Connected accounts

Each profile connects one account per platform (TikTok, Instagram, YouTube, Facebook). Connections are established via OAuth from the dashboard — the API cannot initiate an OAuth flow because the user has to interactively approve the scopes.

List accounts for a profile

GET /v1/platforms/accounts?profileId=prof_abc

curl "https://api.letspost.app/v1/platforms/accounts?profileId=prof_abc" \
  -H "Authorization: Bearer $SOCIALHUB_KEY"

Disconnect an account

DELETE /v1/platforms/accounts/{id}

curl -X DELETE https://api.letspost.app/v1/platforms/accounts/acc_123 \
  -H "Authorization: Bearer $SOCIALHUB_KEY"

Token lifecycle

Access tokens and refresh tokens are encrypted at rest with AES-256-GCM. The publisher transparently refreshes expired tokens before publishing.