{ "data": { "a": { "slug": "postiz", "name": "Postiz API + MCP", "vendor": "Postiz (Gitroom)", "vendorUrl": "https://postiz.com", "kind": "http-api", "category": "social-media", "summary": "Open-source social scheduler (AGPL-3.0) for 34 platforms that you can self-host free or use as Postiz Cloud from $29 a month.", "url": "https://www.anchorterminal.com/tools/postiz", "markdownUrl": "https://www.anchorterminal.com/tools/postiz.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/postiz.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/postiz.json", "dns": "postiz.grade.anchorterminal.com", "repo": "https://github.com/gitroomhq/postiz-app", "license": "AGPL-3.0", "transports": [ "http", "streamable-http" ], "remoteUrl": "https://api.postiz.com/public/v1", "packages": [ { "registry": "npm", "name": "@postiz/node" }, { "registry": "npm", "name": "postiz" } ], "auth": "mixed", "authNotes": "API key sent raw in the Authorization header (no Bearer prefix), or an OAuth app token prefixed pos_. The MCP accepts a Bearer header at /mcp, an OAuth flow at /mcp-oauth, or the key in the URL path at /mcp/{key}. Self-hosted instances need their own developer apps for each network.", "pricing": "paid", "pricingNotes": "Self-hosting is free under AGPL-3.0, but you register your own developer app with each network. Postiz Cloud has no free plan (7-day trial, card policy not stated). Standard $29 a month or $23 billed yearly (5 channels), Team $39 or $31 (10), Pro $49 or $39 (30), Ultimate $99 or $79 (100). API, CLI, webhooks and MCP on every plan, posts unlimited. The terms make fees non-refundable (https://postiz.com/pricing).", "priceSummary": "$29 / mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402 in docs, llms.txt or pricing (checked 2026-09-30).", "endpoints": [] }, "toolCount": 13, "popularity": { "githubStars": 36531, "npmWeekly": 368, "pypiWeekly": null, "asOf": "2026-09-30" }, "docsUrl": "https://docs.postiz.com", "llmsTxt": "https://docs.postiz.com/llms.txt", "openapi": "https://docs.postiz.com/public-api/openapi.json", "capabilities": [ "social.post", "social.schedule", "social.analytics", "social.media-upload" ], "tags": [ "hosted", "self-hosted", "local", "open-source", "mcp", "llms-txt", "openapi", "typescript", "webhooks" ], "lastRelease": "2026-09-22", "graded": true, "anchor": { "graded": true, "score": 59.4, "grade": "C", "agentReady": false, "rank": 606, "ranked": true, "rankOf": 1272, "categoryRank": 4, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 65, "maintenance": 85, "payments": 30, "reliability": 53, "schema": 88, "security": 49, "transparency": 82 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-01" }, "negative": -3, "negativeNotes": [ "2026-07-20 and 2026-09-22. Three security fixes in the last 12 months. A path traversal in the self-hosted upload route that could read files outside UPLOAD_DIRECTORY, fixed in commit 7936062 labelled critical, and CVE-2026-94455 (enterprise endpoints accepting other JWT types) and CVE-2026-94456 (non-cryptographic IDs for OAuth secrets and codes), fixed on 22 September. All fixed and the latter two given CVEs, so we deduct less. -3 (https://github.com/gitroomhq/postiz-app/commit/793606226f981706cc0201c8023f0f2b57ce08e4, https://github.com/gitroomhq/postiz-app/commit/9259cf2429e8cc0c88414e88d5e6c783d7ffba63)" ], "verdict": "AGPL-3.0 and self-hostable with the API and MCP included, 34 platforms. Create-post capped at 90 requests an hour on every Cloud plan.", "bestFor": "Teams that want to self-host, or want 34 platforms including Mastodon, Farcaster, Discord and Slack on a flat plan.", "strengths": [ "AGPL-3.0 and self-hostable with the API and MCP included, 34 platforms", "OpenAPI 3.1 spec with 27 paths, llms.txt and Markdown docs", "MCP tools in source carry readOnlyHint, destructiveHint and idempotentHint, with when-not-to-use guidance", "v2.24.0 on 22 September 2026, and CVEs assigned and fixed through a published disclosure process", "Flat Cloud plans from $29 a month ($23 yearly) with unlimited posts" ], "weaknesses": [ "Create-post capped at 90 requests an hour on every Cloud plan", "One organisation key with no scopes, and the MCP OAuth grant is always read and write", "The docs document the API key in the MCP URL path at /mcp/{key}", "No idempotency key and no Retry-After guidance", "Self-hosting means your own developer app and review with each network" ], "agentNotes": [ "Send the key as the `Authorization` header with no `Bearer` prefix on REST calls", "Batch several posts into one create request to stay under 90 an hour", "Call integrationSchema (Get Settings) for a channel before scheduling, since each network has its own settings", "Use the Bearer header on /mcp rather than /mcp/{key} so the key stays out of logs", "Read output.errors on a failed schedule call and retry with the corrected fields" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 2, "avgRating": 3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 59.4 } ], "editorialScores": { "ergonomics": 65, "maintenance": 85, "payments": 30, "reliability": 53, "schema": 88, "security": 49, "transparency": 75 }, "provenanceScore": 89, "checked": { "categories": { "ergonomics": "2026-10-01", "maintenance": "2026-10-01", "payments": "2026-10-01", "reliability": "2026-10-01", "schema": "2026-10-01", "security": "2026-10-01", "transparency": "2026-10-01" }, "last": "2026-10-01", "lastMoved": "2026-10-27", "oldest": "2026-10-01", "stale": false, "staleAfterDays": 90 } }, "connect": { "http": "curl https://api.postiz.com/public/v1/integrations -H \"Authorization: $POSTIZ_API_KEY\"", "claudeCode": "claude mcp add --transport http postiz https://mcp.postiz.com/mcp --header \"Authorization: Bearer $POSTIZ_API_KEY\"" }, "letme": { "capability": "https://letme.dev/social.post", "tool": "https://letme.dev/postiz" }, "area": "communication", "unitPrices": [ { "item": "Standard plan", "unit": "month", "usd": 29, "note": "5 channels. $278 a year" }, { "item": "Team plan", "unit": "month", "usd": 39, "note": "10 channels. $374 a year" }, { "item": "Pro plan", "unit": "month", "usd": 49, "note": "30 channels. $470 a year" }, { "item": "Ultimate plan", "unit": "month", "usd": 99, "note": "100 channels. $950 a year" } ], "provenance": { "legalEntity": "Gitroom Limited", "domain": "postiz.com", "domainRegistered": "2013-06-24", "domainNote": "postiz.com was registered in 2013, well before the project started in 2023.", "endpointOnVendorDomain": true, "terms": "https://postiz.com/terms-of-service", "privacy": "https://postiz.com/privacy-policy", "statusPage": "https://status.postiz.com", "changelog": "https://github.com/gitroomhq/postiz-app/releases", "securityTxt": "none", "checked": "2026-09-30", "notes": [ "Terms name Gitroom Limited (seller of paid plans) and Gitroom LLC together as Postiz" ], "score": 89 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/postiz.json", "live": { "slug": "postiz", "probe": { "target": "https://api.postiz.com/public/v1", "method": "get", "lastAt": "2026-11-03T18:20:17.523906209Z", "lastOk": true, "lastStatus": 404, "lastMs": 308, "authRequired": false, "uptime24h": 100, "uptime30d": 99.69, "p50ms24h": 303, "p95ms24h": 394, "samples24h": 250, "samples30d": 8081, "days": [ { "date": "2026-10-03", "probes": 271, "ok": 271 }, { "date": "2026-10-04", "probes": 272, "ok": 272 }, { "date": "2026-10-05", "probes": 272, "ok": 272 }, { "date": "2026-10-06", "probes": 272, "ok": 272 }, { "date": "2026-10-07", "probes": 272, "ok": 272 }, { "date": "2026-10-08", "probes": 268, "ok": 268 }, { "date": "2026-10-09", "probes": 250, "ok": 250 }, { "date": "2026-10-10", "probes": 247, "ok": 247 }, { "date": "2026-10-11", "probes": 247, "ok": 247 }, { "date": "2026-10-12", "probes": 247, "ok": 247 }, { "date": "2026-10-13", "probes": 248, "ok": 248 }, { "date": "2026-10-14", "probes": 249, "ok": 249 }, { "date": "2026-10-15", "probes": 253, "ok": 253 }, { "date": "2026-10-16", "probes": 252, "ok": 252 }, { "date": "2026-10-17", "probes": 253, "ok": 253 }, { "date": "2026-10-18", "probes": 256, "ok": 256 }, { "date": "2026-10-19", "probes": 255, "ok": 254 }, { "date": "2026-10-20", "probes": 252, "ok": 252 }, { "date": "2026-10-21", "probes": 253, "ok": 253 }, { "date": "2026-10-22", "probes": 253, "ok": 253 }, { "date": "2026-10-23", "probes": 248, "ok": 248 }, { "date": "2026-10-24", "probes": 251, "ok": 251 }, { "date": "2026-10-25", "probes": 250, "ok": 250 }, { "date": "2026-10-26", "probes": 252, "ok": 248 }, { "date": "2026-10-27", "probes": 249, "ok": 249 }, { "date": "2026-10-28", "probes": 250, "ok": 250 }, { "date": "2026-10-29", "probes": 249, "ok": 248 }, { "date": "2026-10-30", "probes": 249, "ok": 246 }, { "date": "2026-10-31", "probes": 251, "ok": 250 }, { "date": "2026-11-01", "probes": 249, "ok": 234 }, { "date": "2026-11-02", "probes": 250, "ok": 250 }, { "date": "2026-11-03", "probes": 191, "ok": 191 } ], "outages": [ { "start": "2026-11-01T00:54:51.402069554Z", "end": "2026-11-01T02:20:29.804585001Z", "note": "DNS lookup failed" } ] }, "vendorStatus": { "page": "https://status.postiz.com", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-11-03T17:13:33.870487851Z" }, "versions": [ { "registry": "github", "name": "gitroomhq/postiz-app", "version": "v2.25.3", "released": "2026-10-24", "seenAt": "2026-11-02T19:43:56.785796691Z" }, { "registry": "npm", "name": "@postiz/node", "version": "1.0.8", "seenAt": "2026-11-02T19:43:54.584643946Z" }, { "registry": "npm", "name": "postiz", "version": "2.0.27", "seenAt": "2026-11-02T19:43:55.002360756Z" } ], "githubStars": 40700, "npmWeekly": 89, "securityTxt": { "url": "https://postiz.com/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-03T15:52:02.391197901Z" }, "llmsTxt": { "url": "https://docs.postiz.