Social media API changes, week of November 2, 2026
YouTube lets unverified API apps publish public videos, X sets a January 1 end for old Livestream routes, Mastodon 5.0 beta moves sign-up into OAuth.
Five platform changes were announced between Monday November 2 and Sunday November 8, 2026. The one that matters most for scheduling: YouTube stopped forcing uploads from unverified API apps to private. The next deadlines are LinkedIn's version 202511 sunset and Discord's channel change, both on November 16.
What this means for you
If you post to YouTube with a small or home-made tool, your videos can now go public without a manual step, so check that each upload has the privacy you want. If you plan X live streams in an app, it needs an update before January. Prices moved at a few schedulers too: Buffer now shows monthly prices, PlanPost's Pro plan is $39 and Hypefury changed its plans.
The details
Changes announced last week
YouTube
- YouTube lifts the private-only rule for uploads from unverified API projects (November 2). Uploads without a privacy setting now default to public. Our article: what changes for scheduled uploads.
- YouTube API now sets custom thumbnails on Shorts (November 3).
X
- X Livestream API: user-scoped source and broadcast routes removed January 1, 2027 (November 5). Scheduled broadcasts must send a source id instead of a stream key by the same date.
Mastodon
- Mastodon 5.0.0-beta.1 moves sign-up into the OAuth flow and deprecates POST /api/v1/accounts (November 4). No removal date yet; authentication errors return HTTP 422 instead of 200.
Google Business Profile
- Business Information API v1alpha shows edit status and rejection reasons for locations and attributes (November 2).
Price and plan changes
- Buffer: monthly prices are now published: Essentials $6 and Team $12 per channel. Yearly billing stays $5 and $10.
- PlanPost: Pro went from $39.99 to $39 a month, and yearly prices are now published ($199 a year for Creator, $399 for Pro).
- Hypefury: Full is replaced by Creator ($19 a month or $190 a year), a new Pro plan costs $39 a month, and Facebook is now listed.
- ContentStudio: its API plan now shows a $19 month-to-month price alongside $15 billed yearly.
- SocialBee: no price change, but our yearly agency figures were corrected to the $149.20, $274.20 and $374.20 a month the page shows.
- Canva Content Planner: added with Pro at $15 a month and Teams at $10 per person a month on monthly billing.
The change that matters most
YouTube's November 2 change. For six years, a new YouTube app couldn't publish a public video until it passed YouTube's audit, which held back small schedulers and in-house tools. That wall is gone, but the default flipped too: an upload that sets no privacy now goes out public, so a forgotten setting can publish a test or an embargoed video.
Also added to the changelog last week
These 91 entries cover older changes, added while we widened coverage to Discord, Telegram and WhatsApp and filled gaps for the other platforms. They are listed here because they were added last week, not because they changed last week.
Bluesky / AT Protocol (12)
- @atproto/api 0.14: stricter types, $type required in records, is* helpers no longer cast
- @atproto/api session refactor: BskyAgent deprecated, some session hooks removed
- AT Protocol OAuth permissions and permission sets ship, replacing app-password-level access
- AT Protocol deprecates hardcoding bsky.social and relying on default AppView proxying
- Bluesky PDS adds OAuth sign-up and an account page for revoking connected apps
- Bluesky TypeScript SDK packages go ESM-only and drop Node 18 and 20
- Bluesky adds video posts: one video per post, up to 60 seconds
- Bluesky documents label rate limits and changes default relay limits for new PDS hosts
- Bluesky opens federation: accounts can live on PDS hosts outside Bluesky
- Bluesky pinned posts clash with a field third-party apps already used
- Bluesky releases Tap for backfilled, verified repo sync with webhooks
- Bluesky shows richer link previews for articles published with Standard.site
Discord (12)
- Discord API adds message forwarding
- Discord Create Message adds enforce_nonce to stop duplicate posts
- Discord adds Components V2 for message layouts
- Discord bots need the PIN_MESSAGES permission to pin from February 23, 2026
- Discord checks app upload limits per attachment, not per message
- Discord cuts the default upload limit for webhooks to 10 MiB
- Discord documents link previews and adds component embeds for websites
- Discord hides channels a bot can't view, from November 16, 2026 over HTTP
- Discord lets apps edit attachment descriptions and spoilers
- Discord raises the default upload limit to 20 MiB for bots and webhooks
- Discord requires message content access to forward a message
- Discord ties privileged intent review to 10,000 users and adds yearly reapplication
Google Business Profile (5)
- Business Profile API returns photos and videos attached to reviews
- Business Profile Performance API adds the MESSAGING_CLICKS metric
- Business Profile Performance API: BUSINESS_CONVERSATIONS metric deprecated, removal date January 31, 2026
- Business Profile Performance API: BUSINESS_FOOD_ORDERS metric deprecated, removal April 22, 2027
- Business Profile food menus take up to 200 dish photos, then gain gluten-free and dairy-free tags
LinkedIn (10)
- LinkedIn Developer Portal shows OAuth refresh token usage and throttling per app
- LinkedIn Events API: endsAt required from 202605, no edits once an event starts
- LinkedIn Marketing API version sunset calendar: every version and its end date
- LinkedIn OAuth login adds Sign in with Google and Sign in with Apple from December 2, 2025
- LinkedIn adds Boost API: turn member and Company Page posts into ads from your app
- LinkedIn adds the Events Management API: create, schedule and manage LinkedIn Events from your app
- LinkedIn developer apps must be associated with and verified by a Company Page
- LinkedIn moves developer support to a request form and lets apps reapply for API access
- LinkedIn publishes integration requirements for partner certification, including Community Management
