
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
mcp-metricool
Advanced tools
This is a Model Context Protocol (MCP) server for interacting with the Metricool API. It allows AI agents to access and analyze social media metrics and campaign data from your Metricool account.
This is a Model Context Protocol (MCP) server for interacting with the Metricool API. It allows AI agents to access and analyze social media metrics, campaign data and schedule posts to your Metricool account.
MCP is still very new and evolving, we recommend following the MCP documentation to get the MCP basics up and running.
On MacOS: ~/Library/Application Support/Claude/claude_desktop_config.json
On Windows: %APPDATA%/Claude/claude_desktop_config.json
Paste this template in the file and replace <METRICOOL_USER_TOKEN> and <METRICOOL_USER_ID> with your Metricool API and ID information:
{
"mcpServers": {
"mcp-metricool": {
"command": "uvx",
"args": [
"--upgrade",
"mcp-metricool"
],
"env": {
"METRICOOL_USER_TOKEN": "<METRICOOL_USER_TOKEN>",
"METRICOOL_USER_ID": "<METRICOOL_USER_ID>"
}
}
}
}
The server implements several tools to interact with the Metricool API:
get_brands()
get_brands_complete()
get_instagram_reels(init_date: str, end_date: str, blog_id: int)
get_instagram_posts(init_date: str, end_date: str, blog_id: int)
get_instagram_stories(init_date: str, end_date: str, blog_id: int)
get_tiktok_videos(init_date: str, end_date: str, blog_id: int)
get_facebook_reels(init_date: str, end_date: str, blog_id: int)
get_facebook_posts(init_date: str, end_date: str, blog_id: int)
get_facebook_stories(init_date: str, end_date: str, blog_id: int)
get_thread_posts(init_date: str, end_date: str, blog_id: int)
get_x_posts(init_date: str, end_date: str, blog_id: int)
get_bluesky_posts(init_date: str, end_date: str, blog_id: int)
get_linkedin_posts(init_date: str, end_date: str, blog_id: int)
get_pinterest_pins(init_date: str, end_date: str, blog_id: int)
get_youtube_videos(init_date: str, end_date: str, blog_id: int)
get_twitch_videos(init_date: str, end_date: str, blog_id: int)
get_facebookads_campaigns(init_date: str, end_date: str, blog_id: int)
get_googleads_campaigns(init_date: str, end_date: str, blog_id: int)
get_tiktokads_campaigns(init_date: str, end_date: str, blog_id: int)
get_network_competitors
get_network_competitors_posts
post_schedule_post
get_scheduled_posts
get_best_time_to_post
update_schedule_post
get_metrics
get_analytics
get_pinterest_boards
FAQs
This is a Model Context Protocol (MCP) server for interacting with the Metricool API. It allows AI agents to access and analyze social media metrics and campaign data from your Metricool account.
We found that mcp-metricool demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.