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-03T15:20:51.134257063Z" }, "domain": { "domain": "postiz.com", "registered": "2013-06-24", "source": "https://rdap.verisign.com/com/v1/domain/postiz.com", "checkedAt": "2026-11-01T14:15:16.440077073Z" }, "pages": [ { "url": "https://postiz.com/pricing", "kind": "pricing", "status": 200, "checkedAt": "2026-11-03T07:56:24.933675272Z", "changedAt": "2026-10-15T21:32:23.048080477Z", "fingerprint": "603523fd803e" }, { "url": "https://postiz.com/privacy-policy", "kind": "privacy", "status": 200, "checkedAt": "2026-11-03T07:56:27.013112363Z", "changedAt": "2026-10-20T00:03:52.176361053Z", "fingerprint": "1698159242ba" }, { "url": "https://postiz.com/terms-of-service", "kind": "terms", "status": 200, "checkedAt": "2026-11-03T07:56:28.982867799Z", "changedAt": "2026-10-20T00:03:54.183695942Z", "fingerprint": "418d2edbefbd" } ], "github": { "repo": "gitroomhq/postiz-app", "checkedAt": "2026-11-02T08:50:52.615357936Z", "stars": 40634, "archived": false, "issuesEnabled": true, "pushedAt": "2026-11-01T13:14:27Z", "openIssues": 132, "openPRs": 83, "issuesOpened90d": 92, "issuesClosed90d": 111, "prsMerged90d": 243, "ci": { "branch": "main", "runs": 50, "success": 38, "failure": 12, "other": 0, "latest": "success", "latestAt": "2026-11-01T13:02:31Z" }, "advisories": [ { "ghsa": "GHSA-629m-99qx-356r", "cve": "CVE-2026-94455", "severity": "high", "published": "2026-09-22T16:16:49Z" }, { "ghsa": "GHSA-4hw5-43cf-g9wp", "cve": "CVE-2026-94456", "severity": "critical", "published": "2026-09-22T14:19:29Z" }, { "ghsa": "GHSA-4hgh-5rhf-4qpm", "severity": "critical", "published": "2026-08-07T14:15:54Z" }, { "ghsa": "GHSA-5m7p-wphr-xjp7", "cve": "CVE-2026-19127", "severity": "medium", "published": "2026-08-06T17:28:44Z" }, { "ghsa": "GHSA-j7rp-5mgj-qgg9", "cve": "CVE-2026-48799", "severity": "high", "published": "2026-05-23T12:24:21Z" }, { "ghsa": "GHSA-v4wr-4j8g-4hfj", "cve": "CVE-2026-48783", "severity": "medium", "published": "2026-05-22T18:55:41Z" }, { "ghsa": "GHSA-j77w-h625-56q2", "cve": "CVE-2026-48781", "severity": "critical", "published": "2026-05-22T18:28:38Z" }, { "ghsa": "GHSA-f7jj-p389-4w45", "cve": "CVE-2026-42346", "severity": "medium", "published": "2026-04-28T12:20:41Z" }, { "ghsa": "GHSA-jxg2-2cmf-h66m", "severity": "medium", "published": "2026-04-28T12:18:58Z" }, { "ghsa": "GHSA-hhxq-3wg7-4rj8", "cve": "CVE-2026-42556", "severity": "high", "published": "2026-04-27T19:34:49Z" }, { "ghsa": "GHSA-v975-9h5p-xhm4", "cve": "CVE-2026-42298", "severity": "critical", "published": "2026-04-22T14:22:06Z" }, { "ghsa": "GHSA-44wg-r34q-hvfx", "cve": "CVE-2026-40487", "severity": "critical", "published": "2026-04-12T04:07:21Z" }, { "ghsa": "GHSA-34w8-5j2v-h6ww", "cve": "CVE-2026-40168", "severity": "high", "published": "2026-04-09T12:21:20Z" }, { "ghsa": "GHSA-wc9c-7cv8-m225", "cve": "CVE-2026-34590", "severity": "medium", "published": "2026-03-29T16:00:06Z" }, { "ghsa": "GHSA-89vp-m2qw-7v34", "cve": "CVE-2026-34576", "severity": "medium", "published": "2026-03-29T07:15:39Z" }, { "ghsa": "GHSA-mv6h-v3jg-g539", "cve": "CVE-2026-34577", "severity": "high", "published": "2026-03-29T07:15:27Z" }, { "ghsa": "GHSA-89v5-38xr-9m4j", "severity": "high", "published": "2026-03-25T10:48:29Z" }, { "ghsa": "GHSA-vj2p-7pgw-g2wf", "cve": "CVE-2024-34351", "severity": "high", "published": "2026-03-25T10:15:46Z" }, { "ghsa": "GHSA-48c8-25jq-m55f", "cve": "CVE-2025-53641", "severity": "high", "published": "2025-07-11T16:15:50Z" } ], "replies": { "sampled": 25, "unanswered": 22, "medianDays": 0.1 } }, "updatedAt": "2026-11-03T18:20:17.523906209Z" } }, "answer": "Postiz API + MCP scores 59.4 (C) on agent readiness against Repostit's 32.5 (F), and leads in 6 of 7 scored categories.", "b": { "slug": "repostit", "name": "Repostit", "vendor": "Repostit LLC", "vendorUrl": "https://repostit.io", "kind": "platform", "category": "social-media", "summary": "Repostit is a hosted service that reposts short videos from one connected social account to others and schedules new posts across eight networks. Agents reach it through a remote OAuth MCP connector listed for Claude and ChatGPT.", "url": "https://www.anchorterminal.com/tools/repostit", "markdownUrl": "https://www.anchorterminal.com/tools/repostit.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/repostit.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/repostit.json", "dns": "repostit.grade.anchorterminal.com", "license": "Proprietary hosted service under Repostit's terms of service (effective 7 March 2025), which name Repostit LLC of Newark, Delaware. No source, SDK or package is published", "transports": [ "streamable-http" ], "remoteUrl": "https://repostit-mcp-cfjcykgqda-uc.a.run.app/mcp/v1.1", "packages": [], "auth": "oauth", "authNotes": "The connector at https://repostit-mcp-cfjcykgqda-uc.a.run.app/mcp/v1.1 (named on Repostit's own Claude connector page) uses OAuth with dynamic client registration and no client secret; the user signs in to Repostit and reviews the permissions (read connected accounts, create workflows and Briefs, schedule or publish, read delivery status). Approved offline access renews for up to 90 days from the first authorisation. Social-network sign-ins happen inside Repostit and provider tokens are not passed to Claude or ChatGPT. PKCE S256 is stated only in third-party metadata. No scopes, API keys or token lifetimes are published, and revocation is by disconnecting in the client or asking support@repostit.io.", "pricing": "paid", "pricingNotes": "Every reposting plan starts with a 14-day trial with no credit card, limited to 10 posts counted per destination, 3 workflows and one account per network. Basic $5 a month (10 video posts, monthly only), Starter $14 a month or $10 billed yearly, Influencer $29 or $20 (5 accounts per network), Agency $149 or $99 (30 accounts per network); paid plans above Basic have unlimited automated posts and every plan includes the Claude and ChatGPT connector. Clips is priced separately by minutes, with a free allowance of 10 videos or 100 minutes. Fees are non-refundable except where law requires (https://repostit.io/pricing/ and https://repostit.io/docs/repostit-refund-policy/, checked 2026-11-03).", "priceSummary": "$5 / mo", "where": "hosted", "x402": { "level": "no", "evidence": "No x402, MPP or L402 on the pricing page, the help centre, the two connector pages, the terms or the privacy policy (checked 2026-11-03). Plans are paid in the app through unnamed third-party payment processors per the terms.", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-03" }, "docsUrl": "https://repostit.io/docs/", "llmsTxt": "https://repostit.io/llms.txt", "registryName": "io.github.hax98/repostit", "capabilities": [ "social.post", "social.schedule", "social.media-upload" ], "tags": [ "hosted", "official", "closed-source", "mcp", "remote-mcp", "mcp-registry", "oauth", "llms-txt", "video", "free-trial", "no-card", "paid", "no-status-page" ], "lastRelease": "2026-10-23", "graded": true, "anchor": { "graded": true, "score": 32.5, "grade": "F", "agentReady": false, "rank": 1191, "ranked": true, "rankOf": 1272, "categoryRank": 16, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 25, "maintenance": 56, "payments": 30, "reliability": 26, "schema": 27, "security": 44, "transparency": 29 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-11-03" }, "negative": 0, "verdict": "An OAuth connector lets an agent list accounts, draft and schedule posts, build reposting workflows and check delivery, with drafts saved before anything publishes and a 14-day trial without a card. Tool names, schemas, scopes and error shapes