Changelog

Changes inside /v1 are additive (see Versioning). Subscribe to this page through the docs repository or llms.txt.

2026-10-21

MCP

• OAuth sign-in for MCP clients: Claude and ChatGPT connect by signing in to PostFlow and picking a workspace and access level. Discovery at /.well-known/oauth-protected-resource and /.well-known/oauth-authorization-server.
• 31 tools: posts (validate, publish, approve, reject), calendar, queue, media, comments, direct messages and analytics.
• Read-only connections only see read tools. List tools return nextCursor.

API

• Read-only API keys (scope: "read"): every GET plus POST /posts/validate.
• New: GET /accounts/{id}, TikTok creator settings and Business music, POST /posts/validate, POST /posts/delete, POST /posts/{id}/publish, /approve, /reject, GET /calendar, POST /media/upload and multipart uploads, media list/download/delete, tags, queue slots, comments, direct messages, analytics, and webhook management with secret rotation.
• GET /posts filters by accountId and tagId and pages with cursor (X-Next-Cursor).
• GET /me adds member, credential and subscription.endsAt. Accounts add avatarUrl and error.

Webhooks

• New events: comment.received, message.received and account.needs_reconnect.

2026-10-07

• First public API: workspace, accounts, posts (create, list, get, update, delete, reschedule, retry), media import from a URL and the next queue slot. Signed webhooks for post.published, post.failed and post.handoff.