posterly-mcp-server 0.51.1 → 0.52.1

package/README.md

@@ -123,7 +123,7 @@ Add the same server definition to your Cursor MCP settings:
 
 ## Available tools
 
-`posterly-mcp-server@0.51.1` exposes 64 tools covering 100 actions. The hosted HTTP endpoint exposes the same catalog minus the three signup tools: 61 tools covering 97 actions.
+`posterly-mcp-server@0.52.1` exposes 64 tools covering 100 actions. The hosted HTTP endpoint exposes the same catalog minus the three signup tools: 61 tools covering 97 actions.
 
 Many tools pick what to do with one parameter: `view` (reads), `action` (writes), or `type`. A few pick their mode from which parameters you pass (for example `update_post` with `status` changes the status instead of editing). Every tool description names all of its views and actions.
 
@@ -446,7 +446,7 @@ In 0.45.0, the old tools below moved into the tools above. The old names still w
 
 This npm/stdio server can read local file paths. When `upload_media` receives a larger local file, it automatically requests a signed upload URL and uploads the raw bytes before returning the public media URL.
 
-The hosted HTTP MCP endpoint cannot do that for local files by itself because MCP tool calls are JSON-only. On hosted HTTP MCP, `upload_media` is for small base64 uploads up to 5MB decoded. For larger media there, use `upload_media` with `url` for public direct media URLs, or call `create_signed_upload` only from clients that can also `PUT` the raw file bytes to the returned `upload_url`.
+The hosted HTTP MCP endpoint cannot do that for local files by itself because MCP tool calls are JSON-only. On hosted HTTP MCP, `upload_media` is for small base64 uploads up to 5MB decoded. For larger media there, use `upload_media` with `url` for public direct media URLs, or call `create_signed_upload` only from clients that can also `PUT` the raw file bytes to the returned `upload_url`. One call covers 1 to 20 files with `files`; each file gets its own slot (or its own error), and slots expire in 15 minutes.
 
 ## What the brand tools are for
 

package/dist/lib/api-client.d.ts

@@ -1242,6 +1242,33 @@ export interface XPostingQuotaResponse {
     addon?: Record<string, unknown>;
     plans?: Array<Record<string, unknown>>;
 }
+export type SignedUploadBatchSlot = {
+    index: number;
+    filename: string;
+    ok: true;
+    upload_url: string;
+    token: string;
+    path: string;
+    public_url: string;
+    expires_at: string;
+    max_size: number;
+    headers?: Record<string, string>;
+    provider?: string;
+} | {
+    index: number;
+    filename: string;
+    ok: false;
+    error: string;
+    code: string;
+};
+export interface SignedUploadBatchResponse {
+    slots: SignedUploadBatchSlot[];
+    summary: {
+        requested: number;
+        ok: number;
+        failed: number;
+    };
+}
 export declare class PosterlyClient {
     private baseUrl;
     private apiKey;
@@ -1683,6 +1710,11 @@ export declare class PosterlyClient {
         public_url: string;
         headers?: Record<string, string>;
     }>;
+    getSignedUploadUrls(files: Array<{
+        filename: string;
+        content_type: string;
+        size: number;
+    }>, workspaceId?: string): Promise<SignedUploadBatchResponse>;
     createMediaDrop(input?: {
         filename?: string;
         maxFiles?: number;

package/dist/lib/api-client.js

@@ -673,6 +673,12 @@ export class PosterlyClient {
             ...(workspaceId ? { workspace_id: workspaceId } : {}),
         });
     }
+    async getSignedUploadUrls(files, workspaceId) {
+        return this.request('POST', '/media/signed-upload', {
+            files,
+            ...(workspaceId ? { workspace_id: workspaceId } : {}),
+        });
+    }
     async createMediaDrop(input) {
         return this.request('POST', '/media/drop-sessions', {
             filename: input?.filename,

package/dist/lib/version.d.ts

@@ -1 +1 @@
-export declare const POSTERLY_MCP_VERSION = "0.51.1";
+export declare const POSTERLY_MCP_VERSION = "0.52.1";

package/dist/lib/version.js

@@ -5,4 +5,4 @@
 // tool set (minus the intentional pre-auth signup tools that only this stdio
 // package exposes). `npm run check:mcp-parity` enforces both the version match
 // and the tool-list match, and runs in the pre-commit hook.
-export const POSTERLY_MCP_VERSION = '0.51.1';
+export const POSTERLY_MCP_VERSION = '0.52.1';

