API Reference

Getting Started

Connect accounts and publish your first post

1

Create an Account

Sign up at app.codivupload.com using email or Google.

2

Create a Profile

Go to Profiles and create a brand profile. Each profile represents a brand or client with its own social accounts.

3

Connect Social Accounts

Click the platform buttons on your profile to connect via OAuth:

YouTube, TikTok, Instagram, Facebook, LinkedIn, X, Threads, Pinterest, Bluesky

Privacy & Security:

  • All OAuth tokens are encrypted with AES-256-GCM before storage — they are never visible to anyone, including CodivUpload staff.
  • CodivUpload only requests the minimum permissions needed to publish content and read analytics.
  • You can disconnect any account at any time from the Profiles page. Disconnecting immediately deletes all stored tokens.
  • Your data is never shared with third parties or used for purposes beyond what you authorized.

By connecting, you agree to each platform's terms: YouTube, TikTok, Instagram, Facebook, LinkedIn, X, Pinterest, Bluesky. See our Privacy Policy.

4

Create Your First Post

Go to Upload Posts → New Post and:

  1. Select post type (text, image, video, document)
  2. Choose your profile and target platforms
  3. Add content (title, description, media)
  4. Choose: Publish Now, Schedule for Later, or Add to Queue
  5. Click Publish
5

Get Your API Key

For programmatic access, go to API Keys and create a key. Use it in requests:

curl -X POST https://api.codivupload.com/v1/posts \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "post_type": "text",
    "profile_name": "my_brand",
    "platforms": ["x", "threads"],
    "description": "Hello world from CodivUpload!"
  }'
Security Best Practices:
  • Never expose your API key in client-side code, public repositories, or browser requests.
  • Store keys in environment variables (.env) — never hardcode them.
  • Rotate keys periodically and revoke any that may have been compromised.
  • Each key grants full access to your workspace — treat it like a password.

Token Validity

Platform OAuth tokens have different lifetimes. CodivUpload auto-refreshes where possible.

PlatformDurationNotes
TikTok~60 daysAuto-refreshed on regular use
Instagram~60 daysMay expire on password change
Facebook~60 daysMay expire on password change
LinkedIn~60 daysAuto-refreshed on regular use
YouTube~6 months7 days if using own API quota (testing mode)
X (Twitter)Long-livedStable unless revoked
Threads~60 daysSame as Instagram
Pinterest~365 daysAuto-refreshed
BlueskySession-basedApp password, no expiry