posterly-mcp-server 0.19.9 → 0.19.10

package/README.md

@@ -19,7 +19,7 @@ Posterly also exposes the same authenticated toolset over HTTP at [poster.ly/mcp
 ## Requirements
 
 - Node.js `20+`
-- No API key is required for the public signup tools: `get_agent_signup_info`, `start_signup`, and `get_signup_session`
+- No API key is required for the public setup tools: `get_mcp_status`, `get_agent_signup_info`, `start_signup`, and `get_signup_session`
 - A Posterly account, API add-on, and API key are required for authenticated tools like `whoami`, `list_accounts`, `create_connect_session`, and `create_post`
 
 ## Install
@@ -62,7 +62,7 @@ After paid signup is complete and Posterly shows an API key, add `POSTERLY_API_K
 3. Pay in Stripe Checkout and set your Posterly password in the browser.
 4. When Posterly shows your API key, add it as `POSTERLY_API_KEY`.
 5. Restart your AI client.
-6. Ask the AI to call `whoami`, then continue by connecting your first social account.
+6. Ask the AI to call `get_mcp_status`, then `whoami`, then continue by connecting your first social account.
 
 The signup and connect tools return user-facing next steps by default, so agents should report progress in plain language instead of showing raw curl, HTTP payloads, or JSON. Pass `debug: true` to `start_signup`, `get_signup_session`, `get_connect_link`, `create_connect_session`, or `get_connect_session` only when troubleshooting.
 
@@ -108,10 +108,11 @@ Add the same server definition to your Cursor MCP settings:
 
 ## Available tools
 
-`posterly-mcp-server@0.19.9` exposes 55 tools.
+`posterly-mcp-server@0.19.10` exposes 56 tools.
 
-Public signup tools work before `POSTERLY_API_KEY` exists:
+Public setup tools work before `POSTERLY_API_KEY` exists:
 
+- `get_mcp_status` (show the installed server version, latest npm version, API origin, API key presence, and update guidance)
 - `get_agent_signup_info`
 - `start_signup` (start paid signup and return a Posterly checkout handoff URL)
 - `get_signup_session` (poll checkout, payment, password, and agent-access status)

package/dist/index.js

@@ -2,9 +2,11 @@
 import { McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
 import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
 import { PosterlyClient } from './lib/api-client.js';
+import { POSTERLY_MCP_VERSION } from './lib/version.js';
 import { getAgentSignupInfoTool } from './tools/get-agent-signup-info.js';
 import { getSignupSessionTool } from './tools/get-signup-session.js';
 import { startSignupTool } from './tools/start-signup.js';
+import { getMcpStatusTool } from './tools/get-mcp-status.js';
 import { listAccountsTool } from './tools/list-accounts.js';
 import { disconnectAccountTool } from './tools/disconnect-account.js';
 import { listBrandsTool } from './tools/list-brands.js';
@@ -59,7 +61,7 @@ import { updateOAuthClientTool } from './tools/update-oauth-client.js';
 import { deleteOAuthClientTool } from './tools/delete-oauth-client.js';
 const server = new McpServer({
     name: 'posterly',
-    version: '0.19.8',
+    version: POSTERLY_MCP_VERSION,
 });
 const client = new PosterlyClient();
 // Register tools
@@ -90,6 +92,15 @@ server.tool(getSignupSessionTool.name, getSignupSessionTool.description, getSign
         return { content: [{ type: 'text', text: `Error: ${err.message}` }], isError: true };
     }
 });
+server.tool(getMcpStatusTool.name, getMcpStatusTool.description, getMcpStatusTool.inputSchema.shape, async () => {
+    try {
+        const text = await getMcpStatusTool.execute(client);
+        return { content: [{ type: 'text', text }] };
+    }
+    catch (err) {
+        return { content: [{ type: 'text', text: `Error: ${err.message}` }], isError: true };
+    }
+});
 server.tool(whoamiTool.name, whoamiTool.description, whoamiTool.inputSchema.shape, async () => {
     try {
         const text = await whoamiTool.execute(client);

package/dist/lib/api-client.d.ts

@@ -815,3 +815,4 @@ export declare class PosterlyClient {
         size: number;
     }>;
 }
+export declare function resolvePosterlyBaseUrl(baseUrl?: string): string;

