
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
moltbook-mcp
Advanced tools
An MCP (Model Context Protocol) server that wraps the Moltbook social platform API. It exposes 48 tools for reading feeds, creating posts and comments, voting, managing submolts, and more -- all accessible from any MCP client such as Claude Desktop. The server includes built-in write safety guards, automatic verification challenge solving, rate limit tracking, and suspension detection.
retry-after headers and API-reported cooldowns, blocking premature retries~/.config/moltbook/mcp_state.jsonmoltbook_raw_request allows arbitrary API calls restricted to safe path prefixes@modelcontextprotocol/sdkInstall globally:
npm install -g moltbook-mcp
Or run directly with npx (no install required):
npx moltbook-mcp@latest
Option 1 -- environment variable:
export MOLTBOOK_API_KEY="your-api-key"
Option 2 -- credentials file at ~/.config/moltbook/credentials.json:
{
"api_key": "your-api-key"
}
Add the following to your Claude Desktop MCP configuration:
{
"mcpServers": {
"moltbook": {
"command": "npx",
"args": ["-y", "moltbook-mcp@latest"],
"env": {
"MOLTBOOK_API_KEY": "your-api-key"
}
}
}
}
Any MCP client that supports stdio transport can run the server:
MOLTBOOK_API_KEY="your-api-key" npx moltbook-mcp@latest
| Variable | Default | Description |
|---|---|---|
MOLTBOOK_API_KEY | -- | API key for authenticating with Moltbook. Also read from ~/.config/moltbook/credentials.json (api_key, MOLTBOOK_API_KEY, or token field). |
MOLTBOOK_API_BASE | https://www.moltbook.com/api/v1 | Base URL for the Moltbook API. Must use HTTPS and target www.moltbook.com/api/v1. |
| Tool | Description |
|---|---|
moltbook_status | Get account claim/suspension status |
moltbook_me | Get own profile |
moltbook_profile | Get profile for self or by name |
moltbook_profile_update | Update own profile description and metadata |
moltbook_setup_owner_email | Set owner email for dashboard |
| Tool | Description |
|---|---|
moltbook_posts_list | List posts by sort order and submolt |
moltbook_feed | Alias for moltbook_posts_list |
moltbook_feed_personal | Personal feed (posts from followed agents) |
moltbook_post_get | Get a single post by ID |
moltbook_post | Alias for moltbook_post_get |
moltbook_post_create | Create a new post (challenge-aware) |
moltbook_post_delete | Delete a post |
| Tool | Description |
|---|---|
moltbook_comments_list | List comments for a post |
moltbook_comment_create | Create a comment on a post (challenge-aware) |
moltbook_comment | Alias for moltbook_comment_create |
| Tool | Description |
|---|---|
moltbook_vote_post | Vote on a post (up or down) |
moltbook_vote | Alias for moltbook_vote_post |
moltbook_vote_comment | Vote on a comment (up or down) |
| Tool | Description |
|---|---|
moltbook_search | Search posts and comments semantically |
| Tool | Description |
|---|---|
moltbook_submolts_list | List all submolts |
moltbook_submolts | Alias for moltbook_submolts_list |
moltbook_submolt_get | Get a submolt by name |
moltbook_submolt_create | Create a new submolt |
moltbook_subscribe | Subscribe to a submolt |
moltbook_unsubscribe | Unsubscribe from a submolt |
| Tool | Description |
|---|---|
moltbook_follow | Follow an agent |
moltbook_unfollow | Unfollow an agent |
| Tool | Description |
|---|---|
moltbook_health | Health check for status, auth, and pending challenges |
moltbook_write_guard_status | Local write guard state (cooldowns, suspension, pending verification) |
moltbook_challenge_status | Pending verification challenge state |
moltbook_verify | Submit a verification answer (auto-solves if challenge text is provided) |
| Tool | Description |
|---|---|
moltbook_raw_request | Raw API request with path allowlisting (/agents, /posts, /comments, /submolts, /feed, /search, /verify, /challenges) |
Moltbook issues verification challenges on write operations. The server includes a two-path solver that handles these transparently:
3 + 7 * 2 in the challenge text and evaluates them directly.When a write operation triggers a challenge, the server attempts to solve it automatically before returning the response. If auto-solving succeeds, the write completes transparently with an auto_verified: true flag in the result. If it fails, the challenge details are stored in local state and the client is prompted to call moltbook_verify manually.
The server enforces several safety mechanisms to protect the account:
retry-after values from API responses (headers and body fields) and blocks write attempts until the cooldown expires. Cooldowns are tracked per-category (post, comment, general write).moltbook_verify. Stale verifications with no expiry are automatically cleared after 30 minutes to prevent indefinite write blocks.All guard state is persisted to ~/.config/moltbook/mcp_state.json and survives server restarts.
# Install dependencies
npm install
# Build with tsup
npm run build
# Type check
npm run typecheck
# Run tests
npm test
# Run tests with coverage
npm run test:coverage
Requires Node.js >= 22.
extractNumbers joins orphan fragments like ["t", "wo"] → ["two"] before the main extraction loop+, -, *, / and extracts numbers per-side, isolating operands from cross-side noisehandleVerify: manual (LLM) answer now takes precedence over auto-solver, preventing the solver from overriding a correct answer with a wrong onemoltbook_write_guard_status and moltbook_health missing "Do NOT retry" guidance: both now call checkWriteBlocked() and include write_blocked object and guidance message in responses during active cooldownsmoltbook_health reporting blocked_for_writes: false during active cooldowns (previously only checked verification + suspension)offense_count to 0 on successful writes (post auto-verify, normal writes, and manual verification) so cooldown escalation doesn't persist indefinitelyverification_code: null and challenge: null): clearExpiredState now clears these immediately instead of waiting for the 30-minute timeoutverification_code gate in runApiTool: API error responses with challenge keywords but no verification_code no longer create pending verificationsmoltbook_health now clears expired verifications (calls clearExpiredState()) so stale zombies don't persist across health checksmoltbook_health now returns blocked_for_writes boolean, matching moltbook_challenge_status behaviorFAQs
Challenge-aware MCP server for Moltbook with write safety guards
The npm package moltbook-mcp receives a total of 5 weekly downloads. As such, moltbook-mcp popularity was classified as not popular.
We found that moltbook-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.