Server data from the Official MCP Registry
Create, manage, schedule, and publish short-form user-generated content through AI agents.
About
Create, manage, schedule, and publish short-form user-generated content through AI agents.
Remote endpoints: streamable-http: https://mcp.reelsfarm.com/mcp
Security Report
This TypeScript MCP client SDK and CLI demonstrates good security practices with proper authentication handling, OAuth support, and safety guardrails for agent mode. The codebase shows thoughtful design around credential management and confirmation flows. Minor code quality issues and broad exception handling prevent a higher score, but the permissions and auth mechanisms are appropriate for the server's purpose. Supply chain analysis found 1 known vulnerability in dependencies (1 critical, 0 high severity).
4 files analyzed · 7 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
Permissions Required
This plugin requests these system permissions. Most are normal for its category.
How to Install & Connect
Available as Local & Remote
This plugin can run on your machine or connect to a hosted endpoint. during install.
Documentation
View on GitHubFrom the project's GitHub README.
@reelsfarm/mcp-client
Typed TypeScript SDK and CLI for the ReelsFarm MCP server.
npm install @reelsfarm/mcp-client
import { ReelsFarmClient } from '@reelsfarm/mcp-client';
const rf = new ReelsFarmClient({
apiKey: process.env.REELSFARM_API_KEY,
validateToolSurface: 'throw',
});
await rf.ready();
const avatar = await rf.avatars.generate({
prompt: 'Woman in her 30s, casual outfit, smartphone selfie style',
model: 'nano-banana-pro',
});
if ('confirmationId' in avatar) {
console.log('Review mode requires confirmation:', avatar);
} else if ('wait' in avatar) {
const result = await avatar.wait();
}
Review mode returns a PreparedAction by default. Trusted applications can set
autoConfirm: true to confirm Review actions automatically. Creator and
Autopilot connections execute the capabilities enabled by their server-owned
connection policy without an extra SDK approval step.
Conversational generation
Avatar and product-scene jobs return conversationId, parentGenerationId,
and jobId. Pass the conversation and parent IDs into the next generation to
continue the same branch. Read the complete branch through
rf.imageGenerations.getConversation(conversationId).
const nextAvatar = await rf.avatars.generate({
prompt: 'Keep the same person and use a tighter crop',
sourceImageUrl: previousImageUrl,
conversationId,
parentGenerationId: previousJobId,
});
Hook generation accepts customPrompt, all current Veo and Seedance models,
duration, and optional spoken script settings. Slideshow generation accepts
Max mode visual context. Use rf.slideshows.reviseText(...) to apply a natural
language instruction to the complete current slide text state.
SDK 0.5.0 also maps the web content library workflows directly:
const gallery = await rf.mediaCollections.listGallery({ kinds: ['COLLECTION', 'AVATAR'] });
const collections = await rf.mediaCollections.list();
const communityImages = await rf.community.listImages(collectionId, { random: true });
const voices = await rf.aiClones.listVoices({ search: 'warm' });
const importJob = await rf.hooks.importClips({
items: [{ url: youtubeUrl, start: "0", length: "5" }],
});
The same MCP contracts now cover the unified gallery, personal media collections, community images, hook import health and jobs, AI Clone voice search, product-context URL suggestions, saved character identity extraction, and all four web trash item types.
Protocol and OAuth
The SDK uses the stable MCP TypeScript SDK v2. It probes for the 2026-07-28 protocol and falls back to the legacy 2025 handshake when required.
OAuth clients should request only the capabilities they need. The default
remains mcp:full for compatibility:
const rf = new ReelsFarmClient({
oauth: {
redirectUri: 'http://127.0.0.1:3456/callback',
scopes: ['content:read', 'content:generate'],
onAuthorizationUrl: openInBrowser,
},
});
await rf.raw.listTools();
await rf.completeOAuthCallback(callbackUrl);
Pass the complete callback URL to completeOAuthCallback. The SDK validates
the redirect URL, OAuth state, and authorization-server issuer before it
redeems the code. The SDK does not expose a raw authorization-code completion
method because that form cannot validate state by itself.
