Overview

Onepostly maps the TikTok Content Posting API (Direct Post) and Display API (stats + video list) into the same /v1/* surface as other platforms. This section covers TikTok-only behavior.

In this section

Page	Topics
Posts	Video + photo Direct Post; privacyLevel; schedule
Insights	Account stats, creator media list, per-post metrics

Cross-platform API flow: Media, Webhooks.

Connect

Dashboard → Connections → connect TikTok
Approve scopes in the TikTok consent screen
Resolve connectionId with your API key:

curl https://api.onepostly.com/v1/connections \
  -H "x-api-key: op_YOUR_KEY"

Use the matching row’s id (where platform is "tiktok") as connectionId in publish requests.

OAuth scopes

Scope	Used for
`user.info.basic`	Open id + avatar
`user.info.profile`	Display name + username
`user.info.stats`	Follower / following / likes / video counts
`video.list`	List public videos + per-video metrics / post insights
`video.publish`	Direct Post (video + photo)

Access tokens last about 24 hours; refresh tokens about 365 days. Connected accounts stay usable without manual re-auth while the refresh token is valid.

Reconnect existing TikTok connections after enabling new scopes so consent includes user.info.stats and video.list.

Developer Portal setup

Create an app on TikTok for Developers
Add Login Kit and Content Posting API (enable Direct Post)
Request scopes above (including Display scopes for analytics)
Register redirect URI:
{API}/v1/connections/oauth/tiktok/callback
For photo posts, verify your media CDN domain or URL prefix under URL properties

Capabilities

Action	Supported	Notes
Create post	Yes	`POST /v1/posts`
Video	Yes
Image / multi-image	Yes	Photo post; host must be verified
Text-only / stories / thread / quote	No
Schedule	Yes	`scheduledFor` + `timezone`
Privacy	Yes	Destination `privacyLevel` required
Account stats	Yes	`GET /v1/connections/:id/stats`
Creator media list	Yes	`GET /v1/connections/:id/media`
Post insights	Yes	`GET /v1/posts/:id/insights`
Remote delete	No
Comments	No

Known limitations

Unaudited TikTok apps can only Direct Post as SELF_ONLY, with creator + daily caps. Public posting requires TikTok’s Content Posting audit.
privacyLevel must be allowed for that creator; invalid values are rejected.
Interaction toggles (comment / duet / stitch) default to disabled.
Photo URLs must be on a verified domain/URL prefix.
Post insights only cover videos TikTok exposes as public.