/ 100

29 days ago

glama

social-neuron

52-tool MCP server for AI-powered social media management. Create content with 35+ AI models, distribute to multiple platforms, track analytics, and optimize with closed-loop learning.

→ socialneuron/mcp-server · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama npm

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Known vulnerabilities in dependencies: 2 critical, 1 high

Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.

🔐

You'll be asked for 8 credentials: APP_PASSWORD, POSTHOG_KEY, SOCIALNEURON_ANON_KEY, SOCIALNEURON_API_KEY, SOCIALNEURON_SERVICE_KEY, SUPABASE_ANON_KEY, SUPABASE_SERVICE_ROLE_KEY, VITE_SUPABASE_ANON_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// known CVEs in dependencies2 critical1 high1 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

criticalvitest@3.0.0GHSA-5xrq-8626-4rwp

When Vitest UI server is listening, arbitrary file can be read and executed

criticalvitest@3.0.0GHSA-9crc-q9x8-hgqq

Vitest allows Remote Code Execution when accessing a malicious website while Vitest API server is listening

highesbuild@0.28.0GHSA-gv7w-rqvm-qjhr

esbuild: Missing binary integrity verification in Deno module enables remote code execution via NPM_CONFIG_REGISTRY

lowesbuild@0.28.0GHSA-g7r4-m6w7-qqqr

esbuild allows arbitrary file read when running the development server on Windows

Depend on this server? Get alerted when its CVEs change.Watch this server free →

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configAPP_BASE_URL

configAPP_EMAIL

🔐 secretAPP_PASSWORD

configAPP_URL

configDO_NOT_TRACK— To disable: =1 or SOCIALNEURON_NO_TELEMETRY=1 always disables telemetry, even if SOCIALNEURON_TELEMETRY=1 is set.

configINPUT

configMCP_ALLOW_ANY_HTTPS_REDIRECT

configMCP_SERVER_URL

configOAUTH_ISSUER_URL

configPORT

configPOSTHOG_HOST

🔐 secretPOSTHOG_KEY

configSESSION_HARD_TTL_MS— 14400000 (4 h) Hard ceiling on session lifetime regardless of activity. Prevents a slow-read SSE client from pinning a session slot indefinitely.

configSN_ALLOW_SELF_HOST

configSN_DEP_AGE_ENFORCE

configSN_DEP_MIN_AGE_DAYS

🔐 secretSOCIALNEURON_ANON_KEY

🔐 secretSOCIALNEURON_API_KEY— header "Authorization: Bearer $"

configSOCIALNEURON_APP_URL

configSOCIALNEURON_BRAND_KEYWORD

configSOCIALNEURON_CLOUD_SUPABASE_URL

configSOCIALNEURON_MAX_ASSETS_PER_RUN

configSOCIALNEURON_MAX_CREDITS_PER_RUN

configSOCIALNEURON_NO_TELEMETRY— To disable: DO_NOT_TRACK=1 or =1 always disables telemetry, even if SOCIALNEURON_TELEMETRY=1 is set.

configSOCIALNEURON_PRIVACY_POLICY_URL

configSOCIALNEURON_PROJECT_ID

🔐 secretSOCIALNEURON_SERVICE_KEY

configSOCIALNEURON_SUPABASE_URL

configSOCIALNEURON_TELEMETRY— Telemetry is off by default — opt in with =1

configSOCIALNEURON_TERMS_URL

configSOCIALNEURON_USER_ID

🔐 secretSUPABASE_ANON_KEY

🔐 secretSUPABASE_SERVICE_ROLE_KEY

configSUPABASE_URL

configTRUST_PROXY

🔐 secretVITE_SUPABASE_ANON_KEY

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 7 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/socialneuron-mcp-server-f0qq2u)](https://m8ven.ai/mcp/socialneuron-mcp-server-f0qq2u)

commit: 2717c9c56f70c096d12e8781c0183afdd168bf50

code hash: 5512e52928c53c21e216a7e4f1ec4ba47f57c7aaa493266242edd49500b80f62

verified: 6/13/2026, 10:07:47 AM

view raw JSON →