Individual skill
tiktok-api
Use when connecting a real TikTok account to code via the Content Posting, Display and Business Account APIs — OAuth, chunked video publish with status polling, and pulling views, watch time and impression sources, then logging that performance into the wiki as a dated feedback record. Covers short-lived tokens breaking a cron, unverified pull-from-URL ownership, and rate limits. NOT what to post or how to package it (that is `shortform-strategy` and `shortform-packaging`).
skills/tiktok-api/SKILL.md
Source commit d9d6bb338f66cc1e23998585e580a0ea45bbcb82
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- No
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Not checked yet
- Last checked
- Nov 6, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 561
- Repository last updated
- Nov 4, 2026
- License
- MIT
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- agent-skills Repository topic
- agentic-ai Repository topic
- ai-agents Repository topic
- ai-coding Repository topic
- claude-code Repository topic
- cli Repository topic
- cline Repository topic
- codex Repository topic
- coding-assistant Repository topic
- cursor Repository topic
- tiktok Declared skill tag
- content-posting-api Declared skill tag
- tiktok-display-api Declared skill tag
- tiktok-business-api Declared skill tag
- oauth2 Declared skill tag
- chunked-upload Declared skill tag
- video-publish Declared skill tag
- watch-time Declared skill tag
- completion-rate Declared skill tag
- shortform-feedback-log Declared skill tag
- writing Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
SKILL.mdcore · 19,300 bytesSKILL.mdcore · 19,300 bytesSKILL.mdcore · 19,300 bytesSKILL.mdcore · 19,300 bytesSKILL.mdcore · 19,300 bytesSKILL.mdcore · 19,300 bytesSKILL.mdcore · 19,300 bytesSKILL.mdcore · 19,300 bytesevals/README.mddoc · 1,275 bytesevals/cases.yamlasset · 4,353 bytesreferences/metrics-and-publish.mddoc · 4,129 bytesreferences/oauth-setup.mddoc · 4,805 bytesreferences/wiki-schema.mddoc · 4,666 bytesscripts/verify.shruns · 4,520 bytes
Read excerpt
# TikTok API — Transport + Ingestion for a Real Account
*You own the wire: authenticate to a TikTok account, publish video, pull the numbers, and write those numbers into the wiki as a durable feedback log. You do not decide what to make, when to post it, or how to caption it — that is the shortform strategy/packaging family. Deliver clean transport and a queryable log; let the siblings interpret.*
TikTok splits across **three** separate APIs, and a real account touches all three:
- **Content Posting API** — `https://open.tiktokapis.com/v2/post/publish/...` — the *write* side: init a publish, transfer the file, poll status. Audit-gated.
- **Display API** — `https://open.tiktokapis.com/v2/video/...` — the *cheap read* side: your own profile and basic per-video counters (`view_count, like_count, comment_count, share_count`).
- **TikTok API for Business** — the *rich read* side: watch time, completion, impression sources. Enabled through a **separate business portal**, not the standard developer app.
Auth is **user OAuth v2 via Login Kit**, never a service token. A human owns the account; you act on their behalf with a refresh token. There is **no official TikTok SDK** — you call the REST endpoints directly with any HTTP client. Treat the access token as a short-lived, refreshable credential object, never a hardcoded literal.
## When to use / When NOT