Scoped tokens, not credentials
An agent receives a Bearer token limited to named operations with an expiry. Provider credentials stay in the workspace.
root@poststeward:~$ describe service
Issue a scoped token, expose a fixed operation catalogue over remote MCP or plain HTTP, and read a durable receipt for every attempt. You keep the accounts and the approval.
root@poststeward:~$ why
PostSteward exists so a developer can stay inside the build while an agent keeps the product story, social engagement and GTM pipeline moving. The agent can work from project and GTM context it already has; PostSteward gives it the controlled publishing lane.
<POSTSTEWARD_SERVICE_ORIGIN> until public effectful access is opened.Remote MCP, CLI shell calls and HTTP share one catalogue, one set of execution rules and the same receipts. WebMCP exposes the same scoped operations inside a supported browser workspace.
{
"mcpServers": {
"poststeward": {
"url": "<POSTSTEWARD_SERVICE_ORIGIN>/mcp",
"headers": {
"Authorization": "Bearer <agent token>"
}
}
}
}curl -X POST \
<POSTSTEWARD_SERVICE_ORIGIN>/api/operations/workspace_status \
-H "Authorization: Bearer <agent token>" \
-H "Content-Type: application/json" \
-d '{}'// On a real connected workspace
const tools = await document.modelContext.getTools({
fromOrigins: []
});
// Same names and scopes as MCP / HTTPAn agent receives a Bearer token limited to named operations with an expiry. Provider credentials stay in the workspace.
A campaign is immutable once created. What the agent submits is what gets published, to a verified account.
Effectful operations require an idempotency key and state their effect before running. An uncertain publication is never retried blindly.
Every attempt returns a durable receipt with delivery status, verified identity and the published link when the provider confirms one.
Free · hosted
No service subscription
Advanced · $5 per month
USD 5 per workspace each month
Agents can use remote MCP, plain HTTP operations, CLI shell calls, or browser WebMCP in a supported browser. Every interface shares one operation catalogue and the same execution rules, including declared consequences and no blind retry after an uncertain publication.
Provider API charges are separate. X requires a customer-funded developer application. Public purchases and effectful agent access remain closed on this showcase until launch acceptance is complete.