Beehiivmcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Beehiivmcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
A Model Context Protocol (MCP) server for Beehiiv. Connect your Beehiiv newsletter to Claude Desktop and manage subscribers, posts, segments, webhooks, automations, and more using natural language.
Built by Shane Brady.
1. Open a terminal
2. Clone and install
git clone https://github.com/shanebrady77/beehiivmcp.git
cd beehiivmcp
npm installOpen your Claude Desktop config file:
~/Library/Application Support/Claude/claude_desktop_config.json%APPDATA%\Claude\claude_desktop_config.json{
"mcpServers": {
"beehiiv": {
"command": "node",
"args": ["/absolute/path/to/beehiivmcp/server.js"],
"env": {
"BEEHIIV_API_KEY": "your_api_key_here",
"BEEHIIV_PUB_ID": "pub_xxxxxxxxxx"
}
}
}
}Important: Use the full absolute path toserver.js. Example on Mac:/Users/yourname/Documents/beehiivmcp/server.js
Restart Claude Desktop after saving.
pub_xxxxxxxxxxxxTools are grouped by prefix so Claude can quickly identify the right one.
publication_ — Stats
publication_get_stats — Total subscribers, open rates, click ratessubscriber_ — Subscriber management
subscriber_list — List with status filter and paginationsubscriber_get — Look up by emailsubscriber_get_rich — Full detail with stats, referrals, custom fieldssubscriber_list_filtered — Filter by status, tier, date rangesubscriber_add — Add or reactivate with custom fields and UTM paramssubscriber_update — Change tier, custom fields, or unsubscribesubscriber_delete — Permanently deletesubscriber_tag — Tag up to 50 subscribers by emailsubscriber_bulk_add — Import a list at oncesubscriber_bulk_update — Update up to 1000 at oncepost_ — Newsletter posts
post_list — List posts with statspost_get — Full post details and performancepost_create — Create a draft or scheduled postpost_update — Edit subject, preview text, status, or schedulepost_delete — Delete a draftpost_analytics — Performance trends across recent postssegment_ — Segments
segment_list — List all segmentssegment_get — Segment details and member countautomation_ — Automations
automation_list — List automations by statusautomation_get — Automation details and stepswebhook_ — Webhooks
webhook_list — List all webhookswebhook_get — Get a specific webhookwebhook_create — Create webhook (14 event types supported)webhook_update — Update event types or descriptionwebhook_delete — Remove a webhookreferral_ — Referral program
referral_program_get — Referral program details and milestonesreferral_leaderboard — Top referrers ranked by referral countsettings_ — Publication settings
settings_list_custom_fields — See all custom field definitionssettings_list_tiers — List free and premium tierssettings_list_ad_opportunities — View ad placements with payout ratestroubleshoot — Setup validation
troubleshoot — Check API key, publication ID, and connectivityOnce installed, try asking Claude:
cd beehiivmcp
git pullThen restart Claude Desktop. No config changes needed — your API key and publication ID stay the same.
Your API key never leaves your computer.
Here's exactly what's happening when you set this up:
server.js file runs locally on your machine — it's not a website, not a cloud service, not a server somewhere on the internet. It's just a program running in the background on your computer, the same way Spotify or Dropbox runs in the background.What this server can and can't do:
The one thing to be careful about: don't share your Claude Desktop config file with anyone, since it contains your API key in plain text. Treat it like you'd treat a file with a password in it.
MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.