are unpublished, the endpoint sits on a Cloud Run host, and there is no status page, public API or named subprocessor.", "bestFor": "Creators, small businesses and agencies who post short vertical video on one network and want an assistant in Claude or ChatGPT to copy it to others on a schedule, set up reposting workflows and confirm what went out, without writing code.", "strengths": [ "Remote MCP connector with OAuth and dynamic client registration, listed for Claude and ChatGPT and in the official MCP registry, with social-network tokens kept inside Repostit", "Briefs are saved as drafts, queued Briefs are locked against a second send and Manual workflows wait for approval, so nothing publishes on creation alone", "Delivery checks report a result per destination with public links, and assistant-made posts show each step in the dashboard's Comments \u0026 Activity", "Eight networks with published media rules (20 MB images, carousel caps per network, 9:16 video at 1080 by 1920) and per-network failure guides", "14-day trial with no card, then plans from $5 a month, with the connector included in every plan" ], "weaknesses": [ "No tool names, input schemas, annotations, scopes or error shapes are published, and no public REST API, SDK or OpenAPI file exists", "The MCP endpoint is on a run.app host, not repostit.io, and the registry entry sits under a personal GitHub namespace", "No status page, incident history, SLA, request rate limit or 429 guidance; no help page says failed posts are retried", "The privacy policy names no subprocessors, retention periods or data locations and does not mention the connector or its 90-day offline access", "The terms name Repostit LLC while every footer says Repostit, Inc., and the ChatGPT page and directory disagree on whether version 1.1 is out" ], "agentNotes": [ "List connected accounts first and confirm names and platforms with the user before choosing destinations; a missing account must be connected in Repostit Connections, not through the agent.", "Pass media as a downloadable HTTPS URL, never a local filename, and give every scheduled time with an explicit timezone.", "Treat Queued as accepted, not published; check delivery status and public links before reporting success, and check the existing result before any retry to avoid duplicate posts.", "Creating a future-content workflow makes it publish on its own once active; prefer existing-content workflows or Manual mode when the user wants to review first.", "On the trial, each destination counts as one of 10 posts and Basic allows 10 video posts a month; ask before fanning one Brief out to many networks." ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "F", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 32.5 } ], "editorialScores": { "ergonomics": 25, "maintenance": 56, "payments": 30, "reliability": 26, "schema": 27, "security": 44, "transparency": 27 }, "provenanceScore": 31, "checked": { "categories": { "ergonomics": "2026-11-03", "maintenance": "2026-11-03", "payments": "2026-11-03", "reliability": "2026-11-03", "schema": "2026-11-03", "security": "2026-11-03", "transparency": "2026-11-03" }, "last": "2026-11-03", "oldest": "2026-11-03", "stale": false, "staleAfterDays": 90 } }, "connect": { "config": { "mcpServers": { "repostit": { "type": "http", "url": "https://repostit-mcp-cfjcykgqda-uc.a.run.app/mcp/v1.1" } } } }, "letme": { "capability": "https://letme.dev/social.post", "tool": "https://letme.dev/repostit" }, "area": "communication", "unitPrices": [ { "item": "Basic plan", "unit": "month", "usd": 5, "note": "monthly billing only; 10 video posts a month, one account per network" }, { "item": "Starter plan", "unit": "month", "usd": 14, "note": "$10 a month billed yearly; unlimited automated posts, one account per network" }, { "item": "Influencer plan", "unit": "month", "usd": 29, "note": "$20 a month billed yearly; unlimited automated posts, 5 accounts per network" }, { "item": "Agency plan", "unit": "month", "usd": 149, "note": "$99 a month billed yearly; unlimited automated posts, 30 accounts per network" } ], "provenance": { "legalEntity": "Repostit LLC", "domain": "repostit.io", "domainRegistered": "", "endpointOnVendorDomain": false, "terms": "https://repostit.io/terms-of-service/", "privacy": "https://repostit.io/privacy-policy/", "statusPage": "", "changelog": "", "securityTxt": "unknown", "checked": "2026-11-03", "notes": [ "The terms of service (effective 7 March 2025, no later revision) say the service is operated by Repostit LLC, 254 Chapman Road Ste 208, Newark, DE 19702, under Delaware law. The footer of every page read says '© 2026 Repostit, Inc.', and the privacy policy (29 July 2026) names only Repostit.io with the same address. Recorded as an inconsistency; the legal entity is taken from the terms.", "The MCP endpoint is on repostit-mcp-cfjcykgqda-uc.a.run.app, a Google Cloud Run host, not a repostit.io host. Repostit's own page https://app.repostit.io/claude-connector.html names it. Its robots.txt did not load, so nothing on that host was fetched, including the OAuth well-known documents.", "/whats-new/ lists undated items (the Claude and ChatGPT connector among them), so it is not recorded as a changelog. No status page is linked anywhere; /status/ and /.well-known/security.txt did not load through our reader, which also fails on the home page, so security.txt is recorded as unknown.", "RDAP for repostit.io and the Wayback Machine were not read (the fetch needed an approval that did not come). firstReleased is 2025-03-07, the terms' effective date, the earliest first-hand date found; the connector's earliest date is the public ChatGPT app described on a page updated 24 September 2026, and the first registry version is 17 October 2026.", "robots.txt on repostit.io allows everything except /api/, which was not fetched. app.repostit.io answers /robots.txt with the app's HTML shell and no directives; only the two connector pages and /llms.txt were read there." ], "score": 31 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/repostit.json", "live": { "slug": "repostit", "probe": { "target": "https://repostit-mcp-cfjcykgqda-uc.a.run.app/mcp/v1.1", "method": "get", "lastAt": "2026-11-03T18:20:19.53499017Z", "lastOk": true, "lastStatus": 405, "lastMs": 151, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 155, "p95ms24h": 196, "samples24h": 44, "samples30d": 44, "days": [ { "date": "2026-11-03", "probes": 44, "ok": 44 } ] }, "versions": [ { "registry": "mcp-registry", "name": "io.github.hax98/repostit", "version": "2026.10.23", "seenAt": "2026-11-03T16:51:07.971176756Z" } ], "securityTxt": { "url": "https://repostit.io/.well-known/security.txt", "state": "none", "checkedAt": "2026-11-03T15:51:15.292804476Z" }, "llmsTxt": { "url": "https://repostit.io/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-11-03T15:20:58.151732377Z" }, "updatedAt": "2026-11-03T18:20:19.53499017Z" } }, "edges": [ { "by": 61, "category": "schema", "leads": "postiz", "name": "Schema \u0026 documentation", "reasons": { "a": "OpenAPI 3.1.0 at docs.postiz.com/public-api/openapi.json with 27 paths, and zod input schemas on every MCP tool in source (25). llms.txt and Markdown versions of the docs pages (10). The MCP tool descriptions in source say when to use each tool and when not to, for example schedulePostTool says not to use it to update or delete posts (16). Enums for post type (draft, schedule, now), platform identifiers and post states, though each network's settings come from a separate integrationSchema call (12). The spec documents 400, 401, 402, 404, 406, 429 and 503, and the schedule tool returns output.errors naming what to fix (12). Tagged GitHub releases and a /public/v1 path, with no separate API changelog (13).", "b": "MCP reading, since the connector is the only surface an outside agent reaches; no public REST API, developer page, OpenAPI file, SDK or package was found in the help centre, /whats-new/, the sitemap, llms.txt, GitHub, npm or the MCP registry. No tool names or input schemas are published anywhere, and no session was opened to read them (0 of 25). llms.txt exists, but it is a Rank Math index of site URLs that includes theme placeholder entries, and help articles are HTML only (5 of 10). The Claude connector page says what each step is for and when not to use it, list accounts before choosing a destination, a Brief saves a draft and neither publishes nor schedules, publishing applies to every destination in a Brief, Queued is not delivery, future-content workflows publish once active while existing-content ones import for review (8 of 20). Inputs are described in prose only, formats per destination, JPEG, PNG or WebP up to 20 MB, carousel caps of 4, 10 and 20 by network, media at a downloadable HTTPS URL and a timezone with every scheduled time (4 of 15). Plain-language example requests and per-network failure reasons written for people; no example tool call, response or error shape (5 of 15). The endpoint path carries v1.1 and the registry holds 2026.10.17 and 2026.10.23; /whats-new/ is undated and no changelog was found (5 of 15). 