The Content Engine uses OAuth to connect your social media accounts. Vlozi stores encrypted access tokens — it never stores your platform passwords.
How to connect an account
In the Vlozi dashboard, navigate to Content Engine → Connections → Add account.
Select a platform and follow the OAuth flow on the platform's site. When you return to Vlozi, the account appears in your connections list with status Active.
You can connect multiple accounts per platform (e.g., two different Twitter accounts for two brands).
Platform-specific notes
Twitter / X
Required permissions (scopes): tweet.write, tweet.read, media.write
Twitter issues short-lived access tokens (approximately 2 hours). Vlozi refreshes them automatically in the background — you should never need to reconnect unless you explicitly revoke access in Twitter's app settings.
Required permissions: w_member_social
LinkedIn issues tokens with approximately 60-day lifetime and does not provide a refresh mechanism. When your token expires, LinkedIn posts will start failing and the connection will flip to Expired status.
WARNING
Set a calendar reminder to reconnect your LinkedIn account before the 60-day mark to avoid missed posts.
Required permissions: pages_manage_posts (plus additional permissions based on your use case)
Facebook tokens expire after approximately 60 days. Reconnect via the same OAuth flow to issue a new token.
Required permissions: instagram_basic, pages_manage_posts
Instagram requires a Business Account connected to a Facebook Page. Personal Instagram accounts are not supported.
Tokens expire on the same 60-day cycle as Facebook.
Viewing connection health
In Content Engine → Connections, each account shows:
| Status | Meaning |
|---|---|
| Active | Token valid; publishing works |
| Expired | Token has expired; posts to this account will fail until you reconnect |
| Revoked | You or the platform revoked access; reconnect to resume |
| Error | Platform returned an unexpected error on last use |
Connection rows are kept as a tombstone after revocation (for analytics history). Reconnecting the same account updates the existing row rather than creating a new one.
Disconnecting an account
In the connections list, click the ··· menu → Disconnect. Vlozi revokes the token on the platform side and sets the connection to Revoked status.
NOTE
Disconnecting does not cancel scheduled content slots that target this account. Those slots will fail at publish time with a REVOKED error. Cancel or retarget them before disconnecting.
What happens when a token expires during a scheduled post
- The Durable Object alarm fires at the scheduled time
- The publish job loads the connection and detects the expired token
- For Twitter: Vlozi attempts a token refresh automatically. If the refresh also fails, the target is marked Failed
- For LinkedIn/Meta: No refresh is possible. The target is immediately marked Failed with
TOKEN_EXPIRED - The connection status flips to Expired
- A reconnect banner appears in the dashboard
Any other slots scheduled to the same expired connection will also fail one by one as their alarms fire. To stop the cascade, reconnect the account or delete the pending slots.