Blog

Google & YouTube API

Google CASA Tier 2 Security Assessment: The Annual Test Restricted-Scope Apps Must Pass to Keep Gmail, Drive & Calendar Access (2026)

04/08/2026

Restricted Google scopes (Gmail, Drive, Calendar) require an annual CASA Tier 2 security assessment. Here is what it involves, why apps get...

Meta App Review

appsecret_proof Explained: Why “API Calls From the Server Require an appsecret_proof Argument” Breaks Your Meta Integration (2026)

04/08/2026

What appsecret_proof is, why Meta's Graph API rejects server calls without it, and where the "appsecret_proof required" error trips up production integrations.

Meta App Review

Instagram Reels & Story Publishing Limits: The Extra Rules Apps Hit After instagram_content_publish Approval (2026)

04/08/2026

Getting instagram_content_publish approved is only the first gate. The moment your app posts a Reel or Story instead of a feed image,...

WhatsApp API

WhatsApp Cloud API “Free Tier”: What’s Actually Free and Where Real Billing Starts (2026)

04/08/2026

There is no blanket WhatsApp Cloud API free tier — but real free messaging exists. Exactly what's free, and where billing starts.

Meta App Review

catalog_management Permission & the Meta Product Catalog API App Review: Getting Catalog Access Approved (2026)

04/08/2026

Why Meta product catalog access sits behind its own catalog_management permission, its business_management dependency, and a separate App Review + Business Verification...

Meta App Review

Meta Ad Library API Access: What “No App Review” Actually Means (and Where People Still Get Stuck) (2026)

04/08/2026

X (Twitter) API

X (Twitter) API Developer Account Approval: Pay-Per-Use Pricing, Read/Write Permissions, and What Replaced Elevated Access (2026)

04/08/2026

X replaced its old developer tiers with pay-per-use pricing in February 2026, and the free tier is gone for new sign-ups. Here...

Meta App Review

business_management Permission: Why Meta Rejects It and How to Get It Approved (2026)

04/08/2026

business_management manages Business Manager assets and claims ad accounts — but Meta's own App Review screencast rules trip up apps that aren't...

Meta App Review

Meta Data Access Renewal: The One Assessment Replacing Data Use Checkup, DPA and Ongoing Reviews (2026)

04/08/2026

Meta is consolidating Data Use Checkup, the Data Protection Assessment, data handling questions, App Review and ongoing reviews into a single data...

Google & YouTube API

Google OAuth Internal vs External User Type: The One Dropdown That Decides Whether Verification Applies (2026)

04/08/2026

Internal or External is the smallest field on the Google Auth Platform screen and the one with the largest consequences. It decides...

Meta App Review

Facebook Login for Business: Why config_id Replaces scope and What App Review Checks (2026)

04/08/2026

Facebook Login for Business swaps the scope parameter for a config_id built in the App Dashboard. Here is what that configuration locks...

Google & YouTube API

Google Deletes OAuth Clients After 6 Months of Inactivity: What Breaks and How to Prevent It (2026)

04/08/2026

Google now automatically deletes OAuth 2.0 clients that stay inactive for six months. Here is what counts as "inactive", what breaks the...

Meta API Services

Google & Other APIs

SaaS Script Setup

Google CASA Tier 2 Security Assessment: The Annual Test Restricted-Scope Apps Must Pass to Keep Gmail, Drive & Calendar Access (2026)

appsecret_proof Explained: Why “API Calls From the Server Require an appsecret_proof Argument” Breaks Your Meta Integration (2026)

Instagram Reels & Story Publishing Limits: The Extra Rules Apps Hit After instagram_content_publish Approval (2026)

WhatsApp Cloud API “Free Tier”: What’s Actually Free and Where Real Billing Starts (2026)

catalog_management Permission & the Meta Product Catalog API App Review: Getting Catalog Access Approved (2026)

Meta Ad Library API Access: What “No App Review” Actually Means (and Where People Still Get Stuck) (2026)

X (Twitter) API Developer Account Approval: Pay-Per-Use Pricing, Read/Write Permissions, and What Replaced Elevated Access (2026)

business_management Permission: Why Meta Rejects It and How to Get It Approved (2026)

Meta Data Access Renewal: The One Assessment Replacing Data Use Checkup, DPA and Ongoing Reviews (2026)

Google OAuth Internal vs External User Type: The One Dropdown That Decides Whether Verification Applies (2026)

Facebook Login for Business: Why config_id Replaces scope and What App Review Checks (2026)

Google Deletes OAuth Clients After 6 Months of Inactivity: What Breaks and How to Prevent It (2026)