platform** (same caps as create_post — exceeding returns 400): Bluesky/X/Mastodon ≤4, Instagram/Threads ≤10, TikTok ≤35 photos, Pinterest carousel 2–5 same-ratio images. Mixing images+video is rejected on Facebook/LinkedIn/X/Bluesky/Mastodon/TikTok; Instagram and Threads mixed carousels are allowed.
    - **Video duration/size caps** (ffprobe at submit — over either returns 400 validation_error with the exact cap + the file's value): X **140s/512MB** (no video+image mix in one tweet), Bluesky 180s, Threads 5min, Instagram 15min, TikTok 10min, YouTube Short 3min, LinkedIn 10min, Facebook Reel 90s.
 4. **Pinterest board (auto-default to first board)**: If Pinterest is in \`channels\` and \`pinterest.board_id\` is NOT provided, do NOT block on asking — and do NOT skip Pinterest. Call \`get_account\` on the Pinterest account, take the FIRST board from the returned boards list, and pass its \`id\` as \`pinterest.board_id\`. In your reply, mention which board you used (e.g. "Published to your 'Marketing' board on Pinterest — let me know if you'd prefer a different one.") so the user can redirect. If the user named a specific board in the request, match it (case-insensitive) against the list and use that one instead.
-5. **X threads vs long-form**: A chained "thread" → pass \`x.thread_parts\` as a 2–25 entry array of \`{ text }\` objects (each ≤ 280 chars). A single long-form post on a Premium / Premium+ account → put the full text (up to 25,000 chars) in \`content\`; no threading needed. On free / Basic, X caps a single post at 280 chars. Do NOT split into "1/", "2/" inside \`content\` — that produces a single tweet, not a thread.
+5. **X threads vs long-form**: A chained "thread" → pass \`x.thread_parts\` as a 2–25 entry array of \`{ text }\` objects (each ≤ 280 chars). A single long-form post on a Premium / Premium+ account → put the full text (up to 25,000 chars) in \`content\`; no threading needed. On free / Basic, X caps a single post at 280 chars. Do NOT split into "1/", "2/" inside \`content\` — that produces a single tweet, not a thread. The same \`thread_parts\` shape works under \`bluesky\`, \`mastodon\` and \`threads\` (Threads: 2 to 25 parts, 500 characters per part, up to 10 media per part; parts after the first publish as replies to the previous part).
 6. **X posts containing a link cost credits**: X bills API posts whose text contains a URL at a premium; OmniSocials passes that through as prepaid credits at X's exact rate (20 credits ≈ $0.20 per URL-containing tweet, threads charged per link-containing part). Because this tool publishes IMMEDIATELY, the debit happens right away — if the company's balance can't cover it, the X target fails with a top-up message while other platforms still publish. Relay any \`x_url_post_credits\` warning and X publish failure to the user; never strip their link to avoid the fee without asking. If the balance (minus credits reserved by scheduled X link posts) can't cover this post, the request is refused up front with a 402 \`x_credits_insufficient\` error instead of failing at publish.
 