package/dist/lib/api-client.js

@@ -5,7 +5,7 @@ export class PosterlyClient {
     apiKey;
     constructor(apiKey, baseUrl) {
         this.apiKey = apiKey || process.env.POSTERLY_API_KEY || '';
-        this.baseUrl = (baseUrl || process.env.POSTERLY_URL || 'https://www.poster.ly').replace(/\/$/, '');
+        this.baseUrl = resolvePosterlyBaseUrl(baseUrl);
     }
     hasApiKey() {
         return Boolean(this.apiKey);
@@ -387,6 +387,22 @@ export class PosterlyClient {
         });
     }
 }
+export function resolvePosterlyBaseUrl(baseUrl) {
+    const configured = (baseUrl ||
+        process.env.POSTERLY_URL ||
+        process.env.POSTERLY_API_BASE_URL ||
+        'https://www.poster.ly').trim();
+    try {
+        const url = new URL(configured);
+        url.pathname = url.pathname.replace(/\/api\/v1\/?$/, '').replace(/\/+$/, '') || '/';
+        url.search = '';
+        url.hash = '';
+        return url.toString().replace(/\/$/, '');
+    }
+    catch {
+        return configured.replace(/\/api\/v1\/?$/, '').replace(/\/$/, '');
+    }
+}
 function guessContentType(filename) {
     const ext = filename.split('.').pop()?.toLowerCase();
     const map = {

package/dist/lib/version.d.ts

@@ -0,0 +1 @@
+export declare const POSTERLY_MCP_VERSION = "0.19.10";

package/dist/lib/version.js

@@ -0,0 +1 @@
+export const POSTERLY_MCP_VERSION = '0.19.10';

