posterly-mcp-server 0.43.2 → 0.43.4

package/README.md

@@ -122,7 +122,7 @@ Add the same server definition to your Cursor MCP settings:
 
 ## Available tools
 
-`posterly-mcp-server@0.43.2` exposes 90 tools.
+`posterly-mcp-server@0.43.4` exposes 90 tools.
 
 Public setup tools work before `POSTERLY_API_KEY` exists:
 

package/dist/lib/api-client.d.ts

@@ -128,6 +128,15 @@ export interface DismissSuggestionResponse {
     ok: boolean;
     status: string;
 }
+export type ApiPostApprovalStatus = 'none' | 'pending_client' | 'approved' | 'changes_requested' | 'rejected';
+export interface ApiPostApproval {
+    status: ApiPostApprovalStatus;
+    asset_status: ApiPostApprovalStatus;
+    caption_status: ApiPostApprovalStatus;
+    waiting_on: 'client' | 'team' | null;
+    requested_at: string | null;
+    completed_at: string | null;
+}
 export interface Post {
     id: number;
     content: string;
@@ -144,6 +153,9 @@ export interface Post {
     reel_cover_url?: string | null;
     reel_cover_method?: string | null;
     reel_thumb_offset?: number | null;
+    brand_id?: string | null;
+    content_plan_id?: string | null;
+    approval?: ApiPostApproval;
 }
 export interface InstagramPostSettings {
     __type?: 'instagram' | 'instagram-standalone';
@@ -842,6 +854,31 @@ export interface PublicSignupAgentPay {
     requires_tos_acceptance?: boolean;
     [key: string]: unknown;
 }
+export interface PublicSignupPaymentAgentWalletSpendRequest {
+    merchant_name?: string;
+    merchant_url?: string;
+    amount?: number | null;
+    currency?: string;
+    context?: string;
+}
+export interface PublicSignupPaymentAgentWallet {
+    supported?: boolean;
+    how?: string;
+    spend_request?: PublicSignupPaymentAgentWalletSpendRequest;
+}
+export interface PublicSignupPayment {
+    amount?: number | null;
+    currency?: string;
+    amount_display?: string | null;
+    billing?: string;
+    description?: string;
+    merchant_name?: string;
+    merchant_url?: string;
+    checkout_redirect_url?: string;
+    pay_with?: string;
+    agent_wallet?: PublicSignupPaymentAgentWallet;
+    [key: string]: unknown;
+}
 export interface PublicSignupSession {
     id: string;
     status: string;
@@ -858,6 +895,7 @@ export interface PublicSignupSession {
     account?: Record<string, unknown>;
     billing?: Record<string, unknown>;
     agent_pay?: PublicSignupAgentPay | null;
+    payment?: PublicSignupPayment | null;
     links?: Record<string, unknown>;
     created_at?: string;
     updated_at?: string;
@@ -878,6 +916,7 @@ export interface PublicSignupResponse {
     account?: Record<string, unknown>;
     billing?: Record<string, unknown>;
     agent_pay?: PublicSignupAgentPay | null;
+    payment?: PublicSignupPayment | null;
     [key: string]: unknown;
 }
 export interface PublicSignupSessionResponse {
@@ -1063,6 +1102,8 @@ export declare class PosterlyClient {
         limit?: number;
         offset?: number;
         workspace_id?: string;
+        approval_status?: string;
+        brand_id?: string;
     }): Promise<{
         posts: Post[];
         total: number;

package/dist/lib/api-client.js

@@ -257,6 +257,10 @@ export class PosterlyClient {
             searchParams.set('offset', String(params.offset));
         if (params?.workspace_id)
             searchParams.set('workspace_id', params.workspace_id);
+        if (params?.approval_status)
+            searchParams.set('approval_status', params.approval_status);
+        if (params?.brand_id)
+            searchParams.set('brand_id', params.brand_id);
         const qs = searchParams.toString();
         return this.request('GET', `/posts${qs ? `?${qs}` : ''}`);
     }

package/dist/lib/version.d.ts

@@ -1 +1 @@
-export declare const POSTERLY_MCP_VERSION = "0.43.2";
+export declare const POSTERLY_MCP_VERSION = "0.43.4";

package/dist/lib/version.js

@@ -5,4 +5,4 @@
 // tool set (minus the intentional pre-auth signup tools that only this stdio
 // package exposes). `npm run check:mcp-parity` enforces both the version match
 // and the tool-list match, and runs in the pre-commit hook.
-export const POSTERLY_MCP_VERSION = '0.43.2';
+export const POSTERLY_MCP_VERSION = '0.43.4';

