
Security News
OpenCode User Hit with Hostile Backlash After Reporting Free AI Loophole
An OpenCode user faced harassment after reporting a free AI usage loophole, drawing a bitter backlash in a GitHub thread that has since been deleted.
@postquickai/mcp
Advanced tools
MCP server for PostQuickAI — schedule posts, generate content, and manage social media accounts from Claude Code, Cursor, Codex, ChatGPT, OpenClaw, and any MCP-compatible agent.
Official MCP server for PostQuickAI — schedule social media posts, generate AI content (images, videos, captions, threads), manage connected platforms, and pull analytics from any MCP-compatible agent.
40+ tools, auto-generated from the live PostQuickAI v1 API, so the tool list always stays in sync.
Works with:
claude mcp add postquickai \
-e POSTQUICKAI_API_KEY=pq_live_your_key_here \
-- npx -y @postquickai/mcp
# Verify
claude mcp list
The -- separator is required — everything after it is the command and its args. Without it, Claude Code treats the whole string as the binary name and fails to connect.
Edit claude_desktop_config.json:
~/Library/Application Support/Claude/claude_desktop_config.json%APPDATA%\Claude\claude_desktop_config.json(Or from inside Claude Desktop: Settings → Developer → Edit Config.)
{
"mcpServers": {
"postquickai": {
"command": "npx",
"args": ["-y", "@postquickai/mcp"],
"env": {
"POSTQUICKAI_API_KEY": "pq_live_your_key_here"
}
}
}
}
Fully quit (Cmd+Q / tray → Quit) and reopen.
.cursor/mcp.json (project) or ~/.cursor/mcp.json (global)Same JSON shape as Claude Desktop.
codex mcp add postquickai -- npx -y @postquickai/mcp
Then add your API key to ~/.codex/config.toml:
[mcp_servers.postquickai]
command = "npx"
args = ["-y", "@postquickai/mcp"]
env = { POSTQUICKAI_API_KEY = "pq_live_your_key_here" }
Edit ~/.gemini/settings.json (global) or .gemini/settings.json (project):
{
"mcpServers": {
"postquickai": {
"command": "npx",
"args": ["-y", "@postquickai/mcp"],
"env": {
"POSTQUICKAI_API_KEY": "$POSTQUICKAI_API_KEY"
}
}
}
}
Gemini expands $POSTQUICKAI_API_KEY from your shell environment at runtime.
Create .vscode/mcp.json at your repo root:
{
"servers": {
"postquickai": {
"command": "npx",
"args": ["-y", "@postquickai/mcp"],
"env": {
"POSTQUICKAI_API_KEY": "${env:POSTQUICKAI_API_KEY}"
}
}
}
}
Open Copilot Chat → switch to Agent mode.
Settings → Experimental → Model Context Protocol → paste the Claude Desktop JSON above → fully restart.
Add to your character file's mcpServers block (same JSON shape as above) and restart the agent.
Keys start with pq_live_. Keep them secret — never commit them. Use environment-variable expansion ($POSTQUICKAI_API_KEY / ${env:POSTQUICKAI_API_KEY}) where your client supports it.
Auto-generated from the live OpenAPI spec at https://www.postquick.ai/openapi.json:
listContentGroups, createContentGroup, deleteContentGroup, getInstructions, updateInstructions, getGroupAnalyticslistPosts, createPost, generatePost, getPost, updatePost, publishPost, schedulePost, regeneratePost, resetPostPlatforms, deletePost, getPostAnalyticsgenerateImage (Gemini Flash, GPT Image 1.5, Nano Banana Pro)generateVideo, getVideoStatus, publishVideo, scheduleVideo, resetVideoPlatforms, updateVideo, deleteVideogenerateCaption, generateCarouselCaption, generateVideoCaption, generateHashtags, adjustTone, proofread, makeConcise, customEditlistAccounts, disconnectAccountgetMe, getUsageFor opinionated workflows on top of raw tools, install the companion kodenark/postquickai-agent-skills marketplace:
schedule-post — single-post schedulingweekly-content-batch — plan + generate + schedule a week of contentanalyze-post-performance — deep analytics summaryonboard-brand — full brand setup in one guided flowreply-thread — multi-platform thread creationdaily-digest — end-of-day publishing summaryClaude Code: /plugin marketplace add kodenark/postquickai-agent-skills
Codex: codex plugin install kodenark/postquickai-agent-skills
Teach any agent that reads AGENTS.md (Codex, Copilot, Cursor, Claude Code, Continue, Aider, OpenHands) how to use PostQuickAI by pasting the snippet from https://www.postquick.ai/agents-md into your repo root.
Almost always a config-format issue:
command must be just npx (not the whole string)args must be an array (["-y", "@postquickai/mcp"])-- separatorAPI access is included on every current plan. If you see this, your account is on a legacy plan without the API add-on: switch to a current plan at postquick.ai/pricing.
The MCP server needs the key in its env block (or expanded from a shell var). Generate one at postquick.ai/dashboard/api. Keys start with pq_live_.
See rate limits docs.
MIT
FAQs
MCP server for PostQuickAI — schedule posts, generate content, and manage social media accounts from Claude Code, Cursor, Codex, ChatGPT, OpenClaw, and any MCP-compatible agent.
The npm package @postquickai/mcp receives a total of 0 weekly downloads. As such, @postquickai/mcp popularity was classified as not popular.
We found that @postquickai/mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
An OpenCode user faced harassment after reporting a free AI usage loophole, drawing a bitter backlash in a GitHub thread that has since been deleted.

Threat Research
/Security News
319 browser extensions installed by 13.4 million users hijack searches, capture queries, and collect referral payments from Yahoo and Bing.

Threat Research
Malicious Firefox extensions mimic Phantom, Jupiter, and Bitget wallets to steal recovery phrases and private keys, with one fetching its payload remotely.