package/dist/tools/create-post.d.ts

@@ -222,6 +222,402 @@ export declare const platformSettingsSchema: z.ZodObject<{
     cta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
     langs: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
 }, z.ZodTypeAny, "passthrough">>;
+export declare const createPostPayloadInputSchema: z.ZodObject<{
+    account_id: z.ZodOptional<z.ZodString>;
+    username: z.ZodOptional<z.ZodString>;
+    platform: z.ZodOptional<z.ZodEnum<["bluesky", "facebook", "gmb", "google-business", "google_business", "google_business_profile", "instagram", "instagram-standalone", "linkedin", "pinterest", "telegram", "threads", "tiktok", "twitter", "x", "youtube"]>>;
+    caption: z.ZodOptional<z.ZodString>;
+    scheduled_at: z.ZodOptional<z.ZodString>;
+    media_url: z.ZodOptional<z.ZodString>;
+    media_urls: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    post_type: z.ZodOptional<z.ZodString>;
+    thread_posts: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    instagram_settings: z.ZodOptional<z.ZodObject<{
+        __type: z.ZodOptional<z.ZodEnum<["instagram", "instagram-standalone"]>>;
+        post_type: z.ZodOptional<z.ZodEnum<["post", "feed", "story", "reel", "carousel"]>>;
+        is_trial_reel: z.ZodOptional<z.ZodBoolean>;
+        graduation_strategy: z.ZodOptional<z.ZodEnum<["MANUAL", "SS_PERFORMANCE"]>>;
+        collaborators: z.ZodOptional<z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodObject<{
+            label: z.ZodOptional<z.ZodString>;
+            username: z.ZodOptional<z.ZodString>;
+            handle: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            label?: string | undefined;
+            username?: string | undefined;
+            handle?: string | undefined;
+        }, {
+            label?: string | undefined;
+            username?: string | undefined;
+            handle?: string | undefined;
+        }>]>, "many">>;
+        user_tags: z.ZodOptional<z.ZodArray<z.ZodUnion<[z.ZodString, z.ZodObject<{
+            username: z.ZodOptional<z.ZodString>;
+            label: z.ZodOptional<z.ZodString>;
+            handle: z.ZodOptional<z.ZodString>;
+        }, "strip", z.ZodTypeAny, {
+            label?: string | undefined;
+            username?: string | undefined;
+            handle?: string | undefined;
+        }, {
+            label?: string | undefined;
+            username?: string | undefined;
+            handle?: string | undefined;
+        }>]>, "many">>;
+        first_comment: z.ZodOptional<z.ZodString>;
+        media_alt_texts: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        reel_cover_url: z.ZodOptional<z.ZodString>;
+        reel_thumb_offset: z.ZodOptional<z.ZodNumber>;
+    }, "strip", z.ZodTypeAny, {
+        post_type?: "post" | "feed" | "story" | "reel" | "carousel" | undefined;
+        reel_cover_url?: string | undefined;
+        reel_thumb_offset?: number | undefined;
+        __type?: "instagram" | "instagram-standalone" | undefined;
+        is_trial_reel?: boolean | undefined;
+        graduation_strategy?: "MANUAL" | "SS_PERFORMANCE" | undefined;
+        collaborators?: (string | {
+            label?: string | undefined;
+            username?: string | undefined;
+            handle?: string | undefined;
+        })[] | undefined;
+        user_tags?: (string | {
+            label?: string | undefined;
+            username?: string | undefined;
+            handle?: string | undefined;
+        })[] | undefined;
+        first_comment?: string | undefined;
+        media_alt_texts?: Record<string, string> | undefined;
+    }, {
+        post_type?: "post" | "feed" | "story" | "reel" | "carousel" | undefined;
+        reel_cover_url?: string | undefined;
+        reel_thumb_offset?: number | undefined;
+        __type?: "instagram" | "instagram-standalone" | undefined;
+        is_trial_reel?: boolean | undefined;
+        graduation_strategy?: "MANUAL" | "SS_PERFORMANCE" | undefined;
+        collaborators?: (string | {
+            label?: string | undefined;
+            username?: string | undefined;
+            handle?: string | undefined;
+        })[] | undefined;
+        user_tags?: (string | {
+            label?: string | undefined;
+            username?: string | undefined;
+            handle?: string | undefined;
+        })[] | undefined;
+        first_comment?: string | undefined;
+        media_alt_texts?: Record<string, string> | undefined;
+    }>>;
+    platform_settings: z.ZodOptional<z.ZodObject<{
+        __type: z.ZodOptional<z.ZodString>;
+        post_type: z.ZodOptional<z.ZodString>;
+        content_type: z.ZodOptional<z.ZodString>;
+        media_alt_texts: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        reel_cover_url: z.ZodOptional<z.ZodString>;
+        reel_thumb_offset: z.ZodOptional<z.ZodNumber>;