package/dist/tools/create-webhook.d.ts

@@ -5,7 +5,7 @@ export declare const createWebhookTool: {
     description: string;
     inputSchema: z.ZodObject<{
         url: z.ZodString;
-        events: z.ZodOptional<z.ZodArray<z.ZodEnum<["webhook.test", "post.created", "post.updated", "post.deleted", "post.publishing", "post.published", "post.failed", "account.disconnected", "analytics.synced"]>, "many">>;
+        events: z.ZodOptional<z.ZodArray<z.ZodEnum<["webhook.test", "post.created", "post.updated", "post.deleted", "post.publishing", "post.published", "post.failed", "account.disconnected", "analytics.synced", "approval.requested", "approval.approved", "approval.changes_requested", "approval.rejected", "approval.commented"]>, "many">>;
         workspace_id: z.ZodOptional<z.ZodString>;
         description: z.ZodOptional<z.ZodString>;
         is_active: z.ZodOptional<z.ZodBoolean>;
@@ -13,16 +13,16 @@ export declare const createWebhookTool: {
     }, "strip", z.ZodTypeAny, {
         url: string;
         confirm: true;
-        workspace_id?: string | undefined;
         description?: string | undefined;
-        events?: ("webhook.test" | "post.created" | "post.updated" | "post.deleted" | "post.publishing" | "post.published" | "post.failed" | "account.disconnected" | "analytics.synced")[] | undefined;
+        workspace_id?: string | undefined;
+        events?: ("webhook.test" | "post.created" | "post.updated" | "post.deleted" | "post.publishing" | "post.published" | "post.failed" | "account.disconnected" | "analytics.synced" | "approval.requested" | "approval.approved" | "approval.changes_requested" | "approval.rejected" | "approval.commented")[] | undefined;
         is_active?: boolean | undefined;
     }, {
         url: string;
         confirm: true;
-        workspace_id?: string | undefined;
         description?: string | undefined;
-        events?: ("webhook.test" | "post.created" | "post.updated" | "post.deleted" | "post.publishing" | "post.published" | "post.failed" | "account.disconnected" | "analytics.synced")[] | undefined;
+        workspace_id?: string | undefined;
+        events?: ("webhook.test" | "post.created" | "post.updated" | "post.deleted" | "post.publishing" | "post.published" | "post.failed" | "account.disconnected" | "analytics.synced" | "approval.requested" | "approval.approved" | "approval.changes_requested" | "approval.rejected" | "approval.commented")[] | undefined;
         is_active?: boolean | undefined;
     }>;
     execute(client: PosterlyClient, input: {

package/dist/tools/get-agent-signup-info.js

@@ -30,7 +30,8 @@ export const getAgentSignupInfoTool = {
             '- Do not narrate raw curl, HTTP, JSON, API keys, or implementation details unless the user explicitly asks for debugging.',
             '',
             'Boundaries:',
-            '- Payment can be a one-time Link Agent Wallet virtual card (credential_type: card) on the prepaid PaymentIntent, or Stripe Checkout in the browser.',
+            '- Payment happens on Stripe Checkout, either by the user in their browser or by the agent with its own approved payment credential (for example a Link agent wallet); never card details in chat.',
+            '- Where enabled, payment can instead be a one-time Link Agent Wallet virtual card (credential_type: card) on a prepaid PaymentIntent.',
             '- Never send card numbers to posterly. Confirm the PaymentIntent with Stripe, or send checkout_redirect_url.',
             '- The user sets their Posterly password in their browser.',
             '- The user approves social OAuth in their browser.',

package/dist/tools/get-signup-session.js

@@ -24,6 +24,7 @@ function formatSignupSession(session, includeRaw) {
     const passwordUrl = stringFromRecord(session.links, 'password_setup_url');
     const completeUrl = stringFromRecord(session.links, 'complete_url');
     const agentPay = session.agent_pay;
+    const payment = session.payment;
     const lines = [
         `Posterly signup session: ${session.id}`,
         `Status: ${session.status}`,
@@ -36,6 +37,12 @@ function formatSignupSession(session, includeRaw) {
         agentPay?.requires_tos_acceptance ? 'Terms acceptance required before client_secret is released.' : '',
         agentPay?.client_secret ? `PaymentIntent client_secret: ${agentPay.client_secret}` : '',
         agentPay?.confirm_url ? `Confirm URL: ${agentPay.confirm_url}` : '',
+        !agentPay?.enabled && payment?.amount_display
+            ? `Amount due: ${payment.amount_display} ${String(payment.currency || 'usd').toUpperCase()} to ${payment.merchant_name || 'posterly'} (${payment.billing || 'subscription'})`
+            : '',
+        !agentPay?.enabled && payment?.agent_wallet?.how
+            ? `Agent wallet option: ${payment.agent_wallet.how}`
+            : '',
         checkoutRedirectUrl ? `Checkout handoff URL: ${checkoutRedirectUrl}` : '',
         checkoutUrl ? `Checkout URL: ${checkoutUrl}` : '',
         passwordUrl ? `Password setup URL: ${passwordUrl}` : '',
@@ -61,7 +68,7 @@ function guidanceForStatus(status, agentPayAvailable = false, requiresTosAccepta
             }
             return agentPayAvailable
                 ? 'Payment is still pending. Confirm the prepaid PaymentIntent with a Link virtual card (credential_type: card), or send the user the Checkout handoff URL. Keep polling; never ask for card numbers.'
-                : 'Tell the user checkout is still pending. Keep polling; do not ask for card details.';
+                : 'Tell the user checkout is still pending. If you hold an approved payment credential such as a Link agent wallet, you may pay the Checkout handoff URL yourself instead of asking the user; otherwise keep polling. Never ask for card details.';
         case 'checkout_expired':
             return 'Tell the user checkout expired and offer to call start_signup again.';
         case 'payment_confirmed':

