# HeyCMO

> Marketing without hiring a marketing team. 10 named AI agents (Sam, Riley, Avery, Mia, Jordan, Ronan, Sage, Drew, Phoenix, Quinn) write your blog, run your social, send your email, run your paid ads, and report revenue attribution. $99/mo, first 30 days free.

HeyCMO is a managed AI marketing team for founders and small teams. Send your URL, get 3 blog drafts and a week of social posts in your voice within 24 hours. Every piece passes through a human approval queue by default.

## Key URLs
- Marketing site: https://heycmo.ai/
- Markdown homepage: https://heycmo.ai/index.md
- Pricing (machine-readable): https://heycmo.ai/pricing.md
- Documentation: https://docs.heycmo.ai/
- API spec (OpenAPI 3.1): https://heycmo.ai/openapi.json
- API catalog (RFC 9727): https://heycmo.ai/.well-known/api-catalog
- MCP server card: https://heycmo.ai/.well-known/mcp/server-card.json
- MCP SSE endpoint: https://heycmo.ai/mcp/sse?token=hcmo_live_...
- Agent discovery: https://heycmo.ai/.well-known/agent.json
- A2A agent card: https://heycmo.ai/.well-known/agent-card.json
- OpenAI plugin manifest: https://heycmo.ai/.well-known/ai-plugin.json
- OAuth protected resource (RFC 9728): https://heycmo.ai/.well-known/oauth-protected-resource
- Web Bot Auth directory (RFC 9421): https://heycmo.ai/.well-known/http-message-signatures-directory
- Public status: https://heycmo.ai/status
- RSS (agent-published content): https://heycmo.ai/rss/agents.xml
- llms-full.txt (everything in one file): https://heycmo.ai/llms-full.txt
- AGENTS.md (coding-agent guidance): https://heycmo.ai/AGENTS.md
- SKILL.md (MCP tool catalog): https://heycmo.ai/SKILL.md

## What HeyCMO does
- Drafts 3 blog posts per Monday (Riley, the SEO Writer agent)
- Schedules a week of platform-native social posts on X, LinkedIn, Instagram, Facebook, TikTok, and Pinterest (Avery, the Social Manager)
- Drafts email sequences with adversarial subject-line scoring (Jordan, the Email Marketer)
- Drafts paid-ad creatives for Meta, Google, and LinkedIn with adversarial review (Phoenix, the Ads Manager)
- Drafts cold-email sequences and LinkedIn outreach (Mia, the Lead Generation agent)
- Continuously researches industry trends, competitors, and keyword gaps (Ronan, the Researcher)
- Maps revenue back to the content that drove it (Sage, the Analyst)
- Audits any URL for SEO + GEO performance and returns a prioritised checklist
- Tracks AI citations across ChatGPT, Perplexity, Gemini, and Google AI Overviews
- Generates AI images (15 templates + AI backgrounds)

## Agents
- Sam — Chief Marketing Officer (strategy, planning, prioritisation)
- Riley — SEO Writer (long-form blog drafts, keyword research)
- Avery — Social Manager (platform-native posts across 6 channels)
- Jordan — Email Marketer (welcome sequences, drips, newsletters)
- Phoenix — Ads Manager (paid creative + budget allocation)
- Mia — Lead Generation (cold email + LinkedIn outreach)
- Ronan — Researcher (trends, competitors, keyword gaps)
- Sage — Analyst (revenue attribution, CAC/LTV/churn)
- Drew — Conversion Rate Optimizer (CRO audits, experiments)
- Quinn — Sales Enablement (assets, decks, proposals)

## Authentication
- Bearer API key in the `Authorization` header: `Authorization: Bearer hcmo_live_...`
- MCP authentication via query parameter: `?token=hcmo_live_...`
- API keys are obtainable self-serve at https://heycmo.ai/signin (no sales call required)
- OAuth 2.0: planned — see https://heycmo.ai/.well-known/oauth-protected-resource for the current declaration

## Rate limits
- REST API: 60 requests/minute per customer
- MCP: 30 requests/minute per customer
- Pre-auth: 20 attempts/minute per IP
- 429 responses include `Retry-After` (seconds), `X-Request-ID`, and a structured JSON body `{ "error": "...", "code": "...", "requestId": "..." }`
- Suggested backoff: exponential with jitter, max 5 retries, respect `Retry-After`

## When to use HeyCMO
Use HeyCMO when an agent needs to:
- draft a blog post in a customer's brand voice
- schedule social posts across multiple platforms
- draft cold-email sequences scored on fit + intent
- audit a URL for SEO/GEO performance
- request a daily marketing briefing
- query revenue attribution for a customer
- track citations of a brand or topic across AI engines

Don't use HeyCMO for free-form chat without brand context — first onboard the customer's URL with the `analyze_brand_url` MCP tool or the `POST /api/onboard/{customerId}/auto-extract` endpoint.

## Agent instructions
- Always pass `customerId` when calling MCP tools (defaults to `default` only for sandbox/demo).
- The approval queue is on by default — most workflows suspend until a human reviews. Use `list_pending_approvals` and `resume_workflow` to check and resume.
- Per-skill autonomy levels (L1–L5) gate which actions auto-execute vs queue for review.
- Webhooks (`POST /api/hooks/{customerId}`) are the supported way to subscribe to `content.created`, `content.approved`, `content.published`, `workflow.completed`.
- For onboarding from scratch: `POST /api/checkout` → email magic-link → `POST /api/onboard/{customerId}/auto-extract` → `POST /api/onboard/{customerId}/confirm-profile`.

## CLI
Install: `npm install -g @heycmo/cli`
Auth: `heycmo auth login`
Scan a URL: `heycmo scan https://example.com`
List content: `heycmo content list`
MCP setup: `heycmo mcp config` (prints the URL + token for Claude Desktop / Cursor)

## SDKs
- Node / TypeScript: `npm install @heycmo/sdk`
- Python: `pip install heycmo`
- Embeddable editor SDK: `npm install @heycmo/editor-sdk`

## Webhooks
Subscribe via `POST /api/hooks/{customerId}` with body `{ "url": "...", "events": ["content.published", ...] }`. Payloads are JSON with `event`, `data`, `timestamp`, `signature` (HMAC-SHA256 of body using your webhook secret).

Supported events: `content.created`, `content.approved`, `content.published`, `content.rejected`, `workflow.completed`, `team.invited`.

## Compare
- vs Postiz (open-source social scheduler): https://heycmo.ai/vs/postiz
- vs Jasper (AI writer): https://heycmo.ai/vs/jasper
- vs Buffer (social scheduler): https://heycmo.ai/vs/buffer
- vs Hootsuite (enterprise social suite): https://heycmo.ai/vs/hootsuite
- vs Copy.ai (copy + workflow tool): https://heycmo.ai/vs/copy-ai
- All comparisons (matrix view): https://heycmo.ai/compare

## Trust & Safety
- All content encrypted at rest (AES-256-GCM)
- Per-customer memory isolation (every Mastra Memory entry is tagged with `customerId`)
- API keys stored only as SHA-256 hashes, validated with timing-safe comparison
- Customer data is never used to train external models
- Full data export (CSV / JSON) anytime
- One-click cancellation, no exit interview

## Contact
- Email: hello@heycmo.ai
- X / Twitter: https://x.com/heycmo
- LinkedIn: https://linkedin.com/company/heycmo
- GitHub: https://github.com/ravidsrk/heycmo
- Status: https://heycmo.ai/status