API Permissions & Scopes
A transparent overview of the security scopes and access tokens CreatorFlow requests to automate your social publishing.
| Platform | Required Scopes / Permissions | Core Purpose |
|---|---|---|
| Facebook Developers (Facebook Pages) | pages_show_listpages_manage_postspages_read_engagementpages_manage_engagementpages_read_user_contentpublic_profileemail | Retrieve list of managed pages, publish video reels, monitor post engagement logs, and verify page administrator status. |
| Instagram Platform | instagram_basicinstagram_content_publishinstagram_manage_commentspages_show_listpages_manage_postspages_read_engagementpages_manage_engagementpages_read_user_contentpublic_profileemail | Publish content and video reels directly to Instagram business/creator profiles linked to Facebook pages. |
| LinkedIn Developers | openidprofileemailw_member_socialrw_organization_adminr_organization_socialw_organization_social | Post videos and updates to member profiles or organization pages you administer. |
| X Developer Platform (Twitter/X) | tweet.readtweet.writeusers.readoffline.accessmedia.write | Upload media, publish video tweets, and read profile metadata using secure OAuth 2.0 flow. |
| Threads API | threads_basicthreads_content_publish | Share media posts and text threads directly to user threads feeds. |
| Pinterest Developers | pins:readpins:writeboards:readboards:writeads:readuser_accounts:read | Create pins, manage video boards, and fetch user account statistics. |
| YouTube Data API | https://www.googleapis.com/auth/youtube.uploadhttps://www.googleapis.com/auth/youtube.readonly | Upload video content directly to your YouTube channel as video posts or shorts. |
| Google Business Profile API | https://www.googleapis.com/auth/business.manage | Post video updates, manage business profile media, and update business locations. |
| TikTok for Developers | user.info.basicvideo.publishvideo.upload | Publish video reels and uploads directly to your TikTok profile feed. |
Our Security Pledge
CreatorFlow uses official, platform-certified OAuth workflows to obtain authorization. We encrypt access tokens both in transit and at rest, and we will never request or store passwords for your social media channels.