.env; until then the lane is live-but-unauthenticated and waits for you to connect it (set PENDPOST_MODE=mock to exercise it through the mock driver).
Beta lane. Pinterest is built but not yet live-verified end to end, so treat it as a preview and do not rely on it for guaranteed delivery. The lane loses this badge once it is live-verified.
Trial access is owner-only. New Pinterest apps start with Trial access, which can post only to the app owner’s own account. Publishing pins for other accounts needs Standard access, a separate Pinterest review. Trial access is enough to publish to your own boards.
Setup ceremony
The app uses theboards:read, pins:read, and pins:write scopes. The auth command runs a local loopback server to receive the authorization code.
- Create a developer app. Open the Pinterest developer portal and create an app with the v5 API enabled. New apps start with Trial access.
- Record the app secret. Copy the app secret from the app settings and store it. It is used as HTTP Basic auth on the token endpoint.
- Add the redirect uri. In the app settings, add the redirect uri exactly:
http://127.0.0.1:8088/oauth/pinterest/callback. The auth command runs a local loopback server on that address. - Pick the target board. Choose the board pins are published to and record its id. The auth command can list your boards after you connect.
Environment variables
A lane publishes only once its credential is present. If the Pinterest variables are blank, the Pinterest lane is live-but-unauthenticated and waits for you to connect it. Set
PENDPOST_MODE=mock to exercise it through the mock driver.Validate the lane
A present credential is not the same as a working one. After setup, validate the Pinterest lane in the Setup tab, or run a live probe with thehealth_recheck tool, to confirm the credential is live and not just configured. The lane is ready when it reports live.
Over MCP. Setup and rotation are an interactive human ceremony; secrets are never written through MCP. An agent can still check status (
account_status), run a live liveness probe (health_recheck), and read non-secret config (config_get) over MCP without touching credentials.