+        reply_settings: z.ZodOptional<z.ZodEnum<["everyone", "following", "mentionedUsers"]>>;
+        poll: z.ZodOptional<z.ZodObject<{
+            options: z.ZodArray<z.ZodString, "many">;
+            duration_minutes: z.ZodOptional<z.ZodNumber>;
+        }, "strip", z.ZodTypeAny, {
+            options: string[];
+            duration_minutes?: number | undefined;
+        }, {
+            options: string[];
+            duration_minutes?: number | undefined;
+        }>>;
+        reply_control: z.ZodOptional<z.ZodEnum<["everyone", "accounts_you_follow", "mentioned_only"]>>;
+        text_attachment: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        text_format_preset_id: z.ZodOptional<z.ZodString>;
+        document_title: z.ZodOptional<z.ZodString>;
+        document_filename: z.ZodOptional<z.ZodString>;
+        mentions: z.ZodOptional<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>, "many">>;
+        thumbnail_url: z.ZodOptional<z.ZodString>;
+        thumbnail_method: z.ZodOptional<z.ZodString>;
+        privacy_level: z.ZodOptional<z.ZodString>;
+        allow_comment: z.ZodOptional<z.ZodBoolean>;
+        allow_duet: z.ZodOptional<z.ZodBoolean>;
+        allow_stitch: z.ZodOptional<z.ZodBoolean>;
+        title: z.ZodOptional<z.ZodString>;
+        media_type: z.ZodOptional<z.ZodString>;
+        is_commercial_content: z.ZodOptional<z.ZodBoolean>;
+        is_your_brand: z.ZodOptional<z.ZodBoolean>;
+        is_branded_content: z.ZodOptional<z.ZodBoolean>;
+        privacy_status: z.ZodOptional<z.ZodEnum<["public", "unlisted", "private"]>>;
+        made_for_kids: z.ZodOptional<z.ZodBoolean>;
+        tags: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        category_id: z.ZodOptional<z.ZodString>;
+        playlist_id: z.ZodOptional<z.ZodString>;
+        board_id: z.ZodOptional<z.ZodString>;
+        link: z.ZodOptional<z.ZodString>;
+        cover_image_url: z.ZodOptional<z.ZodString>;
+        video_cover_url: z.ZodOptional<z.ZodString>;
+        cover_image_method: z.ZodOptional<z.ZodEnum<["upload", "frame", "api"]>>;
+        event: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        offer: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        cta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        langs: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
+        __type: z.ZodOptional<z.ZodString>;
+        post_type: z.ZodOptional<z.ZodString>;
+        content_type: z.ZodOptional<z.ZodString>;
+        media_alt_texts: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        reel_cover_url: z.ZodOptional<z.ZodString>;
+        reel_thumb_offset: z.ZodOptional<z.ZodNumber>;
+        reply_settings: z.ZodOptional<z.ZodEnum<["everyone", "following", "mentionedUsers"]>>;
+        poll: z.ZodOptional<z.ZodObject<{
+            options: z.ZodArray<z.ZodString, "many">;
+            duration_minutes: z.ZodOptional<z.ZodNumber>;
+        }, "strip", z.ZodTypeAny, {
+            options: string[];
+            duration_minutes?: number | undefined;
+        }, {
+            options: string[];
+            duration_minutes?: number | undefined;
+        }>>;
+        reply_control: z.ZodOptional<z.ZodEnum<["everyone", "accounts_you_follow", "mentioned_only"]>>;
+        text_attachment: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        text_format_preset_id: z.ZodOptional<z.ZodString>;
+        document_title: z.ZodOptional<z.ZodString>;
+        document_filename: z.ZodOptional<z.ZodString>;
+        mentions: z.ZodOptional<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>, "many">>;
+        thumbnail_url: z.ZodOptional<z.ZodString>;
+        thumbnail_method: z.ZodOptional<z.ZodString>;
+        privacy_level: z.ZodOptional<z.ZodString>;
+        allow_comment: z.ZodOptional<z.ZodBoolean>;
+        allow_duet: z.ZodOptional<z.ZodBoolean>;
+        allow_stitch: z.ZodOptional<z.ZodBoolean>;
+        title: z.ZodOptional<z.ZodString>;
+        media_type: z.ZodOptional<z.ZodString>;
+        is_commercial_content: z.ZodOptional<z.ZodBoolean>;
+        is_your_brand: z.ZodOptional<z.ZodBoolean>;
+        is_branded_content: z.ZodOptional<z.ZodBoolean>;
+        privacy_status: z.ZodOptional<z.ZodEnum<["public", "unlisted", "private"]>>;
+        made_for_kids: z.ZodOptional<z.ZodBoolean>;
+        tags: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        category_id: z.ZodOptional<z.ZodString>;
+        playlist_id: z.ZodOptional<z.ZodString>;
+        board_id: z.ZodOptional<z.ZodString>;
+        link: z.ZodOptional<z.ZodString>;
+        cover_image_url: z.ZodOptional<z.ZodString>;
+        video_cover_url: z.ZodOptional<z.ZodString>;
+        cover_image_method: z.ZodOptional<z.ZodEnum<["upload", "frame", "api"]>>;
+        event: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        offer: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        cta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        langs: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