- LinkedIn removes the location field from /v2/me and /v2/people: use geoLocation
Mastodon (5)
- Mastodon 4.2.10 and 4.1.18 fix API permission checks and posts scheduled under 5 minutes ahead
- Mastodon 4.2.5, 4.1.13 and 4.0.13 fix CVE-2024-23832, an origin validation flaw
- Mastodon 4.3 adds PKCE, the profile scope and OAuth server metadata, and removes the crypto scope
- Mastodon 4.7.1 and 4.7.5 fix password authentication bypasses (2FA with LDAP, PAM or SSO, and inactive accounts)
- New terms of service for mastodon.social and mastodon.online, effective August 31, 2026
Pinterest (8)
- Pinterest API can create ad-only Pins and an ad-only board
- Pinterest API deprecates creating Pin notes
- Pinterest API outage on August 4, 2025
- Pinterest API outage on February 17, 2026
- Pinterest API partial outage on July 18, 2025
- Pinterest adds Business Access endpoints for sharing ad accounts and profiles
- Pinterest adds a multiple Pin analytics endpoint for up to 100 Pins per request
- Pinterest adds the Client Credentials grant for app-owner tokens
Telegram (11)
- Telegram Bot API 10.0 adds media in polls and live photos
- Telegram Bot API 7.3 changes getChat and sendPoll types
- Telegram Bot API 9.0 lets bots post stories for business accounts
- Telegram Bot API adds custom video covers and start times
- Telegram Bot API adds paid broadcasts of up to 1,000 messages per second
- Telegram Bot API adds rich messages of up to 32,768 characters
- Telegram Bot API adds sendPaidMedia for paid photos and videos in channels
- Telegram Bot API adds suggested posts and direct messages in channels
- Telegram Bot API lets bots send messages on behalf of business accounts
- Telegram Bot API lets captions sit above photos and videos
- Telegram can hold bot video posts to large channels until the video is re-encoded
TikTok (1)
WhatsApp (2)
- WhatsApp Business On-Premises API is deprecated: Meta points to the Cloud API
- WhatsApp Cloud API: template images sent by old Meta CDN links fail with 400 Invalid Handle
X (11)
- Account Activity API v2 accepts OAuth 2.0 with fine-grained scopes
- X API can share Community posts with followers via share_with_followers
- X API search moves to a new index: reposts dropped from keyword results, min_likes operators back
- X API v2 adds email retrieval with OAuth 2.0, plus profile banner and connection status fields
- X API v2 changes affiliation and DM event fields, and explains refused DMs
- X Activity API adds post.create and post.delete events
- X Activity API renames event types to dot format from March 18, 2026
- X launches Account Activity API endpoints in v2
- X launches the X Activity API in open beta for real-time account events
- X retires the Account Activity replay endpoint for POST /2/webhooks/replay
- X ships official Python and TypeScript XDKs, a local API Playground and docs.x.com
YouTube (14)
- YouTube API adds comment image URLs, 1080p to 4K thumbnail sizes and a read-only scope for videos.getRating
- YouTube Analytics API adds DMA, concurrent viewers and membership cancellation reports for channels
- YouTube Analytics ageGroup now counts viewers YouTube estimates to be under 18
- YouTube Data API adds videos.batchGetStats, charged to its own 10,000-unit quota bucket
- YouTube Developer Policies require apps using the embedded player to identify themselves with a Referer
- YouTube Live Streaming API lets scheduled broadcasts set geo-restrictions with availabilityConfig
- YouTube Live Streaming API lets tools set a live broadcast's category with snippet.categoryId
- YouTube Reporting API adds reach reports with thumbnail impressions and click-through rate
- YouTube caption track names are limited to 150 characters, longer names return nameTooLong
- YouTube channels.list can look up a channel by its @handle with forHandle
- YouTube clarifies that madeForKids settings are only changed when a request sends them
- YouTube deprecates the channel moderateComments setting on 7 March 2024
- YouTube documents a 48 to 72 hour delay in Analytics API data and points to videos.list for live counts
- YouTube videos.insert and videos.update can link a brand partner with the new brandPartner part
What to do this week
- Business owners: If a small tool posts your YouTube videos, check that the next upload has the privacy you expect.
- Marketers and agencies: Confirm that your LinkedIn and Discord tools are ready for November 16, and that any X live-stream scheduler plans to move before January 1.
- Developers: Move off LinkedIn version 202511 and set
status.privacyStatuson every YouTubevideos.insertbefore the 16th.
Questions people ask
What was the biggest social media API change in the week of November 2, 2026?
YouTube's November 2 change: videos uploaded through the API from unverified projects are no longer locked to private, and they default to public when the request sets no privacy. Small and self-built YouTube schedulers can now publish public videos straight away.
Which API deadlines are coming up after this week?
LinkedIn Marketing API version 202511 and Discord's channel change over HTTP both take effect on November 16, 2026, and X removes its old Livestream API routes on January 1, 2027.
Sources
Related
- API
LinkedIn Posts API: what you can schedule and how
LinkedIn's Posts API publishes text, images, video, documents, polls and multi-image posts but has no schedule field. How tools schedule, permissions, limits.
- Tools
Open-source social media schedulers you can self-host
Four open-source schedulers you can run yourself: Postiz, TryPost, Mixpost Lite and SkyScheduler. Licences, networks, what self-hosting takes, hosted prices.
- How-to
Schedule LinkedIn posts free: built-in scheduler and tools
Schedule LinkedIn posts free with LinkedIn's own scheduler, up to 3 months ahead, or use a free scheduler plan such as Zoho Social or Buffer. Limits compared.
- Tools
Free social media schedulers: all 39 free plans, verified
The best free social media scheduler for most people is Zoho Social (6 accounts) or Buffer (any 3 of 11 networks). All 39 free plans compared, with check dates.