Public APIs
Disqus favicon

Disqus

Social

Communicate with Disqus data.

Disqus's website screenshot

About Disqus

Disqus provides a REST API for developers to integrate its commenting and discussion platform into other applications. Authentication supports OAuth 2 (Draft 30) for server-side flows, allowing applications to request read, write, email, or admin scopes on behalf of a user, as well as a Single Sign-On method for partner-authenticated requests. Access tokens obtained through these flows are required to make authenticated requests; without one, requests are treated as anonymous and limited to public data.

The API also supports application creation via an OAuth flow that exchanges an authorization code for a new api_key and api_secret, along with an access token and refresh token. Applications can authenticate directly as the account owner using a non-expiring access token available from the account details page, removing the need for the full OAuth exchange.

Single Sign-On access is restricted to accounts with a Business tier subscription, requiring direct contact with Disqus to inquire about that plan. The documentation is aimed at developers building integrations that read or write Disqus comment data or manage user authentication on their own sites.

Key features

  • OAuth 2 server-side authentication with access tokens
  • Single sign-on (SSO) support for partner authentication
  • Scoped permissions for API access: read, write, email, and admin
  • Programmatic creation of new API applications via OAuth
  • Non-expiring access token for authenticating as the account owner

Frequently asked questions

What authentication methods does the Disqus API support?

The Disqus API supports OAuth 2 (Draft 30 of the specification) and Single Sign-On (SSO) for authenticated requests.

Is SSO available on all plans?

No, access to Single Sign-On is only available with a Business tier subscription.

What permission scopes are available for OAuth requests?

The available scopes are read, write, email, and admin.

How do I authenticate requests on behalf of an application owner without full OAuth flow?

You can grab the non-expiring Access Token from your account details page to authenticate as the application owner.

How long do OAuth access tokens last before needing a refresh?

Tokens must be refreshed after their expires_in period using the refresh_token via the access_token endpoint.

Advertise here

Featured products

  • SerpApi - Search API favicon
  • Screenshot Scout favicon
  • TalorData favicon
  • CoreClaw favicon

Show your product to thousands of developers

· 100k monthly pageviews
· 7k newsletter subscribers

Advertise your product