SocialClaw

SocialClaw Auth, Billing, and Provider Callbacks API

Routes called by identity providers, billing systems, app stores, and Meta webhooks.

GitHub OpenAPI

Operations 7

GET /auth/mobile/google/start Mobile Google auth start #
GET /auth/mobile/apple/start Mobile Apple auth start #
POST /auth/mobile/apple/native Native Apple token exchange #
POST /v1/billing/webhook Billing webhook #
POST /v1/billing/app-store/notifications App Store server notification #
POST /webhooks/meta/deauthorize Meta deauthorize webhook #
POST /webhooks/meta/data-deletion Meta data deletion webhook #

Specifications

⚙
OpenAPI
https://artifacts.apis.io/getsocialclaw-com/openapi/getsocialclaw-com-auth-billing-and-provider-callbacks-api-openapi.yml

Schemas & Data

📊
JSONSchema
https://artifacts.apis.io/getsocialclaw-com/json-schema/getsocialclaw-com-apple-native-auth-request-schema.json
📊
JSONSchema
https://artifacts.apis.io/getsocialclaw-com/json-schema/getsocialclaw-com-dashboard-session-response-schema.json
📊
JSONSchema
https://artifacts.apis.io/getsocialclaw-com/json-schema/getsocialclaw-com-ok-response-schema.json
📊
JSONSchema
https://artifacts.apis.io/getsocialclaw-com/json-schema/getsocialclaw-com-webhook-response-schema.json

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this
  • find_apisBrowse and filter every API in the catalog.
  • get_api_artifactsOne API's artifacts, grouped by type.
  • get_openapiThe primary OpenAPI for this API.
  • find_similar_apisAPIs that look like this one.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This API 
curl "https://apis.io/api/v1/apis/getsocialclaw-com:getsocialclaw-com-auth-billing-and-provider-callbacks-api"
All apis 
curl "https://apis.io/api/v1/apis?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

getsocialclaw-com-auth-billing-and-provider-callbacks-api-openapi.yml Raw ↑ 
openapi: 3.2.0
info:
  title: SocialClaw Auth, Billing, and Provider Callbacks API
  version: 1.0.0
  description: Complete SocialClaw API reference for social account connections, media uploads, validation, scheduling, publishing, analytics, dashboard APIs, webhooks, and delivery URLs.
servers:
- url: https://getsocialclaw.com
  description: SocialClaw production API
security:
- BearerAuth: []
tags:
- name: Auth, Billing, and Provider Callbacks
  description: Routes called by identity providers, billing systems, app stores, and Meta webhooks.
paths:
  /auth/mobile/google/start:
    get:
      tags:
      - Auth, Billing, and Provider Callbacks
      operationId: get_auth_mobile_google_start
      summary: Mobile Google auth start
      description: Starts native/mobile dashboard authentication with Google.
      security: []
      parameters:
      - name: callbackScheme
        in: query
        required: false
        schema:
          type: string
        description: Optional mobile callback scheme.
      responses:
        '200':
          description: Successful response.
      x-socialclaw-auth: callback
      x-socialclaw-surface: auth
  /auth/mobile/apple/start:
    get:
      tags:
      - Auth, Billing, and Provider Callbacks
      operationId: get_auth_mobile_apple_start
      summary: Mobile Apple auth start
      description: Starts native/mobile dashboard authentication with Apple.
      security: []
      parameters:
      - name: callbackScheme
        in: query
        required: false
        schema:
          type: string
        description: Optional mobile callback scheme.
      responses:
        '200':
          description: Successful response.
      x-socialclaw-auth: callback
      x-socialclaw-surface: auth
  /auth/mobile/apple/native:
    post:
      tags:
      - Auth, Billing, and Provider Callbacks
      operationId: post_auth_mobile_apple_native
      summary: Native Apple token exchange
      description: Exchanges a native Apple identity token for a SocialClaw dashboard session payload.
      security: []
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/AppleNativeAuthRequest'
      responses:
        '200':
          description: Successful response.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/DashboardSessionResponse'
        '400':
          description: Invalid request.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '401':
          description: Missing, invalid, or unauthorized credentials.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '404':
          description: Requested resource was not found.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '422':
          description: Request body or semantic validation failed.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      x-socialclaw-auth: callback
      x-socialclaw-surface: auth
  /v1/billing/webhook:
    post:
      tags:
      - Auth, Billing, and Provider Callbacks
      operationId: post_v1_billing_webhook
      summary: Billing webhook
      description: 'Processes Lemon Squeezy billing events.


