NanoCrafted iconNanoCrafted
API integration

Requested access, explained feature by feature.

NanoCrafted uses the TikTok Accounts API for operational functions on accounts whose holders explicitly authorize access. We do not use these permissions to access unrelated accounts.

Requested permissions

Five scopes with a defined purpose.

Account UserRetrieve basic profile information for an authorized TikTok business account so operators can confirm which owned account is connected.
Get Account MediaRetrieve post information from an authorized owned account for media review, organization, and operational reporting.
Account CommentRead and manage comments on owned posts, including operator-directed replies or moderation actions where available.
Account Post ContentPublish approved video or photo content to an authorized owned account and check publishing status.
Auth Code ManagementManage the ad-authorization setting and authorization-code lifecycle for posts when an account operator explicitly requests those actions.
Authorization model

No access without authorization.

Account access begins through OAuth authorization initiated by the account holder or an authorized operator. Access can be revoked, and our requested scopes are limited to the functions shown above.

Registered callback pages

Advertiser redirect:

/advertiser-redirect.html

TikTok account holder redirect:

/tiktok-account-holder-redirect.html

These public pages are dedicated authorization-return endpoints. Production token exchange should be handled server-side.