Postiz Review 2026: Open-source social media scheduler with a public API, webhooks, an MCP server and a CLI on every plan, sold as flat plans tiered by connected channels

The full review

What Postiz is

Postiz calls itself “the agentic social media scheduler”: its homepage says AI agents plan, generate and schedule posts to 30+ networks while you review everything in one visual calendar. People can use it as an ordinary scheduler, and developers, SaaS products and AI agents can drive the same account through a public REST API, webhooks, a hosted MCP server and a CLI, all of which the vendor includes on every plan. Its own pages disagree on how many networks that is; the networks section below sets out the counts.

The contracting party for subscriptions is Gitroom Limited, in Hong Kong, and a US company, Gitroom LLC in Delaware, holds the developer approvals for the social platforms Postiz connects to. The About page names Nevo David as the founder, says 17 AI agents are documented and says “Thousands of creators, brands and agencies publish through Postiz today”; the homepage and About page also show Product Hunt badges for #1 product of the day, week and month. Those are the vendor’s claims, and we have not verified them.

The code is open source. The main repository, gitroomhq/postiz-app, is licensed AGPL-3.0, was created on July 8, 2023 and had 40,995 GitHub stars and 7,808 forks on November 6, 2026, and its latest release, v2.25.3, came out on October 24, 2026. The hosted service, Postiz Cloud, is paid; the vendor says the self-hosted edition costs nothing beyond your own server, and that you handle installation, updates, backups and the developer-app approvals on each network yourself.

What the API, MCP server and CLI cover

The Public API lives at https://api.postiz.com/public/v1. Its Create Post endpoint publishes, schedules or saves a draft (the type field takes now, schedule or draft), and each platform has its own settings schema. The OpenAPI 3.1.0 spec, titled Postiz Public API 1.0.0, lists 27 paths: connected channels, which the API calls integrations (listing, groups, OAuth connect, settings, platform helpers, deletion and finding a free slot), posts, channel and post analytics, notifications, media uploads, AI video and clipping. You authenticate with an API key in the Authorization header, or with OAuth2 tokens, which start with pos_, if you build an app that acts for other Postiz users; the developer settings page says keys do not expire on their own.

Webhooks fire when a post publishes and can be scoped to all channels or to specific ones. On Postiz Cloud they are available from the Standard plan up, and the docs allow 2, 10, 30 and 10,000 webhooks on Standard, Team, Pro and Ultimate (the pricing page shows only a checkmark). For agents, the hosted MCP server at https://mcp.postiz.com/mcp exposes 13 tools, including schedulePostTool, integrationList, generateImageTool, generateVideoTool and clippingTool, and accepts an API key or an OAuth token. The CLI installs with npm install -g postiz and outputs JSON (version 2.0.27 on npm, last updated October 30, 2026), and an agent skill installs with npx skills add gitroomhq/postiz-agent. The pricing page says there is no separate agent tier: these surfaces ship with the Standard plan.

For code, the docs list an official Node.js SDK, @postiz/node, and an n8n node, and the homepage also names Make.com and Zapier. On npm the SDK is at version 1.0.8 and was last updated on July 27, 2025, more than a year before this review; n8n-nodes-postiz is at 0.2.17. The docs are written for machines as well as people: llms.txt and llms-full.txt, the OpenAPI spec, a Try it playground, Copy page and a live Known Issues tracker, which notes, for example, that deleting a post that no longer exists can return a 500 error instead of a 404.

What the API does not cover matters as much. You can schedule follow-up comments and threads with your own posts (on LinkedIn and Facebook the comments appear as replies to the main post), and Plugs can add a follow-up post when a post passes a number of likes you set, on X, LinkedIn Page, Bluesky and Threads. Replying to other people’s comments is where the docs conflict: the MCP docs say there is no tool to read or reply to comments and that replies must be triggered through the Postiz UI, while the Instagram self-hosting page says “You can post a reply through the API”; the OpenAPI spec lists no comment endpoint, and no endpoints for an inbox, direct messages or ads. If your product needs to read replies, handle DMs or manage ads through an API, we found no Postiz endpoint for it.

