Blogcaster Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Blogcaster Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Cloud-hosted MCP server that lets you publish, list, and delete posts across multiple blogging platforms from any MCP-enabled client (Claude Desktop, Cursor/Cline, etc.). No local installs — just point your client at the URL.
Architecture: Secure Session-Based Storage Tokens are stored encrypted in dedicated, ephemeral Durable Objects. Each chat session gets a unique storage box.
Install via NPM for local stdio transport:
npm install -g blogcaster-mcpThen configure your MCP client:
Claude Desktop:
{
"mcpServers": {
"blogcaster": {
"command": "npx",
"args": ["-y", "blogcaster-mcp"]
}
}
}Cursor / Cline:
{
"blogcaster": {
"command": "npx",
"args": ["-y", "blogcaster-mcp"]
}
}Use the hosted Cloudflare Worker (no installation required):
MCP Endpoint:
https://blogcaster-mcp.rrpb2580.workers.dev/mcpClaude Desktop:
{
"mcpServers": {
"blogcaster": {
"command": "npx",
"args": ["-y", "mcp-remote", "https://blogcaster-mcp.rrpb2580.workers.dev/mcp"]
}
}
}Cursor / Cline:
{
"blogcaster": {
"url": "https://blogcaster-mcp.rrpb2580.workers.dev/mcp"
}
}Restart the client after saving the config.
getTokenManagementLink() — Start here. Generates a secure link to manage your tokens.publishPost(title, contentMarkdown, platforms, coverImageURL?) — publish to one or many blogs.getBlogs(platforms) — list recent posts per platform.deletePost(platforms, postId) — delete by ID on one or many platforms.getTokenManagementLink()publishPost(
title: "My First BlogCaster Demo",
contentMarkdown: "# Hello World\\nPublished via MCP!",
platforms: ["hashnode", "devto", "wordpress"],
coverImageURL: "https://example.com/cover.jpg"
)getBlogs({ platforms: ["hashnode", "devto", "wordpress"] })deletePost({ platforms: ["devto", "wordpress"], postId: "12345" })| Platform | Status | Notes |
|---|---|---|
| Hashnode | ✅ | Cover images ignored (API limitation) |
| Dev.to | ✅ | Cover image URL supported |
| WordPress | ✅ | Supports self-hosted + WordPress.com |
| Medium | 🔜 | Planned |
Do I install anything? No — everything runs on Cloudflare Workers (remote mode) or via NPM (local mode).
Where are tokens stored? Secure Durable Object storage scoped to your session.
Does it remember me tomorrow? Sessions are ephemeral. If you start a new chat, you'll need to link again (this is a security feature).
Can I self-host? Yes, deploy the Worker and point your MCP client to your URL.
Does BlogCaster store my posts? Only temporarily to publish; no retention.
# Clone the repository
git clone https://github.com/BamaCharanChhandogi/BlogCaster-MCP.git
cd BlogCaster-MCP
# Install dependencies
npm install
# Run locally
npm run dev
# Deploy to Cloudflare Workers
npm run deployMIT License - see LICENSE for details.
Contributions are welcome! Please open an issue or submit a pull request.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.