+        __type: z.ZodOptional<z.ZodString>;
+        post_type: z.ZodOptional<z.ZodString>;
+        content_type: z.ZodOptional<z.ZodString>;
+        media_alt_texts: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        reel_cover_url: z.ZodOptional<z.ZodString>;
+        reel_thumb_offset: z.ZodOptional<z.ZodNumber>;
+        reply_settings: z.ZodOptional<z.ZodEnum<["everyone", "following", "mentionedUsers"]>>;
+        poll: z.ZodOptional<z.ZodObject<{
+            options: z.ZodArray<z.ZodString, "many">;
+            duration_minutes: z.ZodOptional<z.ZodNumber>;
+        }, "strip", z.ZodTypeAny, {
+            options: string[];
+            duration_minutes?: number | undefined;
+        }, {
+            options: string[];
+            duration_minutes?: number | undefined;
+        }>>;
+        reply_control: z.ZodOptional<z.ZodEnum<["everyone", "accounts_you_follow", "mentioned_only"]>>;
+        text_attachment: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        text_format_preset_id: z.ZodOptional<z.ZodString>;
+        document_title: z.ZodOptional<z.ZodString>;
+        document_filename: z.ZodOptional<z.ZodString>;
+        mentions: z.ZodOptional<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>, "many">>;
+        thumbnail_url: z.ZodOptional<z.ZodString>;
+        thumbnail_method: z.ZodOptional<z.ZodString>;
+        privacy_level: z.ZodOptional<z.ZodString>;
+        allow_comment: z.ZodOptional<z.ZodBoolean>;
+        allow_duet: z.ZodOptional<z.ZodBoolean>;
+        allow_stitch: z.ZodOptional<z.ZodBoolean>;
+        title: z.ZodOptional<z.ZodString>;
+        media_type: z.ZodOptional<z.ZodString>;
+        is_commercial_content: z.ZodOptional<z.ZodBoolean>;
+        is_your_brand: z.ZodOptional<z.ZodBoolean>;
+        is_branded_content: z.ZodOptional<z.ZodBoolean>;
+        privacy_status: z.ZodOptional<z.ZodEnum<["public", "unlisted", "private"]>>;
+        made_for_kids: z.ZodOptional<z.ZodBoolean>;
+        tags: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        category_id: z.ZodOptional<z.ZodString>;
+        playlist_id: z.ZodOptional<z.ZodString>;
+        board_id: z.ZodOptional<z.ZodString>;
+        link: z.ZodOptional<z.ZodString>;
+        cover_image_url: z.ZodOptional<z.ZodString>;
+        video_cover_url: z.ZodOptional<z.ZodString>;
+        cover_image_method: z.ZodOptional<z.ZodEnum<["upload", "frame", "api"]>>;
+        event: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        offer: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        cta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        langs: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, z.ZodTypeAny, "passthrough">>>;
+    workspace_id: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    workspace_id?: string | undefined;
+    platform?: "instagram" | "instagram-standalone" | "facebook" | "tiktok" | "twitter" | "threads" | "linkedin" | "youtube" | "pinterest" | "google_business" | "telegram" | "bluesky" | "gmb" | "google-business" | "google_business_profile" | "x" | undefined;
+    account_id?: string | undefined;
+    scheduled_at?: string | undefined;
+    media_url?: string | undefined;
+    media_urls?: string[] | undefined;
+    post_type?: string | undefined;
+    username?: string | undefined;
+    caption?: string | undefined;
+    thread_posts?: string[] | undefined;
+    instagram_settings?: {
+        post_type?: "post" | "feed" | "story" | "reel" | "carousel" | undefined;
+        reel_cover_url?: string | undefined;
+        reel_thumb_offset?: number | undefined;
+        __type?: "instagram" | "instagram-standalone" | undefined;
+        is_trial_reel?: boolean | undefined;
+        graduation_strategy?: "MANUAL" | "SS_PERFORMANCE" | undefined;
+        collaborators?: (string | {
+            label?: string | undefined;
+            username?: string | undefined;
+            handle?: string | undefined;
+        })[] | undefined;
+        user_tags?: (string | {
+            label?: string | undefined;
+            username?: string | undefined;
+            handle?: string | undefined;
+        })[] | undefined;
+        first_comment?: string | undefined;
+        media_alt_texts?: Record<string, string> | undefined;
+    } | undefined;
+    platform_settings?: z.objectOutputType<{
+        __type: z.ZodOptional<z.ZodString>;
+        post_type: z.ZodOptional<z.ZodString>;
+        content_type: z.ZodOptional<z.ZodString>;
+        media_alt_texts: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        reel_cover_url: z.ZodOptional<z.ZodString>;
+        reel_thumb_offset: z.ZodOptional<z.ZodNumber>;
+        reply_settings: z.ZodOptional<z.ZodEnum<["everyone", "following", "mentionedUsers"]>>;
+        poll: z.ZodOptional<z.ZodObject<{