        Note: Requests must include the expected billing signature header.'
      security:
      - WebhookSignature: []
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/OkResponse'
      responses:
        '200':
          description: Successful response.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/WebhookResponse'
        '400':
          description: Invalid request.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '401':
          description: Missing, invalid, or unauthorized credentials.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '404':
          description: Requested resource was not found.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '422':
          description: Request body or semantic validation failed.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      x-socialclaw-auth: webhook
      x-socialclaw-surface: webhook
  /v1/billing/app-store/notifications:
    post:
      tags:
      - Auth, Billing, and Provider Callbacks
      operationId: post_v1_billing_app_store_notifications
      summary: App Store server notification
      description: Processes signed App Store server notifications.
      security:
      - WebhookSignature: []
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/OkResponse'
      responses:
        '200':
          description: Successful response.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/WebhookResponse'
        '400':
          description: Invalid request.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '401':
          description: Missing, invalid, or unauthorized credentials.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '404':
          description: Requested resource was not found.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '422':
          description: Request body or semantic validation failed.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      x-socialclaw-auth: webhook
      x-socialclaw-surface: webhook
  /webhooks/meta/deauthorize:
    post:
      tags:
      - Auth, Billing, and Provider Callbacks
      operationId: post_webhooks_meta_deauthorize
      summary: Meta deauthorize webhook
      description: Receives Meta deauthorization callbacks.
      security:
      - WebhookSignature: []
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/OkResponse'
      responses:
        '200':
          description: Successful response.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/WebhookResponse'
        '400':
          description: Invalid request.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '401':
          description: Missing, invalid, or unauthorized credentials.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '404':
          description: Requested resource was not found.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '422':
          description: Request body or semantic validation failed.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      x-socialclaw-auth: webhook
      x-socialclaw-surface: webhook
  /webhooks/meta/data-deletion:
    post:
      tags:
      - Auth, Billing, and Provider Callbacks
      operationId: post_webhooks_meta_data_deletion
      summary: Meta data deletion webhook
      description: Receives Meta data deletion requests and returns a deletion status URL/code.
      security:
      - WebhookSignature: []
      requestBody:
        required: true
        content:
          application/json:
            schema:
              $ref: '#/components/schemas/OkResponse'
      responses:
        '200':
          description: Successful response.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/WebhookResponse'
        '400':
          description: Invalid request.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '401':
          description: Missing, invalid, or unauthorized credentials.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '404':
          description: Requested resource was not found.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
        '422':
          description: Request body or semantic validation failed.
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorResponse'
      x-socialclaw-auth: webhook
      x-socialclaw-surface: webhook
components:
  schemas:
    DashboardSessionResponse:
      type: object
      description: Current dashboard session response.
      additionalProperties: true
      properties:
        ok:
          const: true
        authenticated:
          type: boolean
          description: Whether a dashboard session exists.
        user:
          type:
          - object
          - 'null'
          additionalProperties: true
        tenant:
          anyOf:
          - $ref: '#/components/schemas/Tenant'
          - type: 'null'
        membership:
          type:
          - object
          - 'null'
          additionalProperties: true
      required:
      - ok
    Tenant:
      type: object
      description: Workspace visible to the authenticated API key or dashboard session.
      additionalProperties: true
      properties:
        id:
          type: string
          description: Workspace id.
        name:
          type:
          - string
          - 'null'
          description: Workspace name.
        plan:
          type:
          - string
          - 'null'
          description: Workspace plan.
        subscriptionStatus:
          type:
          - string
          - 'null'
          description: Billing subscription status.
        entitlements:
          type:
          - object
          - 'null'
          description: Plan capabilities and limits.
      required:
      - id
    OkResponse:
      type: object
      description: Generic successful response.
      additionalProperties: true
      properties:
        ok:
          const: true
          description: Always true for successful JSON API responses.
      required:
      - ok
    ErrorResponse:
      type: object
      description: Standard error response returned by JSON API routes.
      additionalProperties: false
      properties:
        ok:
          const: false
          description: Always false for errors.
        code:
          type:
          - string
          - 'null'
          description: Stable machine-readable error code.
        message:
          type: string
          description: Human-readable error message.
        details:
          type:
          - object
          - array
          - string
          - number
          - boolean
          - 'null'
          description: Optional route-specific details.
      required:
      - ok
      - message
    WebhookResponse:
      type: object
      description: Webhook acknowledgement.
      additionalProperties: true
      properties:
        ok:
          const: true
      required:
      - ok
    AppleNativeAuthRequest:
      type: object
      description: Native iOS Sign in with Apple identity token exchange.
      additionalProperties: true
      properties:
        identityToken:
          type: string
          description: Apple identity token. Also accepted as identity_token.
        nonceSha256:
          type:
          - string
          - 'null'
          description: SHA-256 nonce. Also accepted as nonce.
        email:
          type:
          - string
          - 'null'
          description: Email supplied by Apple on first sign-in.
        givenName:
          type:
          - string
          - 'null'
          description: Given name.
        familyName:
          type:
          - string
          - 'null'
          description: Family name.
        name:
          type:
          - string
          - 'null'
          description: Display name.
      required:
      - identityToken
  securitySchemes:
    BearerAuth:
      type: http
      scheme: bearer
      bearerFormat: SocialClaw API key
    DashboardSession:
      type: apiKey
      in: cookie
      name: socialclaw_dash_session
    WebhookSignature:
      type: apiKey
      in: header
      name: x-signature
externalDocs:
  description: Human-readable SocialClaw API documentation.
  url: https://getsocialclaw.com/docs/api
x-provenance:
  method: harvested
  publisher: SocialClaw
  source: https://getsocialclaw.com/openapi.json
  note: split by refine-openapis from the provider's own published document, verified by fetch (openapi/_original/*.fetch.json);
    stamped by stamp-openapi-provenance.py (roadmap#793)