package/dist/tools/create-media-drop.js

@@ -1,16 +1,16 @@
 import { z } from 'zod';
 export const createMediaDropTool = {
     name: 'create_media_drop',
-    description: 'Create a human drop page so ChatGPT or Claude users can upload a laptop file without dashboard login. Returns drop_url (https://www.poster.ly/drop/<token>). Send that URL to the user, wait, then call list_media. This is not the chat paperclip and not create_signed_upload.',
+    description: 'Create a human drop page so ChatGPT or Claude users can upload laptop files (up to 20 per link) without dashboard login. Returns drop_url (https://www.poster.ly/drop/<token>). Send that URL to the user, wait, then call list_media. Accepts JPEG, PNG, GIF, WebP, MP4, MOV, WebM, and PDF up to 50MB (a PDF is for LinkedIn document posts); HEIC is not accepted. This is not the chat paperclip and not create_signed_upload.',
     inputSchema: z.object({
         filename: z.string().optional().describe('Optional filename hint for the user, e.g. launch-video.mp4'),
         max_files: z
             .number()
             .int()
             .min(1)
-            .max(10)
+            .max(20)
             .optional()
-            .describe('How many files the drop can accept. Default 10, max 10.'),
+            .describe('How many files the drop can accept. Default 10, max 20.'),
         workspace_id: z.string().optional().describe('Optional. The workspace this acts in and whose plan pays (from whoami). Needed only when your connection can act in several workspaces.'),
     }),
     async execute(client, input) {
@@ -28,7 +28,7 @@ export const createMediaDropTool = {
             `• Max files: ${drop.max_files}`,
             drop.instructions,
             'After they finish, call list_media with this drop_session_id, then validate_post / create_post using public_url.',
-            'Chat attachments never reach MCP. HEIC and PDF are rejected.',
+            'Chat attachments never reach MCP. Accepted: JPEG, PNG, GIF, WebP, MP4, MOV, WebM, and PDF up to 50MB (a PDF is for LinkedIn document posts). HEIC is not accepted.',
         ].join('\n');
     },
 };

package/dist/tools/create-signed-upload.d.ts

@@ -1,28 +1,61 @@
 import { z } from 'zod';
-import type { PosterlyClient } from '../lib/api-client.js';
+import type { PosterlyClient, SignedUploadBatchResponse } from '../lib/api-client.js';
+type SignedUploadInput = {
+    filename?: string;
+    content_type?: string;
+    size?: number;
+    files?: Array<{
+        filename: string;
+        content_type: string;
+        size: number;
+    }>;
+    workspace_id?: string;
+};
+export declare function formatSignedUploadBatch(batch: SignedUploadBatchResponse, requested: Array<{
+    content_type: string;
+}>): string;
 export declare const createSignedUploadTool: {
     name: string;
     description: string;
     inputSchema: z.ZodObject<{
-        filename: z.ZodString;
-        content_type: z.ZodString;
-        size: z.ZodNumber;
+        filename: z.ZodOptional<z.ZodString>;
+        content_type: z.ZodOptional<z.ZodString>;
+        size: z.ZodOptional<z.ZodNumber>;
+        files: z.ZodOptional<z.ZodArray<z.ZodObject<{
+            filename: z.ZodString;
+            content_type: z.ZodString;
+            size: z.ZodNumber;
+        }, "strip", z.ZodTypeAny, {
+            filename: string;
+            content_type: string;
+            size: number;
+        }, {
+            filename: string;
+            content_type: string;
+            size: number;
+        }>, "many">>;
         workspace_id: z.ZodOptional<z.ZodString>;
     }, "strip", z.ZodTypeAny, {
-        filename: string;
-        content_type: string;
-        size: number;
         workspace_id?: string | undefined;
+        filename?: string | undefined;
+        content_type?: string | undefined;
+        size?: number | undefined;
+        files?: {
+            filename: string;
+            content_type: string;
+            size: number;
+        }[] | undefined;
     }, {
-        filename: string;
-        content_type: string;
-        size: number;
         workspace_id?: string | undefined;
+        filename?: string | undefined;
+        content_type?: string | undefined;
+        size?: number | undefined;
+        files?: {
+            filename: string;
+            content_type: string;
+            size: number;
+        }[] | undefined;
     }>;
-    execute(client: PosterlyClient, input: {
-        filename: string;
-        content_type: string;
-        size: number;
-        workspace_id?: string;
-    }): Promise<string>;
+    execute(client: PosterlyClient, input: SignedUploadInput): Promise<string>;
 };
+export {};

