The 2023 API changes broke half the Reddit ecosystem. The rules now are stricter and clearer. Here is what brand teams need to know.
If you have tried to build internal Reddit tooling at any point in the last three years, you have probably hit a wall. The wall is real. It is also more navigable than most people think, if you are operating in good faith and within the rules.
This post is the working brand-team version of “what is the deal with the Reddit API.” It will not make you a compliance lawyer. It will save you from making three or four common mistakes that cost time, money, or both.
The short history
Until 2023, Reddit had a permissive API. Anyone could read public Reddit content, build third-party clients, scrape comments, and do basically whatever they wanted within rate limits.
In June 2023 Reddit changed this. The headline change was charging for API access at scale, which killed most third-party Reddit clients (Apollo, RIF, Sync). The deeper change was that Reddit drew a clearer line between “permitted use” and “not permitted use” and started enforcing it.
The current state, as of early 2026, is that Reddit’s API is fully usable by brand teams and their tooling, but only under specific terms. Most of the noise about the API being “closed” is wrong. It is gated, with a price, with a contract.
The four tiers brand teams actually encounter
There are four tiers that matter. Most brand teams interact with two or three of them.
Tier 1: Logged-in user actions on reddit.com
This is what your community manager does in their browser. Reddit charges nothing for this and never will. There is no rate limit beyond the basic anti-abuse one. If your team’s entire Reddit operation is “log in and use the website,” you do not interact with the API at all.
The downside is that it does not scale past one human and one set of eyes. The moment you want a unified inbox, search across mentions, response-time metrics, or anything else, you need API access.
Tier 2: Personal-use API tokens
Reddit issues free API tokens for personal use. These are rate-limited to 100 requests per minute per OAuth client. They are explicitly not for commercial products.
A solo developer building a Reddit reader for themselves, a researcher pulling public data for an academic paper, a hobby project: these are all fine on personal tokens.
A brand operating its own internal tool that is technically a “single-team thing” is a gray area. Reddit’s stated position is that personal tokens are for personal use, full stop. We have seen teams operate small internal scripts on personal tokens for years without issue, but this is not the path we recommend, because if Reddit ever decides to enforce, your tool dies overnight.
Tier 3: Commercial API access
This is the path for any tool that is sold or that supports a commercial brand operation. Reddit has a formal commercial API agreement. The pricing is by call volume and depends on the use case, but the structure is roughly:
- Read access at moderate volume: low four figures per month
- Read access at high volume (firehose-style monitoring): five to six figures per month
- Write access (posting, replying, voting on behalf of users via OAuth): bundled into the read tier for compliant uses
The agreement also includes content-use restrictions: no reselling Reddit data, no using Reddit content to train AI models without separate licensing, no scraping public Reddit content via non-API means.
For most brand teams, the question is not “how much will commercial API access cost us.” The question is “is the tool we are using on commercial API access.” If yes, you are fine. If no, you have a risk.
Tier 4: AI training and bulk data licensing
Reddit signed a deal with Google in 2024 to license content for AI training, and signed similar deals with other model providers since. This tier does not apply to brand teams. It applies to AI companies. We mention it because brand teams sometimes ask whether they can use Reddit content to train an internal model. The answer is: not without a separate license, and the license is expensive.
What this means for tools you might use
Three categories. We will not name brands, because the landscape changes monthly, but the categories are stable.
Compliant tools
These have a written commercial agreement with Reddit, use the official API, respect rate limits, and pass through OAuth properly. Subportly is one of these. Several others exist. The way to verify: ask the vendor directly whether they have a commercial API agreement with Reddit. If they say yes, ask when it was signed. If they say no, or if they evade the question, you have your answer.
Personal-token-on-a-laptop tools
These are usually small startups or solo founders building a “Reddit dashboard” on personal API tokens. They work, until they don’t. We have watched several go offline within a week of getting a notice from Reddit. If your brand depends on one, you are one bad week away from a critical tool disappearing.
Scrape-the-website tools
These avoid the API entirely and instead crawl Reddit’s public web pages. This is explicitly prohibited by Reddit’s robots.txt and terms of service. Reddit has, in the past two years, started actively blocking scrapers and pursuing them legally. If a vendor you are looking at says they “don’t need the API,” what they mean is “we are violating Reddit’s terms.” Run.
What this means for building it yourself
If your team is considering writing internal Reddit tooling, the honest math is:
For read-only monitoring at low volume: personal tokens work today. You are in the gray area, but the practical risk is low if your call volume is low and your use is genuinely internal.
For anything you’d want to depend on: commercial API access. The agreement is real, and it costs money, but it gives you a stable foundation.
For high-volume monitoring or anything resembling a firehose: commercial API at the higher tier. Budget accordingly.
The unspoken cost of building it yourself is the agreement itself, plus the engineering time to handle OAuth correctly across multiple accounts, plus the rate-limit gymnastics, plus keeping up with API changes that ship every few months. We wrote a separate piece on the build-vs-buy math for the shared inbox case specifically, which is the one most brand teams care about.
Three things every brand team should do this quarter
1. Audit any Reddit tools your team uses today. Find out, for each one, whether it has a commercial API agreement. If not, plan a migration.
2. Stop using browser-extension scrapers for monitoring. They look harmless. They are violations of Reddit’s terms. They will eventually get your brand account flagged.
3. If you are building internal tooling, start the commercial API conversation early. The agreement takes weeks to negotiate. Most internal tooling projects either don’t budget for it or assume they can fly under the radar. The latter does not end well.
The Reddit API in 2026 is workable. It just demands you pick a path: official, or none. The middle is gone.
Subportly operates on a commercial API agreement with Reddit. So when you put your brand’s accounts in our inbox, the foundation is stable, compliant, and not going dark next quarter. See how it works.