posterly-mcp-server 0.35.0 → 0.36.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "posterly-mcp-server",
-  "version": "0.35.0",
+  "version": "0.36.0",
   "mcpName": "io.github.awpthorp/posterly",
   "description": "MCP server for posterly: schedule and publish social media posts across 18 platforms from any MCP client (Claude, ChatGPT, Cursor, Windsurf, Cline, and more)",
   "license": "MIT",

package/server.json

@@ -3,7 +3,7 @@
   "name": "io.github.awpthorp/posterly",
   "title": "posterly",
   "description": "Validate, schedule, publish, and analyze social content across 18 platforms with posterly.",
-  "version": "0.35.0",
+  "version": "0.36.0",
   "websiteUrl": "https://www.poster.ly/mcp",
   "repository": {
     "url": "https://github.com/awpthorp/posterly",
@@ -14,7 +14,7 @@
     {
       "registryType": "npm",
       "identifier": "posterly-mcp-server",
-      "version": "0.35.0",
+      "version": "0.36.0",
       "transport": {
         "type": "stdio"
       },

package/src/lib/api-client.ts

@@ -1641,7 +1641,13 @@ export class PosterlyClient {
     filename: string,
     contentType: string,
     size: number,
-  ): Promise<{ upload_url: string; token: string; path: string; public_url: string }> {
+  ): Promise<{
+    upload_url: string;
+    token: string;
+    path: string;
+    public_url: string;
+    headers?: Record<string, string>;
+  }> {
     return this.request('POST', '/media/signed-upload', {
       filename,
       content_type: contentType,
@@ -1674,7 +1680,7 @@ export class PosterlyClient {
     const SIZE_THRESHOLD = 3 * 1024 * 1024; // 3MB
 
     if (fileBuffer.length > SIZE_THRESHOLD) {
-      // Large file: use signed URL so the API can validate actual bytes before storage.
+      // Large file: PUT to the object-storage signed URL (not a Vercel relay).
       const signed = await this.getSignedUploadUrl(
         input.filename,
         contentType,
@@ -1685,6 +1691,7 @@ export class PosterlyClient {
         method: 'PUT',
         headers: {
           'Content-Type': contentType,
+          ...(signed.headers || {}),
         },
         body: new Uint8Array(fileBuffer),
       });

package/src/lib/version.ts

@@ -5,4 +5,4 @@
 // tool set (minus the intentional pre-auth signup tools that only this stdio
 // package exposes). `npm run check:mcp-parity` enforces both the version match
 // and the tool-list match, and runs in the pre-commit hook.
-export const POSTERLY_MCP_VERSION = '0.35.0';
+export const POSTERLY_MCP_VERSION = '0.36.0';

package/src/tools/create-post.ts

@@ -21,6 +21,8 @@ export const instagramSettingsSchema = z.object({
   media_alt_texts: z.record(z.string(), z.string()).optional(),
   reel_cover_url: z.string().optional(),
   reel_thumb_offset: z.number().nonnegative().optional(),
+  is_ai_generated: z.boolean().optional().describe('Label the parent Instagram media container as AI-generated. For carousels, set on the parent only.'),
+  audio_id: z.string().optional().describe('Licensed Instagram audio ID for Reels. Meta-linked Facebook Login accounts only.'),
 });
 