package/dist/tools/list-posts.d.ts

@@ -9,18 +9,24 @@ export declare const listPostsTool: {
         account_id: z.ZodOptional<z.ZodString>;
         limit: z.ZodOptional<z.ZodNumber>;
         workspace_id: z.ZodOptional<z.ZodString>;
+        approval_status: z.ZodOptional<z.ZodEnum<["none", "pending_client", "approved", "changes_requested", "rejected"]>>;
+        brand_id: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
         platform?: "instagram" | "instagram-standalone" | "facebook" | "tiktok" | "twitter" | "threads" | "linkedin" | "youtube" | "pinterest" | "google_business" | "x" | "telegram" | "bluesky" | "discord" | "slack" | "mastodon" | "devto" | "hashnode" | "wordpress" | "lemmy" | "gmb" | "google-business" | "google_business_profile" | undefined;
         status?: string | undefined;
         workspace_id?: string | undefined;
         account_id?: string | undefined;
         limit?: number | undefined;
+        approval_status?: "none" | "pending_client" | "approved" | "changes_requested" | "rejected" | undefined;
+        brand_id?: string | undefined;
     }, {
         platform?: "instagram" | "instagram-standalone" | "facebook" | "tiktok" | "twitter" | "threads" | "linkedin" | "youtube" | "pinterest" | "google_business" | "x" | "telegram" | "bluesky" | "discord" | "slack" | "mastodon" | "devto" | "hashnode" | "wordpress" | "lemmy" | "gmb" | "google-business" | "google_business_profile" | undefined;
         status?: string | undefined;
         workspace_id?: string | undefined;
         account_id?: string | undefined;
         limit?: number | undefined;
+        approval_status?: "none" | "pending_client" | "approved" | "changes_requested" | "rejected" | undefined;
+        brand_id?: string | undefined;
     }>;
     execute(client: PosterlyClient, input: {
         status?: string;
@@ -28,5 +34,7 @@ export declare const listPostsTool: {
         account_id?: string;
         limit?: number;
         workspace_id?: string;
+        approval_status?: string;
+        brand_id?: string;
     }): Promise<string>;
 };

package/dist/tools/list-posts.js

@@ -3,7 +3,7 @@ import { dashboardUrlForPostList, formatLocalDateTime, truncateText } from '../l
 import { SUPPORTED_PLATFORM_INPUTS, SUPPORTED_PLATFORM_IDS } from '../generated/platform-manifest.js';
 export const listPostsTool = {
     name: 'list_posts',
-    description: 'List upcoming or recent posts. Filter by status (scheduled, published, failed, draft), platform, account_id, or workspace_id. If workspace_id is omitted, posts across every workspace the caller is a member of are returned.',
+    description: 'List upcoming or recent posts. Filter by status (scheduled, published, failed, draft), platform, account_id, workspace_id, approval_status, or brand_id. If workspace_id is omitted, posts across every workspace the caller is a member of are returned.',
     inputSchema: z.object({
         status: z
             .string()
@@ -27,6 +27,14 @@ export const listPostsTool = {
             .string()
             .optional()
             .describe('Filter to posts in a specific workspace (get IDs via whoami).'),
+        approval_status: z
+            .enum(['none', 'pending_client', 'approved', 'changes_requested', 'rejected'])
+            .optional()
+            .describe('Filter by client review approval status. pending_client means the post is waiting on the client.'),
+        brand_id: z
+            .string()
+            .optional()
+            .describe('Filter to posts assigned to a specific brand/client (the id from list_brands).'),
     }),
     async execute(client, input) {
         const { posts, total } = await client.listPosts({
@@ -39,7 +47,18 @@ export const listPostsTool = {
         const lines = posts.map((p) => {
             const date = formatLocalDateTime(p.scheduled_at);
             const caption = truncateText(p.content, 60);
-            return `• [${p.status}] #${p.id}: ${caption} (${date})`;
+            const approvalBits = [];
+            if (p.approval && p.approval.status !== 'none') {
+                approvalBits.push(`approval: ${p.approval.status}`);
+                if (p.approval.waiting_on)
+                    approvalBits.push(`waiting on: ${p.approval.waiting_on}`);
+            }
+            if (p.brand_id)
+                approvalBits.push(`brand: ${p.brand_id}`);
+            if (p.content_plan_id)
+                approvalBits.push(`plan: ${p.content_plan_id}`);
+            const approvalSuffix = approvalBits.length > 0 ? ` [${approvalBits.join(', ')}]` : '';
+            return `• [${p.status}] #${p.id}: ${caption} (${date})${approvalSuffix}`;
         });
         return [
             `Posts (${posts.length} of ${total}):`,

