Application scope guide

26 permissions. Specific intended uses.

TKBADA, operated by Shenzhen Xiaomai Manufacturing Co., Ltd., provides an API gateway for external merchant clients and their service tools. This guide describes the intended uses of the 26 permission groups requested in our TikTok API for Business application, including the sub-permissions selected within those groups.

These are planned, merchant-requested API workflows after the applicable approvals. They do not represent 26 completed business modules, successful live integrations or permissions already granted by TikTok. The current console manages accounts, connections, API keys and call metadata; clients request business operations through the gateway.

Developer app access and data controls

The intended users are merchant clients, their authorized personnel and our service team acting under client instructions. Registration accepts a company name and an email address verified by a one-time code. Clients connect accounts through TikTok's official OAuth and use API keys belonging to their TKBADA account.

Gateway keys select that account's active connection. Advertiser IDs supplied in requests are checked against its connected advertisers. TikTok enforces the token's permissions and access to other assets, including stores, creators, catalogs and financial portfolios. Advertising-account authorization does not substitute for additional creator, merchant, finance or partner authorization.

Read and write requests must follow the relevant client's instructions and data rights. Uploads, sharing, moderation, campaign changes, invitations and financial administration need the authority described below. These are requirements for the intended integrations, not a claim that the gateway has a separate approval interface for each action.

Stored TikTok tokens are encrypted, API keys are hashed and per-key rate limits apply. Request and response payloads are processed during forwarding; application call logs retain operational metadata, not full payloads. Disconnecting locally stops gateway use; users can separately revoke authorization through TikTok. See the Privacy Policy and Terms of Service.

Version and eligibility checks

The gateway currently forwards requests to TikTok API v1.3. Representative paths and sub-permission labels below come from our permission-tree catalog snapshot. It contains historical entries, and some version tags differ from current official documentation. A path's presence is not evidence of current version support, approval or a completed integration.

Before enabling each workflow, verify the current official endpoint version, HTTP method, fields, authorization and product eligibility. Events use the current Events API contract; legacy source-specific track paths must not be assumed available. Partner-specific and finance permissions require additional qualification. The full route catalog includes 30 groups; this application guide covers the 26 requested groups.

Jump to a permission 26 groups

1. Ads management

Intended merchant workflow: Merchant tools will read and create or update campaigns, ad groups and ads, including eligible Smart+ and GMV Max workflows. They will review changes and labels, run split tests, maintain Search Ads negative keywords, request keyword recommendations and review account optimization options.

Data and action boundaries: Budget, status, targeting and creative changes follow the merchant's instructions. GMV Max store access, exclusive authorization, identities, videos, sessions and custom anchors require the relevant store and content rights. Reading a recommendation does not authorize adopting it or changing spend.

Representative catalog paths

/campaign/get/
/campaign/create/
/split_test/create/
/search_ad/negative_keyword/add/
/campaign/gmv_max/session/create/

Requested sub-permissions 18 catalog entries

Campaign / Read campaigns
Campaign / Create and update campaigns
Ad group / Read Ad Groups
Ad group / Create and update ad groups
Ad / Read ads
Ad / Create and update ads
Change log / Change log
Split test / Split test
Search ads / Negative keywords
Search ads / Get recommended search keywords
Account optimization
GMV Max / Exclusive authorization
GMV Max / Store management
GMV Max / Identity and video
GMV Max / Session
GMV Max / Custom anchor
GMV Max / changelog
Campaign label (management) / Read campaign labels

2. Audience management

Intended merchant workflow: Merchant tools will retrieve custom or saved audiences and their insights, upload authorized customer-file inputs, create or update rule-based, lookalike or saved audiences, and delete audiences when instructed. They will share or unshare an audience with a specifically approved recipient and inspect sharing logs where TikTok permits it.

Data and action boundaries: Audience inputs may contain customer matching identifiers. The merchant must have permission to use the source data for advertising. Sharing needs explicit recipient authorization and TikTok's Business Center or allowlist conditions; this is not a pooled audience across unrelated clients.

Integration condition: The catalog's older version tags differ from the official v1.3 Audience SDK documentation; verify the current endpoint contract rather than relying on those tags.

Representative catalog paths

/dmp/custom_audience/list/
/dmp/custom_audience/create/
/dmp/custom_audience/share/

Requested sub-permissions 3 catalog entries

Read custom audiences
Create and update custom audiences
Share custom audiences

3. Reporting

Intended merchant workflow: Merchant reporting tools will request campaign performance, ad and creative insights, creative-fatigue results, eligible MMM datasets, GMV Max reports and Smart+ material reports. Report tasks and subscriptions will support larger or recurring requested exports.

Data and action boundaries: Reports and files return to the requesting client's tools for its authorized advertisers. Product-specific reports require eligibility and the correct version. Reporting does not give unrestricted access to consumer records.

