> ## Documentation Index
> Fetch the complete documentation index at: https://docs.nylon.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Configure BYOK

> Add your own OAuth credentials for a provider, and the callback URL its app needs.

BYOK settings live in **Settings → BYOK**. Open settings from your avatar in the top left of the sidebar, or from the **Your OAuth (BYOK)** option on an empty Connections page.

## Add credentials

<Steps>
  <Step title="Open the provider">
    The BYOK panel lists every provider that accepts your own credentials, each with the networks it covers — *Meta · Facebook and Instagram*, *Google · YouTube and Google Business*, and so on. Select the gear on the one you want.
  </Step>

  <Step title="Copy the callback URL into your platform app">
    The form shows the **OAuth callback URL** to register with that provider. Add it to your app's allowed redirect URIs *before* saving credentials — an app that does not recognise the URL refuses the connection at the last step, after the user has already approved everything.

    Google shows **two** callback URLs, because YouTube and Google Business are separate flows on one set of credentials. Register both.
  </Step>

  <Step title="Paste your credentials">
    Each provider asks for what it actually calls things: Meta wants an **App ID** and **App secret**, X and LinkedIn a **Client ID** and **Client secret**, TikTok a **Client key**, Discord an **Application ID**, Bluesky a **Client metadata URL**. Save.
  </Step>

  <Step title="Connect an account">
    Go to **Connections** and connect a network covered by that provider. The new profile's **OAuth app** column reads *Your app*.
  </Step>
</Steps>

## Updating and removing

A configured provider shows the last four characters of its client ID, so you can tell which credential set is in place. The gear becomes **Update credentials**; the bin removes them.

<Warning>
  Removing credentials, or replacing them with a different app's, breaks every profile already connected through that provider. The tokens were issued to the old app and cannot be moved. Those profiles will need reconnecting.
</Warning>

## When it does not work

<AccordionGroup>
  <Accordion title="A network shows Not configured in the connection panel" icon="circle-slash">
    No credentials are available for it — neither Nylon's managed app in this environment, nor a BYOK entry of yours. Add credentials for its provider here.
  </Accordion>

  <Accordion title="The provider rejects the redirect" icon="link">
    The callback URL is not registered on your app, or is registered with a difference that matters — `http` against `https`, a trailing slash, the wrong subdomain. Copy it from this page rather than typing it.
  </Accordion>

  <Accordion title="Authorization succeeds but no profiles are found" icon="search-x">
    Your platform app is missing a permission or scope that the flow needs. Compare the scopes your app requests against what the network's own documentation requires for publishing.
  </Accordion>

  <Accordion title="Everything broke at once on one network" icon="alert-triangle">
    A rotated or revoked client secret, or a platform app that was suspended. Both are on your side of the line now.
  </Accordion>
</AccordionGroup>

## Getting help with it

BYOK is the one part of Nylon where the hard work — app registration, review, scopes — happens outside Nylon, on each platform's terms. The BYOK panel carries a **Need help implementing BYOK?** card; the integration team can review your OAuth apps, credentials and rollout plan before you start the review queues rather than after.

## Related

<Columns cols={2}>
  <Card title="What is BYOK?" icon="shield" href="/help/what-is-byok">
    Whether you need it at all.
  </Card>

  <Card title="Connect an account" icon="plug" href="/help/connect-an-account">
    Both kinds of connection, side by side.
  </Card>
</Columns>