 export const platformSettingsSchema = z.object({
@@ -44,6 +46,15 @@ export const platformSettingsSchema = z.object({
   topic_tag: z.string().optional(), // Threads single discovery topic tag
   share_to_instagram: z.boolean().optional(), // Threads: also share the published post to the linked Instagram account as a Story
   text_attachment: z.record(z.string(), z.unknown()).optional(),
+  is_ghost_post: z.boolean().optional(),
+  is_spoiler: z.boolean().optional(),
+  is_spoiler_media: z.boolean().optional(),
+  enable_reply_approvals: z.boolean().optional(),
+  text_entities: z.array(z.record(z.string(), z.unknown())).optional(),
+  gif_attachment: z.object({
+    gif_id: z.string(),
+    provider: z.enum(['GIPHY']).optional(),
+  }).optional(),
   // Facebook
   text_format_preset_id: z.string().optional(),
   // LinkedIn
@@ -52,6 +63,8 @@ export const platformSettingsSchema = z.object({
   mentions: z.array(z.record(z.string(), z.unknown())).optional(),
   thumbnail_url: z.string().optional(),
   thumbnail_method: z.string().optional(),
+  content_call_to_action_label: z.enum(['APPLY', 'DOWNLOAD', 'VIEW_QUOTE', 'LEARN_MORE', 'SIGN_UP', 'SUBSCRIBE', 'REGISTER', 'JOIN', 'ATTEND', 'REQUEST_DEMO', 'SEE_MORE', 'BUY_NOW', 'SHOP_NOW']).optional(),
+  content_landing_page: z.string().optional(),
   // TikTok
   privacy_level: z.string().optional(),
   allow_comment: z.boolean().optional(),
@@ -75,20 +88,33 @@ export const platformSettingsSchema = z.object({
   cover_image_url: z.string().optional(),
   video_cover_url: z.string().optional(),
   cover_image_method: z.enum(['upload', 'frame', 'api']).optional(),
+  product_tags: z.array(z.union([z.string(), z.record(z.string(), z.unknown())])).optional(),
   // Google Business
   event: z.record(z.string(), z.unknown()).optional(),
   offer: z.record(z.string(), z.unknown()).optional(),
   cta: z.record(z.string(), z.unknown()).optional(),
+  recurrence: z.record(z.string(), z.unknown()).optional(),
   // YouTube
   notify_subscribers: z.boolean().optional(),
   add_shorts_hashtag: z.boolean().optional(),
-  // Telegram inline CTA buttons
+  brand_partner: z.string().optional(),
+  // Telegram
   buttons: z.array(z.object({ text: z.string(), url: z.string() })).optional(),
+  start_timestamp: z.number().nonnegative().optional(),
+  is_live_photo: z.boolean().optional(),
   // Bluesky
   langs: z.array(z.string()).optional(),
   content_label: z.enum(['sexual', 'nudity', 'porn', 'graphic-media']).optional(), // Bluesky content warning
   quote_url: z.string().optional(), // Bluesky post URL/AT-URI to quote
   disable_quotes: z.boolean().optional(), // Bluesky: prevent quote-posts of this post
+  quoted_status_id: z.string().optional(), // Mastodon quote
+  visibility: z.enum(['public', 'unlisted', 'private']).optional(),
+  spoiler_text: z.string().optional(),
+  markdown: z.boolean().optional(), // Slack Block Kit markdown
+  blocks: z.array(z.record(z.string(), z.unknown())).optional(), // Slack Block Kit
+  paid_partnership: z.boolean().optional(), // X paid partnership
+  is_ai_generated: z.boolean().optional(),
+  audio_id: z.string().optional(),
   // tags (z.array of strings) also serve as Bluesky hidden discovery tags
   // AI-content disclosure (TikTok is_aigc, X made_with_ai, YouTube containsSyntheticMedia, Pinterest ai_disclosures)
   ai_generated: z.boolean().optional(),
@@ -204,7 +230,7 @@ export const createPostTool = {
     'Provide either account_id OR username+platform to identify the account. If scheduled_at is omitted, the post publishes immediately. If workspace_id is omitted, the server resolves one from the social account, falling back to the caller\'s default (personal) workspace - pass workspace_id explicitly if the user has more than one workspace.\n\n' +
     'MEDIA URLS: Posterly storage URLs are used as-is. Third-party HTTP(S) media URLs are copied into Posterly storage before the post is saved, so API-created posts do not later fail on expired signed URLs. Short-lived signed URLs must still be live when this tool runs. You can also call `upload_media_from_url` first if you want to upload once and reuse the returned Posterly URL across posts.\n\n' +
     'THREADS: Pass `thread_posts` (an array of 2+ strings) to schedule a multi-post thread on X (Twitter) or Threads (Meta). The first entry is the lead post; the rest are published as replies in the same chain. X entries are capped at 280 characters each (4000 for verified, 25000 for organization accounts); Threads entries are capped at 500 characters each. When `thread_posts` is set, `caption` is ignored.\n\n' +
-    'PLATFORM SETTINGS: Pass `platform_settings` for composer-equivalent controls: Facebook story/reel/backgrounds, YouTube title/privacy/thumbnail/playlist, LinkedIn document titles/mentions/polls (poll.question, poll.options 2-4, poll.duration ONE_DAY|THREE_DAYS|SEVEN_DAYS|FOURTEEN_DAYS; text-only)/video thumbnails, TikTok direct-post privacy/toggles/commercial disclosure, Pinterest post_type (image/video/carousel), board (from pinterest.boards helper), title, link, and cover_image_url (video Pins), GBP event/offer/CTA, X reply settings/polls, Threads reply controls/text attachments, Bluesky languages/alt text, and Instagram feed/story/reel/carousel/native media tags/collaborators/first comments/trial Reels. For Instagram, @username in caption is only a caption mention; `user_tags` creates native media tags and `collaborators` sends co-author invitations only when the selected Meta-linked account reports those capabilities. Call `get_platform_schema` with the account ID first. `instagram_settings` remains as a backwards-compatible alias.\n\n' +
+    'PLATFORM SETTINGS: Pass `platform_settings` for composer-equivalent controls: Facebook story/reel/backgrounds, YouTube title/privacy/thumbnail/brandPartner, LinkedIn document titles/mentions/polls/content_call_to_action_label (including BUY_NOW and SHOP_NOW), TikTok direct-post privacy/toggles/commercial disclosure, Pinterest board/title/link/product_tags, GBP event/offer/CTA/recurrence, X reply settings/polls/paid_partnership, Threads reply controls/text attachments/ghost posts/spoilers/reply approvals/GIPHY, Telegram polls/buttons/video cover/live photo, Slack markdown/blocks, Mastodon visibility/quote/poll (media+poll allowed), and Instagram feed/story/reel/carousel/native media tags/collaborators/first comments/trial Reels/is_ai_generated/audio_id. For Instagram, @username in caption is only a caption mention; `user_tags` creates native media tags and `collaborators` sends co-author invitations only when the selected Meta-linked account reports those capabilities. Call `get_platform_schema` with the account ID first. `instagram_settings` remains as a backwards-compatible alias.\n\n' +
     'TIKTOK MEDIA: TikTok supports a single video or a photo slideshow of 1 to 35 images, never multiple videos. Image media auto-detects as a slideshow, so you usually do not set post_type or media_type for photos and every image is posted. Pass `platform_settings.media_type: "PHOTO"` to force a slideshow explicitly.',
   inputSchema: createPostInputSchema,
 