 Do NOT call without required media — it will fail.`, {
@@ -724,7 +788,11 @@ Do NOT call without required media — it will fail.`, {
             z.array(mediaUrlEntry),
             z.record(z.string(), z.array(mediaUrlEntry)),
         ]).superRefine(pinterestImageCap).optional().describe("External image/video URLs — flat array or per-platform object. Each entry is a plain URL string or { url, alt } to attach alt text — delivered to Mastodon, Bluesky, X, Pinterest, Instagram (images) and LinkedIn (images). Max 10 total (Pinterest: max 5 images per carousel pin), each file ≤ 100 MB (larger, up to 1 GB: upload_media with method 'url' → pass the media id in `media`). 'default' key is fallback for platforms without their own key. Empty array opts out."),
-        type: z.enum(["post", "story", "reel"]).optional().describe("Content type: 'post' (default), 'story', 'reel'"),
+        type: z.enum(["post", "story", "reel"]).optional().describe("Content type: 'post' (default), 'story' (1 to 10 media items, each one a slide published in order), 'reel'"),
+        link_url: z.string().optional().describe("URL to share as a rich preview card on platforms that support link-share posts (LinkedIn and Facebook). The URL renders as a tile with thumbnail / title / description instead of plain text. Ignored on platforms that don't support link shares, and ignored on posts that already have media attached (media wins)."),
+        link_title: z.string().optional().describe("Optional title for the link-share preview. LinkedIn uses this when set; Facebook ignores it and fetches OG metadata server-side. Omit to let LinkedIn auto-fetch the page title."),
+        link_description: z.string().optional().describe("Optional description for the link-share preview. LinkedIn uses this when set; Facebook auto-fetches the OG description."),
+        link_thumbnail_url: z.string().optional().describe("Optional thumbnail image URL for the preview card. Reserved for future use — currently not yet applied to LinkedIn (would require uploading to LinkedIn's image API first)."),
         location_id: z.string().optional().describe("Instagram only. Facebook Place ID of a single physical venue to tag the post's location. Applied to single-image and carousel Instagram feed posts. Use the `search_locations` tool to find a valid ID. Ignored by other platforms."),
         collaborators: z.array(z.string()).max(3).optional().describe("Instagram only. Up to 3 public Instagram usernames to invite as co-authors (the 'Collab' feature). Works on image, carousel, and reel posts — NOT Stories. A leading '@' is stripped; usernames are case-insensitive. Private or non-existent usernames are rejected by Instagram at publish time. Ignored by other platforms."),
         user_tags: z.array(USER_TAG_ENTRY).optional().describe("Instagram only. Tag public accounts at x/y positions on a PHOTO (not video/reels/stories). For a single image omit image_index; for a carousel, set image_index to the slide each tag belongs to. Private/non-existent usernames are rejected at publish time. Ignored by other platforms."),
@@ -772,8 +840,11 @@ Do NOT call without required media — it will fail.`, {
         mastodon: z.object({
             thread_parts: z.array(MASTODON_THREAD_PART).min(2).max(25).optional().describe("Publish as a chained Mastodon thread (2–25 parts). Each is posted in order as a native reply (in_reply_to_id). Attach media to any part via media_ids or media_urls — max 4 per part."),
         }).optional().describe("Mastodon options"),
+        threads: z.object({
+            thread_parts: z.array(THREADS_THREAD_PART).min(2).max(25).optional().describe("Publish as a chained Threads (Meta) thread (2 to 25 parts). Parts after the first are posted as replies to the previous part. Each part holds up to 500 characters and up to 10 media (images and videos can be mixed) via media_ids or media_urls. The Threads caption is taken from part 1."),
+        }).optional().describe("Threads (Meta) options"),
         google_business: GOOGLE_BUSINESS_OPTIONS,
-    }, async (params) => {
+    }, { title: "Create and Publish Post", readOnlyHint: false, destructiveHint: false, openWorldHint: true }, async (params) => {
         const result = await getClient().createAndPublishPost({ ...params, source: "mcp" });
         if (result.error) {
             return {
@@ -821,10 +892,10 @@ Do NOT call without required media — it will fail.`, {
 
 **Per-platform options (\`youtube\`, \`pinterest\`, \`instagram\`, \`tiktok\`, \`google_business\`)** are accepted here, same shape as in \`create_post\`. Pass an object — never a JSON-encoded string. For YouTube Shorts, the **title** lives at \`youtube.title\`; the **video description** lives in \`content\` (or \`content.youtube\` for a per-platform override). They are not the same field — changing the caption does NOT rename the Short.
 
