The SDK was elegant. OAuth 2.1 with a custom PKCE extension. A shared JWT that carried both the user’s Artify asset manifest and their CordChat role permissions. The killer feature: "Live Canvas," where five friends could edit the same Picsart-style image inside a CordChat voice channel.
For Maya, the story ended in a retrospective meeting. The product manager asked, “Should we have built the SDK to require explicit folder selection before any asset leaves Artify?” picsart account discord sdk
The Canvas Protocol
They built it in two weeks.
The story wasn’t just technical—it was legal. Artify’s terms promised that the SDK would never expose Scrapbook data without explicit folder-by-folder consent. CordChat’s developer policy required that linked accounts maintain least-privilege access. The SDK was elegant
Maya nodded. “Next version. We call it ‘Per-Canvas Permissions.’ And we deprecate the old handshake entirely.” The killer feature: "Live Canvas," where five friends