Login Kit for sign-in, Display API for a user's own videos, Content Posting API to publish, plus Research and Commercial Content APIs for approved researchers.
TikTok publishes no prices for Login Kit, Display or Content Posting. What you spend is review time: app review first, then an audit for public posts.
Register an app and the Credentials section shows a client key and a client secret. Keep the secret on your server.
1. Add products and scopes
2. Verify your URLs
3. Submit for review with a demo video
Test meanwhile in a sandbox with up to 10 of your own accounts.
TikTok's token page, updated November 2, 2026, lists 2 hours for access tokens and 180 days for refresh tokens. Each refresh returns a new refresh token.
Direct Post publishes to the profile with video.publish. Upload sends a draft to the creator's inbox with video.upload.
Before the audit, posts are forced to SELF_ONLY and only 5 users can post in a 24-hour window.
Direct Post allows typically around 15 posts per day per creator, shared with every app they use. Inbox uploads allow at most 5 pending shares in 24 hours.
Privacy dropdown with no default, interaction toggles off by default, commercial content disclosure and the Music Usage Confirmation line.
The guide has the OAuth and Direct Post calls, a limits table with error codes and the audit checklist for your posting screen.
postgate.studio