Networks: 27, 28+, 30+, 32 or 34

Postiz’s own pages give five different counts. The website says 30+, and the homepage FAQ names 29 networks: X, LinkedIn profiles and company pages, Facebook Pages, Instagram, Threads, TikTok, YouTube, Pinterest, Reddit, Bluesky, Mastodon, Lemmy, Farcaster (Warpcast), Nostr, Telegram, Discord, Slack, VK, Google My Business, Dribbble, Kick, Twitch, Whop, Skool, Medium, Dev.to, Hashnode, WordPress and ListMonk. The API overview’s heading says “Supported Platforms (32 total)”, but its tables name 31. The docs page on posting rules says “Postiz supports 34 platforms”, but its table has 35 rows: it adds TikTok Business, Instagram Standalone, Moltbook, MeWe and Tumblr and lists LinkedIn and LinkedIn Page separately. The CLI docs and the privacy policy say 28+, and the description inside the OpenAPI spec file says “Supported Platforms (27)”.

The same docs page contradicts itself on 11 platforms. Its table, which it says shows what happens when you click a platform in Add Channel, gives Twitch, Kick, VK, Nostr, Lemmy, Medium, Dev.to, Hashnode, WordPress, Listmonk and Moltbook a connect method (OAuth for Twitch, Kick and VK; Credentials in Postiz for Nostr, Lemmy, Medium, Dev.to, Hashnode, WordPress and ListMonk; an in-app dialog for Moltbook), but a later section says they “have no in-app connect flow yet” and are supported for scheduling and publishing through the Public API. If one of those matters to you, check how it connects during the trial.

Analytics reach fewer networks than posting. Per-channel and per-post analytics are available in the app and over the API, but account-level analytics cover a minority of platforms: the docs say “Only 10 of the 34 platforms report analytics back to Postiz”, while the table beneath lists 11 (Facebook Page, Instagram through Facebook Business, Instagram Standalone, LinkedIn Page, TikTok, TikTok Business, YouTube, Google My Business, Pinterest, Threads and X), with ranges of 7, 30 or 90 days depending on the platform. LinkedIn analytics cover Pages, not personal profiles. The pricing page, by contrast, says its analytics track engagement “across all your connected platforms”.

Plans, channels and what you pay

Postiz Cloud has four plans, each a flat price per subscription (organisation) rather than per seat, tiered by how many channels you connect: Standard $29, Team $39, Pro $49 and Ultimate $99 a month on monthly billing. With the Yearly toggle the pricing page shows $23, $31, $39 and $79 a month, billed yearly, which the vendor says saves about 20%. Each connected social account is one channel (three Facebook Pages are three channels), and the caps are 5, 10, 30 and 100 channels. The pricing page lists unlimited posts per month on every plan (the API overview disagrees; see below). Standard is a solo plan with no team members; Team, Pro and Ultimate allow unlimited team members, and the docs say seats are not counted. The vendor labels Pro as Popular.

Monthly AI allowances rise with the plan: 3, 10, 30 and 60 AI videos, 60, 120, 300 and 600 minutes of AI video clipping, and 100, 300 and 500 AI images on Team, Pro and Ultimate; the docs say they reset monthly on your subscription anniversary. Four plan details conflict between Postiz’s pages, and we report both sides rather than pick one. AI images on Standard: none on the pricing page and in the homepage FAQ, but 20 a month in the docs’ plans and limits tables; the plans table also marks the image generator No for Standard. RSS auto-posting on Standard: listed on the Standard card and, per the homepage FAQ, on every plan, but No for Standard in the docs’ plan table. The yearly price: the docs’ table lists $278, $374, $470 and $950 a year, while the pricing page’s $23, $31, $39 and $79 a month come to $276, $372, $468 and $948. The docs call the pricing page the commercial source of truth. Post volume: the pricing page lists unlimited posts per month on every plan and the docs’ plans page says plans tier on channels, not on volume, but the API overview says plans tier on “channel and post-per-month quotas”.

