Social media scheduling and publishing from one dashboard, one MCP server, one REST API, and one pay-per-call x402 API. Posting runs end to end on LinkedIn, TikTok, and Pinterest; Instagram, YouTube, X, and Facebook have OAuth and publish code that is not yet verified in production. AI agents (Claude Desktop, Cursor) manage posts on behalf of subscribers through 10 MCP tools. The REST API exposes 31 endpoints with Bearer auth, webhook subscriptions, and OpenAPI docs.
Production: sharetopus.com
Sharetopus is a SaaS tool for scheduling and publishing social media posts across LinkedIn, TikTok, and Pinterest. You create a post once, customize it per platform, and publish immediately or schedule it for later. Subscribers on Creator plans and above get access to 10 MCP tools and a 31-endpoint REST API. Agents without a subscription pay per action in USDC through x402. Background jobs (18 Inngest functions) handle dispatch, polling, webhook delivery, token encryption, and storage and log cleanup.
| Surface | Status | Auth | Description |
|---|---|---|---|
| Web UI | Shipped | Clerk session | Browser dashboard at sharetopus.com |
| MCP | Shipped | Clerk OAuth / API key | 10 tools for AI agents (Claude Desktop, Cursor) |
| REST API | Shipped | stp_rest_* Bearer token |
31 endpoints, webhooks, OpenAPI docs |
| x402 | Shipped | USDC payment per request | Pay-per-action API for agents, 6 networks, no account needed |
Web App. Clerk authentication, Stripe billing, post creation with per-platform customization, scheduling calendar, content history. See docs/ARCHITECTURE.md.
MCP Server. Streamable HTTP at /api/mcp/mcp. Requires Creator plan or above ($18/mo). 10 tools: read (connections, posts, analytics), media upload, and posting (one publish_posts call publishes now or schedules up to 30 posts). See docs/MCP.md.
REST API. 31 endpoints under /api/v1/ with Bearer auth via stp_rest_* keys. Every request audited to rest_audit_log. Rate-limited per principal. Webhook subscriptions with HMAC-SHA256 signing (5 event types, auto-disable after 10 failures). OpenAPI spec at /api/v1/openapi.json, interactive docs at /docs/api (Scalar). See docs/REST.md.
x402. Pay-per-action endpoints under /api/x402/: connect and reauth an account, post now, schedule, reschedule, cancel, delete, list connections, scheduled posts and history, and mint an upload URL. Each request carries a USDC payment on Base, Polygon, Arbitrum, Celo, Arc, or Solana (src/lib/x402/networks.ts), and the paying wallet becomes the account. Prices come from the pricing_actions table. Posting is sold for LinkedIn, TikTok, and Pinterest only (X402_PLATFORMS in src/lib/x402/config.ts). Reference at /docs/x402.
| Category | Technology | Version |
|---|---|---|
| Framework | Next.js (App Router, Turbopack) | 16.2.6 |
| Language | TypeScript | 5.9.3 |
| UI | React + Tailwind CSS + shadcn/ui | 19.2.0 / 4.2.4 |
| Auth | Clerk (@clerk/nextjs) |
7.3.2 |
| Database | Supabase Postgres via Drizzle ORM (drizzle-orm + postgres) |
0.45.3 / 3.4.9 |
| Storage | Supabase Storage (@supabase/supabase-js) |
2.105.3 |
| Payments | Stripe | 18.5.0 |
| Background Jobs | Inngest | 4.3.0 |
| Rate Limiting | Upstash Redis + @upstash/ratelimit |
1.38.0 / 2.0.8 |
| Validation | Zod 4 (REST and MCP) | 4.4.3 |
| OpenAPI | zod-openapi + @scalar/nextjs-api-reference | 5.4.6 / 0.10.16 |
| MDX | @next/mdx + @mdx-js/loader | 16.2.6 / 3.1.1 |
| MCP | @modelcontextprotocol/server + mcp-handler |
2.1.0 / 2.2.0 |
| Deployment | Vercel |
Full dependency list: package.json.
git clone <repo-url>
cd sharetopus
bun install
cp .env.example .env.local
# Fill in all required values (see docs/DEVELOPMENT.md)
bun run dev # http://localhost:3000Prerequisites: Node.js 20+, Supabase project, Clerk application, Stripe account, Inngest account, Upstash Redis instance, and OAuth apps for each platform you want to test.