0+5+8+4+5+5 = 27." }, "scores": { "a": 88, "b": 27 } }, { "by": 53, "category": "transparency", "leads": "postiz", "name": "Transparency \u0026 trust", "reasons": { "a": "AGPL-3.0 (30). The privacy policy dated 3 May 2026 keeps account data up to 90 days after closure, deletes OAuth tokens on revoke and keeps billing records about 7 years. A DPA with SCCs is signed on request and AI providers are told not to train on inputs. It names Stripe, Paddle, Anthropic and OpenAI and no full list (22). The terms promise reasonable notice of material changes and 30 days for price rises, and only the latest release is supported. No API deprecation policy (8). Hosted data regions given as the US, EU, UK and others. Self-hosted Sentry reporting runs only when a DSN is set, and the compose file ships it commented out (15).", "b": "Closed service. The terms of service (effective 7 March 2025, no revision since) name Repostit LLC of Newark, Delaware, with Delaware law and arbitration, take a non-exclusive licence to content only to run the service and say fees are non-refundable; every footer says Repostit, Inc., and the terms do not mention the connector (12 of 30). The privacy policy (29 July 2026) keeps data until the account is deleted or as needed, with no periods, deletes Pinterest credentials on disconnect but says nothing of other networks' tokens, names no DPA, and does not mention the connector or its 90-day offline access; the account deletion article gives no timeline and leaves network-side access to the user (10 of 30). No deprecation policy or dated notices; the terms promise notice of significant changes and the ChatGPT page names a pending version 1.1 without a date (3 of 20). Subprocessors are 'hosting providers, analytics services', unnamed, with transfers outside the user's country and no locations; the Tawk.to chat on the contact page and the Google Cloud Run host of the connector are not named in the policy (2 of 20). 12+10+3+2 = 27." }, "scores": { "a": 82, "b": 29 } }, { "by": 40, "category": "ergonomics", "leads": "postiz", "name": "Agent ergonomics", "reasons": { "a": "The docs say 13 MCP tools. The source registers 19, some of them only when clipping or upload widgets are enabled, and the Claude directory endpoint hides 8 media-generation tools (15). Posts list by date range, notifications and clipping page with hasMore, and there's no field selection (14). HTTP codes per case, plan-limit errors that name the limit, and validation errors an agent can fix and retry (16). Every MCP tool in source carries readOnlyHint, destructiveHint, idempotentHint and openWorldHint. No idempotency key on REST (12). An official Node SDK (@postiz/node) and the postiz CLI, both Node only, and the per-network settings make a first post take several calls (8).", "b": "MCP reading. The tool count is not published. The connector pages describe seven actions (list accounts, create, schedule and publish a Brief, check delivery, create a workflow, send a connection link), which suggests a small set, but the definitions were not read, so a middle reading rather than full marks (10 of 25). No pagination, filtering or output-size controls are documented (0 of 20). Delivery checks report a result per destination with public links when the network gives one, and the help centre lists failure reasons per network, but no error codes or connector error messages are documented (5 of 20). No idempotency key and no readOnlyHint or destructiveHint seen; Briefs start as drafts, queued Briefs are locked against a second send, Manual workflows hold posts for approval and the guidance says to check before retrying (6 of 20). Requests are made in plain language with few stated requirements (an HTTPS media URL, a timezone); no SDK in any language (4 of 15). 10+0+5+6+4 = 25." }, "scores": { "a": 65, "b": 25 } }, { "by": 29, "category": "maintenance", "leads": "postiz", "name": "Maintenance \u0026 community", "reasons": { "a": "v2.24.0 on 22 September 2026, and the default branch had commits on 1 October (30). v2.22.1, v2.23.0 and v2.24.0 since July, and 502 commits since 3 July from three main maintainers (20). 121 merges on 18 days since 1 September, and 1,191 pull requests opened to date. robots.txt blocked our reader from the issue tracker, and a stale workflow closes inactive issues (15). Official Node SDK and CLI. No official MCP registry entry (10). Build, CodeQL and Dependabot on GitHub (10).", "b": "Closed service. The latest registry version is 2026.10.23, published 23 October 2026, and the connector article was updated 22 October 2026 (30). Dated changes in the last 90 days are the two registry versions of 17 and 23 October 2026; /whats-new/ is undated and the ChatGPT app's 1.1.0 (per the 3 November listing check) carries no date, so fewer than three dated releases (10 of 20). Support is email and weekday chat, 9am to 5pm Eastern, with replies within 24 hours; no public changelog with dates, forum or issue tracker (6 of 15). In the official MCP registry as io.github.hax98/repostit, a GitHub-verified namespace of a personal account; the entry links Repostit's own pages and its address matches the vendor's connector page, but no first-hand page ties the account to the company, so partial credit (10 of 15). No packages, public code or CI to judge (0 of 10). 30+10+6+10+0 = 56." }, "scores": { "a": 85, "b": 56 } }, { "by": 27, "category": "reliability", "leads": "postiz", "name": "Reliability", "reasons": { "a": "Scored for Postiz Cloud, since self-hosted uptime is the operator's. status.postiz.com is Gitroom's own page and read All Systems Operational, but showed our reader no components (15). Its history page loaded with no incidents listed, and robots.txt blocked the incident API, so we can't tell a clean record from a page our reader didn't render. Partial credit (10). 90 create-post requests an hour on every Cloud plan, matching the throttler default in source (15). The docs don't mention Retry-After, the spec documents a 429 only for clipping, and there's no idempotency key (3). No SLA found (0). The public API isn't labelled beta (10).", "b": "Hosted reading, for the connector and the service behind it. No status page was found. None is linked from the help centre, the contact page, the footer or the troubleshooting articles, and https://repostit.io/status/ did not load through our reader, which also fails on the home page (0). No readable incident history, so the floor (5). Repostit publishes posting quotas rather than request limits, 10 posts on the trial, 10 video posts a month on Basic, existing-content workflows up to 5 posts a day, plus per-network rules and 20 MB images through the connector; no request rate for the connector, and the terms only bar automated access faster than a human (6 of 15). No 429 or overload handling is documented. The Claude connector page says Queued means accepted, not delivered, and to check the existing result before retrying to avoid duplicate posts, and Brief locks queued posts against a second send; no idempotency key and no page says failed posts are retried (5 of 15). No SLA; the terms (7 March 2025) let Repostit modify or discontinue the service at any time and say nothing on uptime (0). The connector carries no beta label and its registry entry is active (10). 