package/src/tools/create-signed-upload.ts

@@ -4,7 +4,7 @@ import type { PosterlyClient } from '../lib/api-client.js';
 export const createSignedUploadTool = {
   name: 'create_signed_upload',
   description:
-    'Create a signed upload URL for a larger image or video. Upload the binary to upload_url; the API validates actual bytes before storage, then public_url can be used with create_post.',
+    'Create a signed upload URL for a larger image or video. PUT the raw bytes to the returned upload_url (object storage) with the returned headers, then public_url can be used with create_post.',
   inputSchema: z.object({
     filename: z.string().describe('Filename with extension, e.g. launch-video.mp4'),
     content_type: z.string().describe('MIME type, e.g. video/mp4'),
@@ -22,6 +22,7 @@ export const createSignedUploadTool = {
       `• Token: ${signed.token}`,
       `• Storage path: ${signed.path}`,
       `• Public URL after upload: ${signed.public_url}`,
+      'PUT the raw file bytes to the upload URL with the same Content-Type. Then pass public_url to create_post.',
     ].join('\n');
   },
 };

package/src/tools/generate-video.ts

@@ -7,7 +7,7 @@ export const generateVideoTool = {
     'Queue an AI video generation job with Google Veo 3.1 or xAI Grok Imagine Video 1.5. COSTS CREDITS: confirm provider, prompt, duration, resolution, aspect ratio, audio choice, and credit cost with the user before calling. Grok supports 1–15 seconds and 480p–1080p; reference-to-video is capped at 720p. Poll get_video_job for status and final video_url.',
   inputSchema: z.object({
     provider: z.enum(['google', 'xai']).default('google').optional(),
-    prompt: z.string().min(5).max(1024),
+    prompt: z.string().min(5).max(4000),
     negative_prompt: z.string().max(500).optional(),
     aspect_ratio: z.enum(['1:1', '16:9', '9:16', '4:3', '3:4', '3:2', '2:3']).default('16:9').optional(),
     duration_seconds: z.number().int().min(1).max(15).default(8).optional(),

