Skip to main content
PlugKit ships a hosted MCP server: the same capabilities as the REST API, exposed as tools an AI assistant can call. Point a client at one URL, sign in, and the assistant can list your connected accounts, publish a post, triage the inbox, or pull analytics — no code, no SDK.
Transport is Streamable HTTP (stateless). There is nothing to install and nothing to run locally — no npx, no local proxy.

​
Connect in one click

Claude

Settings → Connectors → Add custom connector → paste the URL.

Claude Code

claude mcp add -t http plugkit https://api.plugkit.co/mcp

Cursor

One-click install link, or three lines in ~/.cursor/mcp.json.

VS Code

One-click install link, or code --add-mcp.
Fastest path of all: the MCP section of the dashboard has an install button per client, a ready-to-paste config for everything else, and the list of assistants you’ve already connected.

​
Authentication

Two ways in, same account scoping as the REST API — an assistant only ever sees the profiles, accounts, posts and conversations of the PlugKit user it acts for.
The recommended path, and the only one that needs no secret in a config file. PlugKit is a full OAuth 2.1 authorization server (PKCE, no client secret): the client sends you to a PlugKit consent screen, you approve, and it stores a token of its own.You choose what you grant:Revoke any assistant at any time from Settings → Connected apps in the dashboard.

​
What an assistant can do

Publish

Draft, schedule and publish to several accounts at once, with media.

Inbox

Read and answer Instagram, WhatsApp and Telegram conversations.

Comments

Read comments on a published post and reply publicly.

Analytics

Followers, reach, and per-post metrics where the platform exposes them.

Connections

Hand the user an OAuth link to connect a new account, or disconnect one.

All 37 tools

The full reference, plus the three ready-made workflows.

​
Safety

Publishing a post, sending a message and replying to a comment are public and immediate. The server instructs the model to show the exact content and get your approval before calling those tools, but that is a prompt, not a lock — the real guarantees are the ones you control:
  • Grant mcp:read only, when you just want reporting and triage.
  • Review the accounts a connected assistant can reach with whoami.
  • Revoke from Settings → Connected apps the moment you’re done.
delete_profile cascades to its accounts, posts and conversations, and revoke_api_key can revoke the very key the connection runs on. Both are write-scope tools — another reason to hand out mcp:read by default.