@contentrabbit/mcp-server

MCPcommunitylive

v0.2.0io.github.pooriaarabMITUpdated 1mo agonpm GitHub

Content Rabbit MCP Server - AI-powered social media management tools

Endpoint healthlive

checked 12 days ago · 4188ms · auth required

100% of the last 5 checks reached this endpoint

Works in

ClaudeCursorCopilotChatGPTGemini

Inferred from the transports this listing declares (stdio, streamable-http). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.

Automatically indexed from public sources. Not yet verified by the developer on Forge.Claim this listing →

19Downloads/wk

1mo agoLast update

Needs 1 credential before it runs

CONTENTRABBIT_API_KEYAPI keyrequired
Content Rabbit team API key. The stdio server sends it as Authorization: Bearer <key> to the public REST API.

Declared by the author in the official MCP registry. Forge does not store, broker, or ever see these values — the config below is scaffolded with placeholders you fill in locally.

Package

Authorio.github.pooriaarab

LicenseMIT

Version0.2.0

Sourcenpm+mcp-registry

npm@contentrabbit/mcp-server

GitHubpooriaarab/content-rabbit

SBOMCycloneDX 1.6 ↓

Trust Status

B

60/100Good

✓Listed in Forge index+10/10

—Publisher identity verified+0/20

→ Publisher: run `forge publish` from the package repo to claim ownership

—Ed25519 publish signature+0/5

→ Included automatically when the publisher runs `forge publish`

—Domain verification+0/5

→ Publisher: host /.well-known/forge.json on the package homepage with { "publisher": "<github-login>" }

—npm Trusted Publishing (Sigstore)+0/5

→ Publish from GitHub Actions with --provenance so the attestation binds this package to this repo

—npm maintainer match+0/5

→ Earned once your identity is verified above and that login is an npm maintainer of this package

✓CVE scan · clean+30/30

✓Static analysis · clean+20/20

Paste into Claude Code, Cursor, or any AI assistant to fix all gaps

StatusCommunity-indexed

PublisherUnverified

SignatureUnsigned

Domain—

Provenance—

Dependencies✓ 60 resolved+ · none vulnerable

Tool surface25 tools · 2 privileged

Security scan✓ Cleanv0.2.0 · 1mo agoHow well does this scan work?

EvalsNone

IndexedAug 26, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.

Tools

25 tools · 2 privileged

Statically extracted from the published packagev0.2.0 · 1mo ago

Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.

Filter toolsPrivileged only

comments_add_reactionAdd an emoji reaction to an internal post comment

Add an emoji reaction to an internal post comment

No input schema was published for this tool.

comments_remove_reactionprivilegedRemove your emoji reaction from an internal post comment

Remove your emoji reaction from an internal post comment

No input schema was published for this tool.

integrations_list_connectableList the platforms that can be connected via OAuth (each flagged if it needs a server instance, e.g. Mastodon)

List the platforms that can be connected via OAuth (each flagged if it needs a server instance, e.g. Mastodon)

No input schema was published for this tool.

integrations_connectStart connecting a social integration. Returns an authorize URL for the user to open in a browser; after they authorize, the account attaches to the team.

Start connecting a social integration. Returns an authorize URL for the user to open in a browser; after they authorize, the account attaches to the team.

No input schema was published for this tool.

posts_lock_statusGet the editing-lock status of a post (who holds it, if anyone)

Get the editing-lock status of a post (who holds it, if anyone)

No input schema was published for this tool.

posts_acquire_lockAcquire the editing lock on a post so others see it as being edited. Use force to take over a lock held by someone else.

Acquire the editing lock on a post so others see it as being edited. Use force to take over a lock held by someone else.

No input schema was published for this tool.

posts_release_lockRelease the editing lock you hold on a post

Release the editing lock you hold on a post

No input schema was published for this tool.

posts_list_approvalsList the approval requests on a post

List the approval requests on a post

No input schema was published for this tool.

posts_create_approvalRequest an approval on a post from a team member (they cannot be you). Blocking approvals move the post to pending_approval.

Request an approval on a post from a team member (they cannot be you). Blocking approvals move the post to pending_approval.

No input schema was published for this tool.

posts_update_approvalApprove or reject an approval request (only the assigned approver can)

Approve or reject an approval request (only the assigned approver can)

No input schema was published for this tool.

posts_batch_createCreate several posts in one call

Create several posts in one call

No input schema was published for this tool.

posts_batch_scheduleSchedule several posts for the same time

Schedule several posts for the same time

No input schema was published for this tool.

posts_batch_updateUpdate several posts in one call

Update several posts in one call

No input schema was published for this tool.

posts_batch_update_statusSet the status of several posts at once

Set the status of several posts at once

No input schema was published for this tool.

posts_list_versionsList a post's version history, newest first

List a post's version history, newest first

No input schema was published for this tool.

posts_get_versionGet a single post version, including its content snapshot

Get a single post version, including its content snapshot

No input schema was published for this tool.

