---
search:
  tags:
    - Third-party connections
    - POST
seo:
  description: >-
    Body: { provider: google, brand_id }. Every provider authorization…
    Reference for the POST /third-party-connections endpoint in the Zaraftis
    Public API.
sidebar:
  label: Connect a third-party account
  badge: POST
title: Connect a third-party account
type: openapi-operation
---
Body: { provider: google, brand_id }. Every provider authorization requires the provider's own consent on a signed-in human session: the route answers 405 method_not_allowed with a safe message pointing at the Zaraftis dashboard. Machine credentials can list and synchronize existing connections but can never connect them. An inaccessible brand answers 404 first.

`POST /third-party-connections`

**Request body** (`application/json`, required)

- `provider` (string, required)
- `brand_id` (string<uuid>, required)

Request body example:

```json
{
  "provider": "google",
  "brand_id": "1bb61461-e5e3-4ebb-8cc6-5b0c37f1b7da"
}
```

**Responses**

- `400` — bad\_request or validation\_failed
- `404` — not\_found: unknown id, or an id this key cannot see
- `405` — method\_not\_allowed: this action needs a person in the dashboard