# Binance Square Post MCP — agent reference

## What it is
A hosted MCP server at https://binance-square-post.zhanghe.dev/mcp that lets AI chat clients publish posts to Binance Square (币安广场) on behalf of users. Multi-tenant SaaS: a user signs in, subscribes to a plan, binds their own Binance OpenAPI key, and every publish call is idempotency-protected. Deployed on Cloudflare Workers (Hono + D1 + KV); production domain https://binance-square-post.zhanghe.dev. Source: https://github.com/zh30/binance-square-post-mcp

## MCP tools
- preview_square_post — read-only preview; publishes nothing
- publish_text_post — text post
- publish_image_post — post with 1–4 images
- publish_article — long-form article
- publish_video_post — video post
Every publish tool requires an idempotency key; the upstream /content/add call is never retried automatically.

## How a user connects
1. Add a remote MCP server in the chat client (Grok: Custom Connectors; ChatGPT: developer-mode connector; Claude: Connectors) with URL https://binance-square-post.zhanghe.dev/mcp
2. OAuth 2.1 authorization-code + PKCE (S256) flow opens this site's consent page
3. Sign in with email OTP, pick a plan at https://binance-square-post.zhanghe.dev/pricing, complete the WeChat pay activation
4. Bind a Binance Square API key in the dashboard (AES-256-GCM encrypted at rest)
5. Ask the client to publish — the MCP tools handle it

## Pricing and data
- Plan list for humans: https://binance-square-post.zhanghe.dev/pricing
- Plan list for machines: https://binance-square-post.zhanghe.dev/api/plans — JSON array of { id, name, price_cny_cents, duration_days, publish_quota, media_quota, version }
- Manual review: payment is a WeChat transfer verified by an operator; activation usually completes within a day

## Security model
- OAuth 2.1 with PKCE S256 and dynamic client registration (@cloudflare/workers-oauth-provider)
- Binance API keys: AES-256-GCM encrypted in D1, never placed in URLs
- Legacy tenant access codes stored as HMAC-SHA-256 digests
- Server-side media fetch guarded against SSRF; magic-byte type validation
- Publish idempotency enforced; no automatic retries of paid mutations

## Site map
- https://binance-square-post.zhanghe.dev/ — home: what it does, 3-step connect, FAQ
- https://binance-square-post.zhanghe.dev/pricing — plans and subscribe CTA
- https://binance-square-post.zhanghe.dev/docs — integration guide for Grok / ChatGPT / Claude plus Binance API key walkthrough
- https://binance-square-post.zhanghe.dev/dashboard — private console (keys, plans, usage, tutorial)
- https://binance-square-post.zhanghe.dev/ops — admin console behind Cloudflare Access (private)

## Locales
URLs accept ?lang=en|zh|hi|es|ar; the default locale is English (en).