OAuth connection
Approve on Pinterest, come back with a token. The app never sees a password and never asks for one.
Features
What is actually in the box
Every feature listed here ships in the download. Nothing is a coming-soon placeholder.
Accounts
Manage every Pinterest business account you publish to from one place.
Automatic token refresh
Expiring access tokens are renewed with the stored refresh token before a publish attempt.
Board sync
Your boards are pulled from the API and cached, so choosing a destination is a dropdown, not a copy-paste of IDs.
Pins and scheduling
Compose once, queue it, and let the cron job do the rest.
Image upload
JPG, PNG or WEBP up to 8 MB. The file type is read from the bytes and the file is renamed before it is stored.
Full pin fields
Title, description, alt text, destination URL and board, each with the length limits Pinterest enforces.
Drafts
Save an unfinished pin without a date. It stays out of the queue until you schedule it.
Date and time picker
Pick the exact minute. The scheduler uses your configured timezone, not the server's guess.
Retries with a reason
Three attempts, then the pin is marked failed and keeps the message Pinterest sent back.
Publish now
Skip the queue and push a pin immediately to test a connection end to end.
AI tools
Five modules, one topic box. Add your own OpenAI key in Settings to switch them on.
Pin titles
Five options under the 100-character limit Pinterest applies to titles.
Descriptions
Three descriptions that lead with the search terms and end with a soft call to action.
Hashtags
A dozen tags mixing broad reach with specific niches.
Keywords
Search phrases to work into titles, descriptions and board names.
Image prompts
Prompts written for a vertical 2:3 pin, covering subject, style, light and palette.
Copy to clipboard
Every suggestion has a copy button, so it goes straight into the pin composer.
Under the hood
Built to survive a security review
The technical requirements are not marketing copy. Here is what is enforced in the code you are downloading.
- PDO prepared statementsEmulation disabled, so parameters are bound by the database driver.
- CSRF tokensVerified with hash_equals on every state-changing request.
- Output escapingEvery dynamic value passes through htmlspecialchars with ENT_QUOTES.
- Hardened sessionsHttpOnly, SameSite, Secure on HTTPS, with periodic id regeneration.
- Password hashingpassword_hash with the current default algorithm, rehashed on login when it ages.
- Ownership checksEvery record query is scoped to the signed-in user, so IDs cannot be guessed.
Ready to fill the queue?
Create your account and connect a Pinterest board in a few minutes.