TikTok

Overview

Connect your users to TikTok for profile data, video management, content publishing, and creator analytics.

Property	Value
Provider ID	tiktok
Category	Social
PKCE	Supported
Token refresh	Automatic
Redirect URI	Shown in Developer Portal

Step 1: Create a TikTok OAuth App

Go to the TikTok for Developers portal

Navigate to developers.tiktok.com and sign in.

Create a new app

Click Manage apps > Create app, fill in the app name and description.

Configure the redirect URI

Under Login Kit or the appropriate product, add the Alter callback URL from the Developer Portal to the Redirect URIs field.

Get credentials

Copy the Client key (Client ID) and Client secret (Client Secret).

Warning

Never share your Client secret publicly. Store it securely and only enter it in the Alter Vault Developer Portal.

Step 2: Add to Alter Vault

Open the Developer Portal

Go to portal.alterauth.com and navigate to the application.

Add TikTok provider

Go to OAuth Providers > Add Provider > TikTok.

Enter credentials

• Client ID: Paste your TikTok Client key
• Client Secret: Paste your TikTok Client secret

Select scopes

Choose the scopes the application needs.

Save

Click Save. The provider is now active.

Available Scopes

Scope	Description
user.info.basic	Read the user’s profile info (open_id, avatar, display name)
user.info.profile	Read additional profile fields (bio, profile links, verification status)
user.info.stats	Read profile engagement statistics (likes, followers, following, video count)
video.list	Read the user’s public videos on TikTok
video.publish	Directly post content to the user’s TikTok profile (requires TikTok app audit)
video.upload	Share content to the creator’s TikTok inbox as a draft for further editing

Notes

• Login Kit / Display API / Content Posting scopes require product enablement. video.publish additionally requires TikTok app audit before public posts.
• Research, Data Portability, and Local Service scopes are separate TikTok products and are not exposed in this catalog.
• See the TikTok scopes reference for more details.

Policy-cataloged operations

Alter policy rules can target these attested operations and families for operation-level and parameter-aware controls.

Operation ID	Families	Method	Provider path
post/publish/video-init	send	POST	/v2/post/publish/video/init/
post/publish/content-init	send	POST	/v2/post/publish/content/init/
post/publish/inbox-video-init	write	POST	/v2/post/publish/inbox/video/init/
post/publish/creator-info	read	POST	/v2/post/publish/creator_info/query/
post/publish/status	read	POST	/v2/post/publish/status/fetch/
user/info	read	GET	/v2/user/info/
video/list	read	POST	/v2/video/list/
video/query	read	POST	/v2/video/query/