SANDBOX
Coverage & Gaps

What is actually covered

The complete verified capability matrix and the three-track enforcement register, so that an included platform is never mistaken for a fully visible one.

The one thing this page exists to prevent

Four connectors are mandatory. That does not make four platforms fully visible, and it does not make blocking a power of this application. Wherever a row says anything other than Live, the reason is stated beside it.
Capability matrix

All 41 registered capabilities across four platforms

PlatformCapabilityStatusScopeLatencyQuotaCoverage gapBlocking dependency
facebookOwn-Page posts, comments, media and insightsLivepages_read_engagement (+ pages_manage_posts to moderate)Near real-time (webhooks) / seconds (polling)Page-level rate limits; 200 calls per user per hour per app baselineReaches only Pages the operator administers.None
facebookPublic metadata of any Page (name, category, fan count, About)LimitedPage Public Metadata Access featureSecondsApp-level rate limits applyMetadata only — returns no posts and no comments.Requires Meta App Review plus Business Verification for Advanced Access.
facebookThird-party public post and comment searchUnsupported———Public Content Search and hashtag search APIs were removed years ago.No official surface exists. Do not substitute unofficial scraping — it violates Meta's terms.
facebookPublic Group content monitoringUnsupported———No official third-party API reaches public Groups.Group content is reachable only through Meta Content Library, inside a researcher cleanroom.
facebookBulk public content via Meta Content LibraryRequires AccessContent Library API (institutional access)Near real-time for the research tool; API latency variesSet by Meta per approved institutionRead-only. The operator is a beneficiary of analysis, never the applicant, data holder or raw-data recipient.Requires a qualified academic or non-academic research institution as lead applicant. Meta's eligibility rule is organisational, not geographic, and Pakistan is not on Meta's sanctions-exclusion list — a Pakistani not-for-profit research institution or not-for-profit university can in principle qualify. Read-only cleanroom; no raw-data export; no action on content.
facebookGovernment legal-process channel (account-scoped)LimitedMeta Law Enforcement Online Request System (LEORS)Days to weeks (reactive)Case-by-case on valid legal processAccount-scoped and REACTIVE — this is not a public-content feed and must never be presented as monitoring.Requires valid legal process from an authorised agency.
facebookIn-country restriction (PTA)LivePTA under PECA s.37(1) + 2021 RulesDays—Not removal; not hermetic (VPN / encrypted DNS evade it).None
facebookThird-party programmatic content removalUnsupported———No third-party removal API exists.Manual only: in-product reporting and Meta's IP / brand-rights / impersonation forms. CrowdTangle was discontinued on 14 August 2024.
tiktokPublic video metadata, captions, hashtags and available commentsRequires AccessTikTok Research API (Research Tools)Research Tools data lags live contentPer-researcher request quotas set by TikTokCommenter identity is stripped; no media streams are returned.Blocked by: Pakistan is not an eligible region for Research Tools. Eligibility is limited to non-commercial academic and not-for-profit researchers in the US, EEA, UK, Canada, Switzerland, Norway, Iceland, Liechtenstein, and a Brazil youth-safety carve-out. Lawful routes are (a) a named collaboration under an institution in an eligible region, or (b) the EU Digital Services Act vetted-researcher channel (EU-scoped, researcher-led).
tiktokKeyword, hashtag and username search over public videoRequires AccessTikTok Research API (Research Tools)LaggedPer-researcher quotasSearches text fields only — there is no index over spoken audio.Blocked by: Pakistan is not an eligible region for Research Tools. Eligibility is limited to non-commercial academic and not-for-profit researchers in the US, EEA, UK, Canada, Switzerland, Norway, Iceland, Liechtenstein, and a Brazil youth-safety carve-out. Lawful routes are (a) a named collaboration under an institution in an eligible region, or (b) the EU Digital Services Act vetted-researcher channel (EU-scoped, researcher-led).
tiktokFull-audio / transcript keyword searchUnsupported———voice_to_text is an output field only; spoken content is not searchable.No official capability exists.
tiktokPrivate-account contentUnsupported———Public-only by design.Out of scope by platform design and by project rule R4.
tiktokVideo and audio media downloadUnsupported———The API returns metadata only, never media streams.No official capability exists.
tiktokDisplay API / Login Kit / Webhooks (owner consent)Liveuser.info.basic, video.listNear real-time for webhook eventsPer-app rate limitsPer-creator OAuth only — reaches accounts that have consented.None
tiktokCommercial Content API and Marketing APILiveAdvertiser account credentialsNear real-timeAdvertiser rate limitsCovers the advertiser's own ads only — no organic monitoring.None
tiktokNamed collaboration under an eligible-region institutionRequires AccessInstitutional research agreementLaggedSet by the lead institutionRead-only; the operator is a collaborator, not the data holder.Blocked by: Pakistan is not an eligible region for Research Tools. Eligibility is limited to non-commercial academic and not-for-profit researchers in the US, EEA, UK, Canada, Switzerland, Norway, Iceland, Liechtenstein, and a Brazil youth-safety carve-out. Lawful routes are (a) a named collaboration under an institution in an eligible region, or (b) the EU Digital Services Act vetted-researcher channel (EU-scoped, researcher-led).
