> ## Documentation Index
> Fetch the complete documentation index at: https://docs.social-api.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# Platform credentials

> Whose OAuth app do you authenticate through? SocialAPI provides managed apps for every connector except Twitter.

SocialAPI provides managed platform apps for every connector except Twitter/X. You don't need to create a Meta App, register with TikTok for Developers, set up a Google Cloud project, or apply for app review. Click Connect, complete OAuth, you're done.

## Who provides the OAuth app

| Platform    | OAuth app provided by | What you do                                                  | What SocialAPI does                      | App review needed?                             |
| ----------- | --------------------- | ------------------------------------------------------------ | ---------------------------------------- | ---------------------------------------------- |
| Instagram   | SocialAPI             | Click Connect                                                | Run OAuth, manage tokens                 | No                                             |
| Facebook    | SocialAPI             | Click Connect                                                | Run OAuth, manage tokens                 | No                                             |
| Threads     | SocialAPI             | Click Connect                                                | Run OAuth, manage tokens                 | No                                             |
| Google      | SocialAPI             | Click Connect                                                | Run OAuth, manage tokens                 | No                                             |
| TikTok      | SocialAPI             | Click Connect                                                | Run OAuth, manage tokens                 | No                                             |
| LinkedIn    | SocialAPI             | Click Connect                                                | Run OAuth, manage tokens                 | No                                             |
| YouTube     | SocialAPI             | Click Connect                                                | Run OAuth, manage tokens                 | No                                             |
| Twitter / X | **You (BYOK)**        | Create a Twitter Developer app, paste keys into SocialAPI    | Run OAuth, manage tokens                 | No (you just need a Twitter Developer account) |
| Telegram    | **You (bot token)**   | Create a bot with @BotFather, paste the token into SocialAPI | Validate the token, register the webhook | No (no app review, no OAuth)                   |

## Why Twitter is different

Twitter rate-limits per-app. A single shared SocialAPI app would hit the per-app limit immediately and throttle every customer at once. To avoid that, every customer brings their own Twitter Developer app, which gives them their own rate-limit bucket. Setup takes about ten minutes - see the [Twitter BYOK setup guide](/connectors/twitter-byok).

## Telegram uses a static bot token

Telegram is the one connector that does not use OAuth at all. Instead of clicking Connect and authorizing through a consent screen, you create a bot with [@BotFather](https://t.me/BotFather) (send `/newbot`, choose a name and a username ending in `bot`), copy the token it gives you, and paste it when connecting. The token never expires and is revoked only through @BotFather. There is no developer account, business verification, or app review. See the [Telegram connector](/connectors/telegram) for the full flow.

## What permissions does SocialAPI request

For transparency, here are the OAuth scopes SocialAPI's pre-approved app requests on your behalf for each platform. You don't need to do anything with this list - it's informational.

| Platform  | Scopes                                                                                                                                                                                                      |
| --------- | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Instagram | `instagram_business_basic`, `instagram_business_manage_comments`, `instagram_business_manage_messages`, `instagram_business_content_publish`                                                                |
| Facebook  | `pages_show_list`, `pages_read_engagement`, `pages_read_user_content`, `pages_manage_engagement`, `pages_manage_metadata`, `pages_messaging`, `pages_manage_posts`, `public_profile`, `business_management` |
| Threads   | `threads_basic`, `threads_content_publish`, `threads_delete`, `threads_read_replies`                                                                                                                        |
| Google    | `https://www.googleapis.com/auth/business.manage`                                                                                                                                                           |
| TikTok    | `user.info.basic`, `user.info.profile`, `video.publish`, `video.upload`                                                                                                                                     |
| LinkedIn  | `r_liteprofile`, `rw_organization_admin`, `r_organization_social`, `w_organization_social`, `r_organization_social_feed`, `w_organization_social_feed`                                                      |
| YouTube   | `https://www.googleapis.com/auth/youtube.force-ssl`                                                                                                                                                         |

## FAQ

**Do I need to apply for Meta App Review?**
No. SocialAPI's app is already reviewed and approved with Meta. You connect through it.

**Whose brand appears on the OAuth consent screen?**
Today, end users see SocialAPI's brand on the platform consent screen when they authorize a connection. White label consent is on our roadmap. If brand control matters for your use case, contact us .

**Can I bring my own Meta / TikTok / Google app instead?**
Not today. BYOA for non-Twitter platforms is on the roadmap. If this is critical for your use case, [contact us](https://www.) so we can prioritize it.

**Does the plan I'm on affect any of this?**
No. Managed platform apps are included on every plan, including the Free tier. Plans differ only by [resource limits](/guides/rate-limits).

**What happens if SocialAPI's platform app gets revoked or rate-limited?**
We monitor app health continuously. In the rare case of a platform-side issue, all customers on that platform are affected at once and we communicate via [status.social-api.ai](https://status.social-api.ai). Twitter customers (BYOK) are isolated from this because each customer has their own app.