BrightBean Studio is an open-source social-media manager, free and self-hostable

A small agency that schedules posts for a handful of clients pays $100 to $300 a month to a hosted scheduler like Buffer, Sendible or SocialPilot, and the per-seat and per-channel limits of those tools often cost more than the base plan. BrightBean Studio is an AGPL-3.0 project that does the same job on the user's own server, and the maintainers launched it on Product Hunt after seven months of commits.

The repository is at brightbeanxyz/brightbean-studio, with 2,422 stars at the time of this item. A free hosted version runs at brightbean.xyz/studio on the same codebase, and the project ships one-click deploys for Heroku, Render and Railway as well as a Docker setup for a VPS.

What it does

The feature list on the project page covers what a hosted scheduler offers: a composer with per-platform caption and media overrides, a visual calendar with recurring posting slots, named queues that auto-assign posts, approval workflows with internal and client stages, a unified social inbox with sentiment analysis and threaded replies, per-post and channel-level analytics, a workspace-scoped media library with auto-generated platform-optimised variants, and a passwordless 30-day magic-link client portal. Unlimited organisations, workspaces and members are included, and the role model carries a separate Client role for external collaborators.

Twelve platforms are listed as supported for publishing: Facebook, Instagram and its Direct inbox, LinkedIn in personal and company shapes, TikTok, YouTube, Pinterest, Threads, Bluesky, Google Business Profile, Mastodon and DEV.to. Insights are pulled on all twelve, comments on nine, and direct messages on three. Each platform integration talks to its first-party API with developer credentials the user owns.

The licence, the storage detail, and the missing TOTP

Three choices in the design are stated plainly in the README. The licence is AGPL-3.0, which places conditions on anyone who hosts a modified version. Credentials and tokens are encrypted at rest. And the project states one deployment detail that a self-hoster has to plan for: with local storage selected, uploaded media is served without an auth check at /media/ because Instagram, Threads, Facebook, Pinterest, Google Business Profile and DEV.to fetch attachment URLs server-side at publish time and need a public path. Only the media library and workspace icons are exposed this way, and comment attachments go through a permission-checked view.

For an agency, the sum of those choices is a scheduler the team can run on a $20 VPS with its own developer apps, in exchange for the hour or two of setup to connect each platform. 2FA by TOTP is on the roadmap and not yet in the app, which is worth planning around for a team that requires it.

Source

The repository is at brightbeanxyz/brightbean-studio under AGPL-3.0.