Skip to main content
MarquIQ
Integrations

Connecting platforms

Every integration uses the platform's native auth. We never see your password, and every token is encrypted per-org with Fernet + HKDF.

How connections work

Head to /connections and click any logo. You get redirected to the platform, approve MarquIQ, and come back with a connection. For platforms without OAuth (app passwords, API keys, session tokens) you paste the token in a secure field that never hits our logs.

Platform matrix

PlatformAuthStatus
X (Twitter)OAuth 2.0 PKCELive
RedditOAuth 2.0Live
LinkedInOAuth 2.0Live
BlueskyApp passwordLive
MastodonOAuth 2.0Live
Dev.toAPI keyLive
HashnodeAPI keyLive
Indie HackersSession tokenLive
Hacker NewsSession tokenLive
ThreadsOAuth 2.0Beta
Facebook PageOAuth 2.0Beta
Instagram BusinessOAuth 2.0Beta
TikTokOAuth 2.0Beta
YouTubeOAuth 2.0Beta
PinterestOAuth 2.0Beta
DiscordWebhook / bot tokenBeta
SlackOAuth 2.0Beta
TelegramBot tokenBeta
MediumIntegration tokenBeta
WordPressApplication passwordBeta
FarcasterSigner + FIDComing soon
Nostrnsec keyComing soon
LemmyAPI + JWTComing soon
Google My BusinessOAuth 2.0Coming soon
KickOAuth 2.0Coming soon
TwitchOAuth 2.0Coming soon

Credential storage

Tokens are encrypted at rest with a per-org data encryption key (DEK) derived via HKDF from a master key-encryption key (KEK). The master KEK lives in environment config only — it is never written to disk or the database.

Security

If you revoke access on the platform side, MarquIQ detects the 401 on the next send and auto-disables the connection. You will see a red state on /connections and a notification in the queue.

Reddit is special

Reddit tasks are forced to full-review mode regardless of your org setting. Reddit punishes shallow AI replies hard — lost karma, banned accounts, banned subs. Every Reddit draft shows the parent thread so you can verify the reply is genuinely useful before it goes out.