Full setup guide: docs/DEVELOPMENT.md.
| Platform | Media Types | Post Model |
|---|---|---|
| text, image, video | Direct upload to LinkedIn CDN | |
| TikTok | image, video | Async pull (TikTok fetches media from URL, poll + webhook for completion) |
| image, video | Image: direct URL. Video: streaming multipart S3 upload, then poll | |
| image, reel | Container model (create container, poll status, publish) |
Details per platform: docs/PLATFORMS.md.
Streamable HTTP at /api/mcp/mcp, stateless: mcp-handler 2.x serves protocol 2026-07-28 and 2025-era clients from the same URL. Authenticated via Clerk OAuth tokens or stp_mcp_* API keys. Both resolve to a principal_id with a cached subscription tier.
10 tools, all requiring Creator plan ($18/mo) or above. A text post takes two calls: list_connections, then publish_posts.
| Category | Tools |
|---|---|
| Read | list_connections, list_pinterest_boards, list_posts, list_billing_summary, get_account_analytics |
| Media (quota-gated) | attach_media_from_url, request_upload_url |
| Posting | publish_posts (quota-gated), update_scheduled_posts, delete_scheduled_posts |
publish_posts takes 1 to 30 posts: a post with scheduled_at is scheduled, one without it publishes now. Passing the same batch_id again makes a retry safe. See docs/MCP.md for parameters and examples.
18 Inngest functions handle scheduling, posting, polling, webhook delivery, token encryption, and cleanup:
| Function | Trigger | Purpose |
|---|---|---|
| scheduled-posts-tick | Cron */5 * * * * |
Dispatch due scheduled posts (batch 200) |
| process-single-post | Event post.due |
Process one scheduled post (retries 3) |
| process-direct-post | Event post.now |
Process one direct post (no retry) |
| tiktok-publish-status-poll | Event tiktok.publish.poll |
Poll TikTok for publish completion (60 attempts, 60s interval) |
| process-tiktok-publish-webhook | Event tiktok.publish.webhook.received |
Process TikTok webhook events (retries 3) |
| deliver-webhook | Event webhook.dispatch.v1 |
Deliver one webhook event to a subscriber (HMAC signed, retries 3) |
| sweep-stuck-direct-posts | Cron */5 * * * * |
Recover stuck pending posts (>10 min) |
| sweep-orphan-storage-files | Cron daily 03:00 UTC | Delete unreferenced storage files (>24h) |
| sweep-stale-oauth-clients | Cron daily 04:00 UTC | Purge unverified OAuth clients (>90 days) |
| cleanup-cancelled-posts-after-grace | Cron daily 05:00 UTC | Delete system-cancelled posts (>7 days) |
| cleanup-stripe-webhook-events | Cron daily 03:00 UTC | Prune webhook idempotency log (>90 days) |
| cleanup-mcp-audit-log | Cron daily 04:00 UTC | Prune audit log (>90 days) |
| cleanup-x402-access-log | Cron daily 06:00 UTC | Prune x402 access log (>90 days) |
| cleanup-rest-audit-log | Cron daily 07:00 UTC | Prune REST audit log (>90 days) |
| cleanup-tiktok-webhook-events | Cron daily 08:00 UTC | Prune TikTok webhook event log (>90 days) |
| cleanup-social-connections | Cron daily 02:00 UTC | Delete stale pending, failed and expired OAuth connections (>30 days) |
| sweep-x402-reconciliation | Cron hourly at :20 | Resolve or report x402 payments that need a manual look |
| encrypt-social-tokens | Cron daily 09:00 UTC, event social-tokens.encrypt |
Encrypt social account tokens still stored in plaintext |
See docs/INNGEST.md.