-**X threads**: To convert an existing draft into a chained X thread, pass \`x.thread_parts\` as a 2–25 entry array of \`{ text }\` objects (each ≤ 280 chars). Pass \`null\` to revert to single-tweet mode. Do NOT shove "1/", "2/" into \`content\` — that's a single tweet, not a thread.`, {
+**X threads**: To convert an existing draft into a chained X thread, pass \`x.thread_parts\` as a 2–25 entry array of \`{ text }\` objects (each ≤ 280 chars). Pass \`null\` to revert to single-tweet mode. Do NOT shove "1/", "2/" into \`content\` — that's a single tweet, not a thread. The same applies to \`bluesky.thread_parts\`, \`mastodon.thread_parts\` and \`threads.thread_parts\` (Threads: 2 to 25 parts, 500 characters per part, up to 10 media per part; \`null\` reverts to a single post).`, {
         id: z.string().describe("The post ID to update"),
         content: z.union([z.string(), z.record(z.string(), z.string())]).optional().describe("Updated post caption / body text. For YouTube Shorts this becomes the video description, NOT the title — to rename the Short, use `youtube.title`. String or object with platform keys: { \"default\": \"fallback\", \"linkedin\": \"long\" }."),
-        scheduled_at: z.string().optional().describe("Updated scheduled date (ISO 8601)"),
+        scheduled_at: z.string().optional().describe("Updated scheduled date (ISO 8601, must be in the future). A draft becomes scheduled. A post waiting for approval keeps its in_approval status; only its time moves."),
         channels: z.array(z.string()).optional().describe("Updated channel IDs. Bare platform name or composite `\"<workspace_id>_<platform>\"`; always source from list_accounts for this API key (unknown or mismatched workspace prefixes are rejected as unknown accounts). Note: `linkedin` (personal profile) and `linkedin_page` (company page) are independent channels."),
         media_ids: z.union([
             z.array(mediaIdEntry),
@@ -834,6 +905,10 @@ Do NOT call without required media — it will fail.`, {
             z.array(mediaUrlEntry),
             z.record(z.string(), z.array(mediaUrlEntry)),
         ]).superRefine(pinterestImageCap).optional().describe("External URLs — flat array or per-platform object. Each entry is a plain URL string or { url, alt } to attach alt text — delivered to Mastodon, Bluesky, X, Pinterest, Instagram (images) and LinkedIn (images). Max 10 total (Pinterest: max 5 images per carousel pin), each file ≤ 100 MB (larger, up to 1 GB: upload_media with method 'url' → pass the media id in `media`). 'default' key is fallback for platforms without their own key. Empty array opts out."),
+        link_url: z.string().optional().describe("URL to share as a rich preview card on platforms that support link-share posts (LinkedIn and Facebook). The URL renders as a tile with thumbnail / title / description instead of plain text. Ignored on platforms that don't support link shares, and ignored on posts that already have media attached (media wins)."),
+        link_title: z.string().optional().describe("Optional title for the link-share preview. LinkedIn uses this when set; Facebook ignores it and fetches OG metadata server-side. Omit to let LinkedIn auto-fetch the page title."),
