Mallary for Make

Mallary for Make is the official Mallary social media automation app for Make.com.

Use one visual workflow to publish and schedule social posts, upload media, read comments, post approved replies, check analytics, manage profiles, and react to Mallary events.

What you can do

• Publish to Facebook, Instagram, Threads, LinkedIn, YouTube, TikTok, Pinterest, Reddit, Snapchat, and X.
• Use a different message or title for each platform.
• Upload an image or video from an earlier Make module.
• Watch publishing events and continue a scenario right away.
• Read comments and send a reply you already approved.
• Check post results, platform post IDs, platform links, and analytics.
• Manage Mallary profiles, connected platforms, settings, and webhooks.
• Call newer Mallary API routes with the advanced universal module.

Safety

Some modules make real changes outside Make.

• Create or Schedule a Post can publish to real social accounts.
• Reply to a Comment posts the exact reply on a live social network.
• Upload Media sends the selected file to Mallary storage.
• Delete and disconnect modules require a separate confirmation field.
• Keep your Mallary API key in a Make connection. Do not put it in module fields, logs, or scenario notes.

Install for development

1. Install the official Make Apps Editor extension in VS Code.
2. Clone this repo.
3. Open the folder that contains makecomapp.json.
4. Sign in to Make from the extension.
5. Create or choose a private Mallary custom app.
6. Link the local app to that private app.
7. Deploy the full local app.
8. Upload assets/mallary.png as the app logo.
9. Create a Mallary connection with a test API key.
10. Run the review checklist in REVIEW.md.

The origins list is empty on purpose. The Apps Editor adds your own Make environment mapping. Never commit a Make API token.

Authentication

Create a Mallary API key in the Mallary dashboard. Save it only in the Mallary connection in Make.

Every Mallary API request sends:

• Authorization: Bearer <api-key>
• x-mallary-client: make

The second request in Upload Media goes to a temporary object-storage URL. It does not send the Mallary API key.

Instant trigger security

Watch Mallary Events creates a Mallary webhook when the trigger is enabled and removes it when the trigger is deleted. Mallary signs each delivery. The webhook communication checks the signature before it outputs the event.

Development

npm test

This validates the catalog, JSON source, source header, protected connection use, direct binary upload safety, universal route safety, and destructive confirmations.

Links

• Mallary: https://mallary.ai
• Docs: https://docs.mallary.ai/home/make
• API: https://docs.mallary.ai/api-reference/introduction
• Issues: https://github.com/mallarylabs/make-app-mallary/issues