Developer settings
Everything for connecting Postra to your own tools lives in Settings:
| Where | What is there |
|---|---|
| Settings → Developers → Access | Your API key, the Node.js SDK and the MCP setup for AI assistants |
| Settings → Developers → Apps | Your OAuth app, for “Sign in with Postra” |
| Settings → Webhooks | Webhooks that tell your server when a post goes out |
| Settings → Approved apps | Apps you have approved with your Postra account |
Plans
| Plan | API key, SDK, MCP and OAuth apps | Webhooks |
|---|---|---|
| Starter | Yes | 2 |
| Pro | Yes | 30 |
| Business | Yes | 10,000 |
This includes the 7-day trial of each plan. Without an active plan the Developers tab is hidden and API calls answer 401 {"msg": "No subscription found"}.
Who can see and change what
A workspace has three roles: the owner (shown as Super Admin), Admin and User.
| Owner and Admin | User | |
|---|---|---|
| See, copy and rotate the API key | Yes | No |
| MCP setup | Yes | No |
| Create, edit and delete the OAuth app | Yes | No |
| Add, edit and delete webhooks, see their signing secrets | Yes | No |
| Approve another app (“Sign in with Postra”) for the workspace | Yes | No |
| See and revoke their own approved apps | Yes | Yes |
A User does not see the Developers and Webhooks tabs at all.
Access tab
API key
The API key lets your own code, or a no-code tool, use the Public API for your workspace. There is one key per workspace. It has the access of a workspace Admin, so treat it like a password.
| Button | What it does |
|---|---|
| Reveal / Hide | Shows or hides the full key |
| Copy | Copies the key |
| Rotate Key | Makes a new key. You are asked to confirm first. |
| Open Wizard | Opens the post editor in a new tab. Build a post there and copy the request body it shows. |
What happens to the old key when you rotate: it stops working at once. Every script, no-code tool, SDK client or AI assistant that uses it gets 401 {"msg": "Invalid API key"} until you give it the new key. OAuth tokens are not affected.
Rotate the key straight away if it ever leaks.
Node.js SDK
Shows the install command and a short example with your key. See Node.js SDK.
MCP
MCP lets an AI assistant work in your Postra account. This box makes the setup for you:
- Under Authentication, choose CLI (Claude Code / Codex) or Remote servers (ChatGPT, Claude).
- For CLI, pick your tool: Claude Code, Cursor, VS Code / Copilot, Windsurf, Amp, Codex, Gemini CLI or Warp.
- Click Copy and paste the result where the hint says.
The setup contains your API key. If you rotate the key, set up the assistant again. See What MCP is and Connect your assistant.
Apps tab
Here you create one OAuth app per workspace. Use it when you build a product that posts for other Postra users. You get a Client ID and a Client Secret, and you can edit, rotate the secret or delete the app. See Sign in with Postra.
Webhooks tab
Add an HTTPS address and Postra calls it, with a signed message, each time a post is published. See Webhooks.
Approved apps tab
Every member sees this tab. It lists the apps you approved with “Sign in with Postra”. Click Revoke access to cut an app off. Its token stops working at once.