Bluesky Social MCP
Full Bluesky control over the atproto client, covering profiles, feeds, posts, follows, and interactions.
Delv Safety Grade: C
Score 58/100 · assessed 2026-04-28
Bluesky Social MCP is a community-maintained server by solo developer gwbischof that provides full control over a Bluesky account via the atproto client. The permissions scope is broad: posting, deleting, following, blocking, and all social graph operations. Whilst this enables powerful automation, it also means Claude gets write access to your entire social presence. The maintainer appears to be an individual contributor with limited public profile, creating bus factor concerns. Installation requires cloning from git rather than a stable package registry, and credentials are stored as environment variables (handle plus app password). The repository is open source with reasonable documentation, though it's early-stage (v0.1). No known security incidents, but the combination of broad social media permissions, solo maintenance, and git-based install warrants careful consideration before granting access to your Bluesky account.
Lethal Trifecta (prompt-injection exposure)
TRIFECTA RISKDMs make this private; replies and quote-posts make untrusted-input wide; posting closes the loop.
Green flags
- Open source repository with visible code for review
- Uses official atproto client library underneath
- Clear documentation of required credentials
- No known security incidents or malicious behaviour
Red flags
- Solo maintainer with limited public track record
- Full write access to social graph: posts, follows, blocks, DMs
- Git-based install rather than stable package registry (v0.1)
- App password stored in env vars grants complete account access
- Early version (0.1) suggests immature codebase
Permissions requested
Install
uvx --from git+https://github.com/gwbischof/[email protected] bluesky-social-mcp
BLUESKY_HANDLEBLUESKY_APP_PASSWORDReview
Install if you're automating Bluesky workflows, analysing your feed programmatically, or managing follows at scale. Skip if you're after a simpler posting interface or don't need API-level control. The implementation is clean, but it assumes you know why you need it.
Good at
- Full atproto coverage means you can automate nearly every Bluesky operation without manual intervention.
- Feed analytics and engagement tracking work well for understanding what content performs.
- Follow management tools handle bulk operations cleanly, useful for pruning or discovering accounts.
- App password authentication is simpler than OAuth for personal automation workflows.
Watch out
- Documentation assumes familiarity with MCP servers and atproto's data model.
- Early version (v0.1) means expect occasional gaps or undocumented edge cases.
- No OAuth flow, so you're managing app passwords manually.
- Rate limits are inherited from atproto with no built-in throttling or retry logic.
Use cases
- social posting automation
- feed analytics
- follow management
- personal brand workflows
Getting started
Works with
Similar MCPs
- TwilioSend SMS, manage phone numbers, query call logs. The standard for voice/SMS workflows from inside an agent.
- GmailRead, search, send, label Gmail messages from Claude. Note: original repo archived March 2026; community forks may be more current.
- ResendResend's official MCP for transactional email. Send, list, schedule from Claude — straightforward, fast, well-documented.
- DiscordRead messages, post to channels, manage server members. Useful for community moderators and gamedev teams.