+        link_description: z.string().optional().describe("Optional description for the link-share preview. LinkedIn uses this when set; Facebook auto-fetches the OG description."),
+        link_thumbnail_url: z.string().optional().describe("Optional thumbnail image URL for the preview card. Reserved for future use — currently not yet applied to LinkedIn (would require uploading to LinkedIn's image API first)."),
         location_id: z.string().optional().describe("Instagram only. Facebook Place/Page ID to tag the post's location with. Send an empty string to clear an existing location tag. Ignored by other platforms."),
         collaborators: z.array(z.string()).max(3).optional().describe("Instagram only. Up to 3 public Instagram usernames to invite as co-authors. Replaces the existing collaborator list. Send an empty array to clear collaborators. Works on image, carousel, and reel posts — NOT Stories. Ignored by other platforms."),
         user_tags: z.array(USER_TAG_ENTRY).optional().describe("Instagram only. Tag public accounts at x/y positions on a PHOTO (not video/reels/stories). Replaces the existing tag list. Send an empty array to clear. For carousels set image_index per tag. Ignored by other platforms."),
@@ -878,8 +953,11 @@ Do NOT call without required media — it will fail.`, {
         mastodon: z.object({
             thread_parts: z.array(MASTODON_THREAD_PART).min(2).max(25).nullable().optional().describe("Replace the Mastodon thread shape on this post. Pass an array (2–25 parts) to update/create the thread (attach media to any part via media_ids or media_urls; max 4 per part), or `null` to revert to single-status mode."),
         }).optional().describe("Mastodon options"),
+        threads: z.object({
+            thread_parts: z.array(THREADS_THREAD_PART).min(2).max(25).nullable().optional().describe("Replace the Threads (Meta) thread shape on this post. Pass an array (2 to 25 parts, 500 characters per part) to update/create the thread (attach up to 10 media to any part via media_ids or media_urls; images and videos can be mixed), or `null` to revert to single-post mode."),
+        }).optional().describe("Threads (Meta) options"),
         google_business: GOOGLE_BUSINESS_OPTIONS,
-    }, async ({ id, ...data }) => {
+    }, { title: "Update Post", readOnlyHint: false, destructiveHint: false, openWorldHint: false }, async ({ id, ...data }) => {
         const result = await getClient().updatePost(id, data);
         if (result.error) {
             return {
@@ -909,7 +987,7 @@ Do NOT call without required media — it will fail.`, {
     });
     server.tool("delete_post", "Delete a post by ID. This action cannot be undone.", {
         id: z.string().describe("The post ID to delete"),
-    }, async ({ id }) => {
+    }, { title: "Delete Post", readOnlyHint: false, destructiveHint: true, openWorldHint: false }, async ({ id }) => {
         const result = await getClient().deletePost(id);
         return {
             content: [{ type: "text", text: result.error ? `Error (${result.error.code}): ${result.error.message}` : "Post deleted successfully." }],
@@ -919,7 +997,7 @@ Do NOT call without required media — it will fail.`, {
 