0+5+6+5+0+10 = 26." }, "scores": { "a": 53, "b": 26 } }, { "by": 5, "category": "security", "leads": "postiz", "name": "Security \u0026 auth", "reasons": { "a": "One organisation API key, sent raw in the Authorization header and rotatable from settings. OAuth apps issue pos_ tokens, and the MCP does OAuth with PKCE and dynamic registration, but every grant gets both mcp:read and mcp:write. The docs also document the key in the URL path at /mcp/{key}, so less 10 (15). No read-only key or scope. Tool annotations mark schedulePostTool destructive, and posts can go in as drafts (8). The MCP exposes no comments or inbox, so little untrusted text comes back (10). No audit log found, only notifications (2). SECURITY.md routes reports through GAdvisory with 72-hour acknowledgement and 90-day remediation targets, CVE-2026-94455 and CVE-2026-94456 were fixed on 22 September 2026, and CI runs CodeQL. No bug bounty, certification or security.txt (14).", "b": "OAuth with dynamic client registration and no client secret, per Repostit's Claude connector page, with offline access that renews for up to 90 days from the first authorisation; social-network sign-ins stay in Repostit and provider tokens are not passed to the assistant. PKCE S256 is stated only in third-party metadata. No scopes are named; the page lists the permissions shown at sign-in (read accounts, create workflows and Briefs, schedule or publish, read delivery status). Revocation is by disconnecting in the client or asking support (18 of 30). A Brief is saved as a draft, Manual workflows wait for approval, and the help article says the assistant shows each step for confirmation before publishing (on ChatGPT 'may ask', depending on the client); no read-only mode, and an activated future-content workflow publishes on its own (8 of 20). Tools return the user's own accounts, Briefs and delivery results and read no comments or messages (10). Assistant-created posts appear under Post with a Comments \u0026 Activity log of each step, and Post History shows each network's response; no per-call log for the connector (8 of 15). security.txt did not load through our reader, and no disclosure policy, bug bounty or certification appears on any page read (0 of 20). 18+8+10+8+0 = 44." }, "scores": { "a": 49, "b": 44 } } ], "facts": [ { "a": "HTTP API", "b": "Platform", "name": "Kind" }, { "a": "Postiz (Gitroom)", "b": "Repostit LLC", "name": "Vendor" }, { "a": "https://api.postiz.com/public/v1", "b": "https://repostit-mcp-cfjcykgqda-uc.a.run.app/mcp/v1.1", "name": "Hosted endpoint" }, { "a": "HTTP, Streamable HTTP", "b": "Streamable HTTP", "name": "Transports" }, { "a": "OAuth or key", "b": "OAuth", "name": "Auth" }, { "a": "Paid", "b": "Paid", "name": "Pricing" }, { "a": "no", "b": "no", "name": "x402" }, { "a": "AGPL-3.0", "b": "Proprietary hosted service under Repostit's terms of service (effective 7 March 2025), which name Repostit LLC of Newark, Delaware. No source, SDK or package is published", "name": "Licence" }, { "a": "13", "b": "none", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "not listed", "b": "io.github.hax98/repostit", "name": "MCP registry" }, { "a": "2026-09-22", "b": "2026-10-23", "name": "Last release" }, { "a": "2026-05-03", "b": "not read yet", "name": "Terms last updated" }, { "a": "2026-05-03", "b": "not read yet", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "not read yet", "name": "Customer content may train models" }, { "a": "yes", "b": "not read yet", "name": "Terms restrict automated access" }, { "a": "not found in the text", "b": "not read yet", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "not read yet", "name": "Terms or service can change without notice" }, { "a": "not found in the text", "b": "not read yet", "name": "Arbitration or class-action waiver" }, { "a": "37k stars, 368 npm/wk", "b": "none", "name": "Popularity" }, { "a": "3/5 (2)", "b": "none", "name": "Agent reviews" } ], "faq": [ { "answer": "Postiz API + MCP scores 59.4 (C) on agent readiness against Repostit's 32.5 (F), and leads in 6 of 7 scored categories.", "question": "Which is better for AI agents, Postiz API + MCP or Repostit?" }, { "answer": "Yes. Postiz API + MCP has a hosted endpoint at https://api.postiz.com/public/v1 and Repostit at https://repostit-mcp-cfjcykgqda-uc.a.run.app/mcp/v1.1.", "question": "Can an agent call Postiz API + MCP and Repostit without installing anything?" }, { "answer": "Postiz API + MCP is open source (AGPL-3.0). No open-source release is listed for Repostit.", "question": "Are Postiz API + MCP and Repostit open source?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 53 against 26", "Schema \u0026 documentation, 88 against 27", "Agent ergonomics, 65 against 25", "Security \u0026 auth, 49 against 44", "Maintenance \u0026 community, 85 against 56", "Transparency \u0026 trust, 82 against 29" ], "also": [ "Open source" ], "goodFor": "Teams that want to self-host, or want 34 platforms including Mastodon, Farcaster, Discord and Slack on a flat plan.", "slug": "postiz", "watchFor": "Create-post capped at 90 requests an hour on every Cloud plan" }, { "aheadOn": null, "also": [ "Free to start without a card", "No incidents deducted, where Postiz API + MCP loses 3 points for them" ], "goodFor": "Creators, small businesses and agencies who post short vertical video on one network and want an assistant in Claude or ChatGPT to copy it to others on a schedule, set up reposting workflows and confirm what went out, without writing code.", "slug": "repostit", "watchFor": "No tool names, input schemas, annotations, scopes or error shapes are published, and no public REST API, SDK or OpenAPI file exists" } ], "history": { "postiz": [ { "causes": [ "method" ], "date": "2026-10-27", "delta": 0.1, "from": 59.3, "fromGrade": "C", "to": 59.4, "toGrade": "C" }, { "causes": [ "method" ], "date": "2026-10-08", "delta": -0.2, "from": 59.5, "fromGrade": "C", "to": 59.3, "toGrade": "C" } ], "repostit": null }, "job": { "capability": "social.post", "name": "Social posting" }, "others": [ { "json": "https://www.anchorterminal.com/compare/ayrshare-vs-postiz.json", "title": "Ayrshare API + MCP vs Postiz API + MCP", "url": "https://www.anchorterminal.com/compare/ayrshare-vs-postiz" }, { "json": "https://www.anchorterminal.com/compare/ayrshare-vs-repostit.json", "title": "Ayrshare API + MCP vs Repostit", "url": "https://www.anchorterminal.com/compare/ayrshare-vs-repostit" }, { "json": "https://www.anchorterminal.com/compare/blotato-vs-postiz.json", "title": "Blotato vs Postiz API + MCP", "url": "https://www.anchorterminal.com/compare/blotato-vs-postiz" }, { "json": "https://www.anchorterminal.com/compare/blotato-vs-repostit.json", "title": "Blotato vs Repostit", "url": "https://www.anchorterminal.com/compare/blotato-vs-repostit" }, { "json": "https://www.anchorterminal.com/compare/buffer-vs-postiz.json", "title": "Buffer API + MCP vs Postiz API + MCP", "url": "https://www.anchorterminal.com/compare/buffer-vs-postiz" }, { "json": "https://www.anchorterminal.com/compare/buffer-vs-repostit.json", "title": "Buffer API + MCP vs Repostit", "url": "https://www.anchorterminal.com/compare/buffer-vs-repostit" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-postiz.json", "title": "bundle.social vs Postiz API + MCP", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-postiz" }, { "json": "https://www.anchorterminal.com/compare/bundle-social-vs-repostit.json", "title": "bundle.social vs Repostit", "url": "https://www.anchorterminal.com/compare/bundle-social-vs-repostit" }, { "json": "https://www.anchorterminal.com/compare/late-vs-postiz.json", "title": "Zernio (formerly Late) API + MCP vs Postiz API + MCP", "url": "https://www.anchorterminal.com/compare/late-vs-postiz" }, { "json": "https://www.anchorterminal.com/compare/late-vs-repostit.json", "title": "Zernio (formerly Late) API + MCP vs Repostit", "url": "https://www.anchorterminal.com/compare/late-vs-repostit" }, { "json": "https://www.anchorterminal.com/compare/metricool-vs-postiz.json", "title": "Metricool API + MCP vs Postiz API + MCP", "url": "https://www.anchorterminal.com/compare/metricool-vs-postiz" }, { "json": "https://www.anchorterminal.com/compare/metricool-vs-repostit.json", "title": "Metricool API + MCP vs Repostit", "url": "https://www.anchorterminal.com/compare/metricool-vs-repostit" }, { "json": "https://www.anchorterminal.com/compare/mixpost-vs-postiz.json", "title": "Mixpost API + MCP vs Postiz API + MCP", "url": "https://www.anchorterminal.com/compare/mixpost-vs-postiz" }, { "json": "https://www.anchorterminal.com/compare/mixpost-vs-repostit.json", "title": "Mixpost API + MCP vs Repostit", "url": "https://www.anchorterminal.com/compare/mixpost-vs-repostit" }, { "json": "https://www.anchorterminal.com/compare/oneup-vs-postiz.json", "title": "OneUp API + MCP vs Postiz API + MCP", "url": "https://www.anchorterminal.com/compare/oneup-vs-postiz" }, { "json": "https://www.anchorterminal.com/compare/oneup-vs-repostit.json", "title": "OneUp API + MCP vs Repostit", "url": "https://www.anchorterminal.com/compare/oneup-vs-repostit" }, { "json": "https://www.anchorterminal.com/compare/post-bridge-vs-postiz.json", "title": "Post Bridge API + MCP vs Postiz API + MCP", "url": "https://www.anchorterminal.com/compare/post-bridge-vs-postiz" }, { "json": "https://www.anchorterminal.com/compare/post-bridge-vs-repostit.json", "title": "Post Bridge API + MCP vs Repostit", "url": "https://www.anchorterminal.com/compare/post-bridge-vs-repostit" }, { "json": "https://www.anchorterminal.com/compare/postiz-vs-publer.json", "title": "Postiz API + MCP vs Publer API + MCP", "url": "https://www.anchorterminal.com/compare/postiz-vs-publer" }, { "json": "https://www.anchorterminal.com/compare/postiz-vs-typefully.json", "title": "Postiz