sprkly

warnings

sprkly.app

Schedule, publish and track social posts across TikTok, Instagram, Threads and YouTube Shorts.

https://sprkly.app/api/mcpWebsiteOAuthMCP 2025-11-25v1.0.0last checked 24 Aug 2026spoke MCP on 2 of 2 checks (30 days)initialize in 381 ms

How to authenticate

Checked against the endpoint by our probe on 24 Aug 2026. These are the capabilities the server advertises, not a prediction about any particular client.

Scheme	OAuth
Issuer	https://sprkly.app
Dynamic client registration	✓Advertised (RFC 7591)
Client ID Metadata Document	✕Not advertised
PKCE	✓S256
Grant types	authorization_code, refresh_token
Scopes	profile, mcp:read, mcp:write, offline_access
Protected-resource metadata	✓Published (RFC 9728)
Anonymous access	Handshake succeeds; 16 tools listable
Credentials demanded in prose	✕sprkly_schedule_post These tools are listed anonymously and their own descriptions ask for an account or key, but no challenge is issued — so a client has nothing to act on and the refusal arrives as a tool error.
Documentation	https://sprkly.app/docs/mcp

What the probe found

warningTools needing credentials are listed without a challenge

1 of the 16 tools listed anonymously say in their own descriptions that they need an account or a key (sprkly_schedule_post), but the endpoint issued no WWW-Authenticate challenge. The requirement is stated only in prose, so a call reaches the tool and comes back as a tool error instead of an authorization step.

No CORS headers for browser-based clients

A cross-origin preflight came back without Access-Control-Allow-Origin, so the endpoint is reachable from native clients only — code running in a web page is stopped by the browser before a request is ever sent.

16 tools usable without signing in

The server exposes a public surface before authorization: sprkly_add_media_from_url, sprkly_delete_scheduled_post, sprkly_draft_post, sprkly_get_account_summary, sprkly_get_analytics, sprkly_get_billing_summary, sprkly_get_post_approval_status, sprkly_get_post_status, sprkly_get_tiktok_posting_options, sprkly_list_connected_social_accounts, sprkly_list_profiles, sprkly_list_scheduled_posts, sprkly_request_post_approval, sprkly_schedule_post, sprkly_update_scheduled_post, sprkly_validate_post_policy.

Tools

sprkly_add_media_from_urlsprkly_delete_scheduled_postsprkly_draft_postsprkly_get_account_summarysprkly_get_analyticssprkly_get_billing_summarysprkly_get_post_approval_statussprkly_get_post_statussprkly_get_tiktok_posting_optionssprkly_list_connected_social_accountssprkly_list_profilessprkly_list_scheduled_postssprkly_request_post_approvalsprkly_schedule_postsprkly_update_scheduled_postsprkly_validate_post_policy

Contract history

24 Aug 2026v1.0.0first recorded contract

Get alerted when this contract changes

Depend on this server? Leave an email and get a message when a probe records a change — a tool removed, an argument newly required, an enum narrowed. Alerts are being built; signing up is what tells us to hurry.

Prefer a feed reader? This page's contract changes are also an Atom feed.

Status badge

Status for a README, from the last probe — cached an hour, so up to seven hours behind the endpoint. Links back to this page.

[![MCP status](https://mcpi.app/servers/sprkly/badge.svg)](https://mcpi.app/servers/sprkly)