package/dist/tools/create-signed-upload.js

@@ -1,14 +1,71 @@
 import { z } from 'zod';
+const fileSchema = z.object({
+    filename: z.string().describe('Filename with extension, e.g. launch-video.mp4'),
+    content_type: z.string().describe('MIME type, e.g. video/mp4'),
+    size: z.number().int().positive().describe('File size in bytes'),
+});
+export function formatSignedUploadBatch(batch, requested) {
+    const lines = [
+        `Signed upload slots: ${batch.summary.requested} requested, ${batch.summary.ok} ready, ${batch.summary.failed} failed.`,
+        '',
+    ];
+    let earliestExpiry = null;
+    batch.slots.forEach((slot, position) => {
+        const number = position + 1;
+        if (slot.ok) {
+            const headers = slot.headers || {};
+            const headerKeys = Object.keys(headers);
+            const contentTypeKey = headerKeys.find((key) => key.toLowerCase() === 'content-type');
+            const contentType = contentTypeKey ? headers[contentTypeKey] : requested[slot.index]?.content_type;
+            lines.push(`${number}. ${slot.filename}`);
+            lines.push(`   PUT ${slot.upload_url}`);
+            if (contentType)
+                lines.push(`   Content-Type: ${contentType}`);
+            for (const key of headerKeys) {
+                if (key === contentTypeKey)
+                    continue;
+                lines.push(`   ${key}: ${headers[key]}`);
+            }
+            lines.push(`   Public URL after upload: ${slot.public_url}`);
+            if (slot.expires_at && (!earliestExpiry || slot.expires_at < earliestExpiry)) {
+                earliestExpiry = slot.expires_at;
+            }
+        }
+        else {
+            lines.push(`${number}. ${slot.filename || '(no filename)'}`);
+            lines.push(`   Failed (${slot.code}): ${slot.error}`);
+        }
+        lines.push('');
+    });
+    lines.push(`PUT each file, then pass public_url to create_post / create_posts_batch. Slots expire at ${earliestExpiry ?? 'the expires_at time returned (15 minutes)'}, call again for fresh slots.`);
+    return lines.join('\n');
+}
 export const createSignedUploadTool = {
     name: 'create_signed_upload',
-    description: 'Create a signed upload URL for a larger image or video. PUT the raw bytes to the returned upload_url (object storage) with the returned headers, then public_url can be used with create_post.',
+    description: 'Create signed upload URLs for larger images, videos or PDFs, 1 to 20 files per call. Accepts JPEG, PNG, GIF, WebP, MP4, MOV, WebM, and PDF up to 50MB (a PDF is for LinkedIn document posts); HEIC is not accepted. For one file pass filename, content_type and size. For several pass files: [{filename, content_type, size}] (up to 20) and get one slot per file, with any file that fails reported in place. PUT the raw bytes of each file to its upload_url (object storage) with the returned headers, then pass public_url to create_post / create_posts_batch. For a PDF, create the post with post_type document, media_url set to that public_url and a document_title in settings (LinkedIn only). Slots expire in 15 minutes.',
     inputSchema: z.object({
-        filename: z.string().describe('Filename with extension, e.g. launch-video.mp4'),
-        content_type: z.string().describe('MIME type, e.g. video/mp4'),
-        size: z.number().int().positive().describe('File size in bytes'),
+        filename: z.string().optional().describe('Single file: filename with extension, e.g. launch-video.mp4. Omit when using files.'),
+        content_type: z.string().optional().describe('Single file: MIME type, e.g. video/mp4. Omit when using files.'),
+        size: z.number().int().positive().optional().describe('Single file: size in bytes. Omit when using files.'),
+        files: z
+            .array(fileSchema)
+            .min(1)
+            .max(20)
+            .optional()
+            .describe('Batch: 1 to 20 files, each with filename, content_type and size. Use instead of the single-file fields.'),
         workspace_id: z.string().optional().describe('Optional. The workspace this acts in and whose plan pays (from whoami). Needed only when your connection can act in several workspaces.'),
     }),
     async execute(client, input) {
+        if (input.files !== undefined) {
+            if (input.filename !== undefined || input.content_type !== undefined || input.size !== undefined) {
+                throw new Error('Pass either files or the single-file fields (filename, content_type, size), not both.');
+            }
+            const batch = await client.getSignedUploadUrls(input.files, input.workspace_id);
+            return formatSignedUploadBatch(batch, input.files);
+        }
+        if (!input.filename || !input.content_type || !input.size) {
+            throw new Error('Provide filename, content_type and size for one file, or files for a batch of up to 20.');
+        }
         const signed = await client.getSignedUploadUrl(input.filename, input.content_type, input.size, input.workspace_id);
         return [
             'Signed upload created.',