There is no free plan on Postiz Cloud. The homepage says “There is no permanent free tier on the hosted version”, and the docs say an organisation without a subscription cannot use the app. The pricing page says every plan starts with a 7-day free trial, and the homepage button reads Start a 7-day trial for $0; the docs say new organisations are normally offered one, once per organisation. The trial needs a payment method, on which Postiz places a small authorisation that the docs say is released immediately and never becomes a charge. During the trial, the docs say, scheduling, publishing, analytics, automations and the API work exactly as they will after you are billed; video clipping and some paid AI video generators are held back, and reconnecting a previously connected channel is restricted. On day 7 the card is charged for the plan you picked unless you cancel first.

Worked examples from the published prices: Standard costs $276 a year at the pricing page’s yearly rate ($23 × 12) or $348 over twelve months at $29, and the docs list $278 for the year. If every channel slot is used, the yearly rate works out at $4.60 per channel a month on Standard, $3.10 on Team, $1.30 on Pro and $0.79 on Ultimate ($5.80, $3.90, about $1.63 and $0.99 on monthly billing). A small product that needs 8 connected accounts outgrows Standard’s 5 and lands on Team: $31 a month billed yearly ($372 a year at that rate; the docs list $374) or $39 monthly, with no charge per post or per team member. The pricing page lists post volume as unlimited, but the create-post endpoint is rate-limited per hour (see the next section).

For SaaS companies that want to offer scheduling to their own users, a separate page, postiz.com/enterprise, sells a white-label headless API with its own price list: Starter $200, Growth $400, Business $1,200, Enterprise $2,500 and Scale $8,000 a month with the Monthly toggle, or $160, $320, $960, $2,000 and $6,400 a month with the Yearly toggle, for 200, 500, 2,000, 5,000 and 20,000 channels. Posts, users and API calls are listed as Unlimited and the vendor’s Popular badge sits on Business. When we read the page on November 6, 2026, every tier’s Contact Sales button and the page’s Book a Demo and Start Here buttons were disabled, each with the note “We are not accepting new applications at the moment”.

Limits developers should plan around

The Public API’s main limit is on creating posts, and Postiz’s pages give three numbers. The API overview says “90 requests per hour (100 for the cloud) limit applies to only the create post endpoint” and that the limit does not tier by plan; the cloud Limits page says 90 requests per hour on the create-post endpoint, a fixed value that does not scale with the plan; and the description inside the OpenAPI spec file says “There is a limit of 30 requests per hour”, without naming an endpoint. The API overview adds that one request can carry many posts, so send posts in batches rather than one request per post.

The other caps: request bodies on /posts are limited to 50 MB (above that the API returns 413), uploads to 10 MB per image and 1 GB per video file on every plan, and video clipping to one job at a time, 20 a day and 180 minutes for a single video. The pricing page lists unlimited posts per month on every plan, so the channel cap and the hourly create-post limit are the ones to size against.

Self-hosting, security and support

The open-source edition is licensed AGPL-3.0, and the vendor says it costs nothing to run beyond your own server. The same homepage answer adds that you handle installation with Docker, updates, backups and the developer-app approvals on each social network yourself. The docs say you register the developer app for each provider that needs one and supply its keys, that AI images and video need your own OpenAI and generator keys, and that a self-hosted install has no plan limits and behaves as the top tier; the pricing FAQ offers app approval as an optional paid service. Postiz’s pages also disagree on feature parity: the pricing FAQ says the hosted platform “is where the agent features ship first”, while the cloud docs say the difference “is not the feature set”. Support differs as well: Postiz Cloud customers get email and Discord, while self-hosted installs get the community Discord only, and the docs say support for them is not guaranteed.

