> ## Documentation Index
> Fetch the complete documentation index at: https://www.posted.cc/llms.txt
> Use this file to discover all available pages before exploring further.

# Complete a social OAuth callback

> Provider callback handler. Verifies the stored state, verifier, initiating user and provider, saves encrypted tokens, then redirects to Posted. Do not fabricate callbacks or log authorization codes.

A signed-in human session is required. API keys and MCP bearer credentials cannot replace that session.

Provider callback handler. Verifies the stored state, verifier, initiating user and provider, saves encrypted tokens, then redirects to Posted. Do not fabricate callbacks or log authorization codes.

[Request conventions](/api-reference/overview) · [API keys](/api-keys) · [MCP connections](/mcp-connections)


## OpenAPI

````yaml api-reference/openapi.json GET /api/social/callback/{provider}
openapi: 3.1.0
info:
  title: Posted HTTP API
  version: 0.2.0
  description: >-
    All registered application, account, OAuth, MCP transport and health
    endpoints. Publishing and draft request schemas come from the shared runtime
    validators. Replace the example server with your installation. Documentation
    uses simple request examples and does not execute live publishing requests.
servers:
  - url: https://posted-api.example.com
security: []
paths:
  /api/social/callback/{provider}:
    get:
      tags:
        - Social connections
      summary: Complete a social OAuth callback
      description: >-
        Provider callback handler. Verifies the stored state, verifier,
        initiating user and provider, saves encrypted tokens, then redirects to
        Posted. Do not fabricate callbacks or log authorization codes.


        A signed-in human session is required. API keys and MCP bearer
        credentials cannot replace that session.
      operationId: get_api_social_callback_by_provider
      parameters:
        - name: provider
          in: path
          required: true
          schema:
            type: string
            enum:
              - x
              - threads
              - linkedin
              - bluesky
          description: >-
            The provider from the corresponding list, record or authorization
            response.
        - name: state
          in: query
          required: false
          schema:
            type: string
          description: string
        - name: code
          in: query
          required: false
          schema:
            type: string
          description: string
        - name: error
          in: query
          required: false
          schema:
            type: string
          description: string
        - name: iss
          in: query
          required: false
          schema:
            type: string
          description: string
      responses:
        '302':
          description: Redirect to the authorization, consent or UI destination.
          headers:
            Location:
              schema:
                type: string
                format: uri
              description: Redirect destination
        default:
          description: >-
            Request failure. Inspect code, message and requestId; respect
            Retry-After on HTTP 429.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/Error'
      security:
        - sessionCookie: []
components:
  schemas:
    Error:
      type: object
      required:
        - error
      properties:
        error:
          type: object
          required:
            - code
            - message
            - requestId
          properties:
            code:
              type: string
            message:
              type: string
            requestId:
              type: string
  securitySchemes:
    sessionCookie:
      type: apiKey
      in: cookie
      name: posted_session
      description: >-
        Signed-in human browser session; mutation requests also need the exact
        UI Origin

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.