Who provides the OAuth app
| Platform | OAuth app provided by | What you do | What SocialAPI does | App review needed? |
|---|---|---|---|---|
| SocialAPI | Click Connect | Run OAuth, manage tokens | No | |
| SocialAPI | Click Connect | Run OAuth, manage tokens | No | |
| Threads | SocialAPI | Click Connect | Run OAuth, manage tokens | No |
| SocialAPI | Click Connect | Run OAuth, manage tokens | No | |
| TikTok | SocialAPI | Click Connect | Run OAuth, manage tokens | No |
| SocialAPI | Click Connect | Run OAuth, manage tokens | No | |
| YouTube | SocialAPI | Click Connect | Run OAuth, manage tokens | No |
| Twitter / X | You (BYOK) | Create a Twitter Developer app, paste keys into SocialAPI | Run OAuth, manage tokens | No (you just need a Twitter Developer account) |
| Telegram | You (bot token) | Create a bot with @BotFather, paste the token into SocialAPI | Validate the token, register the webhook | No (no app review, no OAuth) |
Why Twitter is different
Twitter rate-limits per-app. A single shared SocialAPI app would hit the per-app limit immediately and throttle every customer at once. To avoid that, every customer brings their own Twitter Developer app, which gives them their own rate-limit bucket. Setup takes about ten minutes - see the Twitter BYOK setup guide.Telegram uses a static bot token
Telegram is the one connector that does not use OAuth at all. Instead of clicking Connect and authorizing through a consent screen, you create a bot with @BotFather (send/newbot, choose a name and a username ending in bot), copy the token it gives you, and paste it when connecting. The token never expires and is revoked only through @BotFather. There is no developer account, business verification, or app review. See the Telegram connector for the full flow.
What permissions does SocialAPI request
For transparency, here are the OAuth scopes SocialAPI’s pre-approved app requests on your behalf for each platform. You don’t need to do anything with this list - it’s informational.| Platform | Scopes |
|---|---|
instagram_business_basic, instagram_business_manage_comments, instagram_business_manage_messages, instagram_business_content_publish | |
pages_show_list, pages_read_engagement, pages_read_user_content, pages_manage_engagement, pages_manage_metadata, pages_messaging, pages_manage_posts, public_profile, business_management | |
| Threads | threads_basic, threads_content_publish, threads_delete, threads_read_replies |
https://www.googleapis.com/auth/business.manage | |
| TikTok | user.info.basic, user.info.profile, video.publish, video.upload |
r_liteprofile, rw_organization_admin, r_organization_social, w_organization_social, r_organization_social_feed, w_organization_social_feed | |
| YouTube | https://www.googleapis.com/auth/youtube.force-ssl |