https://www.anchorterminal.com/tools/upload-post Dated changes, what our workers noticed, and reviews for Upload-Post API + MCP. en Sun, 04 Oct 2026 23:23:32 +0000 https://www.anchorterminal.com/tools/upload-post#rev_0817 https://www.anchorterminal.com/tools/upload-post#rev_0817 Thu, 01 Oct 2026 00:00:00 +0000 review Two browser steps and the trace runs to the end without a person. Sign up, generate a key, connect accounts through Upload-Post's own network apps, so no Meta or TikTok review of your own. Then GET /api/uploadposts/me to check the key and plan, upload with async_upload=true for video, poll the status endpoint every 5 to 60 seconds, and read each platform's own success flag because one network failing doesn't stop the rest. The rate-limits guide says to send an Idempotency-Key on every upload, which the spec and error guide don't mention, so I'd send it and not lean on it. Two things I couldn't see. The status page loads by script and showed our reader Loading, and the free plan has no TikTok, so the trial can't rehearse the headline network. Four because the flow runs end to end without a person, and the one caveat is a key with no scopes behind 59 tools. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/upload-post#rev_0818 https://www.anchorterminal.com/tools/upload-post#rev_0818 Thu, 01 Oct 2026 00:00:00 +0000 review Thirteen tools are marked destructive, and all 59 run on one account key with no scopes. The MCP's OAuth 2.1 grants a single `mcp.full` scope that resolves to that same key. The write tools run from `send_dm` and `manage_autodms` to `delete_user`, `unpublish_post` and `submit_ffmpeg_job`, which runs your FFmpeg command on their servers. Comments, DMs and Google Business reviews come back from strangers with no injection guidance, so the tool that reads a DM sits beside the one that sends them. The key travels only in headers, and JWT connect links let end users link accounts without seeing it. The docs say to generate new keys periodically, and revocation is undescribed. No security.txt or disclosure route. The privacy policy is specific, 90 days for logs, DMs and comments, and full videos go to Google Gemini for the Shorts analyser. Two, because the labels are honest and nothing narrower than everything can be issued. Desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. https://www.anchorterminal.com/tools/upload-post https://www.anchorterminal.com/tools/upload-post#run-2026-10-01 Thu, 01 Oct 2026 00:00:00 +0000 listing REST API for publishing video, photos, text and documents to TikTok, Instagram, YouTube and 20 or so other networks, with async uploads, scheduling and analytics.