Use your own platform apps

By default, accounts connect through the platform's own consent screen. If you run a product on top of Pozy you may want that screen to show your own app name and logo, and to get your own rate limits on platforms that set them per app. You will be able to register your own app for a platform and connect accounts through it, while Pozy still handles tokens, publishing, analytics and the inbox.

Nothing changes for accounts you connect without an app id: they stay on the default app. Switch one platform at a time, at your own pace.

#Before you start

• A workspace owner or admin, or a full-scope API key. Profile-scoped keys cannot manage apps and get 403 insufficient_permissions.
• An app on the platform, created in its developer console, with its client ID and secret.
• Time for the platform's review. Most platforms only let outside accounts connect after they approve the app.

#Supported platforms

GET /v1/connect/oauth-apps returns the same list in platforms, each with its redirectUri, the scopes every connection needs (coreScopes) and the scopes behind each area (scopeAreas).

#Set up an app

curl -X POST "https://api.pozy.ai/v1/connect/oauth-apps" \
  -H "Authorization: Bearer $POZY_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "platform": "youtube",
    "label": "Acme Studio",
    "clientId": "4471209931-q8r2s6t0.apps.googleusercontent.com",
    "clientSecret": "GOCSPX-..."
  }'

const res = await fetch("https://api.pozy.ai/v1/connect/oauth-apps", {
  method: "POST",
  headers: {
    Authorization: `Bearer ${process.env.POZY_API_KEY}`,
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
    platform: "youtube",
    label: "Acme Studio",
    clientId: "4471209931-q8r2s6t0.apps.googleusercontent.com",
    clientSecret: process.env.YOUTUBE_CLIENT_SECRET!,
  }),
});
const data = await res.json();
if (!res.ok) throw new Error(data.error);
const appId = data.app.id;
const redirectUri = data.app.redirectUri;

resp = requests.post(
    "https://api.pozy.ai/v1/connect/oauth-apps",
    headers={"Authorization": f"Bearer {os.environ['POZY_API_KEY']}"},
    json={
        "platform": "youtube",
        "label": "Acme Studio",
        "clientId": "4471209931-q8r2s6t0.apps.googleusercontent.com",
        "clientSecret": os.environ["YOUTUBE_CLIENT_SECRET"],
    },
    timeout=30,
)
app = resp.json()["app"]

curl "https://api.pozy.ai/v1/connect/youtube?profileId=6650c1f2a9e4b7d3c8a1f0e2&oauthAppId=$APP_ID&redirect_url=https://app.example.com/connected" \
  -H "Authorization: Bearer $POZY_API_KEY"

#Manage apps

• The client secret is never returned after you add it. Rotating it with PATCH applies to every account on the app.
• test refreshes status, lastCheckedAt and lastError. invalid means connects and token refreshes through the app fail until you fix the keys.
• You can add several apps for the same platform. Nothing picks one automatically: a connect without oauthAppId uses the default app.
• Removing an app that still has accounts returns 409 OAUTH_APP_IN_USE with details.accountCount. Pass confirm=true to remove it anyway: those accounts are marked as needing reconnection and each one fires account.disconnected. The response says how many in disconnectedAccounts.

#Limits

• Instagram apps cover Instagram login only. Ads connects and WhatsApp Embedded Signup always use the default app.
• A WhatsApp app you add has its webhook callback set to Pozy, replacing any other. Keep a separate Meta app for Pozy.
• Fresh Google Cloud projects get a tiny YouTube upload quota, roughly six videos a day. Request a higher quota from Google before customers depend on it.
• If your app loses an area, for example after a platform review, the accounts on it fire account.permissions_changed with missingScopeAreas. See Scopes.

#Errors

#Endpoints