tiktok-page — Universal TikTok API Skill

Constructs and executes TikTok API calls inline based on what the user wants. No scripts needed.

API base URL: https://open.tiktokapis.com/v2

STEP 1 - Load Credentials

Credentials are stored in ~/.config/tiktok-page/credentials.json.

CODEBLOCK0

If the file does not exist, guide setup:

Field	Purpose
TIKTOKACCESSTOKEN	OAuth2 access token — used for all API calls
TIKTOKREFRESHTOKEN

One-time OAuth2 setup:
CODEBLOCK1

CODEBLOCK2

Restrict file permissions immediately after saving:
CODEBLOCK3

Never commit this file to version control. It contains long-lived secrets.
This skill makes no external calls other than to open.tiktokapis.com. No data is forwarded to third parties.

STEP 2 - Token Refresh

TikTok access tokens expire after 24 hours. Refresh before making calls if needed:

CODEBLOCK4

STEP 3 - Figure Out the API Call

Common Endpoints

What user wants	Method	Endpoint
Get account info	POST	/user/info/
List own videos

POST | /video/list/ | | Get video detail | POST | /video/query/ | | Get comments | GET | /video/comment/list/?video_id={id} | | Publish video from URL | POST | /post/publish/video/init/ with PULLFROMURL | | Upload video from file | POST then PUT | /post/publish/video/init/ then upload_url | | Check publish status | GET | /post/publish/status/fetch/?publish_id={id} |

API Call Patterns

GET account info:
CODEBLOCK5

List videos:
CODEBLOCK6

Get video detail by ID:
CODEBLOCK7

Publish video from URL:
CODEBLOCK8

Upload video from local file:
CODEBLOCK9

Check publish status:
CODEBLOCK10

Get comments:

$cfg = Get-Content "$HOME/.config/tiktok-page/credentials.json" -Raw | ConvertFrom-Json
$headers = @{ "Authorization" = "Bearer $($cfg.TIKTOK_ACCESS_TOKEN)" }
$result  = Invoke-RestMethod "https://open.tiktokapis.com/v2/video/comment/list/?video_id=<video_id>&fields=id,text,create_time,like_count" -Headers $headers -ErrorAction Stop
$result.data.comments | Format-Table id, text, like_count, create_time

STEP 4 - Handle Errors

CODEBLOCK12

Code	Meaning	Fix
accesstokeninvalid	Token revoked or invalid	Re-run OAuth2 setup in STEP 1
accesstokenexpired

Scopes Reference

Scope	Required for
user.info.basic	Get account info
video.list

If a scope is missing:

1. Go to https://developers.tiktok.com — select your app
Under Products, add the required scope
Re-authorize (repeat STEP 1 OAuth2) with the new scope added to the URL
Save the new tokens to credentials.json

AGENT RULES

- Always load credentials first. If missing, guide OAuth2 setup from STEP 1.
Only use TIKTOKACCESSTOKEN for API calls. TIKTOKCLIENTSECRET is for token refresh only.
Rotate TIKTOKREFRESHTOKEN and TIKTOKACCESSTOKEN immediately if the host is ever compromised.
Never write extra fields to the credentials file.
All API calls go to open.tiktokapis.com only. No external forwarding, no third-party services.
Construct API calls inline from user intent — do not look for script files.
Access tokens expire after 24 hours. If a call returns accesstokenexpired, run STEP 2 first then retry.
On any error: parse error.code, map to the table above, tell the user exactly what to do.
If a scope is missing: name it, link to developers.tiktok.com, say to re-authorize.
OS detection: env:OS eq Windows_NT -> powershell; otherwise -> pwsh.
No hardcoded user IDs, video IDs, or tokens — all come from credentials.json.

tiktok-page — 通用 TikTok API 技能

根据用户需求，内联构建并执行 TikTok API 调用。无需脚本。

API 基础 URL：https://open.tiktokapis.com/v2

第一步 - 加载凭据

凭据存储在 ~/.config/tiktok-page/credentials.json 中。

powershell
$cfg = Get-Content $HOME/.config/tiktok-page/credentials.json -Raw | ConvertFrom-Json
$accessToken = $cfg.TIKTOKACCESSTOKEN
$refreshToken = $cfg.TIKTOKREFRESHTOKEN
$clientKey = $cfg.TIKTOKCLIENTKEY
$clientSecret = $cfg.TIKTOKCLIENTSECRET
$openId = $cfg.TIKTOKOPENID

如果文件不存在，请引导设置：

字段	用途
TIKTOKACCESSTOKEN	OAuth2 访问令牌 — 用于所有 API 调用
TIKTOKREFRESHTOKEN

一次性 OAuth2 设置：

1. 访问 https://developers.tiktok.com — 创建或选择你的应用
添加重定向 URI（例如 https://localhost 或你的回调 URL）
记下你的客户端密钥和客户端密钥
引导用户访问：

https://www.tiktok.com/v2/auth/authorize/?clientkey=CLIENTKEY&redirecturi=REDIRECTURI&response_type=code&scope=user.info.basic,video.list,video.publish,video.upload,comment.list&state=random

5. 重定向后，从回调 URL 中复制 code 参数

powershell

用授权码交换令牌

$clientKey = <你的客户端密钥>
$clientSecret = <你的客户端密钥>
$code = <来自重定向的授权码>
$redirectUri = <你的重定向 URI>

$body = clientkey=$clientKey&clientsecret=$clientSecret&code=$code&granttype=authorizationcode&redirect_uri=$redirectUri
$r = Invoke-RestMethod https://open.tiktokapis.com/v2/oauth/token/ -Method POST
-Headers @{ Content-Type = application/x-www-form-urlencoded } -Body $body -ErrorAction Stop

