tiktok-page_skill

This skill constructs and executes TikTok API calls from user intent, securely managing credentials and token refresh for posting, listing, and moderating
  • Python

2.5k

GitHub Stars

2

Bundled Files

2 months ago

Catalog Refreshed

3 months ago

First Indexed

Readme & install

Copy the install command, review bundled files from the catalogue, and read any extended description pulled from the listing source.

Installation

Preview and clipboard use veilstrat where the catalogue uses aiagentskills.

npx veilstrat add skill openclaw/skills --skill tiktok-page

  • _meta.json454 B
  • SKILL.md12.3 KB

Overview

This skill provides a Powershell-compatible interface to the TikTok Content Posting API (https://open.tiktokapis.com/v2). It reads credentials from ~/.config/tiktok-page/credentials.json and constructs API calls inline so you can list videos, post videos, check publish status, and read comments without writing scripts. Access tokens expire every 24 hours and must be refreshed using the refresh token.

How this skill works

The skill loads TIKTOK_ACCESS_TOKEN, TIKTOK_REFRESH_TOKEN, TIKTOK_CLIENT_KEY, TIKTOK_CLIENT_SECRET, and TIKTOK_OPEN_ID from the credentials file, then builds and issues HTTP requests to open.tiktokapis.com. It supports endpoints for user info, video listing/querying, publishing (URL or file upload), upload chunking, publish-status checks, and comment listing. If the access token is expired it runs a refresh flow and retries; errors are parsed and mapped to actionable recommendations.

When to use it

  • Post a video by URL or upload a local video to TikTok programmatically.
  • List your account videos and retrieve video details or metrics.
  • Check publish status and track processing results for a submitted publish_id.
  • Fetch comments for a video for moderation or analytics.
  • Refresh expired access tokens and update the local credentials file.

Best practices

  • Store credentials at ~/.config/tiktok-page/credentials.json and restrict file permissions (chmod 600 on Unix).
  • Always load credentials before making calls; do not hardcode tokens or IDs in requests.
  • Refresh the access token before operations if the token is near 24 hours old or API returns access_token_expired.
  • Request minimal OAuth scopes required for the task and re-authorize if scope_not_authorized is returned.
  • Limit request frequency to avoid spam_risk_too_many_requests and implement retry/backoff for transient errors.

Example use cases

  • Publish a marketing clip by providing a remote MP4 URL and receive a publish_id to track status.
  • Upload a local video in chunks and publish it with a caption and privacy settings.
  • List the most recent 20 videos with view and like counts for reporting.
  • Query a single video to retrieve embed HTML and engagement metrics.
  • Fetch and format recent comments for moderation workflows.

FAQ

Run the refresh token flow using TIKTOK_REFRESH_TOKEN, TIKTOK_CLIENT_KEY, and TIKTOK_CLIENT_SECRET to obtain a new access token, save it to credentials.json, then retry the API call.

Which OAuth scopes are required to publish or read videos?

Use video.publish and video.upload to publish and upload; video.list for listing; user.info.basic for account info; comment.list to read comments. Add missing scopes in the developer portal and re-authorize.

Where are credentials stored and how should I protect them?

Credentials live in ~/.config/tiktok-page/credentials.json. Restrict file permissions immediately (chmod 600 on macOS/Linux or set tight ACLs on Windows) and never commit the file to version control.

Does this skill send data to third parties?

No. All API calls are made only to open.tiktokapis.com and no credentials or request data are forwarded to external services.

Built by
VeilStrat
AI signals for GTM teams
© 2026 VeilStrat. All rights reserved.All systems operational
tiktok-page skill by openclaw/skills | VeilStrat