 IMPORTANT: Before publishing, verify the post has all required media. If publishing a story or reel, ensure media was attached when the post was created/updated. If it's missing, use update_post to add media first, or inform the user.`, {
         id: z.string().describe("The post ID to publish"),
-    }, async ({ id }) => {
+    }, { title: "Publish Post", readOnlyHint: false, destructiveHint: false, openWorldHint: true }, async ({ id }) => {
         const result = await getClient().publishPost(id);
         if (result.error) {
             return {
@@ -945,7 +1023,7 @@ IMPORTANT: Before publishing, verify the post has all required media. If publish
 
 The retry runs asynchronously (usually within a few minutes). Poll \`get_post\` afterwards: on success the status becomes \`published\` and \`published_urls\` gains the platform's live URL; on another failure the platform's entry reappears under errors. Each platform can be retried at most 3 times — after that, recreate the post. Note \`publish_post\` refuses failed posts; this is the tool for them.`, {
         id: z.string().describe("The failed or partially failed post ID to retry"),
-    }, async ({ id }) => {
+    }, { title: "Retry Failed Post", readOnlyHint: false, destructiveHint: false, openWorldHint: true }, async ({ id }) => {
         const result = await getClient().retryPost(id);
         if (result.error) {
             return {
@@ -982,7 +1060,7 @@ Notes:
         query: z
             .string()
             .describe("Place name to search (min 2 chars) — a dealership, café, venue, etc."),
-    }, async ({ query }) => {
+    }, { title: "Search Locations", readOnlyHint: true, destructiveHint: false, openWorldHint: true }, async ({ query }) => {
         const result = await getClient().searchLocations(query);
         const places = result?.data || [];
         if (!places.length) {
@@ -1013,7 +1091,7 @@ Notes: only tracks Meta licenses for third-party publishing appear, so the selec
             .enum(["music", "original_sound"])
             .optional()
             .describe("Catalog to search: licensed music (default) or original sounds created by Instagram users."),
-    }, async ({ query, type }) => {
+    }, { title: "Search Instagram Audio", readOnlyHint: true, destructiveHint: false, openWorldHint: true }, async ({ query, type }) => {
         const result = await getClient().searchInstagramAudio(query, type);
         const tracks = result?.data || [];
         if (!tracks.length) {
@@ -1039,7 +1117,7 @@ Notes: only tracks Meta licenses for third-party publishing appear, so the selec
         });
         return { content: [{ type: "text", text: md }] };
     });
-    server.tool("get_recent_platform_posts", "Fetch the user's most recent posts straight from their connected platform APIs (Instagram, TikTok, X, YouTube, Facebook, LinkedIn, and more), INCLUDING content published outside OmniSocials. Use this when list_posts is empty — e.g. a brand-new workspace that has not published through OmniSocials yet — so you can still analyze the user's real content. Each post includes normalized `engagement` plus every raw metric the platform reported (Instagram: reach/views/saves/shares from per-post insights). Metrics only appear where the platform exposes them for historical posts (X, TikTok, Bluesky, Mastodon, Instagram, Facebook, YouTube); Threads, Pinterest, and Google Business return captions only. Records also carry `duration_seconds` — the video length in whole seconds — where the platform's listing API reports it (currently TikTok and YouTube); null for images and platforms that don't expose it. LinkedIn personal profiles can't be listed live (LinkedIn grants apps no such permission), so their results are posts published through OmniSocials with their latest collected stats. Fetched live for most platforms, so expect a few seconds of latency; X results may come from a snapshot up to 24h old (X bills per returned post) — the snapshot refreshes right after the user publishes to X through OmniSocials. Output is a human-readable summary table PLUS a 'Structured data' JSON block carrying, for every post, the platform's own post id (the stable dedupe key), a permalink, the FULL untruncated caption, and exact-integer metrics — use that block when ingesting or storing native posts rather than the rounded/truncated table. Requires the analytics:read scope.", {
+    server.tool("get_recent_platform_posts", "Fetch the user's most recent posts straight from their connected platform APIs (Instagram, TikTok, X, YouTube, Facebook, LinkedIn, and more), INCLUDING content published outside OmniSocials. Use this when list_posts is empty — e.g. a brand-new workspace that has not published through OmniSocials yet — so you can still analyze the user's real content. Each post includes normalized `engagement` plus every raw metric the platform reported (Instagram: reach/views/saves/shares from per-post insights; TikTok: average_time_watched/full_video_watched_rate/total_time_watched/favorites/reach when the workspace enabled TikTok comments). Metrics only appear where the platform exposes them for historical posts (X, TikTok, Bluesky, Mastodon, Instagram, Facebook, YouTube); Threads, Pinterest, and Google Business return captions only. Records also carry `duration_seconds` — the video length in whole seconds — where the platform's listing API reports it (currently TikTok and YouTube); null for images and platforms that don't expose it. LinkedIn personal profiles can't be listed live (LinkedIn grants apps no such permission), so their results are posts published through OmniSocials with their latest collected stats. Fetched live for most platforms, so expect a few seconds of latency; X results may come from a snapshot up to 24h old (X bills per returned post) — the snapshot refreshes right after the user publishes to X through OmniSocials. Output is a human-readable summary table PLUS a 'Structured data' JSON block carrying, for every post, the platform's own post id (the stable dedupe key), a permalink, the FULL untruncated caption, and exact-integer metrics — use that block when ingesting or storing native posts rather than the rounded/truncated table. Requires the analytics:read scope.", {
         limit: z
             .string()
             .optional()
@@ -1048,7 +1126,7 @@ Notes: only tracks Meta licenses for third-party publishing appear, so the selec
             .string()
             .optional()
             .describe('Optional comma-separated platform filter, e.g. "instagram,tiktok". Defaults to every connected platform.'),
-    }, async (params) => {
+    }, { title: "Get Recent Platform Posts", readOnlyHint: true, destructiveHint: false, openWorldHint: true }, async (params) => {
         const result = await getClient().getRecentPlatformPosts(params);
         if (result.error) {
             return {