tiktokGovernment legal-process channel (account-scoped)LimitedTikTok Legal Process / law-enforcement portalDays to weeks (reactive)Case-by-case on valid legal processAccount-scoped and reactive — not a content feed.Requires valid legal process from an authorised agency.
tiktokIn-country restriction (PTA)LivePTA under PECA s.37(1) + 2021 RulesDays—Not removal; not hermetic.None
tiktokThird-party programmatic enforcementUnsupported———Removal is TikTok-internal.Manual only: in-app reporting, TikTok IP/brand forms, and the government legal-request channel.
tiktokUnofficial scraping of public web endpointsUnsupported———Not an official API; unstable and non-compliant.REJECTED BY POLICY: scraping violates TikTok's terms of service and is not implemented anywhere in this application.
xRecent search (last 7 days)LivePay-per-use creditsSeconds$0.005 per post read; 3,000,000 post reads per monthly billing cycleSeven-day window only.None
xFull-archive search (back to 2006)LivePay-per-use creditsSeconds$0.005 per post read; $0.010 per full-archive count queryMonthly post-read cap of 3,000,000; Enterprise removes it.None
xFiltered stream (near-real-time, rule-based)LivePay-per-use creditsNear real-timeIncluded in the pay-per-use credit modelRule-based; bounded by the same monthly cap.None
xThreads, replies, reposts, quoted posts, mentionsLivePay-per-use creditsSeconds$0.005 per post readNone material.None
xImages and videos via expansionsLivePay-per-use creditsSeconds$0.005 per post readMedia is referenced via expansions; no bulk media export.None
xUser lookup and follow graphLivePay-per-use creditsSeconds$0.010 per user / following / follower readCorrelation must never be read as identity attribution.None
xGovernment legal-process channel (account-scoped)LimitedX legal-request systemDays to weeks (reactive)Case-by-case on valid legal processAccount-scoped and reactive — not a content feed.Requires valid legal process from an authorised agency.
xIn-country restriction (PTA)LivePTA under PECA s.37(1) + 2021 RulesDays—Not removal; not hermetic.None
xProgrammatic content removalUnsupported———No third-party removal API exists.Manual only: in-product reporting plus the X Rules enforcement path.
instagramOwn-account profile, media, Reels and StoriesLiveinstagram_business_basic (or instagram_basic + pages_show_list)Near real-time (webhooks) / seconds (polling)Account-level rate limitsProfessional accounts only.Requires a Business/Creator account plus Meta App Review.
instagramComments on own media (list, reply, hide, delete)Liveinstagram_business_manage_commentsNear real-timeAccount-level rate limitsOwn media only.Requires Meta App Review.
instagramMentions, tags and insightsLiveinstagram_business_manage_insightsMentions near real-time; tags by pollingAccount-level rate limitsTags have no webhook — polling only.Requires Meta App Review.
instagramBusiness Discovery of other public professional accountsLimitedinstagram_basic + an authorised own professional accountSecondsAccount-level rate limitsProfile and media only — comments are not returned.Requires an authorised own professional account.
instagramHashtag searchLimitedinstagram_basic + Instagram Public Content AccessRecent window is 24 hoursMAX 30 unique hashtags per rolling 7 daysA sampler, not a feed: no usernames returned, ads excluded, and only media from Business/Creator accounts that authorised the app.Instagram Public Content Access feature approval.
instagramComments on OTHER accounts' mediaUnsupported———Hard coverage gap — the API restricts comment access to media you own.No official capability exists.
instagramReels comment webhooksUnsupported———Meta's own documentation states Reels are not supported. Own-Reels comments remain readable on demand, but no real-time webhook fires.Platform limitation.
instagramPersonal / consumer-account APIsUnsupported———Basic Display API was sunset on 4 December 2024.No official capability remains.
instagramBulk public content via Meta Content LibraryRequires AccessContent Library API (institutional access)Near real-time for the research toolSet by Meta per approved institutionRead-only cleanroom; no raw-data export.Requires a qualified academic or non-academic research institution as lead applicant. Meta's eligibility rule is organisational, not geographic, and Pakistan is not on Meta's sanctions-exclusion list — a Pakistani not-for-profit research institution or not-for-profit university can in principle qualify. Read-only cleanroom; no raw-data export; no action on content.
instagramGovernment legal-process channel (account-scoped)LimitedMeta Law Enforcement Online Request System (LEORS)Days to weeks (reactive)Case-by-case on valid legal processAccount-scoped and reactive — not a content feed.Requires valid legal process from an authorised agency.
instagramIn-country restriction (PTA)LivePTA under PECA s.37(1) + 2021 RulesDays—Not removal; not hermetic.None
instagramProgrammatic content removalUnsupported———The only programmatic moderation is hide/delete of comments on your OWN media.Manual only: in-product reporting and the IP Reporting Center.

