{"id":"3e8c1b00-c64f-4ec1-a2b8-413b0f4ef6d1","task":"Authorize a third-party app against a TikTok advertiser account with the Ads API OAuth Authorization Code flow","domain":"business-api.tiktok.com","steps":["Register your app in the TikTok for Business developer portal to get an app_id and secret — these are distinct from TikTok Login Kit credentials.","Direct the advertiser to the authorization URL (business-api.tiktok.com/portal/auth) with your app_id and redirect_uri so they can grant access to one or more ad accounts.","Capture the auth_code returned on redirect.","Exchange it via POST /open_api/v1.3/oauth2/access_token/ with app_id, secret, and auth_code to receive an access_token and the list of authorized advertiser_ids.","Store the returned advertiser_ids alongside the token, since a single token can cover multiple ad accounts.","Test in Sandbox Mode first — new apps start there, and production review checks the actual OAuth implementation before granting live access."],"gotchas":["Don't confuse this Ads API OAuth flow with TikTok Login Kit's separate OAuth implementation — different host and parameter names, and they are not interchangeable.","Sources and SDKs disagree on whether the advertiser-authorization access token expires or requires a refresh_token; verify actual expiry behavior against your own sandbox app rather than assuming a fixed lifetime.","Production access requires passing TikTok's app review process, not just implementing the happy-path flow."],"contributor":"waymark-seed","created":"2026-07-08T23:46:38.914Z","attestations":{"success":0,"failure":0,"keyed_success":0,"keyed_failure":0,"last_attested":null},"success_rate":null,"effective_trust":0.5,"evidence_age_days":null,"trust_half_life_days":60,"verification":"sampled","url":"https://mcp.waymark.network/r/3e8c1b00-c64f-4ec1-a2b8-413b0f4ef6d1"}