package/dist/tools/start-signup.js

@@ -70,6 +70,7 @@ function formatSignupStart(response, includeRaw) {
     const status = session?.status || response.status || 'checkout_pending';
     const message = session?.status_message || response.status_message;
     const agentPay = response.agent_pay || session?.agent_pay;
+    const payment = response.payment || session?.payment;
     const lines = [
         'Posterly signup started.',
         sessionId ? `Signup session: ${sessionId}` : '',
@@ -83,6 +84,12 @@ function formatSignupStart(response, includeRaw) {
         agentPay?.client_secret ? `PaymentIntent client_secret: ${agentPay.client_secret}` : '',
         agentPay?.confirm_url ? `Confirm URL: ${agentPay.confirm_url}` : '',
         agentPay?.pay_instructions ? `Pay instructions: ${agentPay.pay_instructions}` : '',
+        !agentPay?.enabled && payment?.amount_display
+            ? `Amount due: ${payment.amount_display} ${String(payment.currency || 'usd').toUpperCase()} to ${payment.merchant_name || 'posterly'} (${payment.billing || 'subscription'})`
+            : '',
+        !agentPay?.enabled && payment?.agent_wallet?.how
+            ? `Agent wallet option: ${payment.agent_wallet.how}`
+            : '',
         checkoutRedirectUrl ? `Checkout handoff URL (browser fallback): ${checkoutRedirectUrl}` : '',
         checkoutUrl ? `Checkout URL: ${checkoutUrl}` : '',
         pollUrl ? `Poll URL: ${pollUrl}` : '',
@@ -107,11 +114,12 @@ function formatSignupStart(response, includeRaw) {
                     '6. Do not ask for card details, the Posterly password, social passwords, or OAuth codes.',
                 ]
                 : [
-                    '1. Send the Checkout handoff URL to the user so they can pay securely in their browser. Use the raw Stripe checkout URL only if you preserve the full URL including any fragment. posterly does not email this link, so do not tell the user to check their inbox at this stage.',
-                    '2. Call get_signup_session with the signup session ID until the status changes.',
-                    '3. Tell the user when Posterly sends the password setup email.',
-                    '4. If status becomes agent_access_required, ask the user to install or paste the Posterly MCP/API setup instructions into this trusted AI chat, then onboard them in this conversation (about you, connect, brand voice, first post). Do not send them to /onboarding-v2.',
-                    '5. Do not ask for card details, the Posterly password, social passwords, or OAuth codes.',
+                    '1. If you hold an approved payment credential such as a Link agent wallet, you can pay the Checkout handoff URL yourself: create a spend request for the amount and merchant above, get the user\'s approval in the wallet, then complete the Checkout page with that credential. Never paste card numbers into chat or send them to posterly.',
+                    '2. Otherwise, send the Checkout handoff URL to the user so they can pay securely in their browser. Use the raw Stripe checkout URL only if you preserve the full URL including any fragment. posterly does not email this link, so do not tell the user to check their inbox at this stage.',
+                    '3. Call get_signup_session with the signup session ID until the status changes.',
+                    '4. Tell the user when Posterly sends the password setup email.',
+                    '5. If status becomes agent_access_required, ask the user to install or paste the Posterly MCP/API setup instructions into this trusted AI chat, then onboard them in this conversation (about you, connect, brand voice, first post). Do not send them to /onboarding-v2.',
+                    '6. Do not ask for card details, the Posterly password, social passwords, or OAuth codes.',
                 ]),
         includeRaw ? `\nRaw signup response:\n${JSON.stringify(response, null, 2)}` : '',
     ];

package/dist/tools/submit-agent-feedback.d.ts

@@ -27,8 +27,8 @@ export declare const submitAgentFeedbackInputSchema: z.ZodObject<{
     source: "mcp" | "cli" | "rest" | "skill";
     tool: string;
     outcome: "success" | "error" | "abandoned";
-    error_code?: string | undefined;
     client?: string | undefined;
+    error_code?: string | undefined;
     comment?: string | undefined;
     context?: {
         request_id?: string | undefined;
@@ -40,8 +40,8 @@ export declare const submitAgentFeedbackInputSchema: z.ZodObject<{
     source: "mcp" | "cli" | "rest" | "skill";
     tool: string;
     outcome: "success" | "error" | "abandoned";
-    error_code?: string | undefined;
     client?: string | undefined;
+    error_code?: string | undefined;
     comment?: string | undefined;
     context?: {
         request_id?: string | undefined;
@@ -81,8 +81,8 @@ export declare const submitAgentFeedbackTool: {
         source: "mcp" | "cli" | "rest" | "skill";
         tool: string;
         outcome: "success" | "error" | "abandoned";
-        error_code?: string | undefined;
         client?: string | undefined;
+        error_code?: string | undefined;
         comment?: string | undefined;
         context?: {
             request_id?: string | undefined;
@@ -94,8 +94,8 @@ export declare const submitAgentFeedbackTool: {
         source: "mcp" | "cli" | "rest" | "skill";
         tool: string;
         outcome: "success" | "error" | "abandoned";
-        error_code?: string | undefined;
         client?: string | undefined;
+        error_code?: string | undefined;
         comment?: string | undefined;
         context?: {
             request_id?: string | undefined;

