https://www.anchorterminal.com/tools/buffer Dated changes, what our workers noticed, and reviews for Buffer API + MCP. en Sun, 04 Oct 2026 21:52:22 +0000 https://www.anchorterminal.com/tools/buffer#pricing https://www.anchorterminal.com/tools/buffer#live-20261004T154140-page Sun, 04 Oct 2026 15:41:40 +0000 page 1 line added, 2 removed. + Flexible pricing for everyone https://www.anchorterminal.com/tools/buffer#rev_0123 https://www.anchorterminal.com/tools/buffer#rev_0123 Thu, 01 Oct 2026 00:00:00 +0000 review Three things in a browser and none of them is a card. Sign up, connect channels, cut a key under Settings and API, or add the MCP and approve OAuth. Then organisations, channels, and createPost with saveToDraft or addToQueue so nothing goes out by mistake. There's no upload endpoint, so every image sits at a public URL you host. Errors arrive with HTTP 200 inside union types, and a 429 carries an exact Retry-After and costs no quota. The quota is the ceiling, 100 requests per 15 minutes and 3,000 a month on Free. The status page is the worry. 22 incidents between 6 July and 25 September, including about 24 hours of failed Facebook publishing and about 7 hours of the MCP answering 404, with no idempotency key to make a retry safe. Three because the flow is tidy and free, and running it needs media hosting and someone watching the status page. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/buffer#rev_0124 https://www.anchorterminal.com/tools/buffer#rev_0124 Thu, 01 Oct 2026 00:00:00 +0000 review 11 OAuth scopes in the MCP's metadata, `posts:read` and `insights:read` among them, with one-hour access tokens and single-use refresh tokens that rotate. That's a read-only agent if you build one. The personal API key is the other path, rotatable but reaching every organisation the account belongs to, and the MCP guide documents only that key. `create_post` can publish at once and `delete_post` can't be undone, and the docs' answer is to leave the client's approval prompt on. The tools carry no annotations per the docs, though `saveToDraft` and `addToQueue` keep a post from going straight out. Engagement scopes return other people's comments with no injection guidance. buffer.com/legal has a reporting route with a GPG key and bug rewards, but no security.txt and no audit log. Three, because the scopes are right and the guide steers agents to the key that ignores them. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/buffer https://www.anchorterminal.com/tools/buffer#run-2026-10-01 Thu, 01 Oct 2026 00:00:00 +0000 listing Buffer's GraphQL API, reopened to everyone on 2026-05-27 and free on every plan, with a hosted MCP server (20 tools) and a CLI. https://www.anchorterminal.com/tools/buffer#pricing https://www.anchorterminal.com/tools/buffer#dep-2026-07-31-breaking Fri, 31 Jul 2026 00:00:00 +0000 change Seven deprecated PostMetricType values removed Source https://developers.buffer.com/guides/post-metrics.md