# Changelog

Changes inside `/v1` are additive (see [Versioning](/concepts/versioning/)). Subscribe to this page through the
[docs repository](https://github.com/alvinmr/postflow/commits/main/docs-site/src/content/docs/changelog.md) or
[`llms.txt`](/llms.txt).

## 2026-10-21

**MCP**
- OAuth sign-in for MCP clients: Claude and ChatGPT connect by signing in to PostFlow and picking a workspace and access level.
  Discovery at `/.well-known/oauth-protected-resource` and `/.well-known/oauth-authorization-server`.
- 31 tools: posts (validate, publish, approve, reject), calendar, queue, media, comments, direct messages and analytics.
- Read-only connections only see read tools. List tools return `nextCursor`.

**API**
- Read-only API keys (`scope: "read"`): every GET plus `POST /posts/validate`.
- New: `GET /accounts/{id}`, TikTok creator settings and Business music, `POST /posts/validate`, `POST /posts/delete`,
  `POST /posts/{id}/publish`, `/approve`, `/reject`, `GET /calendar`, `POST /media/upload` and multipart uploads,
  media list/download/delete, tags, queue slots, comments, direct messages, analytics, and webhook management with secret rotation.
- `GET /posts` filters by `accountId` and `tagId` and pages with `cursor` (`X-Next-Cursor`).
- `GET /me` adds `member`, `credential` and `subscription.endsAt`. Accounts add `avatarUrl` and `error`.

**Webhooks**
- New events: `comment.received`, `message.received` and `account.needs_reconnect`.

## 2026-10-07

- First public API: workspace, accounts, posts (create, list, get, update, delete, reschedule, retry), media import
  from a URL and the next queue slot. Signed webhooks for `post.published`, `post.failed` and `post.handoff`.