CLI
npm install -g @reelsfarm/mcp-client
reelsfarm login --api-key rfmcp_xxx
reelsfarm whoami
reelsfarm avatars list
reelsfarm avatars generate --prompt "Creator selfie style" --wait
reelsfarm media-collections gallery --kinds COLLECTION,AVATAR
reelsfarm ai-clones voices --search warm
reelsfarm hooks import-capabilities
reelsfarm posts list --json
Credentials are resolved in this order: constructor options, environment variables, then the CLI config file at ~/.reelsfarm/config.json. Set REELSFARM_CONFIG_DIR to use a different config directory.
Using ReelsFarm with AI Agents
ReelsFarm is safe for shell-capable agents when invoked in agent mode:
reelsfarm agent status
reelsfarm agent commands
reelsfarm social connected --agent
reelsfarm posts schedule --content-type SLIDESHOW --content-id sl_123 --when 2026-07-01T15:00:00Z --platforms tiktok:conn_123 --agent
reelsfarm confirm conf_123 --agent
Use --agent or set REELSFARM_AGENT_MODE=1 to receive strict JSON envelopes
on stdout. Agent mode never mixes tables or human narration into command output.
Errors are also JSON on stdout and use a non-zero exit code.
Prepared actions such as generation, scheduling, publishing, updating, and
deleting return a confirmation payload by default in agent mode. Review the
summary, then run reelsfarm confirm <confirmationId> --agent. Pass --yes only
when the application should automatically confirm Review-mode actions.
--dry-run is sent to the server and cannot mutate in Review, Creator, or
Autopilot, even when combined with --yes.
The server connection policy is authoritative for direct writes. Creator may create and edit content but cannot publish or activate automations. Autopilot may publish and manage automations subject to account limits. Credential, connection-mode, webhook-security, and permanent-delete actions are dashboard-only and are not exposed by this package.
Idempotency and operation recovery
SDK 0.5.0 generates one UUID for every logical mutation and reuses it if the
transport response is ambiguous. Supply idempotencyKey on a mutation input,
or --idempotency-key <key> in the CLI, when retries must also survive process
restarts. Never reuse a key with different arguments.
The SDK never automatically re-prepares an action after confirmation. It safely replays the same request once after an ambiguous transport failure and polls the original durable operation when the server returns one:
reelsfarm operations get --id op_123 --agent
reelsfarm operations wait --id op_123 --timeout 30000 --agent
Structured errors distinguish authentication, insufficient scope, policy denial, rate limiting, idempotency conflict, operation-in-progress, and plan limits. OAuth profiles retain rotating refresh tokens in the existing protected profile token store until revoked or a security event requires authorization.
Endpoint
The default MCP endpoint is https://mcp.reelsfarm.com/mcp. Pass serverUrl in
the SDK or --server-url in the CLI to target another deployment. The SDK
rejects non-loopback plaintext HTTP by default. Set allowInsecureHttp: true
or REELSFARM_ALLOW_INSECURE_HTTP=1 only for a trusted private development
endpoint. The CLI also accepts --allow-insecure-http.
Development
npm install
npm run typecheck
npm test
npm run check:manifest
npm run build
The checked-in tool manifest reflects the current discoverable ReelsFarm MCP surface. Dashboard-only credential, webhook, and permanent-delete tools stay out of the public SDK catalog. The manifest check compares the 106 public SDK tools with the local app MCP catalog when both repositories are adjacent. Use npm run generate:tools against an authenticated MCP endpoint when the server adds or removes tools.
Reviews
No reviews yet
Be the first to review this server!
More Developer Tools MCP Servers
Fetch
Freeby Modelcontextprotocol · Developer Tools
Web content fetching and conversion for efficient LLM usage
Toleno
Freeby Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
mcp-creator-python
Freeby mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.
MarkItDown
Freeby Microsoft · Content & Media
Convert files (PDF, Word, Excel, images, audio) to Markdown for LLM consumption
MCP Marketplace
Freeby mcp-marketplace · Developer Tools
Search and install MCP servers from inside your AI client.
FinAgent
Freeby mcp-marketplace · Finance
Free stock data and market news for any MCP-compatible AI assistant.
