@omnisocials/mcp-server 1.32.0 → 1.33.0

package/README.md

@@ -115,7 +115,7 @@ OmniSocials accepts the following channel IDs in `create_post`, `create_and_publ
 
 ## Available Tools
 
-### Posts (12 tools)
+### Posts (13 tools)
 
 | Tool | Description |
 |------|-------------|
@@ -127,6 +127,7 @@ OmniSocials accepts the following channel IDs in `create_post`, `create_and_publ
 | `delete_post` | Delete a post |
 | `publish_post` | Publish a draft or scheduled post now |
 | `retry_post` | Retry the failed platforms of a failed or partially failed post |
+| `list_approval_workflows` | List the workspace's approval workflows (steps + approvers); pass an id as `approval_workflow_id` on `create_post` to hold the post for review |
 | `approve_post` | Approve the current step of a post's approval workflow (the connected user must be a listed approver for that step) |
 | `reject_post` | Reject a post's approval workflow, stopping it immediately |
 | `search_locations` | Find an Instagram or Threads location to tag (Instagram place IDs for `location_id`, Threads location ids for `threads.location_id`; Threads also searches by latitude/longitude) |

package/build/client.d.ts

@@ -184,6 +184,27 @@ export interface CreatePostInput {
     hashtag_set?: string;
     hashtag_placement?: "caption_append" | "first_comment";
     hashtag_platforms?: string[];
+    /** Route the post through a saved approval workflow (GET /approval-workflows). */
+    approval_workflow_id?: string;
+}
+export interface ApprovalWorkflowApprover {
+    id: string;
+    name: string | null;
+    email: string | null;
+}
+export interface ApprovalWorkflowStep {
+    order: number;
+    name: string;
+    require_mode: "any" | "all";
+    approvers: ApprovalWorkflowApprover[];
+}
+export interface ApprovalWorkflow {
+    id: string;
+    name: string;
+    workspace_id: number | null;
+    steps: ApprovalWorkflowStep[];
+    created_at: string;
+    updated_at: string;
 }
 export declare class OmniSocialsClient {
     private baseUrl;
@@ -298,6 +319,7 @@ export declare class OmniSocialsClient {
         name: string;
         parent_id?: string;
     }): Promise<ApiResponse<MediaFolder>>;
+    listApprovalWorkflows(): Promise<ApiResponse<ApprovalWorkflow[]>>;
     listHashtagSets(): Promise<ApiResponse<HashtagSet[]>>;
     createHashtagSet(data: {
         name: string;

package/build/client.js

@@ -350,6 +350,10 @@ export class OmniSocialsClient {
     async createFolder(data) {
         return this.request("POST", "/folders", data);
     }
+    // Approval workflows (read-only; configured in the dashboard)
+    async listApprovalWorkflows() {
+        return this.request("GET", "/approval-workflows");
+    }
     // Hashtag Sets
     async listHashtagSets() {
         return this.request("GET", "/hashtag-sets");