package/dist/tools/submit-product-feedback.d.ts

@@ -21,9 +21,9 @@ export declare const submitProductFeedbackInputSchema: z.ZodObject<{
     title: string;
     confirm: true;
     category: "bug" | "idea" | "feedback";
+    client?: string | undefined;
     description?: string | undefined;
     source?: "mcp" | "cli" | "rest" | "skill" | undefined;
-    client?: string | undefined;
     context?: {
         request_id?: string | undefined;
         related_tool?: string | undefined;
@@ -32,9 +32,9 @@ export declare const submitProductFeedbackInputSchema: z.ZodObject<{
     title: string;
     confirm: true;
     category: "bug" | "idea" | "feedback";
+    client?: string | undefined;
     description?: string | undefined;
     source?: "mcp" | "cli" | "rest" | "skill" | undefined;
-    client?: string | undefined;
     context?: {
         request_id?: string | undefined;
         related_tool?: string | undefined;
@@ -65,9 +65,9 @@ export declare const submitProductFeedbackTool: {
         title: string;
         confirm: true;
         category: "bug" | "idea" | "feedback";
+        client?: string | undefined;
         description?: string | undefined;
         source?: "mcp" | "cli" | "rest" | "skill" | undefined;
-        client?: string | undefined;
         context?: {
             request_id?: string | undefined;
             related_tool?: string | undefined;
@@ -76,9 +76,9 @@ export declare const submitProductFeedbackTool: {
         title: string;
         confirm: true;
         category: "bug" | "idea" | "feedback";
+        client?: string | undefined;
         description?: string | undefined;
         source?: "mcp" | "cli" | "rest" | "skill" | undefined;
-        client?: string | undefined;
         context?: {
             request_id?: string | undefined;
             related_tool?: string | undefined;

package/dist/tools/update-webhook.d.ts

@@ -6,7 +6,7 @@ export declare const updateWebhookTool: {
     inputSchema: z.ZodObject<{
         webhook_id: z.ZodString;
         url: z.ZodOptional<z.ZodString>;
-        events: z.ZodOptional<z.ZodArray<z.ZodEnum<["webhook.test", "post.created", "post.updated", "post.deleted", "post.publishing", "post.published", "post.failed", "account.disconnected", "analytics.synced"]>, "many">>;
+        events: z.ZodOptional<z.ZodArray<z.ZodEnum<["webhook.test", "post.created", "post.updated", "post.deleted", "post.publishing", "post.published", "post.failed", "account.disconnected", "analytics.synced", "approval.requested", "approval.approved", "approval.changes_requested", "approval.rejected", "approval.commented"]>, "many">>;
         workspace_id: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodNull]>>;
         description: z.ZodOptional<z.ZodUnion<[z.ZodString, z.ZodNull]>>;
         is_active: z.ZodOptional<z.ZodBoolean>;
@@ -14,18 +14,18 @@ export declare const updateWebhookTool: {
     }, "strip", z.ZodTypeAny, {
         confirm: true;
         webhook_id: string;
+        description?: string | null | undefined;
         workspace_id?: string | null | undefined;
         url?: string | undefined;
-        description?: string | null | undefined;
-        events?: ("webhook.test" | "post.created" | "post.updated" | "post.deleted" | "post.publishing" | "post.published" | "post.failed" | "account.disconnected" | "analytics.synced")[] | undefined;
+        events?: ("webhook.test" | "post.created" | "post.updated" | "post.deleted" | "post.publishing" | "post.published" | "post.failed" | "account.disconnected" | "analytics.synced" | "approval.requested" | "approval.approved" | "approval.changes_requested" | "approval.rejected" | "approval.commented")[] | undefined;
         is_active?: boolean | undefined;
     }, {
         confirm: true;
         webhook_id: string;
+        description?: string | null | undefined;
         workspace_id?: string | null | undefined;
         url?: string | undefined;
-        description?: string | null | undefined;
-        events?: ("webhook.test" | "post.created" | "post.updated" | "post.deleted" | "post.publishing" | "post.published" | "post.failed" | "account.disconnected" | "analytics.synced")[] | undefined;
+        events?: ("webhook.test" | "post.created" | "post.updated" | "post.deleted" | "post.publishing" | "post.published" | "post.failed" | "account.disconnected" | "analytics.synced" | "approval.requested" | "approval.approved" | "approval.changes_requested" | "approval.rejected" | "approval.commented")[] | undefined;
         is_active?: boolean | undefined;
     }>;
     execute(client: PosterlyClient, input: {

package/dist/tools/webhook-events.d.ts

@@ -1,3 +1,3 @@
 import { z } from 'zod';
-export declare const WEBHOOK_EVENTS: readonly ["webhook.test", "post.created", "post.updated", "post.deleted", "post.publishing", "post.published", "post.failed", "account.disconnected", "analytics.synced"];
-export declare const webhookEventSchema: z.ZodEnum<["webhook.test", "post.created", "post.updated", "post.deleted", "post.publishing", "post.published", "post.failed", "account.disconnected", "analytics.synced"]>;
+export declare const WEBHOOK_EVENTS: readonly ["webhook.test", "post.created", "post.updated", "post.deleted", "post.publishing", "post.published", "post.failed", "account.disconnected", "analytics.synced", "approval.requested", "approval.approved", "approval.changes_requested", "approval.rejected", "approval.commented"];
+export declare const webhookEventSchema: z.ZodEnum<["webhook.test", "post.created", "post.updated", "post.deleted", "post.publishing", "post.published", "post.failed", "account.disconnected", "analytics.synced", "approval.requested", "approval.approved", "approval.changes_requested", "approval.rejected", "approval.commented"]>;

