TikTok API for developers: products, access and limits

What is the TikTok API?

TikTok for Developers products at a glance

Choose products by what your integration has to do. The last column shows what the Socialift Python SDK wraps.

Socialift is an independent integration layer, not a TikTok partner. Access to every product is granted by TikTok.

How to get TikTok API access, step by step

The sequence is the same whether you call raw HTTP or use an SDK.

1. 1

   Create a developer account and an app

   Sign up at developers.tiktok.com and connect an app under Manage apps. TikTok asks for an icon (1024×1024 px), app name, category, description, Terms of Service and Privacy Policy URLs, and the platforms you target (Web, Desktop, Android, iOS).

2. 2

   Add products and scopes

   Use Add products to enable Login Kit and, if needed, the Content Posting API. Register redirect URIs for Login Kit, then add only the scopes your features use — reviewers compare them with your demo video.

3. 3

   Store the client key and client secret

   Both are in the Credentials section. The client key appears in authorization URLs; the client secret stays on your server and is only sent to the token endpoint.

4. 4

   Verify URL properties if you post from URLs

   In PULL_FROM_URL mode the Content Posting API only accepts media from a verified domain or URL prefix. You verify by placing a signature file from TikTok at that location.

5. 5

   Test in a sandbox

   A sandbox lets you try the integration without review: up to 5 sandboxes per app and up to 10 target users, which must be accounts you own. Sandbox does not offer the Content Posting API for public videos.

6. 6

   Submit for app review

   Explain how each product and scope is used and attach at least one demo video (up to 5 videos, 50 MB each). TikTok's FAQ says review may take several days to two weeks.

7. 7

   Pass the audit for public posts

   Until your API client is audited, everything it posts is restricted to private viewing. The audit checks compliance with TikTok's terms and posting guidelines.

Which TikTok API scopes do you need?

Scopes are first assigned to the app on the developer site, then granted by each user. user.info.basic is added automatically for apps that use Login Kit.

Request the minimum. By default me() asks for fields from all three user.info.* scopes — if your app only has user.info.basic, narrow them with fields=.

First TikTok API calls in Python

Authorization URL, code exchange, profile and the first page of videos. Keys are read from TIKTOK_CLIENT_KEY and TIKTOK_CLIENT_SECRET.

from socialift import TikTok

REDIRECT_URI = "https://app.example.com/oauth/tiktok/callback"

async def authorize_url(state: str) -> str:
    async with TikTok.from_env() as tt:
        return tt.login_url(
            redirect_uri=REDIRECT_URI,
            state=state,
            scopes=["user.info.basic", "video.list"],
        )

async def on_callback(code: str) -> None:
    async with TikTok.from_env() as tt:
        bundle = await tt.exchange_code(code, redirect_uri=REDIRECT_URI)
        me = await tt.me(bundle.access_token, fields="open_id,display_name,avatar_url")
        page = await tt.videos(bundle.access_token, limit=20)
        print(me.id, me.full_name, len(page["data"]), page["has_more"])

TikTok API limits you will hit first

Values from TikTok's documentation as of September 2026. Exceeding a rate limit returns HTTP 429 with rate_limit_exceeded.

Higher Display API limits can be requested through TikTok's support page.

Why TikTok integrations break after launch

What Socialift covers — and what it doesn't