Representative catalog paths

/report/integrated/get/
/report/task/create/
/creative_fatigue/get/
/gmv_max/report/get/

Requested sub-permissions 6 catalog entries

Consolidated report
Ad insight report
Creative fatigue insight
Media Mix Modeling (MMM) data report
GMV Max reports
Upgraded Smart+ report

4. Measurement

Intended merchant workflow: Merchant integrations will submit genuine web, mobile-app, offline or CRM conversion events for advertising measurement and optimization, using /event/track/ and its source-specific requirements. Eligible partner-attribution integrations may submit authorized post-purchase attribution inputs after TikTok confirms the contract.

Data and action boundaries: Inputs can include event time, type, value, source IDs and permitted matching identifiers. Merchants must have the necessary collection and advertising-use permissions, send only required fields and exclude prohibited sensitive data. TKBADA does not claim measurement-partner status.

Integration condition: Legacy app/pixel track and batch paths remain in the catalog. Use TikTok's current Events API guidance; do not assume those historical routes remain available. PPS eligibility and field contracts require separate verification.

Representative catalog paths

/event/track/
/app/s2s_deeplink/
/pps/advertiser/event/update/

Requested sub-permissions 4 catalog entries

Report app event
Report pixel event
Report conversion event
Partner attribution

5. Creative management

Intended merchant workflow: Merchant tools will manage authorized image, video and music libraries; request covers, templates, previews, reports, tagging, discovery, recommendations, Smart Text and Smart Fix; prepare eligible playable ads and dynamic scenes, select existing Instant Pages, and check material rights and pre-review results. They will manage permitted posts, advertising identities and shared folders, and create or read permitted creative auto-message assets.

Data and action boundaries: Uploads require merchant-owned or licensed content. Spark post authorization and music rights must be obtained separately. Identity deletion, shared-folder access, automated message settings and GMV Max pre-review follow explicit client instructions and applicable TikTok access. This scope is not general access to private messaging.

Representative catalog paths

/file/video/ad/upload/
/tt_video/authorize/
/identity/create/
/creative/auto_message/create/
/creative/pre_review/task/create/

Requested sub-permissions 31 catalog entries

Image management / Read image library
Image management / Create and update images
Video management / Read video library
Video management / Create and update videos
Video management / Generate thumbnails for videos
Video template
Music management / Read music library
Music management / Upload music file
Creative tool
Get creative report
Playable ads / Read playable ads
Playable ads / Create/manage playable ads
Creative material verification / Creative material verification
Creative material verification / Get creative copyright
Instant Page management / Instant Page management
TikTok posts management / Query TikTok posts
TikTok posts management / Authorize TikTok posts
TikTok posts management / Create identity
TikTok posts management / Read identity
TikTok posts management / Delete identity
Creative asset tagging report
Creative recommendation / CTA recommendation
Creative recommendation / Smart Text
Dynamic scene / Core functions
Smart Fix / Fix task management
File name check
Discovery
Shared folder
TikTok message management
Creative pre-review
GMV Max creative pre-review

6. App management

Intended merchant workflow: For merchants advertising mobile apps, client tools will retrieve promoted-app information and optimization or retargeting event choices, and create or update the advertised app's configuration when supported.

Data and action boundaries: The objects are mobile apps promoted by the merchant's advertiser, not the TKBADA developer application. Changes require the merchant's rights to the app. This workflow does not include deleting a promoted app.

Integration condition: Some app routes carry historical version tags in the catalog. Confirm the supported current API version before integration.

Representative catalog paths

/app/list/
/app/create/
/app/optimization_event/

Requested sub-permissions 2 catalog entries

App management / Read apps
App management / Create and update apps

7. Pixel management

Intended merchant workflow: Merchant tools will list, create or update authorized pixels and their event configurations, and retrieve pixel-event health and statistics to configure and diagnose website conversion signals.

Data and action boundaries: The objects are pixel settings, event definitions and diagnostics. Actual conversion-event submission uses Measurement. Configuration changes and event deletion follow the merchant's instructions; this permission is not a visitor-profile database.

Representative catalog paths

/pixel/list/
/pixel/create/
/pixel/event/health_reporting/

Requested sub-permissions 3 catalog entries

Pixel management / Read pixels
Pixel management / Create and update pixels
Pixel management / Pixel level reporting

8. DPA catalog management

Intended merchant workflow: Merchant integrations will read and maintain advertising catalogs, products, product sets, catalog videos and templates; configure authorized feeds and event-source bindings; and inspect catalog diagnostics and insights for product advertising.

Data and action boundaries: Product and feed inputs come from the merchant's authorized inventory source. Product changes, feed schedules and event-source binding or removal require its instructions and asset rights. Catalog permissions concern advertising assets and do not imply Shop order or fulfillment access.