package/dist/tools/webhook-events.js

@@ -9,5 +9,10 @@ export const WEBHOOK_EVENTS = [
     'post.failed',
     'account.disconnected',
     'analytics.synced',
+    'approval.requested',
+    'approval.approved',
+    'approval.changes_requested',
+    'approval.rejected',
+    'approval.commented',
 ];
 export const webhookEventSchema = z.enum(WEBHOOK_EVENTS);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "posterly-mcp-server",
-  "version": "0.43.2",
+  "version": "0.43.4",
   "mcpName": "io.github.awpthorp/posterly",
   "description": "MCP server for posterly: schedule and publish social media posts across 18 platforms from any MCP client (Claude, ChatGPT, Cursor, Windsurf, Cline, and more)",
   "license": "MIT",

package/server.json

@@ -3,7 +3,7 @@
   "name": "io.github.awpthorp/posterly",
   "title": "posterly",
   "description": "Validate, schedule, publish, and analyze social content across 18 platforms with posterly.",
-  "version": "0.43.2",
+  "version": "0.43.4",
   "websiteUrl": "https://www.poster.ly/mcp",
   "repository": {
     "url": "https://github.com/awpthorp/posterly",
@@ -14,7 +14,7 @@
     {
       "registryType": "npm",
       "identifier": "posterly-mcp-server",
-      "version": "0.43.2",
+      "version": "0.43.4",
       "transport": {
         "type": "stdio"
       },

package/src/lib/api-client.ts

@@ -138,6 +138,17 @@ export interface DismissSuggestionResponse {
   status: string;
 }
 
+export type ApiPostApprovalStatus = 'none' | 'pending_client' | 'approved' | 'changes_requested' | 'rejected';
+
+export interface ApiPostApproval {
+  status: ApiPostApprovalStatus;
+  asset_status: ApiPostApprovalStatus;
+  caption_status: ApiPostApprovalStatus;
+  waiting_on: 'client' | 'team' | null;
+  requested_at: string | null;
+  completed_at: string | null;
+}
+
 export interface Post {
   id: number;
   content: string;
@@ -154,6 +165,9 @@ export interface Post {
   reel_cover_url?: string | null;
   reel_cover_method?: string | null;
   reel_thumb_offset?: number | null;
+  brand_id?: string | null;
+  content_plan_id?: string | null;
+  approval?: ApiPostApproval;
 }
 
 export interface InstagramPostSettings {
@@ -878,6 +892,38 @@ export interface PublicSignupAgentPay {
   [key: string]: unknown;
 }
 
+export interface PublicSignupPaymentAgentWalletSpendRequest {
+  merchant_name?: string;
+  merchant_url?: string;
+  amount?: number | null;
+  currency?: string;
+  context?: string;
+}
+
+export interface PublicSignupPaymentAgentWallet {
+  supported?: boolean;
+  how?: string;
+  spend_request?: PublicSignupPaymentAgentWalletSpendRequest;
+}
+
+// Always present while checkout is open, regardless of agent_pay/ENABLE_AGENT_CARD_PAY.
+// Describes the Stripe-hosted Checkout session itself so an agent with its own
+// approved payment credential (for example a Link agent wallet) can pay it
+// directly. null once payment is confirmed or checkout has expired.
+export interface PublicSignupPayment {
+  amount?: number | null;
+  currency?: string;
+  amount_display?: string | null;
+  billing?: string;
+  description?: string;
+  merchant_name?: string;
+  merchant_url?: string;
+  checkout_redirect_url?: string;
+  pay_with?: string;
+  agent_wallet?: PublicSignupPaymentAgentWallet;
+  [key: string]: unknown;
+}
+
 export interface PublicSignupSession {
   id: string;
   status: string;
@@ -894,6 +940,7 @@ export interface PublicSignupSession {
   account?: Record<string, unknown>;
   billing?: Record<string, unknown>;
   agent_pay?: PublicSignupAgentPay | null;
+  payment?: PublicSignupPayment | null;
   links?: Record<string, unknown>;
   created_at?: string;
   updated_at?: string;
@@ -915,6 +962,7 @@ export interface PublicSignupResponse {
   account?: Record<string, unknown>;
   billing?: Record<string, unknown>;
   agent_pay?: PublicSignupAgentPay | null;
+  payment?: PublicSignupPayment | null;
   [key: string]: unknown;
 }
 
@@ -1320,6 +1368,8 @@ export class PosterlyClient {
     limit?: number;
     offset?: number;
     workspace_id?: string;
+    approval_status?: string;
+    brand_id?: string;
   }): Promise<{ posts: Post[]; total: number }> {
     const searchParams = new URLSearchParams();
     if (params?.status) searchParams.set('status', params.status);
@@ -1328,6 +1378,8 @@ export class PosterlyClient {
     if (params?.limit) searchParams.set('limit', String(params.limit));
     if (params?.offset) searchParams.set('offset', String(params.offset));
     if (params?.workspace_id) searchParams.set('workspace_id', params.workspace_id);
+    if (params?.approval_status) searchParams.set('approval_status', params.approval_status);
+    if (params?.brand_id) searchParams.set('brand_id', params.brand_id);
 
