OAuth callbacks
- https://api.hoopoe.co.ke/oauth/meta/callback
- https://api.hoopoe.co.ke/oauth/linkedin/callback
- https://api.hoopoe.co.ke/oauth/tiktok/callback
- https://api.hoopoe.co.ke/oauth/google/callback
- https://api.hoopoe.co.ke/oauth/x/callback
Platform review
Hoopoe uses one approved app per platform.
Customers click Connect, sign in directly with the platform, grant Hoopoe permission, and receive a workspace-specific connection. This page summarizes the review package for platform reviewers.
Production website, privacy policy, terms, data deletion page, acceptable use policy, and support contact are published.
Customers connect their own accounts through official OAuth or embedded onboarding. Hoopoe does not request customer API keys.
Hoopoe stores customer access and refresh tokens encrypted server-side, never in browser storage or public code.
Disconnect, token revocation handling, connection health checks, audit logs, and publication failure recovery are part of the product workflow.
Customer connection flow
Connect
Platform login
Grant scopes
Token callback
Account selection
Ready
Hoopoe's production credentials identify Hoopoe as the developer application. Each customer connection creates separate workspace-scoped account records, encrypted tokens, granted scopes, expiry metadata, and connection status.
Platform permissions
Facebook and Instagram
OAuth through Hoopoe's Meta app
Pages, publishing, comments, insights, and Instagram professional account access where approved.
WhatsApp Business
Meta Embedded Signup
Business portfolio, WABA, phone number ID, messaging webhooks, and approved template or support workflows.
Three-legged OAuth
Company Page discovery, publishing, comments, reactions, and analytics only after LinkedIn review.
TikTok
Login Kit and Content Posting API
Creator identity, draft upload, direct publishing after audit, and approved engagement capabilities.
YouTube
Google OAuth
Channel identity, upload, video metadata, comments, and analytics scopes requested only as implemented.
X
OAuth 2.0 with PKCE
User identity, read/write posts, offline access where permitted, and approved engagement functions.
Webhook endpoints
- https://api.hoopoe.co.ke/webhooks/meta
- https://api.hoopoe.co.ke/webhooks/whatsapp
- https://api.hoopoe.co.ke/webhooks/linkedin
- https://api.hoopoe.co.ke/webhooks/tiktok
- https://api.hoopoe.co.ke/webhooks/youtube
- https://api.hoopoe.co.ke/webhooks/x
Reviewer package
For platform submission, Hoopoe should include reviewer credentials, exact review steps, a short product description, permission-by-permission explanations, a demo video, screenshots of customer consent, and data deletion instructions.
Request reviewer access