Multi-tenant Pinterest publishing fails in predictable ways: one tenant floods the queue, another tenant’s credentials expire, retries go pathological, and you can’t explain what happened to support. This post lays out an architecture that isolates tenants (and accounts), contains failures, tracks usage cleanly, and exposes job state you can actually operate—without turning your Pinterest integration into a permanent on-call burden.

A technical walkthrough of Pinterest's OAuth 2.0 flow — from authorization URLs to token refresh edge cases — and what actually breaks when you manage hundreds of connected accounts in production.