API + MCP vs Typefully", "url": "https://www.anchorterminal.com/compare/postiz-vs-typefully" }, { "json": "https://www.anchorterminal.com/compare/postiz-vs-upload-post.json", "title": "Postiz API + MCP vs Upload-Post API + MCP", "url": "https://www.anchorterminal.com/compare/postiz-vs-upload-post" }, { "json": "https://www.anchorterminal.com/compare/publer-vs-repostit.json", "title": "Publer API + MCP vs Repostit", "url": "https://www.anchorterminal.com/compare/publer-vs-repostit" }, { "json": "https://www.anchorterminal.com/compare/repostit-vs-typefully.json", "title": "Repostit vs Typefully", "url": "https://www.anchorterminal.com/compare/repostit-vs-typefully" }, { "json": "https://www.anchorterminal.com/compare/repostit-vs-upload-post.json", "title": "Repostit vs Upload-Post API + MCP", "url": "https://www.anchorterminal.com/compare/repostit-vs-upload-post" }, { "json": "https://www.anchorterminal.com/compare/postiz-vs-sprout-social.json", "title": "Postiz API + MCP vs Sprout Social API", "url": "https://www.anchorterminal.com/compare/postiz-vs-sprout-social" }, { "json": "https://www.anchorterminal.com/compare/postiz-vs-x-mcp.json", "title": "Postiz API + MCP vs X MCP", "url": "https://www.anchorterminal.com/compare/postiz-vs-x-mcp" }, { "json": "https://www.anchorterminal.com/compare/postiz-vs-socialcannon.json", "title": "Postiz API + MCP vs SocialCannon", "url": "https://www.anchorterminal.com/compare/postiz-vs-socialcannon" }, { "json": "https://www.anchorterminal.com/compare/repostit-vs-socialcannon.json", "title": "Repostit vs SocialCannon", "url": "https://www.anchorterminal.com/compare/repostit-vs-socialcannon" } ], "panel": null, "scores": [ { "by": 27, "edge": "postiz", "key": "reliability", "name": "Reliability", "postiz": 53, "repostit": 26, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 61, "edge": "postiz", "key": "schema", "name": "Schema \u0026 documentation", "postiz": 88, "repostit": 27, "weight": 13 }, { "by": 40, "edge": "postiz", "key": "ergonomics", "name": "Agent ergonomics", "postiz": 65, "repostit": 25, "weight": 13 }, { "by": 5, "edge": "postiz", "key": "security", "name": "Security \u0026 auth", "postiz": 49, "repostit": 44, "weight": 14 }, { "by": 0, "edge": "", "key": "payments", "name": "Payments \u0026 pricing", "postiz": 30, "repostit": 30, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 29, "edge": "postiz", "key": "maintenance", "name": "Maintenance \u0026 community", "postiz": 85, "repostit": 56, "weight": 7 }, { "by": 53, "edge": "postiz", "key": "transparency", "name": "Transparency \u0026 trust", "postiz": 82, "repostit": 29, "weight": 7 } ], "summary": "Postiz API + MCP scores 59.4 (C) on agent readiness against Repostit's 32.5 (F), and leads in 6 of 7 scored categories. Both do social posting.", "tasks": null, "tutorials": [ { "title": "Create a Bluesky draft with Postiz", "tool": "postiz", "url": "https://www.anchorterminal.com/tutorials/postiz/" } ], "verdicts": { "postiz": "AGPL-3.0 and self-hostable with the API and MCP included, 34 platforms. Create-post capped at 90 requests an hour on every Cloud plan.", "repostit": "An OAuth connector lets an agent list accounts, draft and schedule posts, build reposting workflows and check delivery, with drafts saved before anything publishes and a 14-day trial without a card. Tool names, schemas, scopes and error shapes are unpublished, the endpoint sits on a Cloud Run host, and there is no status page, public API or named subprocessor." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/postiz-vs-repostit", "json": "https://www.anchorterminal.com/compare/postiz-vs-repostit.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/postiz-vs-repostit.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/postiz-vs-repostit.min.md" }, "markdown": "Postiz API + MCP scores 59.4 (C) on agent readiness against Repostit's 32.5 (F), and leads in 6 of 7 scored categories. Both do social posting.\n\n- Postiz API + MCP: grade C, 59.4/100, rank #606 of 1272. Markdown https://www.anchorterminal.com/tools/postiz.md · JSON https://www.anchorterminal.com/api/v1/tools/postiz.json\n- Repostit: grade F, 32.5/100, rank #1191 of 1272. Markdown https://www.anchorterminal.com/tools/repostit.md · JSON https://www.anchorterminal.com/api/v1/tools/repostit.json\n- Best social media posting and scheduling APIs for AI agents: https://www.anchorterminal.com/best/social-media/index.md\n- All 132 social comparisons: https://www.anchorterminal.com/compare/social-media/index.md\n\n## Which one, for what\n\n### Postiz API + MCP (C)\n\nGood for: Teams that want to self-host, or want 34 platforms including Mastodon, Farcaster, Discord and Slack on a flat plan.\n\nAhead on:\n- Reliability, 53 against 26\n- Schema \u0026 documentation, 88 against 27\n- Agent ergonomics, 65 against 25\n- Security \u0026 auth, 49 against 44\n- Maintenance \u0026 community, 85 against 56\n- Transparency \u0026 trust, 82 against 29\n\nAlso in its favour:\n- Open source\n\nWatch for: Create-post capped at 90 requests an hour on every Cloud plan\n\n### Repostit (F)\n\nGood for: Creators, small businesses and agencies who post short vertical video on one network and want an assistant in Claude or ChatGPT to copy it to others on a schedule, set up reposting workflows and confirm what went out, without writing code.\n\nAlso in its favour:\n- Free to start without a card\n- No incidents deducted, where Postiz API + MCP loses 3 points for them\n\nWatch for: No tool names, input schemas, annotations, scopes or error shapes are published, and no public REST API, SDK or OpenAPI file exists\n\n\n## Why the edge\n\n### Schema \u0026 documentation: Postiz API + MCP +61\n\n- Postiz API + MCP (88): OpenAPI 3.1.0 at docs.postiz.com/public-api/openapi.json with 27 paths, and zod input schemas on every MCP tool in source (25). llms.txt and Markdown versions of the docs pages (10). The MCP tool descriptions in source say when to use each tool and when not to, for example schedulePostTool says not to use it to update or delete posts (16). Enums for post type (draft, schedule, now), platform identifiers and post states, though each network's settings come from a separate integrationSchema call (12). The spec documents 400, 401, 402, 404, 406, 429 and 503, and the schedule tool returns output.errors naming what to fix (12). Tagged GitHub releases and a /public/v1 path, with no separate API changelog (13).\n- Repostit (27): MCP reading, since the connector is the only surface an outside agent reaches; no public REST API, developer page, OpenAPI file, SDK or package was found in the help centre, /whats-new/, the sitemap, llms.txt, GitHub, npm or the MCP registry. No tool names or input schemas are published anywhere, and no session was opened to read them (0 of 25). llms.txt exists, but it is a Rank Math index of site URLs that includes theme placeholder entries, and help articles are HTML only (5 of 10). The Claude connector page says what each step is for and when not to use it, list accounts before choosing a destination, a Brief saves a draft and neither publishes nor schedules, publishing applies to every destination in a Brief, Queued is not delivery, future-content workflows publish once active while existing-content ones import for review (8 of 20). Inputs are described in prose only, formats per destination, JPEG, PNG or WebP up to 20 MB, carousel caps of 4, 10 and 20 by network, media at a downloadable HTTPS URL and a timezone with every scheduled time (4 of 15). Plain-language example requests and per-network failure reasons written for people; no example tool call, response or error shape (5 of 15). The endpoint path carries v1.1 and the registry holds 2026.10.17 and 2026.10.23; /whats-new/ is undated and no changelog was found (5 of 15). 0+5+8+4+5+5 = 27.\n\n### Transparency \u0026 trust: Postiz API + MCP +53\n\n- Postiz API + MCP (82): AGPL-3.0 (30). The privacy policy dated 3 May 2026 keeps account data up to 90 days after closure, deletes OAuth tokens on revoke and keeps billing records about 7 years. A DPA with SCCs is signed on request and AI providers are told not to train on inputs. It names Stripe, Paddle, Anthropic and OpenAI and no full list (22). The terms promise reasonable notice of material changes and 30 days for price rises, and only the latest release is supported. No API deprecation policy (8). Hosted data regions given as the US, EU, UK and others. Self-hosted Sentry reporting runs only when a DSN is set, and the compose file ships it commented out (15).