New-Item -ItemType Directory -Force -Path $HOME/.config/tiktok-page | Out-Null
@{
TIKTOKACCESSTOKEN = $r.access_token
TIKTOKREFRESHTOKEN = $r.refresh_token
TIKTOKCLIENTKEY = $clientKey
TIKTOKCLIENTSECRET = $clientSecret
TIKTOKOPENID = $r.open_id
} | ConvertTo-Json | Set-Content $HOME/.config/tiktok-page/credentials.json -Encoding UTF8

保存后立即限制文件权限：
powershell

Windows

icacls $HOME/.config/tiktok-page/credentials.json /inheritance:r /grant:r $($env:USERNAME):(R,W)

macOS / Linux

chmod 600 ~/.config/tiktok-page/credentials.json

切勿将此文件提交到版本控制。它包含长期有效的密钥。
此技能仅向 open.tiktokapis.com 发出外部调用。不会将数据转发给第三方。

第二步 - 令牌刷新

TikTok 访问令牌在 24 小时后过期。如有需要，在调用前刷新：

powershell
$cfg = Get-Content $HOME/.config/tiktok-page/credentials.json -Raw | ConvertFrom-Json
$body = clientkey=$($cfg.TIKTOKCLIENTKEY)&clientsecret=$($cfg.TIKTOKCLIENTSECRET)&granttype=refreshtoken&refreshtoken=$($cfg.TIKTOKREFRESH_TOKEN)
$r = Invoke-RestMethod https://open.tiktokapis.com/v2/oauth/token/ -Method POST
-Headers @{ Content-Type = application/x-www-form-urlencoded } -Body $body -ErrorAction Stop

$cfg.TIKTOKACCESSTOKEN = $r.access_token
$cfg.TIKTOKREFRESHTOKEN = $r.refresh_token
$cfg | ConvertTo-Json | Set-Content $HOME/.config/tiktok-page/credentials.json -Encoding UTF8
Write-Host 令牌已刷新。

第三步 - 确定 API 调用

常用端点

用户需求	方法	端点
获取账户信息	POST	/user/info/
列出自己的视频

POST | /video/list/ | | 获取视频详情 | POST | /video/query/ | | 获取评论 | GET | /video/comment/list/?video_id={id} | | 从 URL 发布视频 | POST | /post/publish/video/init/ 配合 PULLFROMURL | | 从文件上传视频 | POST 然后 PUT | /post/publish/video/init/ 然后 upload_url | | 检查发布状态 | GET | /post/publish/status/fetch/?publish_id={id} |

API 调用模式

GET 账户信息：
powershell
$cfg = Get-Content $HOME/.config/tiktok-page/credentials.json -Raw | ConvertFrom-Json
$headers = @{ Authorization = Bearer $($cfg.TIKTOKACCESSTOKEN); Content-Type = application/json; charset=UTF-8 }
$body = @{ fields = displayname,avatarurl,followercount,followingcount,likescount,videocount } | ConvertTo-Json
$result = Invoke-RestMethod https://open.tiktokapis.com/v2/user/info/ -Method POST -Headers $headers -Body $body -ErrorAction Stop
$result.data.user

列出视频：
powershell
$cfg = Get-Content $HOME/.config/tiktok-page/credentials.json -Raw | ConvertFrom-Json
$headers = @{ Authorization = Bearer $($cfg.TIKTOKACCESSTOKEN); Content-Type = application/json; charset=UTF-8 }
$body = @{ maxcount = 20; fields = id,title,createtime,coverimageurl,shareurl,viewcount,likecount,commentcount,share_count } | ConvertTo-Json
$result = Invoke-RestMethod https://open.tiktokapis.com/v2/video/list/ -Method POST -Headers $headers -Body $body -ErrorAction Stop
$result.data.videos | Format-Table id, title, viewcount, likecount, create_time

按 ID 获取视频详情：
powershell
$cfg = Get-Content $HOME/.config/tiktok-page/credentials.json -Raw | ConvertFrom-Json
$headers = @{ Authorization = Bearer $($cfg.TIKTOKACCESSTOKEN); Content-Type = application/json; charset=UTF-8 }
$body = @{ filters = @{ videoids = @(id>) }; fields = id,title,viewcount,likecount,commentcount,sharecount,embed_html } | ConvertTo-Json -Depth 4
$result = Invoke-RestMethod https://open.tiktokapis.com/v2/video/query/ -Method POST -Headers $headers -Body $body -ErrorAction Stop
$result.data.videos

从 URL 发布视频：
powershell
$cfg = Get-Content $HOME/.config/tiktok-page/credentials.json -Raw | ConvertFrom-Json
$headers = @{ Authorization = Bearer $($cfg.TIKTOKACCESSTOKEN); Content-Type = application/json; charset=UTF-8 }
$body = @{
post_info = @{
title = 你的视频标题
privacylevel = PUBLICTO_EVERYONE
disable_duet = $false
disable_stitch = $false
disable_comment = $false
}
source_info = @{
source = PULLFROMURL
video_url = https://example.com/video.mp4
video_size = 12345678
chunk_size = 10000000
totalchunkcount = 1
}
} | ConvertTo-Json -Depth 5
$result = Invoke-RestMethod https://open.tikt

tiktok-pageTikTok管理

tiktok-page

tiktok-page — Universal TikTok API Skill

STEP 1 - Load Credentials

STEP 2 - Token Refresh