Mmcp.market

Postmd MCP server

by reinlainer·io.github.reinlainer/postmd-mcp-server·v2.4.0
No reviews yet

Publish Markdown to PostMD and get a shareable web page

A86/100grade A
Write a reviewRun it
What users say
No reviews yet
Be the first
Safety scan
A86/100

full report

Adoption
Growing

0 stars68 downloads/wk

Reviews

Write one

Nobody has reviewed Postmd yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Postmd tools (5, 3 write)

write = sends, deletes, buys or posts
  • postmd_create_documentwrite actionFree

    Publish Markdown as a PostMD web page. No API key required — anyone can publish. Returns docCode and data.shareUrl; hand shareUrl to people. Without a key the document is anonymous: data.retainedUntil is when it is deleted and data.controlToken is the only way to update or delete it, shown once and never reissued — report both to the person. With an API key the document belongs to that member, has no expiry, needs no token and can collect notes; groupId files it into that group instead of the default one (key with documents:write).

  • postmd_delete_documentwrite actionFree

    Delete a document. Requires an API key with documents:write for a document you own, or `controlToken` for an anonymously published one. There is no endpoint to undo this: the document stops being served at once and its stored content is erased about a month later.

  • postmd_get_documentFree

    Get document metadata by docCode: title, fileName, hasPassword, shareEndDate, viewerStyle, timestamps. Public — no API key needed. Content is not included; use postmd_get_document_raw for the Markdown source.

  • postmd_get_document_rawFree

    Get the stored Markdown source of a document. Public — no API key needed. Password-protected documents need `password`; expired documents cannot be read.

  • postmd_update_documentwrite actionFree

    Update a document. Requires an API key with documents:write for a document you own, or `controlToken` for an anonymously published one. Include `markdown` to replace the stored content; any metadata field replaces that field. clearPassword / clearShareEndDate remove the password / end date. Updating does not push back the deletion date of an anonymous document. Replacing the content requires notesOnReplace.

Public scan report

scanner v0.1.5 · 2026-09-19 · same rubric, same numbers if you re-run it

1 high
  • Code scan6 source files scanned25/25
  • Live reliabilityremote reachable in 1848ms20/20
  • Tool poisoning5 tool descriptions checked15/15
  • Auth qualityopen endpoint exposes 3 write-action tools with no auth3/15
  • Maintenancelast push 3 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Findings (1)

  • highWrite-action tools reachable without authenticationauth.open-write
Overall 86/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Grade history

  • 2026-09-19restoreB → Ascore 86: Write-action tools reachable without authentication

Install directly

claude mcp add --transport http postmd-mcp-server https://postmd.turink.com/mcp
Add to Cursor

Postmd: common questions

Is Postmd MCP server safe?
Yes, by our scan: it is graded A (86/100). Read the Postmd safety report
How do I install Postmd?
It runs remotely at postmd.turink.com. Add it to Claude Code, Claude Desktop or Cursor with the snippets above, or call it through the mcp.market gateway without installing anything.
Does Postmd need an API key?
Yes. The registry entry asks for POSTMD_API_KEY.
Is Postmd maintained?
The last commit was 4 days ago (2026-09-16). The latest release is v2.4.0.
Is Postmd up?
100% of our last 6 checks got an answer. We check remote servers about four times a day.

More from reinlainer →