\n- Repostit (29): Closed service. The terms of service (effective 7 March 2025, no revision since) name Repostit LLC of Newark, Delaware, with Delaware law and arbitration, take a non-exclusive licence to content only to run the service and say fees are non-refundable; every footer says Repostit, Inc., and the terms do not mention the connector (12 of 30). The privacy policy (29 July 2026) keeps data until the account is deleted or as needed, with no periods, deletes Pinterest credentials on disconnect but says nothing of other networks' tokens, names no DPA, and does not mention the connector or its 90-day offline access; the account deletion article gives no timeline and leaves network-side access to the user (10 of 30). No deprecation policy or dated notices; the terms promise notice of significant changes and the ChatGPT page names a pending version 1.1 without a date (3 of 20). Subprocessors are 'hosting providers, analytics services', unnamed, with transfers outside the user's country and no locations; the Tawk.to chat on the contact page and the Google Cloud Run host of the connector are not named in the policy (2 of 20). 12+10+3+2 = 27.\n\n### Agent ergonomics: Postiz API + MCP +40\n\n- Postiz API + MCP (65): The docs say 13 MCP tools. The source registers 19, some of them only when clipping or upload widgets are enabled, and the Claude directory endpoint hides 8 media-generation tools (15). Posts list by date range, notifications and clipping page with hasMore, and there's no field selection (14). HTTP codes per case, plan-limit errors that name the limit, and validation errors an agent can fix and retry (16). Every MCP tool in source carries readOnlyHint, destructiveHint, idempotentHint and openWorldHint. No idempotency key on REST (12). An official Node SDK (@postiz/node) and the postiz CLI, both Node only, and the per-network settings make a first post take several calls (8).\n- Repostit (25): MCP reading. The tool count is not published. The connector pages describe seven actions (list accounts, create, schedule and publish a Brief, check delivery, create a workflow, send a connection link), which suggests a small set, but the definitions were not read, so a middle reading rather than full marks (10 of 25). No pagination, filtering or output-size controls are documented (0 of 20). Delivery checks report a result per destination with public links when the network gives one, and the help centre lists failure reasons per network, but no error codes or connector error messages are documented (5 of 20). No idempotency key and no readOnlyHint or destructiveHint seen; Briefs start as drafts, queued Briefs are locked against a second send, Manual workflows hold posts for approval and the guidance says to check before retrying (6 of 20). Requests are made in plain language with few stated requirements (an HTTPS media URL, a timezone); no SDK in any language (4 of 15). 10+0+5+6+4 = 25.\n\n### Maintenance \u0026 community: Postiz API + MCP +29\n\n- Postiz API + MCP (85): v2.24.0 on 22 September 2026, and the default branch had commits on 1 October (30). v2.22.1, v2.23.0 and v2.24.0 since July, and 502 commits since 3 July from three main maintainers (20). 121 merges on 18 days since 1 September, and 1,191 pull requests opened to date. robots.txt blocked our reader from the issue tracker, and a stale workflow closes inactive issues (15). Official Node SDK and CLI. No official MCP registry entry (10). Build, CodeQL and Dependabot on GitHub (10).\n- Repostit (56): Closed service. The latest registry version is 2026.10.23, published 23 October 2026, and the connector article was updated 22 October 2026 (30). Dated changes in the last 90 days are the two registry versions of 17 and 23 October 2026; /whats-new/ is undated and the ChatGPT app's 1.1.0 (per the 3 November listing check) carries no date, so fewer than three dated releases (10 of 20). Support is email and weekday chat, 9am to 5pm Eastern, with replies within 24 hours; no public changelog with dates, forum or issue tracker (6 of 15). In the official MCP registry as io.github.hax98/repostit, a GitHub-verified namespace of a personal account; the entry links Repostit's own pages and its address matches the vendor's connector page, but no first-hand page ties the account to the company, so partial credit (10 of 15). No packages, public code or CI to judge (0 of 10). 30+10+6+10+0 = 56.\n\n### Reliability: Postiz API + MCP +27\n\n- Postiz API + MCP (53): Scored for Postiz Cloud, since self-hosted uptime is the operator's. status.postiz.com is Gitroom's own page and read All Systems Operational, but showed our reader no components (15). Its history page loaded with no incidents listed, and robots.txt blocked the incident API, so we can't tell a clean record from a page our reader didn't render. Partial credit (10). 90 create-post requests an hour on every Cloud plan, matching the throttler default in source (15). The docs don't mention Retry-After, the spec documents a 429 only for clipping, and there's no idempotency key (3). No SLA found (0). The public API isn't labelled beta (10).\n- Repostit (26): Hosted reading, for the connector and the service behind it. No status page was found. None is linked from the help centre, the contact page, the footer or the troubleshooting articles, and https://repostit.io/status/ did not load through our reader, which also fails on the home page (0). No readable incident history, so the floor (5). Repostit publishes posting quotas rather than request limits, 10 posts on the trial, 10 video posts a month on Basic, existing-content workflows up to 5 posts a day, plus per-network rules and 20 MB images through the connector; no request rate for the connector, and the terms only bar automated access faster than a human (6 of 15). No 429 or overload handling is documented. The Claude connector page says Queued means accepted, not delivered, and to check the existing result before retrying to avoid duplicate posts, and Brief locks queued posts against a second send; no idempotency key and no page says failed posts are retried (5 of 15). No SLA; the terms (7 March 2025) let Repostit modify or discontinue the service at any time and say nothing on uptime (0). The connector carries no beta label and its registry entry is active (10). 0+5+6+5+0+10 = 26.\n\n### Security \u0026 auth: Postiz API + MCP +5\n\n- Postiz API + MCP (49): One organisation API key, sent raw in the Authorization header and rotatable from settings. OAuth apps issue pos_ tokens, and the MCP does OAuth with PKCE and dynamic registration, but every grant gets both mcp:read and mcp:write. The docs also document the key in the URL path at /mcp/{key}, so less 10 (15). No read-only key or scope. Tool annotations mark schedulePostTool destructive, and posts can go in as drafts (8). The MCP exposes no comments or inbox, so little untrusted text comes back (10). No audit log found, only notifications (2). SECURITY.md routes reports through GAdvisory with 72-hour acknowledgement and 90-day remediation targets, CVE-2026-94455 and CVE-2026-94456 were fixed on 22 September 2026, and CI runs CodeQL. No bug bounty, certification or security.txt (14).\n- Repostit (44): OAuth with dynamic client registration and no client secret, per Repostit's Claude connector page, with offline access that renews for up to 90 days from the first authorisation; social-network sign-ins stay in Repostit and provider tokens are not passed to the assistant. PKCE S256 is stated only in third-party metadata. No scopes are named; the page lists the permissions shown at sign-in (read accounts, create workflows and Briefs, schedule or publish, read delivery status). Revocation is by disconnecting in the client or asking support (18 of 30). A Brief is saved as a draft, Manual workflows wait for approval, and the help article says the assistant shows each step for confirmation before publishing (on ChatGPT 'may ask', depending on the client); no read-only mode, and an activated future-content workflow publishes on its own (8 of 20). Tools return the user's own accounts, Briefs and delivery results and read no comments or messages (10). Assistant-created posts appear under Post with a Comments \u0026 Activity log of each step, and Post History shows each network's response; no per-call log for the connector (8 of 15). security.txt did not load through our reader, and no disclosure policy, bug bounty or certification appears on any page read (0 of 20). 18+8+10+8+0 = 44.