     const qs = searchParams.toString();
     return this.request('GET', `/posts${qs ? `?${qs}` : ''}`);

package/src/lib/version.ts

@@ -5,4 +5,4 @@
 // tool set (minus the intentional pre-auth signup tools that only this stdio
 // package exposes). `npm run check:mcp-parity` enforces both the version match
 // and the tool-list match, and runs in the pre-commit hook.
-export const POSTERLY_MCP_VERSION = '0.43.2';
+export const POSTERLY_MCP_VERSION = '0.43.4';

package/src/tools/get-agent-signup-info.ts

@@ -35,7 +35,8 @@ export const getAgentSignupInfoTool = {
       '- Do not narrate raw curl, HTTP, JSON, API keys, or implementation details unless the user explicitly asks for debugging.',
       '',
       'Boundaries:',
-      '- Payment can be a one-time Link Agent Wallet virtual card (credential_type: card) on the prepaid PaymentIntent, or Stripe Checkout in the browser.',
+      '- Payment happens on Stripe Checkout, either by the user in their browser or by the agent with its own approved payment credential (for example a Link agent wallet); never card details in chat.',
+      '- Where enabled, payment can instead be a one-time Link Agent Wallet virtual card (credential_type: card) on a prepaid PaymentIntent.',
       '- Never send card numbers to posterly. Confirm the PaymentIntent with Stripe, or send checkout_redirect_url.',
       '- The user sets their Posterly password in their browser.',
       '- The user approves social OAuth in their browser.',

package/src/tools/get-signup-session.ts

@@ -29,6 +29,7 @@ function formatSignupSession(session: PublicSignupSession, includeRaw: boolean):
   const passwordUrl = stringFromRecord(session.links, 'password_setup_url');
   const completeUrl = stringFromRecord(session.links, 'complete_url');
   const agentPay = session.agent_pay;
+  const payment = session.payment;
 
   const lines = [
     `Posterly signup session: ${session.id}`,
@@ -42,6 +43,12 @@ function formatSignupSession(session: PublicSignupSession, includeRaw: boolean):
     agentPay?.requires_tos_acceptance ? 'Terms acceptance required before client_secret is released.' : '',
     agentPay?.client_secret ? `PaymentIntent client_secret: ${agentPay.client_secret}` : '',
     agentPay?.confirm_url ? `Confirm URL: ${agentPay.confirm_url}` : '',
+    !agentPay?.enabled && payment?.amount_display
+      ? `Amount due: ${payment.amount_display} ${String(payment.currency || 'usd').toUpperCase()} to ${payment.merchant_name || 'posterly'} (${payment.billing || 'subscription'})`
+      : '',
+    !agentPay?.enabled && payment?.agent_wallet?.how
+      ? `Agent wallet option: ${payment.agent_wallet.how}`
+      : '',
     checkoutRedirectUrl ? `Checkout handoff URL: ${checkoutRedirectUrl}` : '',
     checkoutUrl ? `Checkout URL: ${checkoutUrl}` : '',
     passwordUrl ? `Password setup URL: ${passwordUrl}` : '',
@@ -74,7 +81,7 @@ function guidanceForStatus(status: string, agentPayAvailable = false, requiresTo
       }
       return agentPayAvailable
         ? 'Payment is still pending. Confirm the prepaid PaymentIntent with a Link virtual card (credential_type: card), or send the user the Checkout handoff URL. Keep polling; never ask for card numbers.'
-        : 'Tell the user checkout is still pending. Keep polling; do not ask for card details.';
+        : 'Tell the user checkout is still pending. If you hold an approved payment credential such as a Link agent wallet, you may pay the Checkout handoff URL yourself instead of asking the user; otherwise keep polling. Never ask for card details.';
     case 'checkout_expired':
       return 'Tell the user checkout expired and offer to call start_signup again.';
     case 'payment_confirmed':

package/src/tools/list-posts.ts

@@ -6,7 +6,7 @@ import { SUPPORTED_PLATFORM_INPUTS, SUPPORTED_PLATFORM_IDS } from '../generated/
 export const listPostsTool = {
   name: 'list_posts',
   description:
-    'List upcoming or recent posts. Filter by status (scheduled, published, failed, draft), platform, account_id, or workspace_id. If workspace_id is omitted, posts across every workspace the caller is a member of are returned.',
+    'List upcoming or recent posts. Filter by status (scheduled, published, failed, draft), platform, account_id, workspace_id, approval_status, or brand_id. If workspace_id is omitted, posts across every workspace the caller is a member of are returned.',
   inputSchema: z.object({
     status: z
       .string()
@@ -30,6 +30,14 @@ export const listPostsTool = {
       .string()
       .optional()
       .describe('Filter to posts in a specific workspace (get IDs via whoami).'),
+    approval_status: z
+      .enum(['none', 'pending_client', 'approved', 'changes_requested', 'rejected'])
+      .optional()
+      .describe('Filter by client review approval status. pending_client means the post is waiting on the client.'),
+    brand_id: z
+      .string()
+      .optional()
+      .describe('Filter to posts assigned to a specific brand/client (the id from list_brands).'),
   }),
 