posts_compare_versionsCompare two versions of a post

Compare two versions of a post

No input schema was published for this tool.

posts_restore_versionRestore a post to a prior version (snapshots the current state first)

Restore a post to a prior version (snapshots the current state first)

No input schema was published for this tool.

posts_list_tagsList the tags attached to a post

List the tags attached to a post

No input schema was published for this tool.

posts_attach_tagAttach an existing team tag to a post

Attach an existing team tag to a post

No input schema was published for this tool.

posts_detach_tagDetach a tag from a post

Detach a tag from a post

No input schema was published for this tool.

tags_listList the team's post tags

List the team's post tags

No input schema was published for this tool.

tags_createCreate a post tag in the team

Create a post tag in the team

No input schema was published for this tool.

tags_updateRename a tag or change its color

Rename a tag or change its color

No input schema was published for this tool.

tags_deleteprivilegedDelete a tag (also removes it from any posts it is on)

Delete a tag (also removes it from any posts it is on)

No input schema was published for this tool.

25 of 25 tools published a description.

Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.

About

Content Rabbit MCP Server - AI-powered social media management tools

Keywords

mcp

Alternatives

Comparing tool surfaces…

Tools exposed

25 tools · 2 privileged · observed 2026-09-02 by static extraction. A tool surface is what one scan read on one day, not a live capability list.

comments_add_reaction
comments_remove_reactionpriv
integrations_list_connectable
integrations_connect
posts_lock_status
posts_acquire_lock
posts_release_lock
posts_list_approvals
posts_create_approval
posts_update_approval
posts_batch_create
posts_batch_schedule
posts_batch_update
posts_batch_update_status
posts_list_versions
posts_get_version
posts_compare_versions
posts_restore_version
posts_list_tags
posts_attach_tag
posts_detach_tag
tags_list
tags_create
tags_update
tags_deletepriv

Linked names open Forge’s index of every entry observed exposing that tool. Browse all indexed tools.

Dependency tree

What one Forge scan resolved from npm metadata on 2026-09-02 — observed resolution, not a publisher declaration.

60 packages resolved · 4 direct · none carrying advisories Resolution stops at depth 4 and 60 packages.

zod4.5.4
@contentrabbit/sdk1.1.0latest1 dependency
- openapi-fetch0.17.01 dependency
  - openapi-typescript-helpers0.1.0
@contentrabbit/mcp-core0.2.0latest3 dependencies
- @contentrabbit/sdk1.1.0latestshown above
- @modelcontextprotocol/sdk1.30.017 dependencies
  - ajv8.20.0+2 not drawn2 dependencies
    fast-deep-equal3.1.3
    fast-uri3.1.7
  - zod4.5.4shown above
  - cors2.8.6+2 not drawn
  - hono4.13.5
  - jose6.2.10
  - express5.2.1+27 not drawn1 dependency
    content-type1.0.5
  - raw-body3.0.2+4 not drawn
  - ajv-formats3.0.11 dependency
    ajv8.20.0shown above+2 not drawn
  - cross-spawn7.0.6+3 not drawn
  - eventsource3.0.71 dependency
    eventsource-parser3.1.1
  - content-type1.0.5shown above
  - pkce-challenge5.0.1
  - @hono/node-server2.1.1
  - json-schema-typed8.0.2
  - eventsource-parser3.1.1shown above
  - express-rate-limit8.7.0+2 not drawn
  - zod-to-json-schema3.25.2
- zod4.5.4shown above
@modelcontextprotocol/sdk1.30.0shown above

The crawl stopped at the 60-package limit. The rest of the tree was never resolved.

36 more resolved packages are not drawn here (display cap: 24). Every dependency carrying an advisory is drawn regardless of the cap. Full inventory (CycloneDX SBOM)

Declared but not resolved

57 declared dependencies never landed in the tree. They are missing from Forge's resolution, not from the package.

package cap reached: 57

ip-address ^10.2.0 — required by express-rate-limit@8.7.0package cap reached
side-channel ^1.1.1 — required by qs@6.16.0package cap reached
es-define-property ^1.0.1 — required by qs@6.16.0package cap reached
wrappy 1 — required by once@1.4.0package cap reached
debug ^4.4.3 — required by send@1.2.1package cap reached
encodeurl ^2.0.0 — required by send@1.2.1package cap reached
escape-html ^1.0.3 — required by send@1.2.1package cap reached
etag ^1.8.1 — required by send@1.2.1package cap reached
fresh ^2.0.0 — required by send@1.2.1package cap reached
http-errors ^2.0.1 — required by send@1.2.1package cap reached
mime-types ^3.0.2 — required by send@1.2.1package cap reached
ms ^2.1.3 — required by send@1.2.1package cap reached

+45 more not listed. The counts by reason above cover all of them.

Not followed: peerDependencies. This tree covers runtime dependencies only, so anything those pull in was never resolved.