OAuth Init
GET/api/tiktok-shop/oauth/init
Generates a state value, caches it for 15 minutes, and returns the TikTok authorization URL the user should be redirected to. Optionally accepts an integration_instance_id to re-authorize an existing instance (the instance's own environment is used).
This endpoint currently requires session authentication; Personal Access Token scope support is in progress.
Returns 422 when the selected environment's app key or app secret is not configured on this server, instead of returning an authorization URL that TikTok would reject. Check available_environments on Get Config first.
Requires Bearer token.
Request
Responses
- 200
- 401
- 403
- 422
- 429
OK
Response Headers
Unauthenticated — the bearer token is missing, revoked, expired, or malformed. Never retry automatically; fix the credential. See the Errors guide.
Forbidden — the token lacks a required scope, the endpoint is not available to API tokens, or the user behind the token lacks the permission. A human must adjust the token scopes or user permissions; do not retry.
Unprocessable Entity
Response Headers
Rate limited — platform limit is 1,000 requests/min; individual tokens may carry lower limits. Honor the Retry-After header before retrying. See the Rate Limits guide.