Developer settings
API keys, OAuth apps, and connecting the CLI or an AI client
Where: Settings, Developers
Availability: Postiz Cloud, Standard plan and above. Self-hosted installs have it on every install.
This tab is the entry point to everything programmatic. The reference documentation lives in its own tabs; this page is about the controls in the UI.
Access
Your API key
Your API key lives in Postiz under Settings → Developers → Public API. Click the reveal icon to show it, then copy. You can rotate it from the same place, rotating immediately invalidates the old key, so update anything using it (scripts, n8n, MCP clients, the CLI) at the same time.
Never share your Postiz API key or OAuth token. Not in a GitHub issue, not in Discord, not with Postiz staff. Anyone holding it can post to every channel in your organisation.
If one leaks, rotate it under Settings → Developers → Public API.
Rotating is the fix if a key leaks, and the only fix: keys do not expire on their own.
MCP client configuration
Postiz generates the configuration block for connecting an AI client through MCP. Pick your client and whether you are using a local CLI or a remote client, then copy the block.
CLI and skills
The same section offers the setup for the CLI, for local use or for CI.
Apps
This is where you register an OAuth application, for building something other Postiz users will authorise, rather than something that acts as you.
Create OAuth App
Name and redirect URL are required. Description and icon are optional, and both are shown to users on the consent screen, so they are worth filling in.
Copy the credentials
You get a client ID and a client secret.
Implement the flow
Rotating the client secret invalidates the old one immediately. Every token exchange using the old secret starts failing, so deploy the new secret first.
API key or OAuth app?
| API key | OAuth app | |
|---|---|---|
| Acts as | You | Whoever authorises it |
| Good for | Your own scripts, automations, self-hosted tools | A product other Postiz users will use |
| Setup | Copy the key | Register an app, implement the flow |
| Revoking | Rotate the key | The user revokes in Approved Apps |
If you are automating your own posting, use the API key. Build an OAuth app only when other people's accounts are involved.