Representative catalog paths

/catalog/get/
/catalog/product/update/
/catalog/feed/create/
/catalog/eventsource/bind/

Requested sub-permissions 15 catalog entries

Catalog management / Read catalogs
Catalog management / Create and update catalog
Product management / Read products
Product management / Create and update product
DPA catalog set management / Get catalog set
DPA catalog set management / Post catalog set
Catalog video management / Get catalog video
Catalog video management / Post catalog video
Template / Template
Event source bind / Read event source bind
Event source bind / Create and delete event source bind
Feed / Get feed
Feed / Post feed
Diagnostic / Diagnostic
Catalog insight / Catalog insight

9. Reach & frequency

Intended merchant workflow: Eligible merchants' planning tools will estimate reserved inventory, reach and frequency; inspect delivery timing and contract information; and create or update reservation ad groups or manage orders when instructed.

Data and action boundaries: This is reservation buying, not ordinary performance reporting. Booking, updating or cancelling an order can affect delivery and commitments. Execution requires the eligible merchant's explicit campaign and commercial approval, in addition to API access.

Representative catalog paths

/rf/inventory/estimate/
/adgroup/rf/create/
/adgroup/rf/order/cancel/

Requested sub-permissions 3 catalog entries

Create and update ad groups
Inventory and orders
Tools

10. Lead management

Intended merchant workflow: Merchant lead-follow-up tools will retrieve form fields and leads generated by their ads, request permitted lead exports, and create, inspect or remove test leads to validate CRM field mapping.

Data and action boundaries: Production leads may contain names, emails, phone numbers and form answers. They go only to the requesting merchant's instructed follow-up system. Test records and production exports must be distinguished; leads are not pooled across clients.

Integration condition: The catalog places some export-task paths under Test leads. Verify current permission mapping before using a production export.

Representative catalog paths

/lead/field/get/
/lead/get/
/page/lead/mock/create/

Requested sub-permissions 2 catalog entries

Leads retrieval / Leads retrieval
Test leads / Test leads

11. TikTok One (TTO)

Intended merchant workflow: Merchant collaboration tools will manage eligible brand profiles, campaigns, campaign links and anchors; read creator discovery, opportunities, account and campaign reports; check creator onboarding status; and request Spark Ads video authorization and inspect its status. Eligible onboarding invitations and opportunity participation are intended only where TikTok provides the required integration.

Data and action boundaries: Campaign changes, invitations, participation and anchor removal follow the merchant's instructions. Creator onboarding and advertising-use consent remain with the creator and TikTok. A status-read path is not evidence of a working onboarding-invitation integration.

Representative catalog paths

/tto/campaign/create/
/tto/campaign/report/get/
/tto/creator/status/get/
/tto/campaign/video/auth/apply/

Requested sub-permissions 4 catalog entries

Create and update TikTok One (TTO) account
Read TikTok One (TTO) account
Get creators onboarding status and invite creators to TikTok One (TTO)
Send Spark Ads invitation to creators and get status

12. TikTok Creator

Intended merchant workflow: For agreed creator collaborations, client tools will retrieve available public creator media and permitted authorized creator insights and videos. On the creator's instructions, eligible integrations will join TikTok One campaigns, link intended videos and read or confirm campaign-link requests.

Data and action boundaries: Creator authorization is required wherever the API requires it; a merchant's advertising authorization does not replace it. Participation and video linking require the relevant creator's consent. Data is used for the agreed collaboration.

Representative catalog paths

/tto/creator/authorized/get/
/tto/creator/public/video/list/
/tto/creator/campaign/join/
/tto/creator/link/request/confirm/

Requested sub-permissions 3 catalog entries

Creator user / Get creator insights
Creator media / Get creator media
Creator campaign / Update creator TikTok One (TTO) campaign

13. Ad comments

Intended merchant workflow: Merchant moderation tools will retrieve and export advertising comments and inspect blocked-word settings. They will post approved replies, delete or change comment status, and create, update or remove blocked words under the merchant's moderation instructions.

Data and action boundaries: Access is limited to comments and settings available for the authorized advertiser. Replies and moderation changes require its instructions; this does not authorize unrelated users' private content.

Integration condition: These paths carry v1.2 tags in the catalog snapshot. Confirm current support or replacement endpoints before integration; the gateway currently forwards v1.3.

Representative catalog paths

/comment/list/
/comment/post/
/blockedword/create/

Requested sub-permissions 4 catalog entries

Ad comment management / Read comments
Ad comment management / Write comments
Blocked word management / Read blocked words
Blocked word management / Generate blocked words

14. TikTok Business Plugin

Intended merchant workflow: An eligible merchant plugin integration will retrieve the business profile associated with its authorized TikTok Business Plugin connection and disconnect that profile when the merchant requests it.

