Pendpost MCP server
io.github.pendpost/pendpost·v2.10.0·12 starsLocal-first social MCP: an agent drafts and schedules posts; you approve before anything publishes.
not scanned yet
12 stars
Reviews
Write oneNobody has reviewed Pendpost yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Pendpost tools
No tool declarations could be read from the package source. They show once the server is installed.
How Pendpost compares
Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 91/100
- higher than 88% of 4,460 AI and agents servers
- GitHub stars
- 12
- more than 85% of 2,711 AI and agents servers
Release history: 7 versions in the registry since 2026-09-05, latest 2026-11-02, typically one every 13 days.
Install Pendpost in Claude Code, Cursor or VS Code
Runs npx -y pendpost on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add pendpost -- npx -y pendpost
What the publisher says
From the Pendpost repository's README, as published. We do not edit it. Read it on GitHub
pendpost
Agent-operated social media with a human approval gate.
pendpost is a free, open-source (MIT), local-first social media planner where an AI agent drafts and schedules posts across Instagram, Facebook, LinkedIn, YouTube, X, Telegram, Discord, Mastodon, and Nostr, plus long-form blogs on WordPress and Ghost, with Reddit, Pinterest, TikTok, and Google Business Profile in beta, all behind a human approval gate you control. It is MCP-native: AI agents draft, lint, schedule, and queue your posts, but nothing goes live until a human approves it. It is built for developers, agencies, and technical solopreneurs who want agents to do the work without handing them the keys, and without getting accounts flagged.
Why pendpost is different (not just a scheduler)
Most "AI social" tools are schedulers with an agent bolted on. pendpost is the opposite. It is an operations layer designed around the agent-plus-human workflow, and these are the parts a scheduler does not give you:
- Human approval gate. Every post carries an approval state (draft, approved, rejected) and is fail-closed: a post with no approval will not publish. plancreatepost always creates a draft, and only approvepost or rejectpost can flip it. Nothing publishes until it's approved. By default that's you; auto-approve is owner-only and revocable.
- Anti-ban circuit breakers. A Meta error 368 (an action block) trips a breaker that halts the Meta lane and never auto-resumes, because 368 carries no machine-readable clear time. Health probes send zero Graph traffic while blocked. A cadence cap defers bursts rather than dropping them, and a lane pause kill switch is always available.
- Humanizer brand-lint. Captions are checked before publish against editable rules in rules.json. The humanizer layer flags English AI-writing tells. Errors block publish; warnings are advisory.
- Honest native scheduling. Where a platform supports it (Facebook scheduled posts, YouTube publishAt), pendpost uses native scheduling, so those posts fire even when your computer is off. Instagram, LinkedIn, and X have no native scheduling, so pendpost must be running to publish them; run it on an always-on host to cover those too. It stays honest about which cover/thumbnail mechanics actually apply per platform.
- Dual interface. A web dashboard and any MCP client drive the same contract. A parity test enforces that every capability ships on both faces.
- German and Swiss localization. Run the dashboard, digest, and notifications in English or real Swiss German (de-CH, with proper umlauts and 24-hour Swiss dates); set the language in Settings. See the localization docs.
Quickstart
One line, no setup:
npx pendpost
# then open http://127.0.0.1:8090Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Grade history
- 2026-09-19restoreB → Ascore 91
Pendpost: common questions
- Is Pendpost MCP server safe?
- Yes, by our scan: it is graded A (91/100). Read the Pendpost safety report
- How do I install Pendpost?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Pendpost need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Pendpost maintained?
- The last commit was 21 days ago (2026-10-14). The latest release is v2.10.0.
- What can I use instead of Pendpost?
- Servers from other publishers that do the same job: Basic Memory MCP server, HOL Guard MCP server and Commonly MCP server.
- How does Pendpost compare with other AI and agents MCP servers?
- safety score 91/100 (higher than 88% of 4,460 AI and agents servers); github stars 12 (more than 85% of 2,711 AI and agents servers). Full comparison.
Alternatives to Pendpost
Same job from other publishers: the closest match first, then the best rated.
- Basic MemoryLocal-first knowledge management with bi-directional LLM sync via Markdown files.not reviewedWidely usedB
- HOL GuardLocal-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server.not reviewedEstablishedA
- CommonlyRead Commonly pods and post as a Commonly agent you create, with a token from your Commonly account.not reviewedEstablishedA
- DecionisAuthorize consequential AI agent actions before executionnot reviewedEstablishedA
- Agent-Native ChatMinimal chat-first app with durable threads, actions, and the app-agent loopnot reviewedEstablishedA