Each network has its own rules about what can be connected and what can be published via an API. This page lists the ones that catch people out.
Requirements by network
| Network | Account type required | Token expiry |
|---|---|---|
| X | Any | ~60 days, re-auth prompted |
| Profile or Company Page | ~60 days | |
| Business or Creator, linked to a Facebook Page | ~60 days | |
| Page (not personal profile) | ~60 days | |
| TikTok | Business | ~365 days |
| YouTube | Channel with uploads enabled | Long-lived |
| Business | Long-lived | |
| Threads | Linked to an Instagram Business account | ~60 days |
Permissions we ask for
Postovio requests publish and read-analytics scopes only. It does not request permission to read your direct messages, follow accounts, or modify your profile. If a consent screen shows scopes beyond publishing and analytics, that is the network bundling them — you can review exactly what was granted in your account settings on the network itself.
When a connection breaks
Tokens lapse. Networks also invalidate them when you change your password or revoke app access.
A broken connection shows as Needs attention on the Channels page, and anything queued for it is held rather than dropped. Re-authorise and the queue resumes in order — you do not lose scheduled posts.
What cannot be published via API
These are network restrictions, not Postovio limitations:
- Instagram Stories to personal accounts
- Facebook posts to personal profiles
- X posts containing more than four images
- LinkedIn posts that tag individuals (pages can be tagged; people cannot)