package/src/tools/update-post.ts

@@ -21,6 +21,8 @@ const instagramSettingsSchema = z.object({
   reel_cover_url: z.string().optional(),
   reel_cover_method: z.string().optional(),
   reel_thumb_offset: z.number().nonnegative().optional(),
+  is_ai_generated: z.boolean().optional().describe('Label the parent Instagram media container as AI-generated. For carousels, set on the parent only.'),
+  audio_id: z.string().optional().describe('Licensed Instagram audio ID for Reels. Meta-linked Facebook Login accounts only.'),
 });
 
 const platformSettingsSchema = z.object({
@@ -37,12 +39,23 @@ const platformSettingsSchema = z.object({
   topic_tag: z.string().optional(),
   share_to_instagram: z.boolean().optional(), // Threads: also share the published post to the linked Instagram account as a Story
   text_attachment: z.record(z.string(), z.unknown()).optional(),
+  is_ghost_post: z.boolean().optional(),
+  is_spoiler: z.boolean().optional(),
+  is_spoiler_media: z.boolean().optional(),
+  enable_reply_approvals: z.boolean().optional(),
+  text_entities: z.array(z.record(z.string(), z.unknown())).optional(),
+  gif_attachment: z.object({
+    gif_id: z.string(),
+    provider: z.enum(['GIPHY']).optional(),
+  }).optional(),
   text_format_preset_id: z.string().optional(),
   document_title: z.string().optional(),
   document_filename: z.string().optional(),
   mentions: z.array(z.record(z.string(), z.unknown())).optional(),
   thumbnail_url: z.string().optional(),
   thumbnail_method: z.string().optional(),
+  content_call_to_action_label: z.enum(['APPLY', 'DOWNLOAD', 'VIEW_QUOTE', 'LEARN_MORE', 'SIGN_UP', 'SUBSCRIBE', 'REGISTER', 'JOIN', 'ATTEND', 'REQUEST_DEMO', 'SEE_MORE', 'BUY_NOW', 'SHOP_NOW']).optional(),
+  content_landing_page: z.string().optional(),
   privacy_level: z.string().optional(),
   allow_comment: z.boolean().optional(),
   allow_duet: z.boolean().optional(),
@@ -62,16 +75,29 @@ const platformSettingsSchema = z.object({
   cover_image_url: z.string().optional(),
   video_cover_url: z.string().optional(),
   cover_image_method: z.enum(['upload', 'frame', 'api']).optional(),
+  product_tags: z.array(z.union([z.string(), z.record(z.string(), z.unknown())])).optional(),
   event: z.record(z.string(), z.unknown()).optional(),
   offer: z.record(z.string(), z.unknown()).optional(),
   cta: z.record(z.string(), z.unknown()).optional(),
+  recurrence: z.record(z.string(), z.unknown()).optional(),
   notify_subscribers: z.boolean().optional(),
   add_shorts_hashtag: z.boolean().optional(),
+  brand_partner: z.string().optional(),
   buttons: z.array(z.object({ text: z.string(), url: z.string() })).optional(),
+  start_timestamp: z.number().nonnegative().optional(),
+  is_live_photo: z.boolean().optional(),
   langs: z.array(z.string()).optional(),
   content_label: z.enum(['sexual', 'nudity', 'porn', 'graphic-media']).optional(),
   quote_url: z.string().optional(),
   disable_quotes: z.boolean().optional(),
+  quoted_status_id: z.string().optional(),
+  visibility: z.enum(['public', 'unlisted', 'private']).optional(),
+  spoiler_text: z.string().optional(),
+  markdown: z.boolean().optional(),
+  blocks: z.array(z.record(z.string(), z.unknown())).optional(),
+  paid_partnership: z.boolean().optional(),
+  is_ai_generated: z.boolean().optional(),
+  audio_id: z.string().optional(),
   ai_generated: z.boolean().optional(),
 }).passthrough();