| Deployment model | A managed, multi-tenant API. No infrastructure to run — you call an HTTPS endpoint and PostGate operates the queues, workers, and delivery pipeline. | A hosted enterprise dashboard product first, with a REST/OAuth2 API layered on top for developers who want to build against it — publishing, Inbox 2.0, and user-provisioning endpoints, per developer.hootsuite.com. |
| Getting API access | Sign up free and call the API immediately — no application, no review queue. See /docs. | API access is free but gated behind a developer-access application. Hootsuite's own docs say the App Directory team reviews submissions and responds in 2–4 weeks, per the app submission process. No self-serve, instant key issuance. |
| Starting price & free tier | Free sandbox plan, no card required. Paid plans start at $4.00/mo. See /pricing. | No permanent free tier — only a trial. Paid plans are priced per seat: Standard around $99/user/mo (10 social accounts), Professional around $199/user/mo, and Advanced around $399/user/mo (unlimited accounts on both), with a custom-quote Enterprise tier above that, per hootsuite.com/plans. |
| Who owns platform app approval | On the white-label plan, bring your own Meta, TikTok, LinkedIn, and other provider app credentials per organization — your approval status and rate limits are yours alone. See /docs/environments. | Hootsuite operates its own shared, approved developer apps with each social network for end-user accounts connected through its dashboard; a third-party developer instead registers a separate OAuth2 app on the Hootsuite Platform, subject to the review above. |
| White-label & multi-tenant support | Every embedded connection environment supports a branded logo, primary color, and a verified custom domain on every plan that enables white-label. See /docs/environments. | Hootsuite's Agency Partners program offers organizing clients by account and white-labeled, branded PDF/analytics reports for resale — that's branded reporting for an agency's own clients, not a verified custom-domain, white-label connection flow for a third-party developer's own end users. |
| Webhook delivery model | Signed events (HMAC-SHA256 over timestamp and raw body) for post.published, post.partial, and post.failed, plus a test-delivery endpoint. See /docs/webhooks. | Hootsuite does sign webhook deliveries — an X-Hootsuite-Signature header carries a SHA-512 HMAC digest of the timestamp and raw body for Organization Apps — and its message-event webhook reports publish outcomes (SENT, SEND_FAILED_PERMANENTLY) alongside a ping test event, per the webhooks overview and event reference. A genuinely comparable, sourced feature — credit where it's due. |
| SDK & developer tooling | Generated clients for six languages/runtimes — Node.js/TypeScript, Python, Go, Ruby, PHP, and .NET — from one OpenAPI contract. See /docs/sdks-mcp. | No official, generated multi-language SDKs published by Hootsuite as of this writing — developers work against the REST API and OAuth2 directly, or use unofficial, community-maintained client libraries on GitHub. |
| Idempotent retries | A stable Idempotency-Key makes a logical create-post request safe to retry for 72 hours — no accidental duplicate publishes. See /docs/idempotency. | Not documented as a public API contract in Hootsuite's developer docs — no published idempotency-key mechanism for the publishing endpoint as of this writing. |
