Skip to content
PostFlow

Overview

PostFlow API 1.1.0

Section titled “PostFlow API 1.1.0”

Schedule posts to Instagram, Facebook, TikTok, Threads, YouTube, Bluesky and Telegram, and read comments, messages and analytics. Authenticate with Authorization: Bearer pf_… (an API key from Settings → Integrations → API & MCP) or an OAuth access token. Read-only keys can call every GET plus POST /posts/validate.

Information

  • OpenAPI version: 3.1.0

Operations

Section titled “Operations”
GET
/me
GET
/accounts
GET
/accounts/{id}
GET
/accounts/{id}/tiktok-creator-info
GET
/accounts/{id}/tiktok-music
GET
/content-types
GET
/posts
POST
/posts
POST
/posts/validate
POST
/posts/delete
GET
/posts/{id}
PUT
/posts/{id}
DELETE
/posts/{id}
POST
/posts/{id}/publish
POST
/posts/{id}/reschedule
POST
/posts/{id}/retry
POST
/posts/{id}/approve
POST
/posts/{id}/reject
GET
/calendar
GET
/queue
PUT
/queue
GET
/queue/next
GET
/media
POST
/media
POST
/media/upload
POST
/media/delete
GET
/media/{id}
DELETE
/media/{id}
GET
/media/{id}/file
PUT
/media/{id}/thumbnail
POST
/media/uploads
PUT
/media/uploads/{id}/parts/{n}
POST
/media/uploads/{id}/complete
POST
/media/uploads/{id}/abort
GET
/tags
POST
/tags
DELETE
/tags/{id}
PATCH
/tags/{id}
GET
/inbox
GET
/inbox/summary
POST
/inbox/sync
POST
/inbox/{id}/reply
POST
/inbox/{id}/hide
POST
/inbox/{id}/status
GET
/inbox/messages
GET
/inbox/messages/{id}
POST
/inbox/messages/{id}/reply
POST
/inbox/messages/{id}/status
GET
/analytics
GET
/analytics/digest
GET
/webhooks
POST
/webhooks
GET
/webhooks/{id}
DELETE
/webhooks/{id}
PATCH
/webhooks/{id}
POST
/webhooks/{id}/test
POST
/webhooks/{id}/rotate-secret
POST
Post published WEBHOOK
POST
Post failed WEBHOOK
POST
TikTok draft ready WEBHOOK
POST
Comment received WEBHOOK
POST
Direct message received WEBHOOK
POST
Account needs reconnecting WEBHOOK
POST
Test event WEBHOOK

Authentication

Section titled “Authentication”

apiKey

Section titled “apiKey”

An API key from Settings → Integrations → API & MCP, starting with pf_.

Security scheme type: http

oauth

Section titled “oauth”

For MCP clients. Register with dynamic client registration; PKCE (S256) is required.

Security scheme type: oauth2

Flow type: authorizationCode

Authorization URL: https://postflow.biz.id/oauth2/authorize

Token URL: https://postflow.biz.id/oauth2/token

Refresh URL: https://postflow.biz.id/oauth2/token

Scopes:

  • read - Read everything in the workspace
  • write - Create, change and publish content
© 2026 PostFlow