   async execute(
@@ -40,6 +48,8 @@ export const listPostsTool = {
       account_id?: string;
       limit?: number;
       workspace_id?: string;
+      approval_status?: string;
+      brand_id?: string;
     }
   ) {
     const { posts, total } = await client.listPosts({
@@ -54,7 +64,15 @@ export const listPostsTool = {
     const lines = posts.map((p) => {
       const date = formatLocalDateTime(p.scheduled_at);
       const caption = truncateText(p.content, 60);
-      return `• [${p.status}] #${p.id}: ${caption} (${date})`;
+      const approvalBits: string[] = [];
+      if (p.approval && p.approval.status !== 'none') {
+        approvalBits.push(`approval: ${p.approval.status}`);
+        if (p.approval.waiting_on) approvalBits.push(`waiting on: ${p.approval.waiting_on}`);
+      }
+      if (p.brand_id) approvalBits.push(`brand: ${p.brand_id}`);
+      if (p.content_plan_id) approvalBits.push(`plan: ${p.content_plan_id}`);
+      const approvalSuffix = approvalBits.length > 0 ? ` [${approvalBits.join(', ')}]` : '';
+      return `• [${p.status}] #${p.id}: ${caption} (${date})${approvalSuffix}`;
     });
 
     return [

package/src/tools/start-signup.ts

@@ -91,6 +91,7 @@ function formatSignupStart(response: PublicSignupResponse, includeRaw: boolean):
   const status = session?.status || response.status || 'checkout_pending';
   const message = session?.status_message || response.status_message;
   const agentPay = response.agent_pay || session?.agent_pay;
+  const payment = response.payment || session?.payment;
 
   const lines = [
     'Posterly signup started.',
@@ -105,6 +106,12 @@ function formatSignupStart(response: PublicSignupResponse, includeRaw: boolean):
     agentPay?.client_secret ? `PaymentIntent client_secret: ${agentPay.client_secret}` : '',
     agentPay?.confirm_url ? `Confirm URL: ${agentPay.confirm_url}` : '',
     agentPay?.pay_instructions ? `Pay instructions: ${agentPay.pay_instructions}` : '',
+    !agentPay?.enabled && payment?.amount_display
+      ? `Amount due: ${payment.amount_display} ${String(payment.currency || 'usd').toUpperCase()} to ${payment.merchant_name || 'posterly'} (${payment.billing || 'subscription'})`
+      : '',
+    !agentPay?.enabled && payment?.agent_wallet?.how
+      ? `Agent wallet option: ${payment.agent_wallet.how}`
+      : '',
     checkoutRedirectUrl ? `Checkout handoff URL (browser fallback): ${checkoutRedirectUrl}` : '',
     checkoutUrl ? `Checkout URL: ${checkoutUrl}` : '',
     pollUrl ? `Poll URL: ${pollUrl}` : '',
@@ -129,11 +136,12 @@ function formatSignupStart(response: PublicSignupResponse, includeRaw: boolean):
           '6. Do not ask for card details, the Posterly password, social passwords, or OAuth codes.',
         ]
       : [
-          '1. Send the Checkout handoff URL to the user so they can pay securely in their browser. Use the raw Stripe checkout URL only if you preserve the full URL including any fragment. posterly does not email this link, so do not tell the user to check their inbox at this stage.',
-          '2. Call get_signup_session with the signup session ID until the status changes.',
-          '3. Tell the user when Posterly sends the password setup email.',
-          '4. If status becomes agent_access_required, ask the user to install or paste the Posterly MCP/API setup instructions into this trusted AI chat, then onboard them in this conversation (about you, connect, brand voice, first post). Do not send them to /onboarding-v2.',
-          '5. Do not ask for card details, the Posterly password, social passwords, or OAuth codes.',
+          '1. If you hold an approved payment credential such as a Link agent wallet, you can pay the Checkout handoff URL yourself: create a spend request for the amount and merchant above, get the user\'s approval in the wallet, then complete the Checkout page with that credential. Never paste card numbers into chat or send them to posterly.',
+          '2. Otherwise, send the Checkout handoff URL to the user so they can pay securely in their browser. Use the raw Stripe checkout URL only if you preserve the full URL including any fragment. posterly does not email this link, so do not tell the user to check their inbox at this stage.',
+          '3. Call get_signup_session with the signup session ID until the status changes.',
+          '4. Tell the user when Posterly sends the password setup email.',
+          '5. If status becomes agent_access_required, ask the user to install or paste the Posterly MCP/API setup instructions into this trusted AI chat, then onboard them in this conversation (about you, connect, brand voice, first post). Do not send them to /onboarding-v2.',
+          '6. Do not ask for card details, the Posterly password, social passwords, or OAuth codes.',
         ]),
     includeRaw ? `\nRaw signup response:\n${JSON.stringify(response, null, 2)}` : '',
   ];

package/src/tools/webhook-events.ts

@@ -10,6 +10,11 @@ export const WEBHOOK_EVENTS = [
   'post.failed',
   'account.disconnected',
   'analytics.synced',
+  'approval.requested',
+  'approval.approved',
+  'approval.changes_requested',
+  'approval.rejected',
+  'approval.commented',
 ] as const;
 
 export const webhookEventSchema = z.enum(WEBHOOK_EVENTS);