package/build/tools/posts.js

@@ -555,6 +555,57 @@ export function registerPostTools(server, getClient) {
         if (firstCommentRows.length) {
             md += `\n\n### First Comments\n\n${firstCommentRows.join("\n")}\n`;
         }
+        // Per-platform publish options read-back (TikTok cover frame, privacy,
+        // disclosures; YouTube title/privacy/tags; Pinterest board/title/link),
+        // so a caller can verify what was set without opening the dashboard.
+        // Only values that were actually chosen are listed.
+        const optionRows = [];
+        const tk = p.tiktok && typeof p.tiktok === "object" ? p.tiktok : {};
+        if (typeof tk.title === "string" && tk.title)
+            optionRows.push(["TikTok title", tk.title]);
+        if (typeof tk.privacy_level === "string" && tk.privacy_level)
+            optionRows.push(["TikTok privacy", tk.privacy_level]);
+        const coverMs = Number(tk.video_cover_timestamp_ms) || 0;
+        if (coverMs > 0)
+            optionRows.push(["TikTok cover frame", `${coverMs} ms (${(coverMs / 1000).toFixed(1)}s into the video)`]);
+        for (const [key, label] of [
+            ["disable_comment", "TikTok comments"],
+            ["disable_duet", "TikTok duet"],
+            ["disable_stitch", "TikTok stitch"],
+        ]) {
+            if (tk[key] === true)
+                optionRows.push([label, "disabled"]);
+        }
+        for (const [key, label] of [
+            ["is_aigc", "TikTok AI-generated label"],
+            ["brand_content_toggle", "TikTok paid partnership"],
+            ["brand_organic_toggle", "TikTok own-brand disclosure"],
+            ["auto_add_music", "TikTok auto-add music"],
+        ]) {
+            if (tk[key] === true)
+                optionRows.push([label, "on"]);
+        }
+        const yt = p.youtube && typeof p.youtube === "object" ? p.youtube : {};
+        if (typeof yt.title === "string" && yt.title)
+            optionRows.push(["YouTube title", yt.title]);
+        if (typeof yt.privacy_status === "string" && yt.privacy_status)
+            optionRows.push(["YouTube privacy", yt.privacy_status]);
+        if (Array.isArray(yt.tags) && yt.tags.length)
+            optionRows.push(["YouTube tags", yt.tags.join(", ")]);
+        if (yt.made_for_kids === true)
+            optionRows.push(["YouTube made for kids", "yes"]);
+        const pin = p.pinterest && typeof p.pinterest === "object" ? p.pinterest : {};
+        if (typeof pin.board_id === "string" && pin.board_id)
+            optionRows.push(["Pinterest board", pin.board_id]);
+        if (typeof pin.title === "string" && pin.title)
+            optionRows.push(["Pinterest title", pin.title]);
+        if (typeof pin.link === "string" && pin.link)
+            optionRows.push(["Pinterest link", pin.link]);
+        if (optionRows.length) {
+            md += `\n\n### Platform Options\n\n| Option | Value |\n|--------|-------|\n`;
+            for (const [k, v] of optionRows)
+                md += `| ${k} | ${v.replace(/\|/g, "\\|")} |\n`;
+        }
         // LinkedIn multi-image style: nested under each channel's options
         // object by the API. Only rendered when the post opts out of the
         // default PDF document carousel.
@@ -709,6 +760,7 @@ Do NOT call this tool without media when creating stories, reels, Instagram post
             thread_parts: z.array(THREADS_THREAD_PART).min(2).max(25).optional().describe("Publish as a chained Threads (Meta) thread instead of a single post. Provide 2 to 25 parts; parts after the first are posted as replies to the previous part. Each part holds up to 500 characters and up to 10 media (images and videos can be mixed) via media_ids (from upload_media) or media_urls. When set, the Threads caption is taken from part 1 and content is ignored for Threads. For a single post, omit thread_parts and use content."),
         }).optional().describe("Threads (Meta) options: thread mode via `thread_parts`, location tag via `location_id`."),
         google_business: GOOGLE_BUSINESS_OPTIONS,
+        approval_workflow_id: z.string().optional().describe("Route the post through a saved approval workflow (id from list_approval_workflows). The post is created as `in_approval` instead of `scheduled`: its approvers are notified, they review it on the Approvals page, and it publishes at scheduled_at only once the workflow's last step approves it (or approve_post). Use this whenever the user wants to review/approve agent-created posts before they go out. Requires scheduled_at; not allowed with publish_now (use create_post, never create_and_publish_post). A workflow with no approvers on its first step is rejected with validation_error."),
     }, { title: "Create Post", readOnlyHint: false, destructiveHint: false, openWorldHint: false }, async (params) => {
         const result = await getClient().createPost({ ...params, source: "mcp" });
         if (result.error) {
@@ -731,18 +783,26 @@ Do NOT call this tool without media when creating stories, reels, Instagram post
         try {
             const schedAt = p.schedule_at ?? p.scheduled_at;
