Typefully
MARKETING · MARKETING
Drafts, scheduled posts, social sets, and post and follower analytics in the account they connected.
Connecting Typefully in practice
Typefully meters two buckets at once and names neither in numbers: a user-level allowance and a per-social-set allowance keyed by operation, which the response identifies in X-RateLimit-SocialSet-Resource as something like drafts.create. The docs say the limits are sized for "personal automations and team workflows", so a product serving many end users is expected to ask rather than scale.
Rate limits
- User-level, on all endpoints: X-RateLimit-User-Limit, X-RateLimit-User-Remaining, X-RateLimit-User-Reset as a Unix timestamp.
- Social-set level, on specific operations: X-RateLimit-SocialSet-Limit, -Remaining, -Reset, plus X-RateLimit-SocialSet-Resource naming the operation, for example drafts.create.
- Over either bucket returns 429 Too Many Requests. The numbers themselves are published only in the headers.
- List endpoints: limit default 10, maximum 50, with offset paging.
Worth knowing
- Nearly every write is nested under a social set — POST /v2/social-sets/{id}/drafts — so an agent has to resolve GET /v2/social-sets before it can create anything.
- Two rate-limit buckets means a 429 has two possible causes, and only the header set tells you which, so a single retry policy will either back off too far or not far enough.
- A draft fans out to X, LinkedIn, Threads, Bluesky and Mastodon, so one API call can be several platform posts with several sets of platform rules behind it.
- The 50-item page cap on list endpoints makes a full draft history a paging loop against the same undisclosed rate limit.
Checked against Typefully public API reference (2026-09-29), Typefully API help article (2026-09-29)
What an agent can do
Each action is granted on its own. An agent allowed to read is not thereby allowed to write, and the scope beside each row is what the acting user must have connected for it to run at all.
Often connected alongside
Put Typefully behind one governed endpoint.
Same permissions, same audit trail, whatever else you connect next.