Columns are the real facts: what is required, how fast it arrives, what it is capped at, what it misses, and what blocks it.

Content-type coverage

Mandatory content types by platform

Facebook
  • PostRequires Access
  • PageLimited
  • Public groupUnsupported
  • CommentUnsupported
  • ImageRequires Access
  • VideoRequires Access
  • ReelRequires Access

0 of 7 mandatory content types live today — 1 limited, 4 need access, 2 unsupported.

TikTok
  • VideoRequires Access
  • CaptionRequires Access
  • HashtagRequires Access
  • CommentRequires Access
  • Account profileRequires Access

0 of 5 mandatory content types live today — 5 need access.

X
  • PostLive
  • ReplyLive
  • ThreadLive
  • RepostLive
  • Quoted postLive
  • ImageLive
  • VideoLive

All 7 mandatory content types are live today.

Instagram
  • PostRequires Access
  • CaptionRequires Access
  • ReelLimited
  • CommentLimited
  • HashtagLimited
  • Account profileLive

1 of 6 mandatory content types live today — 1 live, 3 limited, 2 need access.

One row per mandatory content type per platform. Live means that named content type is reachable today — it is never a measure of how much of the platform is visible. X is the only platform with every mandatory content type live; Instagram has one live type (account profile); Facebook and TikTok currently have none without further access.

Enforcement capability register

Three separate tracks — never one button

Enforcement track

Track A · Platform removal request

Not available

Asks the platform to remove the content from its own service. Available to a third party programmatically on NO platform.

Unsupported on Facebook, TikTok, X and Instagram.

Facebook, TikTok, X and Instagram all reserve removal to themselves. There is no API that lets an outside party delete another person's content. Every request therefore resolves to an evidence package plus a tracked manual escalation to the platform's reporting channel.

Enforcement track

Track B · Account action

Not available

Would ask the platform to warn, restrict or suspend an account. This is NOT a capability of this application on any platform.

Unsupported as an application power on Facebook, TikTok, X and Instagram.

Account-level decisions rest with the platform, or with a lawful order directed to the platform. This application never represents account suspension as one of its own powers, and cannot perform it.

Enforcement track

Track C · Restriction within Pakistan

Available via PTA

An exercise of Pakistani state power at the national network layer. Technically available for all four platforms at once, independently of any platform cooperation.

Live for Facebook, TikTok, X and Instagram — via PTA, not via any platform API.

This is the one enforcement route that does not depend on a platform granting anything. It is still not a power of this application: the application prepares and tracks a request; PTA decides and acts.

Standing disclaimer

Restricts access INSIDE PAKISTAN. This is NOT removal: it does not delete content, does not touch the platform's servers, and does not affect anyone outside Pakistan. It is not hermetic — VPNs and encrypted DNS evade network-layer blocking. It is a power of PTA under PECA 2016 s.37(1) and the Removal and Blocking of Unlawful Online Content (Procedure, Oversight and Safeguards) Rules 2021 — NOT a power of this application. This application prepares and tracks a request; it never executes a block.
Absolute limits

What can never close

  • No third-party programmatic removal — on any platform

    Facebook, TikTok, X and Instagram all reserve removal to themselves. No API lets an outside party delete another person's content or suspend another account.

  • No bulk private or unauthorised content

    Private accounts, direct messages and non-public groups are out of reach by platform design and by this project's rules. No bypass mechanism is implemented.

  • No identity attribution from correlation

    Matching content across platforms shows that material is similar. It never shows that different accounts belong to the same person.

Regulatory content is quoted for operational reference only and is not legal advice.