+            options: z.ZodArray<z.ZodString, "many">;
+            duration_minutes: z.ZodOptional<z.ZodNumber>;
+        }, "strip", z.ZodTypeAny, {
+            options: string[];
+            duration_minutes?: number | undefined;
+        }, {
+            options: string[];
+            duration_minutes?: number | undefined;
+        }>>;
+        reply_control: z.ZodOptional<z.ZodEnum<["everyone", "accounts_you_follow", "mentioned_only"]>>;
+        text_attachment: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        text_format_preset_id: z.ZodOptional<z.ZodString>;
+        document_title: z.ZodOptional<z.ZodString>;
+        document_filename: z.ZodOptional<z.ZodString>;
+        mentions: z.ZodOptional<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>, "many">>;
+        thumbnail_url: z.ZodOptional<z.ZodString>;
+        thumbnail_method: z.ZodOptional<z.ZodString>;
+        privacy_level: z.ZodOptional<z.ZodString>;
+        allow_comment: z.ZodOptional<z.ZodBoolean>;
+        allow_duet: z.ZodOptional<z.ZodBoolean>;
+        allow_stitch: z.ZodOptional<z.ZodBoolean>;
+        title: z.ZodOptional<z.ZodString>;
+        media_type: z.ZodOptional<z.ZodString>;
+        is_commercial_content: z.ZodOptional<z.ZodBoolean>;
+        is_your_brand: z.ZodOptional<z.ZodBoolean>;
+        is_branded_content: z.ZodOptional<z.ZodBoolean>;
+        privacy_status: z.ZodOptional<z.ZodEnum<["public", "unlisted", "private"]>>;
+        made_for_kids: z.ZodOptional<z.ZodBoolean>;
+        tags: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        category_id: z.ZodOptional<z.ZodString>;
+        playlist_id: z.ZodOptional<z.ZodString>;
+        board_id: z.ZodOptional<z.ZodString>;
+        link: z.ZodOptional<z.ZodString>;
+        cover_image_url: z.ZodOptional<z.ZodString>;
+        video_cover_url: z.ZodOptional<z.ZodString>;
+        cover_image_method: z.ZodOptional<z.ZodEnum<["upload", "frame", "api"]>>;
+        event: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        offer: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        cta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        langs: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, z.ZodTypeAny, "passthrough"> | undefined;
+}, {
+    workspace_id?: string | undefined;
+    platform?: "instagram" | "instagram-standalone" | "facebook" | "tiktok" | "twitter" | "threads" | "linkedin" | "youtube" | "pinterest" | "google_business" | "telegram" | "bluesky" | "gmb" | "google-business" | "google_business_profile" | "x" | undefined;
+    account_id?: string | undefined;
+    scheduled_at?: string | undefined;
+    media_url?: string | undefined;
+    media_urls?: string[] | undefined;
+    post_type?: string | undefined;
+    username?: string | undefined;
+    caption?: string | undefined;
+    thread_posts?: string[] | undefined;
+    instagram_settings?: {
+        post_type?: "post" | "feed" | "story" | "reel" | "carousel" | undefined;
+        reel_cover_url?: string | undefined;
+        reel_thumb_offset?: number | undefined;
+        __type?: "instagram" | "instagram-standalone" | undefined;
+        is_trial_reel?: boolean | undefined;
+        graduation_strategy?: "MANUAL" | "SS_PERFORMANCE" | undefined;
+        collaborators?: (string | {
+            label?: string | undefined;
+            username?: string | undefined;
+            handle?: string | undefined;
+        })[] | undefined;
+        user_tags?: (string | {
+            label?: string | undefined;
+            username?: string | undefined;
+            handle?: string | undefined;
+        })[] | undefined;
+        first_comment?: string | undefined;
+        media_alt_texts?: Record<string, string> | undefined;
+    } | undefined;
+    platform_settings?: z.objectInputType<{
+        __type: z.ZodOptional<z.ZodString>;
+        post_type: z.ZodOptional<z.ZodString>;
+        content_type: z.ZodOptional<z.ZodString>;
+        media_alt_texts: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodString>>;
+        reel_cover_url: z.ZodOptional<z.ZodString>;
+        reel_thumb_offset: z.ZodOptional<z.ZodNumber>;
+        reply_settings: z.ZodOptional<z.ZodEnum<["everyone", "following", "mentionedUsers"]>>;
+        poll: z.ZodOptional<z.ZodObject<{
+            options: z.ZodArray<z.ZodString, "many">;
+            duration_minutes: z.ZodOptional<z.ZodNumber>;
+        }, "strip", z.ZodTypeAny, {
+            options: string[];
+            duration_minutes?: number | undefined;
+        }, {
+            options: string[];
+            duration_minutes?: number | undefined;
+        }>>;
+        reply_control: z.ZodOptional<z.ZodEnum<["everyone", "accounts_you_follow", "mentioned_only"]>>;
+        text_attachment: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        text_format_preset_id: z.ZodOptional<z.ZodString>;
+        document_title: z.ZodOptional<z.ZodString>;
