At a glance
Capabilities
Connecting
auth_url. After they authorize, SocialAPI exchanges the code with TikTok and redirects the user to your redirect_uri with the connection result. See OAuth flows for the redirect parameters.
TikTok accounts include a metadata object with profile data:
Reading samples
List posts
Publishing
Create a TikTok post.media_type is optional and defaults to video. privacy_level must be supplied explicitly: omitting it returns a 400 validation error (privacy_level_required). Valid values depend on the creator’s allowed options (returned by the TikTok creator info API); a common example is PUBLIC_TO_EVERYONE.
Limitations and gotchas
- Publishing. Post creation uses the TikTok Content Posting API. Videos are uploaded via media upload, then published.
- Read-only interactions. TikTok’s API does not expose comment management or DM access. Only post listing and publishing are available.
- Token refresh. TikTok OAuth tokens expire. SocialAPI handles refresh automatically. If you receive
401withcode: "platform.tiktok.auth", reconnect the account. - Privacy level.
privacy_levelis required and must be set explicitly for every post. Omitting it returns a 400 error (privacy_level_required). Use the value the TikTok creator info API returns for the account (for example,PUBLIC_TO_EVERYONE,MUTUAL_FOLLOW_FRIENDS, orSELF_ONLY); any other value is rejected.
Permissions
SocialAPI’s managed TikTok Developer App already requests these scopes on your behalf:user.info.basic, user.info.profile, video.publish, video.upload. You don’t need to register with TikTok for Developers. See Platform credentials.