package/build/tools/webhooks.js

@@ -1,7 +1,7 @@
 import { z } from "zod";
 import { formatDateTime } from "../client.js";
 export function registerWebhookTools(server, getClient) {
-    server.tool("list_webhooks", "List all configured webhooks.", {}, async () => {
+    server.tool("list_webhooks", "List all configured webhooks.", {}, { title: "List Webhooks", readOnlyHint: true, destructiveHint: false, openWorldHint: false }, async () => {
         const result = await getClient().listWebhooks();
         if (result.error) {
             return {
@@ -31,7 +31,7 @@ export function registerWebhookTools(server, getClient) {
     server.tool("create_webhook", "Create a new webhook to receive event notifications. Available events: post.scheduled, post.published, post.failed", {
         url: z.string().describe("The HTTPS URL to send webhook events to"),
         events: z.array(z.string()).describe("Events to subscribe to: post.scheduled, post.published, post.failed"),
-    }, async (params) => {
+    }, { title: "Create Webhook", readOnlyHint: false, destructiveHint: false, openWorldHint: false }, async (params) => {
         const result = await getClient().createWebhook(params);
         if (result.error) {
             return {
@@ -61,7 +61,7 @@ export function registerWebhookTools(server, getClient) {
     });
     server.tool("get_webhook", "Get details of a specific webhook by ID.", {
         id: z.string().describe("The webhook ID"),
-    }, async ({ id }) => {
+    }, { title: "Get Webhook", readOnlyHint: true, destructiveHint: false, openWorldHint: false }, async ({ id }) => {
         const result = await getClient().getWebhook(id);
         if (result.error) {
             return {
@@ -97,7 +97,7 @@ export function registerWebhookTools(server, getClient) {
         url: z.string().optional().describe("Updated HTTPS URL"),
         events: z.array(z.string()).optional().describe("Updated event list"),
         is_active: z.boolean().optional().describe("Enable or disable the webhook"),
-    }, async ({ id, ...data }) => {
+    }, { title: "Update Webhook", readOnlyHint: false, destructiveHint: false, openWorldHint: false }, async ({ id, ...data }) => {
         const result = await getClient().updateWebhook(id, data);
         if (result.error) {
             return {
@@ -123,7 +123,7 @@ export function registerWebhookTools(server, getClient) {
     });
     server.tool("delete_webhook", "Delete a webhook by ID. You will stop receiving notifications at this URL.", {
         id: z.string().describe("The webhook ID to delete"),
-    }, async ({ id }) => {
+    }, { title: "Delete Webhook", readOnlyHint: false, destructiveHint: true, openWorldHint: false }, async ({ id }) => {
         const result = await getClient().deleteWebhook(id);
         return {
             content: [{ type: "text", text: result.error ? `Error (${result.error.code}): ${result.error.message}` : "Webhook deleted successfully." }],
@@ -131,7 +131,7 @@ export function registerWebhookTools(server, getClient) {
     });
     server.tool("rotate_webhook_secret", "Rotate the signing secret for a webhook. The new secret will only be shown once.", {
         id: z.string().describe("The webhook ID"),
-    }, async ({ id }) => {
+    }, { title: "Rotate Webhook Secret", readOnlyHint: false, destructiveHint: true, openWorldHint: false }, async ({ id }) => {
         const result = await getClient().rotateWebhookSecret(id);
         if (result.error) {
             return {

package/build/tools/workspaces.js

@@ -60,7 +60,7 @@ function resolveWorkspaceIndex(entries, query) {
     return { notFound: true };
 }
 export function registerWorkspaceTools(server, workspaceClients, sessionState) {
-    server.tool("list_workspaces", "List all workspaces available in this session. Each workspace corresponds to an API key provided at connection time. Shows which workspace is currently active. Workspace selection rule: if only one workspace is available, just use it (no need to ask). If the user has named a workspace in their request (e.g. 'post to my Acme workspace'), proceed with that workspace and remember it for the rest of the conversation. If multiple workspaces exist and the user has NOT named one, call this tool, present the list, and ASK the user which one to use before posting, switching, or fetching analytics. After a successful action, mention the workspace name in your reply for clarity.", {}, async () => {
+    server.tool("list_workspaces", "List all workspaces available in this session. Each workspace corresponds to an API key provided at connection time. Shows which workspace is currently active. Workspace selection rule: if only one workspace is available, just use it (no need to ask). If the user has named a workspace in their request (e.g. 'post to my Acme workspace'), proceed with that workspace and remember it for the rest of the conversation. If multiple workspaces exist and the user has NOT named one, call this tool, present the list, and ASK the user which one to use before posting, switching, or fetching analytics. After a successful action, mention the workspace name in your reply for clarity.", {}, { title: "List Workspaces", readOnlyHint: true, destructiveHint: false, openWorldHint: false }, async () => {
         const workspaces = await describeWorkspaces(workspaceClients, sessionState);
         if (workspaces.length === 1) {
             const ws = workspaces[0];
@@ -85,7 +85,7 @@ export function registerWorkspaceTools(server, workspaceClients, sessionState) {
         workspace: z
             .string()
             .describe('The workspace to switch to: its name (preferred, e.g. "Daily Edge Sports"), or its id/list number.'),
-    }, async ({ workspace }) => {
+    }, { title: "Switch Workspace", readOnlyHint: false, destructiveHint: false, openWorldHint: false }, async ({ workspace }) => {
         const entries = await describeWorkspaces(workspaceClients, sessionState);
         const resolved = resolveWorkspaceIndex(entries, workspace);
         if ("ambiguous" in resolved) {

