Social Superpowers Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Social Superpowers Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Hosted MCP server for live X/Twitter and Reddit research. 10 read-only tools for search, threads, timelines, posts and comments. Streamable HTTP: add the URL and sign in with Google or GitHub when prompted. Free tier available.
https://superpowers.social/mcp (Streamable HTTP)All ten tools are read-only and idempotent. Eight of them trim the upstream response to the fields listed below and, when the trim saves enough to be worth reporting, append a stats line saying how much was stripped. twitter-news and reddit-get-user-comments are the exceptions: they return the upstream objects as they arrive, so the field lists below do not describe them and no stats line is emitted.
| Tool | What it does | Arguments |
|---|---|---|
twitter-search | Search tweets matching a query | query (required), count (default 10), cursor, text_only |
twitter-read | Read a single tweet | tweet (URL or ID, required), text_only |
twitter-thread | Read a full conversation thread | tweet (URL or ID, required), cursor, text_only |
twitter-user-tweets | Recent tweets from one account | handle (required, no @), count (default 20), cursor, text_only |
twitter-news | Trending news on X | count (default 10), category (for-you, news, sports, entertainment, trending) |
Tweet fields, for twitter-search, twitter-read, twitter-thread and twitter-user-tweets: id, text, createdAt, author, authorName, url, and replyCount / retweetCount / likeCount when X returns them. Quoted tweets are nested under quotedTweet. text_only reduces each tweet to {id, text}. twitter-news returns news items, not tweets, and passes their fields through unchanged apart from a curation prefix stripped off category.
| Tool | What it does | Arguments |
|---|---|---|
reddit-search | Search posts across Reddit or one subreddit | query (required), subreddit, count (default 10), sort, time_filter, text_only |
reddit-get-post | A post plus its comments | post_id (required), subreddit, comment_limit (default 10) |
reddit-get-posts | Top posts from a subreddit for a time window | subreddit (required), count (default 10), time_filter (default week), text_only |
reddit-get-user-posts | Posts submitted by a user | username (required), count (default 10), sort (default new), time_filter (default all), text_only |
reddit-get-user-comments | Comments by a user | username (required), count (default 10), sort (default new), time_filter (default all) |
Post fields: id, title, author, subreddit, createdUtc, url, and the post body when there is one. The list tools — reddit-search, reddit-get-posts, reddit-get-user-posts — truncate that body to a 500-character selftext_preview; reddit-get-post returns the full selftext and its comments as id, author, body, plus depth where the source gives one. text_only reduces each post to {id, title}. None of these carry a Reddit score or comment count — the source does not provide them. reddit-get-user-comments applies no field filtering — its comment objects come through as the source returns them.
Authentication is required for every call — an unauthenticated initialize returns 401.
claude mcp add --transport http social-superpowers https://superpowers.social/mcpSign in with Google or GitHub when Claude Code opens the browser prompt. That is the whole setup — the ten tools are then available in the session.
Any client that speaks Streamable HTTP can connect to https://superpowers.social/mcp with either:
GitHub prompt, nothing to set up in advance; or
<https://superpowers.social/account> and send it as Authorization: Bearer sk_live_… or x-api-key.
Generic Streamable-HTTP-with-API-key configuration shape (adjust to your client's own config format):
{
"mcpServers": {
"social-superpowers": {
"type": "http",
"url": "https://superpowers.social/mcp",
"headers": {
"Authorization": "Bearer sk_live_…"
}
}
}
}You: what are people on X saying about $INTC?
Agent: twitter-search { "query": "$INTC", "count": 25 }
→ up to 25 tweets with author, timestamp, link and reply/retweet/like counts
You: which subreddits discuss Tirzepatide side effects?
Agent: reddit-search { "query": "tirzepatide side effects", "count": 10 }
→ posts with author, subreddit, permalink and a body preview
reddit-get-post { "post_id": "1abc234" }
→ the full post with its commentsMIT — this repository contains the public manifest, examples, and docs. The hosted gateway implementation is closed-source; the MCP contract is the integration surface.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.