bundle.social Blog: Social Media and Social Media APIs

August 17, 2026 | Industry | Marcel Czuryszkiewicz

How AI is transforming SEO and Google Ads through automated bidding, predictive analytics, and real-time campaign optimization.

August 17, 2026 | API Guides | Marcel Czuryszkiewicz

Every X API tutorial shows the same three-line text post and stops there. This one covers why media upload still needs OAuth 1.0a and a v1.1 endpoint while the post itself is v2, the full upload sequence with polling, threads, and which errors are terminal. Each call is annotated with its cost.

August 17, 2026 | Automation | Marcel Czuryszkiewicz

A technical deep-dive into social media API integration - OAuth flows, media uploads, analytics, webhooks, and compliance. The messy reality of building social integrations that survive production.

August 17, 2026 | API Guides | Marcel Czuryszkiewicz

Three independent counters on X return the same 429: the 15-minute window, the per-endpoint daily cap, and your billing cap. This separates them by the error type field, shows which headers exist and which do not, and points out three different limits X's own documentation gives for POST /2/tweets.

August 17, 2026 | Automation | Marcel Czuryszkiewicz

Learn how to integrate social media APIs for scheduling, analytics, and automation. A practical guide for developers covering OAuth, rate limits, and enterprise best practices.

August 17, 2026 | Automation | Marcel Czuryszkiewicz

The undocumented gotchas of the YouTube Shorts API: processing delays, quota nightmares, classification mysteries, and the thumbnail trap. Lessons from two years of production.

August 17, 2026 | Automation | Marcel Czuryszkiewicz

Technical guide to YouTube Data API v3 - OAuth authentication, resumable uploads, quota management, and multi-channel architecture for developers building video upload systems.

August 17, 2026 | Social Media | Marcel Czuryszkiewicz

X replaced subscription tiers with pay-per-use, and there is no Enterprise tier in the pricing table any more. Covers the full rate card, the 2 million read cap, the 24-hour deduplication window most guides miss, and why a post containing a link costs 13.3 times a post without one.

August 16, 2026 | API Guides | Marcel Czuryszkiewicz

Endpoint-by-endpoint mapping, the object-model translation, and an honest list of what bundle.social does not do. Tokens cannot transfer between vendors, so re-consent sets the timeline, not engineering. How to run it in shadow mode first and flip tenant by tenant without duplicates.

August 16, 2026 | Tools | Marcel Czuryszkiewicz

Looking for an Ayrshare alternative? Flat pricing (no post counting), 2% error rate, verbose errors, analytics included, and support that actually responds.

August 16, 2026 | API Guides | Marcel Czuryszkiewicz

Every Bluesky tutorial teaches app passwords. This one covers the OAuth flow the protocol actually specifies: PAR, PKCE, private_key_jwt and a DPoP keypair per account, plus the nonce retry nobody documents. Also two different blob limits in one post, and why a pasted URL renders as dead text.

August 15, 2026 | API Guides | Marcel Czuryszkiewicz

Threads runs on its own Meta host, its own scopes and its own v1.0 track, so Instagram publishing code ported across still type-checks and posts nothing. Covers the two-step container flow, all five container states, recovering from a 500 that already published, and the four separate quota buckets.

August 13, 2026 | API Guides | Marcel Czuryszkiewicz

Reddit's OAuth flow has one parameter that decides whether you ever receive a refresh token. Without it the integration dies sixty minutes after it starts working. Covers duration=permanent, the app type you cannot change later, a scope-to-endpoint table with three traps, and the User-Agent myth.

August 11, 2026 | API Guides | Marcel Czuryszkiewicz

TikTok has two separate APIs for publishing photos, and a payload copied from one never works on the other. This covers the Business API path: photo_images, photo_cover_index, the URL ownership verification that blocks the first publish, the limits that reject a post, and which failures to retry.

August 10, 2026 | API Guides | Marcel Czuryszkiewicz

Meta counts your calls in three parallel systems, and the token you send decides which one applies. Maps all three against Graph API v23.0, both usage headers, and the throttle codes Meta splits across two separate pages - including code 9 and subcode 1390008, which appear on neither. Plus 75/90.

August 9, 2026 | API Guides | Marcel Czuryszkiewicz

Media upload on X is a different API from the post endpoint, with a different auth model. Covers the four chunked calls and their rate limits, why an OAuth 2.0 token that posts text returns 403 on a file, a polling loop that terminates, and three places X's own docs contradict themselves.

August 7, 2026 | Playbooks | Marcel Czuryszkiewicz

A Fiverr animator stopped replying, so we built the mockup ourselves. One prompt turns Apple, Solana and Revolut ads into a style document with real numbers, one turns that document into a self-contained HTML spot, one slows it down. The exact prompts, and where the method stops.

August 4, 2026 | API Guides | Marcel Czuryszkiewicz

LinkedIn access has three independent axes: the product your app was approved for, the scopes in the token, and the user role on the organization. All three have to line up, and a 403 tells you nothing about which failed. Maps all three, plus the roles beyond Super admin that can actually publish

August 4, 2026 | API Guides | Marcel Czuryszkiewicz

An unaudited TikTok app is not a broken app. It publishes normally and every post lands private, with no parameter that changes it. Covers the two stages of approval, the scopes each unlocks, domain verification for URL uploads, the creator_info call before every publish, and what gets rejected.

August 4, 2026 | API Guides | Marcel Czuryszkiewicz

TikTok tokens last a day, Facebook gives you sixty, and X with offline access effectively never expires. Covers the three expiry models across 15 platforms, which ones rotate the refresh token and lock you out permanently if you drop it, and the four reasons a valid token still stops working.