package/build/types.d.ts

@@ -72,7 +72,7 @@ export type ApiPostMediaEntry = string | {
     alt?: string;
     [k: string]: unknown;
 };
-/** A thread part as echoed back by the API (X / Bluesky / Mastodon). */
+/** A thread part as echoed back by the API (X / Bluesky / Mastodon / Threads). */
 export interface ApiThreadPartOut {
     id?: string;
     text?: string;
@@ -103,6 +103,17 @@ export interface ApiInstagramOptionsOut extends ApiPlatformOptionsOut {
     thumb_offset?: number | string;
     cover_url?: string;
 }
+export interface ApiStorySlide {
+    /** Zero-based slide position. */
+    index?: number;
+    /** The slide's story id on the platform. */
+    native_post_id?: string;
+    /** Story URL (valid for 24 hours). */
+    url?: string | null;
+    media_url?: string | null;
+    media_type?: "image" | "video" | string | null;
+    published_at?: string | null;
+}
 export interface ApiPost {
     id: string;
     /** DB "posted" is mapped to "published" by the serializer. */
@@ -130,6 +141,9 @@ export interface ApiPost {
     app_url?: string;
     /** platform → live URL for each platform that successfully published. */
     published_urls?: Record<string, string>;
+    /** Stories only, after publishing: every slide per platform in publish
+     * order. `published_urls` keeps only the first slide's URL. */
+    story_slides?: Record<string, ApiStorySlide[]>;
     /** Set on a retry post: the original failed post's id. */
     retry_of?: string;
     /** Set on the original post: ids of its retry posts. */
@@ -170,6 +184,7 @@ export interface ApiPost {
     x?: ApiPlatformOptionsOut;
     bluesky?: ApiPlatformOptionsOut;
     mastodon?: ApiPlatformOptionsOut;
+    threads?: ApiPlatformOptionsOut;
     /** platform → user-friendly error message; only failed platforms appear.
      * null while draft/scheduled/processing or when every platform succeeded. */
     errors?: Record<string, string> | null;
@@ -447,18 +462,32 @@ export interface BestTimesResult {
     metric?: string;
     window_days?: number;
     sample_size?: number;
-    basis?: "own_data" | "defaults";
+    basis?: "own_data" | "own_data_and_audience" | "audience" | "defaults";
+    /** Hour (0-23, response timezone) -> followers online. */
+    audience_online?: Record<string, number>;
+    audience_online_date?: string;
     posts_needed?: number;
     /** Absent on the defaults basis. */
     grid?: BestTimeGridCell[];
     recommendations?: BestTimeRecommendation[];
 }
+export interface PostAnalyticsStorySlide {
+    /** Zero-based slide position. */
+    index: number;
+    /** The slide's own story id on the platform. */
+    platform_post_id: string;
+    metrics: Record<string, number | string>;
+    collected_at: string;
+}
 export interface PostAnalyticsPlatformEntry {
     platform: string;
     platform_post_id: string;
     metrics: Record<string, number | string>;
     thread_parts: number;
     collected_at: string;
+    /** Multi-slide stories only: per-slide metrics in publish order (the
+     * parent `metrics` is the sum across slides). */
+    story_slides?: PostAnalyticsStorySlide[];
 }
 export interface PostAnalytics {
     post_id: string;

package/package.json

@@ -1,6 +1,7 @@
 {
   "name": "@omnisocials/mcp-server",
-  "version": "1.24.0",
+  "version": "1.28.0",
+  "mcpName": "io.github.omnisocials/mcp-server",
   "description": "MCP server for OmniSocials API - manage social media posts, media, accounts, analytics, and webhooks",
   "type": "module",
   "main": "build/index.js",