+        document_filename: z.ZodOptional<z.ZodString>;
+        mentions: z.ZodOptional<z.ZodArray<z.ZodRecord<z.ZodString, z.ZodUnknown>, "many">>;
+        thumbnail_url: z.ZodOptional<z.ZodString>;
+        thumbnail_method: z.ZodOptional<z.ZodString>;
+        privacy_level: z.ZodOptional<z.ZodString>;
+        allow_comment: z.ZodOptional<z.ZodBoolean>;
+        allow_duet: z.ZodOptional<z.ZodBoolean>;
+        allow_stitch: z.ZodOptional<z.ZodBoolean>;
+        title: z.ZodOptional<z.ZodString>;
+        media_type: z.ZodOptional<z.ZodString>;
+        is_commercial_content: z.ZodOptional<z.ZodBoolean>;
+        is_your_brand: z.ZodOptional<z.ZodBoolean>;
+        is_branded_content: z.ZodOptional<z.ZodBoolean>;
+        privacy_status: z.ZodOptional<z.ZodEnum<["public", "unlisted", "private"]>>;
+        made_for_kids: z.ZodOptional<z.ZodBoolean>;
+        tags: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+        category_id: z.ZodOptional<z.ZodString>;
+        playlist_id: z.ZodOptional<z.ZodString>;
+        board_id: z.ZodOptional<z.ZodString>;
+        link: z.ZodOptional<z.ZodString>;
+        cover_image_url: z.ZodOptional<z.ZodString>;
+        video_cover_url: z.ZodOptional<z.ZodString>;
+        cover_image_method: z.ZodOptional<z.ZodEnum<["upload", "frame", "api"]>>;
+        event: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        offer: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        cta: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+        langs: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
+    }, z.ZodTypeAny, "passthrough"> | undefined;
+}>;
 export declare const createPostInputSchema: z.ZodObject<{
     account_id: z.ZodOptional<z.ZodString>;
     username: z.ZodOptional<z.ZodString>;
@@ -455,7 +851,10 @@ export declare const createPostInputSchema: z.ZodObject<{
         langs: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     }, z.ZodTypeAny, "passthrough">>>;
     workspace_id: z.ZodOptional<z.ZodString>;
+} & {
+    confirm: z.ZodLiteral<true>;
 }, "strip", z.ZodTypeAny, {
+    confirm: true;
     workspace_id?: string | undefined;
     platform?: "instagram" | "instagram-standalone" | "facebook" | "tiktok" | "twitter" | "threads" | "linkedin" | "youtube" | "pinterest" | "google_business" | "telegram" | "bluesky" | "gmb" | "google-business" | "google_business_profile" | "x" | undefined;
     account_id?: string | undefined;
@@ -537,6 +936,7 @@ export declare const createPostInputSchema: z.ZodObject<{
         langs: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
     }, z.ZodTypeAny, "passthrough"> | undefined;
 }, {
+    confirm: true;
     workspace_id?: string | undefined;
     platform?: "instagram" | "instagram-standalone" | "facebook" | "tiktok" | "twitter" | "threads" | "linkedin" | "youtube" | "pinterest" | "google_business" | "telegram" | "bluesky" | "gmb" | "google-business" | "google_business_profile" | "x" | undefined;
     account_id?: string | undefined;
@@ -619,7 +1019,8 @@ export declare const createPostInputSchema: z.ZodObject<{
     }, z.ZodTypeAny, "passthrough"> | undefined;
 }>;
 export type CreatePostInput = z.infer<typeof createPostInputSchema>;
-export declare function buildCreatePostPayload(input: CreatePostInput): Parameters<PosterlyClient['createPost']>[0];
+export type CreatePostPayloadInput = z.infer<typeof createPostPayloadInputSchema>;
+export declare function buildCreatePostPayload(input: CreatePostPayloadInput | CreatePostInput): Parameters<PosterlyClient['createPost']>[0];
 export declare const createPostTool: {
     name: string;
     description: string;
@@ -856,7 +1257,10 @@ export declare const createPostTool: {
             langs: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
         }, z.ZodTypeAny, "passthrough">>>;
         workspace_id: z.ZodOptional<z.ZodString>;
+    } & {
+        confirm: z.ZodLiteral<true>;
     }, "strip", z.ZodTypeAny, {
+        confirm: true;
         workspace_id?: string | undefined;
         platform?: "instagram" | "instagram-standalone" | "facebook" | "tiktok" | "twitter" | "threads" | "linkedin" | "youtube" | "pinterest" | "google_business" | "telegram" | "bluesky" | "gmb" | "google-business" | "google_business_profile" | "x" | undefined;
         account_id?: string | undefined;
@@ -938,6 +1342,7 @@ export declare const createPostTool: {
             langs: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
         }, z.ZodTypeAny, "passthrough"> | undefined;
     }, {
+        confirm: true;
         workspace_id?: string | undefined;
         platform?: "instagram" | "instagram-standalone" | "facebook" | "tiktok" | "twitter" | "threads" | "linkedin" | "youtube" | "pinterest" | "google_business" | "telegram" | "bluesky" | "gmb" | "google-business" | "google_business_profile" | "x" | undefined;
         account_id?: string | undefined;

