Is io.github.06ketan/substack-ops safe to use?

io.github.06ketan/substack-ops has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install io.github.06ketan/substack-ops?

io.github.06ketan/substack-ops can be installed by cloning its GitHub repository and following the setup instructions in the README.

What AI clients work with io.github.06ketan/substack-ops?

io.github.06ketan/substack-ops is compatible with Claude Desktop, Cursor, Claude Code, and most MCP clients that support stdio transport. It uses stdio transport.

io.github.06ketan/substack-ops

Substack CLI + 26-tool MCP server. Your IDE drafts replies via propose_reply. No API keys.

0 tools GitHub

No known CVEs

No license

Maintenance unknown

No commit data

Untested

Transport: stdio

0 tools

Grade F

Other

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Untested on Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-06ketan-substack-ops": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-06ketan-substack-ops)](https://mcppedia.org/s/io-github-06ketan-substack-ops)

Read me

What io.github.06ketan/substack-ops does

Substack CLI + 26-tool MCP server. Your IDE drafts replies via propose_reply. No API keys.

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

15/100across 5 weighted dimensions

How we score →

0255075100

−85

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Help improve this page

This server is missing a description. Tools and install config are also missing.If you've used it, help the community.

Add information

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.06ketan/substack-ops safe to use?: io.github.06ketan/substack-ops has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.06ketan/substack-ops?: io.github.06ketan/substack-ops can be installed by cloning its GitHub repository and following the setup instructions in the README.
What AI clients work with io.github.06ketan/substack-ops?: io.github.06ketan/substack-ops is compatible with Claude Desktop, Cursor, Claude Code, and most MCP clients that support stdio transport. It uses stdio transport.

Similar servers

Others in other

View all →

Memory MCP Server98

Persistent memory using a knowledge graph

84.3k 5

Context Mode94

Privacy-first. MCP is the protocol for tool access. We're the virtualization layer for context.

8.8k 6

Fetch MCP Server93

Make HTTP requests and fetch web content

84.3k 1

Filesystem MCP Server93

Read, write, and manage files on the local filesystem

84.3k 7

MCP Security Weekly

Get CVE alerts and security updates for io.github.06ketan/substack-ops and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Other

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Untested on Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-06ketan-substack-ops": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-06ketan-substack-ops)](https://mcppedia.org/s/io-github-06ketan-substack-ops)

Read me

What io.github.06ketan/substack-ops does

Substack CLI + 26-tool MCP server. Your IDE drafts replies via propose_reply. No API keys.

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

README

substack-ops

Standalone Substack CLI + 26-tool MCP server. Your IDE drafts the replies. Zero AI API keys.

Site → substack-ops.chavan.in · Source → 06ketan/substack-ops

Posts, notes, comments, replies, reactions, restacks, recommendations, search, profiles, feeds, automations, MCP server, Textual TUI. One Python install, one binary, MIT licensed.

TL;DR — MCP-native (no API key, one command)

uvx substack-ops mcp install cursor          # or claude-desktop, claude-code, print
# Restart your host. Then in chat:
#   "list unanswered comments on post 193866852"
#   "draft a warm reply to comment 12345"
#   "post that draft"

Your host's LLM (Cursor's, Claude's) does the drafting via the propose_reply / confirm_reply tools. No ANTHROPIC_API_KEY / OPENAI_API_KEY needed.

Setup (dev / from source)

git clone https://github.com/06ketan/substack-ops && cd substack-ops
uv sync
uv sync --extra mcp     # mcp SDK for the MCP server (recommended)
uv sync --extra tui     # textual for the TUI
uv sync --extra chrome  # pycryptodome + keyring for Chrome cookie auto-grab

Auth defaults to ~/.cursor/mcp.json's mcpServers.substack-api.env. Override with env or .env. Or use one of the auth flows in auth login / auth setup.

uv run substack-ops auth verify
uv run substack-ops quickstart   # 20-step tour

Command surface

Grouped by intent. Every write defaults to --dry-run; flip with --no-dry-run (and --yes-i-mean-it for the irreversible ones). All writes land in .cache/audit.jsonl and are dedup-checked against .cache/actions.db.

Auth (4)

Command	What it does
`auth verify`	Confirm the cookie works; print authed user/pub.
`auth test`	Same as verify, exit non-zero on failure (CI-friendly).
`auth login --browser chrome\|brave`	Auto-grab cookie from local Chromium browser via macOS Keychain.
`auth login --email me@x.com`	Email magic-link → paste-the-link interactive flow.
`auth setup`	Interactive paste of `connect.sid` cookie.

Read — Posts (8)

Command	What it does
`posts list [--pub] [--limit] [--sort new\|top]`	List posts from a publication (yours by default).
`posts show <id\|slug> [--pub]`	Post metadata (title, dates, reactions, comment count).
`posts get --slug <slug> [--pub]`	Same as `show` but slug-only.
`posts content <id> [--md] [--pub]`	HTML body (auth-aware for paywalled). `--md` converts to Markdown.
`posts stats <id>`	Engagement counts — reactions, comments.
`posts search <query> [--pub] [--limit]`	Substack-side full-text search.
`posts paywalled <id> [--pub]`	Boolean: is this post paywalled?
`posts react <id> [--off] [--pub]`	Add (or remove with `--off`) a reaction. Defaults to ❤.
`posts restack <id> [--off]`	Restack a post (Substack does not support unrestack).

Read — Notes (5)

Command	What it does
`notes list [--limit]`	Your published Notes.
`notes show <id>`	One note + its reply tree.
`notes publish <body> [--no-dry-run]`	Publish a top-level Note.
`notes react <id> [--off]`	React on any Note.
`notes restack <id> [--off]`	Restack a Note.

Read + Write — Comments (5)

| Command | Wha

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

15/100across 5 weighted dimensions

How we score →

0255075100

−85

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Help improve this page

This server is missing a description. Tools and install config are also missing.If you've used it, help the community.

Add information

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.06ketan/substack-ops safe to use?: io.github.06ketan/substack-ops has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.06ketan/substack-ops?: io.github.06ketan/substack-ops can be installed by cloning its GitHub repository and following the setup instructions in the README.
What AI clients work with io.github.06ketan/substack-ops?: io.github.06ketan/substack-ops is compatible with Claude Desktop, Cursor, Claude Code, and most MCP clients that support stdio transport. It uses stdio transport.