Three Stripe subscription tiers. MCP access starts at Creator.
| Tier | Monthly | Yearly | Accounts | Storage | MCP Access |
|---|---|---|---|---|---|
| Starter | $9 | $64 | 5 | 5 GB | Web only |
| Creator | $18 | $129 | 15 | 15 GB | All 10 tools (quotas apply) |
| Pro | $27 | $194 | Unlimited | 45 GB | All 10 tools (unlimited) |
See docs/BILLING.md.
| Document | Description |
|---|---|
| docs/ARCHITECTURE.md | System map, component interactions, data flows, state diagrams |
| docs/AUTH.md | Clerk, MCP auth (API key + OAuth), principal model, entitlement |
| docs/BILLING.md | Stripe subscriptions, plan gates, usage quotas |
| docs/DATABASE.md | All 35 tables, schema changes with Drizzle, RLS posture |
| docs/DEVELOPMENT.md | Local setup, testing, deployment |
| docs/INNGEST.md | 16 background functions, cron schedules, sweep jobs |
| docs/MCP.md | MCP server: 10 tools, auth, withMcpTool HOF, usage examples |
| docs/REST.md | REST API: 32 handlers, withRestEndpoint HOF, validation, audit |
| docs/WEBHOOKS.md | Webhook subsystem: signing, retry, replay, auto-disable |
| docs/PLATFORMS.md | Per-platform OAuth, posting flows, quirks |
| docs/ROADMAP.md | Shipped features, deferred work, open issues |
| docs/SCHEDULING.md | Schedule lifecycle, locks, retries, created_via |
| docs/SECURITY.md | Threat model, SSRF, HMAC proxy, rate limits, audit |
| docs/STORAGE.md | Supabase Storage, signed URLs, orphan sweep |
Key environment variables (see docs/DEVELOPMENT.md for the full list):
| Category | Variables |
|---|---|
| Auth | CLERK_SECRET_KEY, NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY |
| Database | DATABASE_URL (Supabase transaction pooler, port 6543) |
| Storage | NEXT_PUBLIC_SUPABASE_URL, SUPABASE_SERVICE_ROLE |
| Payments | STRIPE_SECRET_KEY, STRIPE_WEBHOOK_SECRET |
| Jobs | INNGEST_EVENT_KEY, INNGEST_SIGNING_KEY |
| Rate Limiting | UPSTASH_REDIS_REST_URL, UPSTASH_REDIS_REST_TOKEN |
| Security | MEDIA_PROXY_HMAC_SECRET (64 hex), MCP_IP_HASH_SALT (32 bytes base64) |
| Platforms | LINKEDIN_CLIENT_ID/SECRET, TIKTOK_CLIENT_KEY/SECRET, PINTEREST_CLIENT_ID/SECRET, INSTAGRAM_CLIENT_ID/SECRET |
Authentication is split by surface: Clerk sessions for web, Clerk OAuth or API keys for MCP, Bearer tokens (stp_rest_*) for REST API. All surfaces resolve to a principal_id in the principals table. Rate limiting uses Upstash Redis sliding windows. Two append-only audit logs: mcp_audit_log (MCP tool calls) and rest_audit_log (REST API requests), each kept 90 days; retention per table is in docs/SECURITY.md. SSRF protection blocks 14 private/reserved IP ranges on media downloads. HMAC-signed proxy URLs serve media to TikTok without exposing credentials. Outbound webhooks are HMAC-SHA256 signed per subscription secret. Stripe and TikTok inbound webhooks are verified via signatures with idempotency tables preventing replay.
Full security architecture: docs/SECURITY.md.
Recently shipped: x402 pay-per-action API on 6 networks, REST API v1 (32 handlers), webhook subsystem (HMAC + delivery + replay), OpenAPI + Scalar docs, MDX doc pages, Zod 4 upgrade, TikTok webhook integration, hybrid pricing, withMcpTool HOF, API key expiry, generic adapter pattern, OAuth client trust enforcement, data retention crons.
Mid-term: Instagram, YouTube, X, and Facebook verified in production, additional platforms. Long-term: Analytics pipeline, federated agent features.
Full roadmap: docs/ROADMAP.md.
- Instagram, YouTube, X, and Facebook have OAuth and publish code but are not yet verified in production, so x402 does not sell them.
- i18n is declared (fr, en, es) but no translation files exist. UI is English only.
- Studio/Analytics page shows "Coming Soon". The analytics_metrics table exists but has no data pipeline.
- TikTok default privacy is SELF_ONLY (private). Users must select a public level.
next.config.tssetstypescript.ignoreBuildErrors: truefor Vercel OOM mitigation. Type checking runs viabunx tsc --noEmitin CI/pre-commit instead.
This is a private project. See docs/DEVELOPMENT.md for the development setup, code conventions, and deployment process.
No LICENSE file in the repository.
Production: https://sharetopus.com