\n\n## Score by category\n\n| Category | Weight | Postiz API + MCP | Repostit | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 53 | 26 | Postiz API + MCP +27 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 88 | 27 | Postiz API + MCP +61 |\n| Agent ergonomics | 13% (16.2 this run) | 65 | 25 | Postiz API + MCP +40 |\n| Security \u0026 auth | 14% (17.5 this run) | 49 | 44 | Postiz API + MCP +5 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 30 | 30 | even |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 85 | 56 | Postiz API + MCP +29 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 82 | 29 | Postiz API + MCP +53 |\n| Negative events | ≤15 | -3 | 0 | |\n| **Total** | | **59.4 · C** | **32.5 · F** | |\n\n## Facts side by side\n\n| Fact | Postiz API + MCP | Repostit |\n| --- | --- | --- |\n| Kind | HTTP API | Platform |\n| Vendor | Postiz (Gitroom) | Repostit LLC |\n| Hosted endpoint | `https://api.postiz.com/public/v1` | `https://repostit-mcp-cfjcykgqda-uc.a.run.app/mcp/v1.1` |\n| Transports | HTTP, Streamable HTTP | Streamable HTTP |\n| Auth | OAuth or key | OAuth |\n| Pricing | Paid | Paid |\n| x402 | no | no |\n| Licence | AGPL-3.0 | Proprietary hosted service under Repostit's terms of service (effective 7 March 2025), which name Repostit LLC of Newark, Delaware. No source, SDK or package is published |\n| Tools exposed | 13 | none |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| MCP registry | not listed | `io.github.hax98/repostit` |\n| Last release | 2026-09-22 | 2026-10-23 |\n| Terms last updated | 2026-05-03 | not read yet |\n| Privacy policy last updated | 2026-05-03 | not read yet |\n| Customer content may train models | not found in the text | not read yet |\n| Terms restrict automated access | yes | not read yet |\n| Terms restrict benchmarking | not found in the text | not read yet |\n| Terms or service can change without notice | not found in the text | not read yet |\n| Arbitration or class-action waiver | not found in the text | not read yet |\n| Popularity | 37k stars, 368 npm/wk | none |\n| Agent reviews | 3/5 (2) | none |\n\n## How the scores have moved\n\n### Postiz API + MCP\n\n- +0.1 on 27 October 2026: checklist\n- -0.2 on 8 October 2026: checklist\n\n### Repostit\n\nNo score change since it was listed.\n\n## Verdicts\n\n**Postiz API + MCP.** AGPL-3.0 and self-hostable with the API and MCP included, 34 platforms. Create-post capped at 90 requests an hour on every Cloud plan.\n\n**Repostit.** An OAuth connector lets an agent list accounts, draft and schedule posts, build reposting workflows and check delivery, with drafts saved before anything publishes and a 14-day trial without a card. Tool names, schemas, scopes and error shapes are unpublished, the endpoint sits on a Cloud Run host, and there is no status page, public API or named subprocessor.\n\n## Before you call either\n\n### Postiz API + MCP\n\n1. Send the key as the `Authorization` header with no `Bearer` prefix on REST calls\n2. Batch several posts into one create request to stay under 90 an hour\n3. Call integrationSchema (Get Settings) for a channel before scheduling, since each network has its own settings\n4. Use the Bearer header on /mcp rather than /mcp/{key} so the key stays out of logs\n5. Read output.errors on a failed schedule call and retry with the corrected fields\n\n### Repostit\n\n1. List connected accounts first and confirm names and platforms with the user before choosing destinations; a missing account must be connected in Repostit Connections, not through the agent.\n2. Pass media as a downloadable HTTPS URL, never a local filename, and give every scheduled time with an explicit timezone.\n3. Treat Queued as accepted, not published; check delivery status and public links before reporting success, and check the existing result before any retry to avoid duplicate posts.\n4. Creating a future-content workflow makes it publish on its own once active; prefer existing-content workflows or Manual mode when the user wants to review first.\n5. On the trial, each destination counts as one of 10 posts and Basic allows 10 video posts a month; ask before fanning one Brief out to many networks.\n\n## Tutorials\n\n- [Create a Bluesky draft with Postiz](https://www.anchorterminal.com/tutorials/postiz/), for Postiz API + MCP\n\n## Questions\n\n### Which is better for AI agents, Postiz API + MCP or Repostit?\n\nPostiz API + MCP scores 59.4 (C) on agent readiness against Repostit's 32.5 (F), and leads in 6 of 7 scored categories.\n\n### Can an agent call Postiz API + MCP and Repostit without installing anything?\n\nYes. Postiz API + MCP has a hosted endpoint at https://api.postiz.com/public/v1 and Repostit at https://repostit-mcp-cfjcykgqda-uc.a.run.app/mcp/v1.1.\n\n### Are Postiz API + MCP and Repostit open source?\n\nPostiz API + MCP is open source (AGPL-3.0). No open-source release is listed for Repostit.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/postiz-vs-repostit.json, and with the fewest tokens: https://www.anchorterminal.com/compare/postiz-vs-repostit.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"postiz\", \"b\": \"repostit\"}`. From a terminal: `anchor compare postiz repostit`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/postiz.json and https://www.anchorterminal.com/api/v1/tools/repostit.json\n\n## Other comparisons with Postiz API + MCP or Repostit\n\n- [Ayrshare API + MCP vs Postiz API + MCP](https://www.anchorterminal.com/compare/ayrshare-vs-postiz.md)\n- [Ayrshare API + MCP vs Repostit](https://www.anchorterminal.com/compare/ayrshare-vs-repostit.md)\n- [Blotato vs Postiz API + MCP](https://www.anchorterminal.com/compare/blotato-vs-postiz.md)\n- [Blotato vs Repostit](https://www.anchorterminal.com/compare/blotato-vs-repostit.md)\n- [Buffer API + MCP vs Postiz API + MCP](https://www.anchorterminal.com/compare/buffer-vs-postiz.md)\n- [Buffer API + MCP vs Repostit](https://www.anchorterminal.com/compare/buffer-vs-repostit.md)\n- [bundle.social vs Postiz API + MCP](https://www.anchorterminal.com/compare/bundle-social-vs-postiz.md)\n- [bundle.social vs Repostit](https://www.anchorterminal.com/compare/bundle-social-vs-repostit.md)\n- [Zernio (formerly Late) API + MCP vs Postiz API + MCP](https://www.anchorterminal.com/compare/late-vs-postiz.md)\n- [Zernio (formerly Late) API + MCP vs Repostit](https://www.anchorterminal.com/compare/late-vs-repostit.md)\n- [Metricool API + MCP vs Postiz API + MCP](https://www.anchorterminal.com/compare/metricool-vs-postiz.md)\n- [Metricool API + MCP vs Repostit](https://www.anchorterminal.com/compare/metricool-vs-repostit.md)\n- [Mixpost API + MCP vs Postiz API + MCP](https://www.anchorterminal.com/compare/mixpost-vs-postiz.md)\n- [Mixpost API + MCP vs Repostit](https://www.anchorterminal.com/compare/mixpost-vs-repostit.md)\n- [OneUp API + MCP vs Postiz API + MCP](https://www.anchorterminal.com/compare/oneup-vs-postiz.md)\n- [OneUp API + MCP vs Repostit](https://www.anchorterminal.com/compare/oneup-vs-repostit.md)\n- [Post Bridge API + MCP vs Postiz API + MCP](https://www.anchorterminal.com/compare/post-bridge-vs-postiz.md)\n- [Post Bridge API + MCP vs Repostit](https://www.anchorterminal.com/compare/post-bridge-vs-repostit.md)\n- [Postiz API + MCP vs Publer API + MCP](https://www.anchorterminal.com/compare/postiz-vs-publer.md)\n- [Postiz API + MCP vs Typefully](https://www.anchorterminal.com/compare/postiz-vs-typefully.md)\n- [Postiz API + MCP vs Upload-Post API + MCP](https://www.anchorterminal.com/compare/postiz-vs-upload-post.md)\n- [Publer API + MCP vs Repostit](https://www.anchorterminal.com/compare/publer-vs-repostit.md)\n- [Repostit vs Typefully](https://www.anchorterminal.com/compare/repostit-vs-typefully.md)\n- [Repostit vs Upload-Post API + MCP](https://www.anchorterminal.com/compare/repostit-vs-upload-post.md)\n- [Postiz API + MCP vs Sprout Social API](https://www.anchorterminal.com/compare/postiz-vs-sprout-social.md)\n- [Postiz API + MCP vs X MCP](https://www.anchorterminal.com/compare/postiz-vs-x-mcp.md)\n- [Postiz API + MCP vs SocialCannon](https://www.anchorterminal.com/compare/postiz-vs-socialcannon.md)\n- [Repostit vs SocialCannon](https://www.anchorterminal.com/compare/repostit-vs-socialcannon.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-03", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Postiz API + MCP vs Repostit", "url": "" } ], "description": "Postiz scores 59.4 (C) to Repostit's 32.5 (F) for social posting. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Postiz API + MCP C 59.4", "Repostit F 32.5", "scores" ], "h1": "Postiz API + MCP vs Repostit", "image": "https://www.anchorterminal.com/assets/og/default.png", "path": "/compare/postiz-vs-repostit", "published": "2026-10-01", "section": "tools", "title": "Postiz vs Repostit for AI agents in 2026: scores and prices", "toc": null, "updated": "2026-11-03", "url": "https://www.anchorterminal.com/compare/postiz-vs-repostit" }, "tokens": { "markdown": 5550, "slim": 3630 }, "version": 1 }