Hootsuite
Connect Hootsuite to schedule and approve social posts, attach images and video, and manage social accounts, teams and members.
Nothing is typed into PopMCP. You click Connect Hootsuite, sign in to Hootsuite and approve PopMCP. PopMCP is already registered with Hootsuite, so there is no developer app, callback URL or secret to deal with. Only Analytics and Inbox 2.0 need your own Hootsuite app, whose Client ID and secret go under More options.
- Setup time
- 1 min
- Auth
- OAuth authorization
- API base URL
- https://platform.hootsuite.com
- Rate limits
- 20 requests a second and 100,000 calls a day per API client.
Before you begin
- A Hootsuite login with at least one social account in it
- Your permissions in Hootsuite decide what the AI can do: publishing needs at least Limited on a social account, and managing members or teams needs Admin or above
- Pop-up blockers must allow the Hootsuite sign-in window to open
- Only if the AI should schedule or change anything: an owner or admin in PopMCP to allow write actions
- Only for Analytics: Hootsuite's Advanced Analytics add-on and your own app. Only for Inbox 2.0: an Org App that Hootsuite has linked to your organization
Get your credentials
Start the connection from PopMCP
Open the Hootsuite connector in PopMCP and click Connect Hootsuite. There are no fields to fill in: no key, no secret and no developer app.
Sign in to Hootsuite in the pop-up
The sign-in window opens on hootsuite.com. Sign in with the Hootsuite login the AI should work as. If you are already signed in, Hootsuite goes straight to the next step.
Log in to Hootsuite
PopMCP never sees your Hootsuite password. Hootsuite hands back a token once you approve.
Allow PopMCP
Hootsuite asks whether PopMCP may access your account. Click Allow. PopMCP asks only to stay connected, so you do not have to sign in again each time.
Allow PopMCP
PopMCP is asking to access your Hootsuite account.
Check the connection in PopMCP
The Hootsuite card in PopMCP reads Connected, with your name. The everyday tools load at once, and the whole API is one search away. Scheduling and every other change wait until an owner or admin allows write actions in PopMCP.
Hootsuite
- Status
- Connected
- Account
- Pat Doe
- Access
- Read only until write actions are allowed
| Area | Example tool | Access |
|---|---|---|
| Social accountsIds, networks, reconnect status | hootsuite_list_social_profiles | Read |
| The calendarAny range, by account | hootsuite_list_posts | Read |
| Schedule a postBy account name, with files | hootsuite_schedule_post | Write |
| ApprovalsApprove or reject by id | hootsuite_review_post | Write |
For Analytics only: make your own Hootsuite app
Skip this unless you have the Advanced Analytics add-on and want metrics. Sign in to Hootsuite, open App directory, then Developer apps. The first visit asks for a developer account, which Hootsuite approves by email. Create a new app. Under Security, on the Rest API tab, tick analytics:read, save, and copy the Client ID and Client secret. Find your app in the App Directory and install it. Your Member ID is on your Developer Profile. In PopMCP open More options, fill in those three, leave Organization ID empty, and connect.
Rest API
For Inbox 2.0 only: use an Org App
Skip this unless you use Hootsuite's Inbox 2.0. Its API answers only an Org App that Hootsuite has linked to your organization. Add a non-paying member with Admin permission to the organization, then ask Hootsuite's developer support to link your app, giving your app id, organization id and that member id. Once it is linked, fill in Client ID, Client secret and Organization ID under More options, leave Member ID empty, and connect. That connection is locked to the one organization.
Connect in PopMCP
Open your workspace, choose Hootsuite in the marketplace, and fill in the connect dialog:
| Field | What to enter |
|---|---|
| How you connectpreset | Click Connect Hootsuite, sign in and approve. Your Hootsuite password is never shared with us. |
| Client ID of your own Hootsuite apptext | Only for Analytics or Inbox 2.0. Leave these empty to sign in instead. In Hootsuite, open App directory, Developer apps, choose your app, then Security and the Rest API tab. Analytics also needs the add-on, analytics:read ticked there, and the app installed from the App Directory. |
| Client secretsecret | From the same tab. Stored encrypted.Encrypted with AES-256-GCM on save and never shown again. |
| Member IDtext | For an app you installed yourself. It is on your Developer Profile in Hootsuite. |
| Organization IDtext | Instead of the Member ID, for an Org App that Hootsuite has linked to your organization. Inbox 2.0 needs this one. |
PopMCP verifies the credential against Hootsuite immediately. On success the connection flips to Verified and its MCP tools are provisioned.
Permissions PopMCP requests
These are the scopes sent to Hootsuite at authorization time.
| Scope | Why PopMCP asks for it |
|---|---|
| offline | Keeps the connection alive. A sign-in asks only for this and otherwise has your own permissions in Hootsuite. |
Verify it worked
The Hootsuite card in PopMCP shows Connected with your name. Asking the AI for the connection profile (hootsuite_connection_profile) names you and your organizations, and asking what is scheduled this month (hootsuite_list_posts) returns posts rather than an authorization error.
Troubleshooting
The sign-in window never opens
Why: A pop-up blocker is stopping the Hootsuite sign-in window.
Fix: Allow pop-ups for PopMCP in your browser and click Connect Hootsuite again.
"Hootsuite no longer accepts this sign-in"
Why: Access was removed in Hootsuite, or the login changed.
Fix: Click Connect Hootsuite again and sign in. It takes one click.
Analytics tools say they need the add-on or your own app
Why: A sign-in cannot reach the Analytics API, and Hootsuite needs the Advanced Analytics add-on.
Fix: Follow the Analytics step above. Without the add-on, Hootsuite's Analytics API stays closed.
Inbox tools are refused
Why: Hootsuite's Inbox API answers only an Org App it has linked to your organization.
Fix: Follow the Inbox step above, and connect with the Organization ID.
"Hootsuite would not issue a token for this member"
Why: Your own app is not installed for that member, or the Member ID is wrong.
Fix: Install the app from the App Directory while signed in as that member, and copy the Member ID from the Developer Profile.
"Hootsuite did not accept this Client ID and Client secret"
Why: One of them was copied in part, or the secret changed.
Fix: Copy both again from your app's Security section, on the Rest API tab.
A post is refused as too soon
Why: Hootsuite wants a scheduled time at least 5 minutes ahead, or 15 minutes for video.
Fix: Ask for a later time, or leave the time out to send at the soonest moment.
A post to TikTok or YouTube is refused
Why: Hootsuite's API does not publish to TikTok, YouTube or Bluesky.
Fix: Schedule those in Hootsuite itself.
An insufficient permissions answer
Why: The API has the same permissions you have in Hootsuite.
Fix: Ask an admin of the organization to give you the permission, or connect with a login that has it.