canonical: https://jentic.com/apis/tiktok.com/tiktok

# TikTok API

The TikTok API allows developers to authenticate users via OAuth 2.0, manage access tokens, retrieve user profile information, and list a user's public video posts. The API exposes 4 endpoints secured with bearer authentication.

## For AI agents

Programmatically fetch or refresh an access token, revoke an access token. Covers 4 operations with bearer authentication.

## Scope

Does not handle payments, communications, or crm - use for social media only.

## Capabilities

- Fetch or refresh an access token
- Revoke an access token
- Get user information
- List user's videos
- Monitor TikTok API operational status and events

## Use cases

### Social Media Operations

Use the TikTok API to perform social media operations programmatically. The API provides 4 endpoints covering core functionality including fetch or refresh an access token, revoke an access token, get user information.

Example prompt: Call POST /v2/oauth/token to fetch or refresh an access token

### Automated v2 Management

Automate v2 operations by combining multiple TikTok API endpoints. Agents can revoke an access token and then get user information in a single workflow.

Example prompt: Call POST /v2/oauth/revoke to revoke an access token, then verify the result

### AI Agent Integration via Jentic

AI agents discover and call TikTok API endpoints through Jentic without managing credentials directly. An agent searches for the required operation by intent, receives the matching endpoint schema, and executes the call with Jentic-managed authentication. This eliminates the need to read API documentation or handle bearer tokens manually.

Example prompt: Search Jentic for 'fetch or refresh an access token', load the operation schema, and execute with Jentic-managed credentials

## Key endpoints

| Method | Path | Description |
| --- | --- | --- |
| POST | /v2/oauth/token | Fetch or refresh an access token |
| POST | /v2/oauth/revoke | Revoke an access token |
| GET | /v2/user/info | Get user information |
| POST | /v2/video/list | List user's videos |

## Key resources

- **v2** — Operations related to v2

## Why Jentic

- **Setup:** Wiring the TikTok API by hand means running its OAuth2 token flow through /v2/oauth/token, holding and revoking the access token, and building the user info and video list calls yourself. Through Jentic you install once, import the TikTok API from the API Directory, store the token once, and your agent calls it.
- **Permission scoping:** These TikTok operations take their parameters in the request body or header rather than a path resource, so scoping is operations-only: you limit the agent to the operations it needs, such as reading user info or listing videos, rather than pinning it to one object. An operation like revoking the token is only available if you add it.
- **Credential handling:** Your TikTok token is stored once, encrypted, by your own Jentic One instance and injected at execution time. It never enters the agent's prompt, logs, or context.
- **Discovery method:** Agents search Jentic by intent such as 'get user info' or 'list a user's videos', and Jentic returns the matching TikTok API operation with its input schema so the agent calls the right endpoint without browsing the reference docs.

## Related APIs

- **Facebook** — Alternative social media API
- **Twitter** — Alternative social media API
- **Linkedin** — Complementary social media API

## FAQ

### What authentication does the TikTok API use?

The TikTok API uses a Bearer token in the Authorization header. Through Jentic, these credentials are stored encrypted in your Jentic One instance and injected at execution time, so raw secrets never enter the agent context.

### Can I fetch or refresh an access token with the TikTok API?

Yes. Use the POST /v2/oauth/token endpoint. The API returns structured JSON responses that agents can parse and act on directly.

### What are the rate limits for the TikTok API?

Rate limits are not specified in the OpenAPI spec. Check the vendor documentation for current limits. Through Jentic, rate limiting is handled automatically with retry logic built into the execution layer.

### How do I fetch or refresh an access token through Jentic?

Install the Jentic SDK with pip install jentic, authenticate through Jentic One, the self-hosted execution layer, then search for 'fetch or refresh an access token'. Jentic returns the matching TikTok API operation with its input schema. Load the schema and execute the call - credentials are injected automatically.

### How many endpoints does the TikTok API have?

The TikTok API exposes 4 endpoints covering v2 operations.

### Can I limit what my agent is allowed to do with the TikTok API?

Yes. Because these TikTok operations pass their parameters in the request body or header rather than a path resource, scoping is operations-only: in your own self-hosted Jentic One instance, your rules decide which operations and credentials the agent may use. You can allow just the calls it needs, such as getting user information or listing a user's videos, while withholding others like fetching, refreshing, or revoking the access token. Sensitive operations such as POST /v2/oauth/revoke are only reachable if you explicitly add them to the agent's allowed set.