Explicit approval before any data access
Under the Responsible Builder Policy you must request access and get explicit approval before accessing any Reddit data through the API. Self-serve app registration alone is not permission. [3]
Guides · social · Popular APIs
OAuth client id and secret for Reddit's Data API. New access now needs explicit approval under the Responsible Builder Policy, and commercial use needs a separate agreement with Reddit.
Researched · not yet run liveLast researched 25 October 2026 · Reddit · provider site
A Reddit user account owns the OAuth app (client id). API access for that app must be approved by Reddit.
If you accept the Data API Terms for a company, you warrant you can bind that company (Data API Terms 1.2).
Steps marked “human step” are ones only you can do: verapli never signs in, submits, pays or accepts terms for you.
You sign in to the Reddit account that will own the app, or create it yourself.
Where: https://www.reddit.com/login/
Check your use case against the policy and terms. Consider Reddit's Developer Platform (Devvit) first; Reddit points developers there.
Where: https://support.reddithelp.com/hc/en-us/articles/42728983564564-Responsible-Builder-Policy
You submit an access request describing your use case through Reddit's help-center request form. Commercial use must be requested separately and needs explicit written approval. You press submit. [to verify exact form and fields]
Where: https://support.reddithelp.com/hc/en-us/requests/new
At reddit.com/prefs/apps, create an app (script, web or installed type) with a name and redirect URI. Reddit shows the client id under the app name and the secret on the app card. Whether registration is blocked until approval is granted is [to verify].
verapli captures REDDIT_CLIENT_ID here by plain code: encrypted in your browser, never shown to AI.
Where: https://www.reddit.com/prefs/apps
Copy the secret from the app card (installed apps have no secret).
verapli captures REDDIT_CLIENT_SECRET here by plain code: encrypted in your browser, never shown to AI.
Where: https://www.reddit.com/prefs/apps
Use the format <platform>:<app ID>:<version string> (by /u/<reddit username>). Never spoof a browser or another bot; generic agents are heavily limited.
verapli captures REDDIT_USER_AGENT here by plain code: encrypted in your browser, never shown to AI.
Plain-English summary, not legal advice. Each card links its source.
Under the Responsible Builder Policy you must request access and get explicit approval before accessing any Reddit data through the API. Self-serve app registration alone is not permission. [3]
Commercial use, research beyond rate limits, or any use not expressly permitted requires a separate agreement with Reddit. You may not sell, lease or sublicense API access or derive revenue from it without Reddit's express written approval. [1]
The licence does not cover using User Content to train a machine learning or AI model without the express permission of the rightsholders. On termination you must delete stored content and any models derived from it. [1]
Use the Access Info Reddit provided, and never misrepresent or mask the user agent or OAuth identity. Circumventing or exceeding limits can lead to a permanent block. [1]
You may not use or retain data beyond your approved use case and must immediately delete any data not required for it. Reddit can revoke access at any time without notice. [1]
Do not use Reddit trademarks in your app name or logo; you may use the form "[name] for Reddit". Do not imply partnership or endorsement without written approval. [1]
100 queries per minute per OAuth client id, averaged over a 10-minute window. Traffic not using OAuth is blocked. Watch the X-Ratelimit-Used, X-Ratelimit-Remaining and X-Ratelimit-Reset headers. [2]
| Env var | Secret | Format | What it is |
|---|---|---|---|
REDDIT_CLIENT_ID | not secret | short random string, e.g. aB3… | OAuth client id of the registered app |
REDDIT_CLIENT_SECRET | secret | random string, e.g. xY9… | OAuth client secret (script and web apps) |
REDDIT_USER_AGENT | not secret | web:com.example.app:v1.0.0 (by /u/…) | Required User-Agent string identifying the app, version and owning user |
Source [1]
The same entry as JSON: /api/v1/entries/reddit/data-api · requirements /api/v1/requirements/reddit/data-api · terms /api/v1/terms/reddit/data-api.
claude mcp add --transport http verapli https://verapli.com/mcp
> "What do I need for Reddit Data API, and how long will it take?"
→ tools/call requirements { "provider_id": "reddit/data-api" }Provider rules change. This page is generated from verapli registry version 2026.1025.387; spotted something out of date? Tell us. Reddit is not affiliated with verapli.