package/dist/tools/create-post.js

@@ -70,7 +70,7 @@ export const platformSettingsSchema = z.object({
     // Bluesky
     langs: z.array(z.string()).optional(),
 }).passthrough();
-export const createPostInputSchema = z.object({
+export const createPostPayloadInputSchema = z.object({
     account_id: z.string().optional().describe('Social account ID (from list_accounts)'),
     username: z.string().optional().describe('Account username (alternative to account_id)'),
     platform: z
@@ -106,8 +106,11 @@ export const createPostInputSchema = z.object({
         .optional()
         .describe('Workspace ID to assign the post to (from whoami). If omitted, uses the account\'s workspace or the caller\'s default workspace.'),
 });
+export const createPostInputSchema = createPostPayloadInputSchema.extend({
+    confirm: z.literal(true).describe('Must be true after explicit user confirmation of the post/account/workspace/schedule.'),
+});
 export function buildCreatePostPayload(input) {
-    const { thread_posts, caption, post_type, instagram_settings, platform_settings, ...rest } = input;
+    const { confirm: _confirm, thread_posts, caption, post_type, instagram_settings, platform_settings, ...rest } = input;
     if (thread_posts && thread_posts.length > 0) {
         if (thread_posts.length < 2) {
             throw new Error('thread_posts must contain at least 2 entries');
@@ -158,6 +161,9 @@ export const createPostTool = {
         'TIKTOK MEDIA: TikTok supports a single video or a photo slideshow of 1 to 35 images, never multiple videos. Image media auto-detects as a slideshow, so you usually do not set post_type or media_type for photos and every image is posted. Pass `platform_settings.media_type: "PHOTO"` to force a slideshow explicitly.',
     inputSchema: createPostInputSchema,
     async execute(client, input) {
+        if (input.confirm !== true) {
+            throw new Error('Refusing to create post without confirm=true after explicit user confirmation.');
+        }
         const payload = buildCreatePostPayload(input);
         const { thread_posts, instagram_settings, platform_settings } = input;
         const result = await client.createPost(payload);

package/dist/tools/create-posts-batch.d.ts

@@ -1,6 +1,6 @@
 import { z } from 'zod';
 import type { PosterlyClient } from '../lib/api-client.js';
-import { type CreatePostInput } from './create-post.js';
+import { type CreatePostPayloadInput } from './create-post.js';
 export declare const createPostsBatchTool: {
     name: string;
     description: string;
@@ -401,7 +401,9 @@ export declare const createPostsBatchTool: {
                 langs: z.ZodOptional<z.ZodArray<z.ZodString, "many">>;
             }, z.ZodTypeAny, "passthrough"> | undefined;
         }>, "many">;
+        confirm: z.ZodLiteral<true>;
     }, "strip", z.ZodTypeAny, {
+        confirm: true;
         posts: {
             workspace_id?: string | undefined;
             platform?: "instagram" | "instagram-standalone" | "facebook" | "tiktok" | "twitter" | "threads" | "linkedin" | "youtube" | "pinterest" | "google_business" | "telegram" | "bluesky" | "gmb" | "google-business" | "google_business_profile" | "x" | undefined;
@@ -485,6 +487,7 @@ export declare const createPostsBatchTool: {
             }, z.ZodTypeAny, "passthrough"> | undefined;
         }[];
     }, {
+        confirm: true;
         posts: {
             workspace_id?: string | undefined;
             platform?: "instagram" | "instagram-standalone" | "facebook" | "tiktok" | "twitter" | "threads" | "linkedin" | "youtube" | "pinterest" | "google_business" | "telegram" | "bluesky" | "gmb" | "google-business" | "google_business_profile" | "x" | undefined;
@@ -569,6 +572,7 @@ export declare const createPostsBatchTool: {
         }[];
     }>;
     execute(client: PosterlyClient, input: {
-        posts: CreatePostInput[];
+        posts: CreatePostPayloadInput[];
+        confirm: true;
     }): Promise<string>;
 };