Back to MCP Trust Indexm8ven
74
/ 100
1 month ago
npm

socialneuron/mcp-server

Official MCP server, REST API & CLI for Social Neuron — create, schedule, and optimize social content with 20+ AI models across YouTube, TikTok, and more.

→ socialneuron/mcp-server· npm: @socialneuron/mcp-server· listed on npm
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

npmGlama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
🚨
Known vulnerabilities in dependencies: 2 critical, 1 high
Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.
🔐
You'll be asked for 8 credentials: APP_PASSWORD, POSTHOG_KEY, SOCIALNEURON_ANON_KEY, SOCIALNEURON_API_KEY, SOCIALNEURON_SERVICE_KEY, SUPABASE_ANON_KEY, SUPABASE_SERVICE_ROLE_KEY, VITE_SUPABASE_ANON_KEY
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// known CVEs in dependencies2 critical1 high1 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

criticalvitest@3.0.0GHSA-5xrq-8626-4rwp

When Vitest UI server is listening, arbitrary file can be read and executed

criticalvitest@3.0.0GHSA-9crc-q9x8-hgqq

Vitest allows Remote Code Execution when accessing a malicious website while Vitest API server is listening

highesbuild@0.28.0GHSA-gv7w-rqvm-qjhr

esbuild: Missing binary integrity verification in Deno module enables remote code execution via NPM_CONFIG_REGISTRY

lowesbuild@0.28.0GHSA-g7r4-m6w7-qqqr

esbuild allows arbitrary file read when running the development server on Windows

Depend on this server? Get alerted when its CVEs change.Watch this server free →
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configAPP_BASE_URL
configAPP_EMAIL
🔐 secretAPP_PASSWORD
configAPP_URL
configDO_NOT_TRACK— To disable: =1 or SOCIALNEURON_NO_TELEMETRY=1 always disables telemetry, even if SOCIALNEURON_TELEMETRY=1 is set.
configINPUT
configMCP_ALLOW_ANY_HTTPS_REDIRECT
configMCP_SERVER_URL
configOAUTH_ISSUER_URL
configPORT
configPOSTHOG_HOST
🔐 secretPOSTHOG_KEY
configSESSION_HARD_TTL_MS— 14400000 (4 h) Hard ceiling on session lifetime regardless of activity. Prevents a slow-read SSE client from pinning a session slot indefinitely.
configSN_ALLOW_SELF_HOST
configSN_CLI_QUIET
configSN_DEP_AGE_ENFORCE
configSN_DEP_MIN_AGE_DAYS
🔐 secretSOCIALNEURON_ANON_KEY
🔐 secretSOCIALNEURON_API_KEY— header "Authorization: Bearer $"
configSOCIALNEURON_APP_URL
configSOCIALNEURON_BRAND_KEYWORD
configSOCIALNEURON_CLOUD_SUPABASE_URL
configSOCIALNEURON_MAX_ASSETS_PER_RUN
configSOCIALNEURON_MAX_CREDITS_PER_RUN
configSOCIALNEURON_NO_TELEMETRY— To disable: DO_NOT_TRACK=1 or =1 always disables telemetry, even if SOCIALNEURON_TELEMETRY=1 is set.
configSOCIALNEURON_PRIVACY_POLICY_URL
configSOCIALNEURON_PROJECT_ID
🔐 secretSOCIALNEURON_SERVICE_KEY
configSOCIALNEURON_SUPABASE_URL
configSOCIALNEURON_TELEMETRY— Telemetry is off by default — opt in with =1
configSOCIALNEURON_TERMS_URL
configSOCIALNEURON_USER_ID
🔐 secretSUPABASE_ANON_KEY
🔐 secretSUPABASE_SERVICE_ROLE_KEY
configSUPABASE_URL
configTRUST_PROXY
🔐 secretVITE_SUPABASE_ANON_KEY
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 7 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/socialneuron-mcp-server-s9th7i)](https://m8ven.ai/mcp/socialneuron-mcp-server-s9th7i)
commit: 34817c78c20f5677eb9eabc0c792d68e1bd5da13
code hash: c484ad120553f016408ac871d51c4ee53eef58a922c0bef6e230c9a5b1272c1f
verified: 6/16/2026, 12:41:01 PM
view raw JSON →