             const channels = selectedChannels(p);
-            let md = `## Draft Created (not yet published)\n\n`;
+            const inApproval = p.status === "in_approval";
+            let md = inApproval
+                ? `## Post Submitted for Approval\n\n`
+                : `## Draft Created (not yet published)\n\n`;
             md += `| Field | Value |\n`;
             md += `|-------|-------|\n`;
             md += `| **ID** | \`${p.id}\` |\n`;
             md += `| **Status** | ${capitalize(p.status || "draft")} |\n`;
+            if (inApproval)
+                md += `| **Approval status** | ${capitalize(p.approval_status || "pending")} |\n`;
             if (schedAt)
-                md += `| **Scheduled** | ${formatDateTime(schedAt)} |\n`;
+                md += `| **${inApproval ? "Publishes (once approved)" : "Scheduled"}** | ${formatDateTime(schedAt)} |\n`;
             if (channels.length)
                 md += `| **Channels** | ${channels.join(", ")} |\n`;
             if (appUrl)
                 md += `| **Open in OmniSocials** | ${appUrl} |\n`;
             md += `\n**Content:** ${truncate(p.content, 100)}\n\n`;
+            if (inApproval) {
+                md += `_The approvers have been notified. The post publishes at the time above as soon as the workflow's last step approves it (Approvals page in OmniSocials, or approve_post). Nothing else is needed from the user until then._\n\n`;
+            }
             if (Array.isArray(result.warnings) && result.warnings.length > 0) {
                 for (const w of result.warnings) {
                     md += `⚠️ ${w.message}\n`;
@@ -1063,6 +1123,38 @@ The retry runs asynchronously (usually within a few minutes). Poll \`get_post\`
             content: [{ type: "text", text: md }],
         };
     });
+    server.tool("list_approval_workflows", `List the approval workflows this workspace can use (company-wide ones plus workspace-bound ones), with their steps and named approvers. Workflows are created in the OmniSocials dashboard (Approvals); this tool only lists them.
+
+Pass a workflow's id as \`approval_workflow_id\` on \`create_post\` to hold a scheduled post for review: it is created as \`in_approval\`, the approvers are notified, and it publishes at \`scheduled_at\` once the last step approves. Call this first whenever the user wants agent-created posts to be reviewed/approved before they go out; if the list is empty, tell the user to create a workflow under Approvals in the dashboard.`, {}, { title: "List Approval Workflows", readOnlyHint: true, destructiveHint: false, openWorldHint: false }, async () => {
+        const result = await getClient().listApprovalWorkflows();
+        if (result.error) {
+            return {
+                content: [{ type: "text", text: `Error (${result.error.code}): ${result.error.message}` }],
+            };
+        }
+        const items = Array.isArray(result.data) ? result.data : [];
+        if (!items.length) {
+            return {
+                content: [{
+                        type: "text",
+                        text: "No approval workflows yet. The user can create one in the OmniSocials dashboard under Approvals (choose the approvers per step); then create_post with approval_workflow_id routes posts through it.",
+                    }],
+            };
+        }
+        let md = `## Approval Workflows (${items.length})\n\n`;
+        for (const w of items) {
+            md += `### \`${w.id}\` ${w.name}${w.workspace_id ? "" : " _(company-wide)_"}\n\n`;
+            for (const s of w.steps || []) {
+                const approvers = (s.approvers || []).map((a) => a.name || a.email || a.id).join(", ") || "*(no approvers)*";
+                md += `- Step ${s.order}: ${s.name || "Review"} — ${s.require_mode === "all" ? "all must approve" : "any one approves"}: ${approvers}\n`;
+            }
+            md += `\n`;
+        }
+        md += `Use create_post with approval_workflow_id="<id>" (plus scheduled_at) to submit a post for review.`;
+        return {
+            content: [{ type: "text", text: md }],
+        };
+    });
     server.tool("approve_post", `Approve the current step of a post's approval workflow. Only works on a post with \`approval_status: "pending"\` (post status \`in_approval\`) — check \`get_post\` first.
 
 IMPORTANT: this only succeeds if the connected user is a listed approver for the workflow's CURRENT step — steps approve in order, so being an approver on a later step is not enough yet. A \`forbidden\` error means the user isn't (or isn't yet) an approver for this step; tell them who needs to approve instead, don't retry.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@omnisocials/mcp-server",
-  "version": "1.32.0",
+  "version": "1.33.0",
   "mcpName": "io.github.omnisocials/mcp-server",
   "description": "MCP server for OmniSocials API - manage social media posts, media, accounts, analytics, and webhooks",
   "type": "module",
@@ -53,7 +53,8 @@
   },
   "overrides": {
     "zod": "4.4.0",
-    "fast-uri": "3.1.1",
-    "hono": "4.12.18"
+    "fast-uri": "^3.1.7",
+    "hono": "^4.13.7",
+    "qs": "^6.16.0"
   }
 }