The privacy policy, dated October 19, 2026, lists TLS on every connection, encryption at rest for media files, passwords stored only as salted bcrypt hashes and workspace API keys stored encrypted. We found no SOC 2 or ISO 27001 claim on the pages we read. The Data Processor page names an EU representative under GDPR Article 27 (Gelhaus Solutions) and lists sub-processors including Railway, Vercel, Cloudflare, Stripe, Anthropic, OpenAI, fal.ai and ElevenLabs; customers who have signed its Data Processing Agreement are told by email at least 7 days before a new sub-processor starts processing their data. There is no self-serve account deletion or data export: both go through support@postiz.com.

Refund terms conflict. The pricing FAQ, which matches the Terms of Service last updated on October 19, 2026, refunds up to one month of fees per account as long as your last charge was within the past 120 days, and says annual plans are not refundable. The docs’ refund page sets different rules: one refund per customer, for a subscription charge less than 60 days old, capped at one month, with a yearly charge refunded at one twelfth and the subscription cancelled. Read the Terms of Service before paying for a year.

Who Postiz fits, and who should look elsewhere

Postiz suits developers, SaaS teams and AI-agent builders who want to publish to many networks, including community platforms such as Reddit, Discord, Slack, Telegram, Mastodon and Bluesky and blogging targets such as Medium, Dev.to and WordPress (whose in-app connection the docs contradict), through an API, webhooks or MCP at a flat monthly price, with a calendar where a person can review what an agent scheduled. Agencies pay less per channel on the bigger plans (30 channels on Pro, 100 on Ultimate) and get unlimited team members, and teams that want to run the code themselves can self-host it if they register their own developer apps.

Look elsewhere if you need a free hosted tier to start (Buffer, Metricool, Publer, Upload-Post and Zernio each have one; Buffer’s, Upload-Post’s and Zernio’s include API access), an API for inboxes, DMs or ads, account-level analytics on more than about ten networks, more than the 90 to 100 create-post requests an hour the docs allow (the OpenAPI spec’s description says 30), or a vendor that states a SOC 2 or ISO 27001 certification. If you work with even one colleague, note that Standard has no team members; the cheapest plan with them is Team, $31 a month billed yearly ($39 monthly).

The catches

On Trustpilot, Postiz scored 3.5 (Average) from 16 reviews when we read the profile on November 6, 2026. The page loaded through only one of our three tools (the other two got a bot block); it is marked as a claimed profile, and the split it reported was 62% five-star and 38% one-star. G2 blocked every request, so we show no G2 score.

For a buyer, the bigger issue is that Postiz’s pages disagree on at least eleven points: the refund window, the yearly totals, AI images on Standard, RSS auto-posting on Standard, the API rate limit, the number of platforms, the number of platforms with analytics, whether 11 platforms can be connected in the app, whether comment replies can go through the API, whether plans tier on post volume, and whether self-hosted installs get the same features. Check the Terms of Service and the pricing page, which the docs call the commercial source of truth, before you commit. The hosted trial also needs a card and charges on day 7, the official Node.js SDK has not been updated on npm since July 2025, and self-hosted users get no guaranteed support.

Its status page, status.postiz.com, run by Gelhaus Solutions (the EU representative its Data Processor page names), lists two incidents on the hosted service in the 90 days before we read it on November 6, 2026. At 9:19 PM UTC on October 21 Postiz wrote that it was “investigating a reported security breach involving our hosting provider, Railway” and had “temporarily taken our production environment offline, affecting all production services”; the Dashboard, the API and Providers are listed as down, and it marked the incident resolved at 12:26 PM UTC on October 22, about 15 hours later (our arithmetic), saying “No user data has been affected or breached.” On October 3, from 4:03 to 5:08 PM UTC, a post publishing disruption left the Dashboard and the API degraded and Providers down, until it moved its services from Railway’s us-west to us-east. A scheduled maintenance from October 31 to November 1 then moved all its services from Railway to AWS.

Key features

How Postiz compares

Head-to-head: Postiz vs Zernio

Frequently asked questions