package/dist/tools/list-media.js

@@ -2,7 +2,7 @@ import { z } from 'zod';
 import { formatPagingNote } from '../lib/format.js';
 export const listMediaTool = {
     name: 'list_media',
-    description: 'List the newest media assets for the authenticated user. After create_media_drop, pass drop_session_id to see files the human uploaded on /drop/<token>. Use public_url with validate_post / create_post. The output says whether every matching file is shown; page with offset (offset + limit up to 1000) when it is not.',
+    description: 'List the newest media assets for the authenticated user. After create_media_drop, pass drop_session_id to see files the human uploaded on /drop/<token>. Use public_url with validate_post / create_post. A drop listing returns up to 20 files per page by default so a full drop fits one page. The output says whether every matching file is shown; page with offset (offset + limit up to 1000) when it is not.',
     inputSchema: z.object({
         limit: z
             .number()
@@ -10,7 +10,7 @@ export const listMediaTool = {
             .min(1)
             .max(50)
             .optional()
-            .describe('Number of assets to return (default 10, max 50)'),
+            .describe('Number of assets to return (default 10, or 20 when drop_session_id is set; max 50)'),
         offset: z
             .number()
             .int()

package/dist/tools/upload-media.js

@@ -3,7 +3,7 @@ import { mdError, mdSuccess } from '../lib/format.js';
 import { validateArgs } from '../lib/tool-runtime.js';
 export const uploadMediaTool = {
     name: 'upload_media',
-    description: 'Upload an image or video to posterly storage and get a URL for create_post. Supports JPEG, PNG, GIF, WebP, MP4, MOV, WebM. Images up to 10MB, videos up to 50MB. Three ways in: file_path (an explicit local path the user gave you), base64_data with filename (PREFERRED for images shared in chat, which are not on the local filesystem), or url (a public HTTPS image or video; local/private network URLs are blocked).\n\n' +
+    description: 'Upload an image or video to posterly storage and get a URL for create_post. Supports JPEG, PNG, GIF, WebP, MP4, MOV, WebM (PDFs are not accepted here: use create_signed_upload or create_media_drop). Images up to 10MB, videos up to 50MB. Three ways in: file_path (an explicit local path the user gave you), base64_data with filename (PREFERRED for images shared in chat, which are not on the local filesystem), or url (a public HTTPS image or video; local/private network URLs are blocked).\n\n' +
         'This writes to the user\'s media storage (counts against quota) but does NOT publish the file anywhere. Uploading is safe - it\'s the subsequent `create_post` call that publishes content, and that tool has its own confirmation requirements. Never guess file paths. You can also pass public HTTP(S) media URLs directly to create_post/update_post; use url here when you want to upload once and reuse the returned posterly URL.',
     inputSchema: z.object({
         file_path: z

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "posterly-mcp-server",
-  "version": "0.51.1",
+  "version": "0.52.1",
   "mcpName": "io.github.awpthorp/posterly",
   "description": "MCP server for posterly: schedule and publish social media posts across 18 platforms from any MCP client (Claude, ChatGPT, Cursor, Windsurf, Cline, and more)",
   "license": "MIT",

package/server.json

@@ -3,7 +3,7 @@
   "name": "io.github.awpthorp/posterly",
   "title": "posterly",
   "description": "Validate, schedule, publish, and analyze social content across 18 platforms with posterly.",
-  "version": "0.51.1",
+  "version": "0.52.1",
   "websiteUrl": "https://www.poster.ly/mcp",
   "repository": {
     "url": "https://github.com/awpthorp/posterly-mcp-server",
@@ -13,7 +13,7 @@
     {
       "registryType": "npm",
       "identifier": "posterly-mcp-server",
-      "version": "0.51.1",
+      "version": "0.52.1",
       "transport": {
         "type": "stdio"
       },