Trust through explicit boundaries

Security & permissions

Understand the Threads permissions Ankk uses, the verified infrastructure boundary, and the safeguards that keep sensitive actions explicit.

Official Threads permission model

Ankk requests threads_basic and only the additional permissions needed for the actions a user enables.

  • threads_basicRequired for all Threads endpoints.
  • threads_content_publishPublishing Threads content.
  • threads_read_repliesReading replies.
  • threads_manage_repliesPublishing and managing replies.
  • threads_manage_insightsReading Threads insights.

Source: Meta Threads API official documentation · Reviewed July 23, 2026

Verified

Verified current state

  • The marketing site, product app, public API, admin API, docs, and deployment surfaces are separated.
  • Threads permissions are presented by the user outcome they enable.
  • Production database connectivity uses private Cloudflare Workers VPC and Hyperdrive paths with PostgreSQL TLS.
  • Execution results remain visible so failed or incomplete actions can be reviewed.

Operational safeguards

Operational safeguards

  • Ask for the smallest permission set required by the chosen workflow.
  • Keep connection, authorization, and expiration state visible to the user.
  • Record requested, completed, and failed operations separately.
  • Require explicit human authority for sensitive publishing and deletion actions.
  • Treat infrastructure controls as one layer, not a complete security guarantee.

Product security principles

Least capability

Ask for access only when a workflow needs it, rather than requesting every scope by default.

Human authority

Sensitive actions should have explicit boundaries, approval states, and visible outcomes.

Observable execution

A user should be able to inspect what was requested, what completed, and what failed.

Honest status

An intended safeguard is not described as implemented until its production behavior is verified.