TikTok Integration

Overview

The TikTok integration uses TikTok's OAuth 2.0 with the Content Posting API.

Skills that use this integration:

• int-tiktok-post — Publish videos and carousel posts

Agents that typically enable this integration:

• Social Manager
• Any custom agent that needs TikTok publishing

Availability

Prerequisites

• A Wiro API key — Authentication.
• A deployed agent — Agent Overview.
• A TikTok for Developers account — developers.tiktok.com.
• An HTTPS callback URL.

Complete Integration Walkthrough — Own Mode

Step 1: Create a TikTok for Developers App

1. developers.tiktok.com/apps → sign in.
2. Create app.
3. App name, category, description, icon.

Step 2: Add Login Kit + Content Posting API

1. Add products.
2. Add Login Kit and Content Posting API.

Step 3: Configure redirect URI

1. Login Kit → Platforms → Web.
2. Add callback URL:

   https://api.wiro.ai/v1/UserAgentOAuth/TikTokCallback

3. Save.

Step 4: Note the required scopes

Wiro requests these exact scopes:

user.info.basic,video.publish

Other scopes like video.upload, video.list are not used by Wiro.

Step 5: Copy Client Key and Client Secret

App details → copy Client Key and Client Secret. Note: TikTok calls the first one "key" (not "ID") — the field name in Wiro is clientkey.

Step 6: Save credentials

curl -X POST "https://api.wiro.ai/v1/UserAgent/CredentialUpsert" \
  -H "Content-Type: application/json" \
  -H "x-api-key: YOUR_API_KEY" \
  -d '{
    "useragentguid": "your-useragent-guid",
    "fields": [
      { "credentialkey": "tiktok", "fieldname": "clientkey",    "fieldvalue": "YOUR_TIKTOK_CLIENT_KEY" },
      { "credentialkey": "tiktok", "fieldname": "clientsecret", "fieldvalue": "YOUR_TIKTOK_CLIENT_SECRET" },
      { "credentialkey": "tiktok", "fieldname": "authmethod",   "fieldvalue": "own" }
    ]
  }'

Step 7: Initiate OAuth

curl -X POST "https://api.wiro.ai/v1/UserAgentOAuth/OAuthConnect" \
  -H "Content-Type: application/json" \
  -H "x-api-key: YOUR_API_KEY" \
  -d '{
    "useragentguid": "your-useragent-guid",
    "credentialkey": "tiktok",
    "redirecturl": "https://your-app.com/settings/integrations",
    "authmethod": "own"
  }'

Response:

{
  "result": true,
  "authorizeUrl": "https://www.tiktok.com/v2/auth/authorize/?client_key=...&scope=user.info.basic,video.publish&response_type=code&redirect_uri=...&state=...",
  "errors": []
}

Step 8: Handle the callback

Success: ?tiktok_connected=true&tiktok_username=<display_name>.
Error: ?tiktok_error=<code>.

Step 9: Verify

curl -X POST "https://api.wiro.ai/v1/UserAgentOAuth/OAuthStatus" \
  -H "Content-Type: application/json" \
  -H "x-api-key: YOUR_API_KEY" \
  -d '{
    "useragentguid": "your-useragent-guid",
    "credentialkey": "tiktok"
  }'

Response:

{
  "result": true,
  "connected": true,
  "accounts": [
    { "id": "Creator Display Name", "name": "Creator Display Name" }
  ],
  "connectedat": "2026-04-17T12:00:00.000Z",
  "tokenexpiresat": "2026-04-18T12:00:00.000Z",
  "errors": []
}

• Access token: ~1 day (86400s).
• Refresh token: ~1 year (31536000s).
• accounts[0].id and accounts[0].name = TikTok display name (the creator's public display name as set in their profile), NOT the @handle. The handle/URL username is not exposed by TikTok's OAuth user/info/ endpoint, so Wiro stores display_name and returns it as both the account identifier and its name.

Step 10: Start the agent

curl -X POST "https://api.wiro.ai/v1/UserAgent/Start" \
  -H "Content-Type: application/json" \
  -H "x-api-key: YOUR_API_KEY" \
  -d '{ "guid": "your-useragent-guid" }'

API Reference

POST /UserAgentOAuth/OAuthConnect

GET /UserAgentOAuth/TikTokCallback

Query params: tiktok_connected=true&tiktok_username=<display_name> or tiktok_error=<code>. tiktok_username is TikTok's display name (from the OAuth user/info/ endpoint's display_name field), not the @handle. The callback path is per-provider — TikTok's stays TikTokCallback.

POST /UserAgentOAuth/OAuthStatus

Body: { useragentguid, credentialkey: "tiktok" }. Response: connected, accounts: [{id, name}] (1-element with the connected display name), connectedat, tokenexpiresat (~1 day).

POST /UserAgentOAuth/OAuthDisconnect

Body: { useragentguid, credentialkey: "tiktok" }. Calls TikTok's revoke endpoint (POST https://open.tiktokapis.com/v2/oauth/revoke/), then clears credentials. TikTok is one of the few providers where Wiro actively revokes.

Token lifecycle

Wiro maintains the TikTok connection automatically while the agent is running. If TikTok revokes the authorization or OAuthStatus reports connected: false, reconnect through the OAuth flow.

Troubleshooting

"unaudited_client" or limited publishing

Until your TikTok app is audited, publishing may be limited to private posts or a small set of listed test users. Submit for audit in the TikTok Developer portal for production volume.

Multi-Tenant Architecture

1. One TikTok app per product in own mode.
2. One Wiro agent instance per customer.
3. TikTok per-app limits apply — plan around aggregate volume.

Related

• Agent Credentials & OAuth
• Agent Overview
• Agent Skills
• TikTok Ads integration — separate product for paid advertising; this page covers organic posting only.
• TikTok for Developers