Data and action boundaries: TBP external is limited here to profile retrieval and disconnection. Pixel, catalog and advertising changes require their own permissions. Disconnection must be requested by the merchant responsible for the integration.

Integration condition: Both paths carry v1.2 tags in the catalog snapshot. TikTok integration eligibility and a supported endpoint contract must be confirmed before implementation.

Representative catalog paths

/tbp/business_profile/get/
/tbp/business_profile/disconnect/

Requested sub-permissions 1 catalog entries

TBP external

15. Automated rules

Intended merchant workflow: Merchant automation tools will create, update, bind and enable or disable TikTok automated rules, and read their configurations and execution results to implement the merchant's specified campaign conditions and actions.

Data and action boundaries: TikTok's rule engine performs supported actions. The merchant approves rule conditions, target campaigns and spend or status effects before activation. TKBADA does not claim a separate completed scheduling engine.

Representative catalog paths

/optimizer/rule/create/
/optimizer/rule/batch_bind/
/optimizer/rule/result/list/

Requested sub-permissions 2 catalog entries

Create and update automated rules
Read automated rules and execution results

16. TikTok Shop

Intended merchant workflow: Merchant advertising tools will list accessible commerce stores and retrieve products for ad selection. Where TikTok supports the setup, they will establish the required commerce connection, bind it to an authorized catalog and update the commerce window on merchant instructions.

Data and action boundaries: This API for Business group concerns commerce assets linked to advertising. Store and catalog rights are required. Order management, shipping and fulfillment use separate TikTok Shop Partner APIs and are outside this scope.

Integration condition: The catalog mixes newer store read paths with historical commerce write paths. Eligibility and supported versions must be verified before write integration.

Representative catalog paths

/store/list/
/store/product/get/
/commerce/store/bind_to_catalog/

Requested sub-permissions 1 catalog entries

TikTok Shop

17. Offline events management

Intended merchant workflow: Merchant integrations will create, inspect, update or delete authorized offline event sets and send genuine POS or other offline transaction signals for advertising measurement. Current event submission will use Measurement's /event/track/ with event_source=offline.

Data and action boundaries: Inputs can include event-set IDs, transaction events, time, value, currency and permitted matching fields. The merchant must have rights to the source data. This workflow measures transactions; it does not process payments.

Integration condition: One-by-one and bulk offline track routes remain in the historical catalog. Use TikTok's current Events API contract rather than assuming those legacy upload paths are available.

Representative catalog paths

/offline/create/
/offline/get/
/offline/update/

Requested sub-permissions 4 catalog entries

Create/manage offline events
Report offline events one by one
Report offline events in bulk
Read offline events

18. Ad diagnosis

Intended merchant workflow: Merchant optimization tools will request campaign diagnosis suggestions, present them for review and, where a verified supported action exists, apply a specifically approved recommendation using the necessary operation permission.

Data and action boundaries: Diagnosis results do not authorize budget or configuration changes by themselves. The catalog exposes diagnosis-read paths; automatic adoption is not claimed or implemented by that fact.

Representative catalog paths

/tool/diagnosis/get/
/tools/diagnosis/get/

Requested sub-permissions 1 catalog entries

Get and adopt diagnosis suggestion

19. Mentions

Intended merchant workflow: Merchant monitoring tools will read eligible brand-mention videos, related words and hashtags, and mention comments. They will add or remove merchant-approved tracking hashtags and inspect tracking configuration.

Data and action boundaries: Collection is limited to content and fields TikTok makes available through the approved API. Hashtag changes follow the merchant's instructions; no platform access limits are bypassed.

Representative catalog paths

/business/mention/video/list/
/business/mention/hashtag/add/
/business/mention/comment/list/

Requested sub-permissions 2 catalog entries

Content
Comment

20. CRM event management

Intended merchant workflow: Merchant lead-follow-up integrations will list or establish CRM event sets so authorized downstream lead stages and conversion outcomes can be associated with advertising measurement. Event submission uses Measurement's /event/track/ with event_source=crm.

Data and action boundaries: This group manages event sets; it does not grant access to the merchant's entire CRM contact database. The merchant chooses the event source and permitted outcome data and must have the necessary rights for measurement.

Representative catalog paths

/crm/list/
/crm/create/

Requested sub-permissions 2 catalog entries

Read CRM event sets
Create/manage CRM event sets

21. Business recommendation

Intended merchant workflow: Merchant creative-selection tools will request available video and creator Spark Ads recommendations to identify candidate content for advertising and creator collaboration.

Data and action boundaries: Recommendations do not grant content, music or creator-use rights. The merchant must separately obtain required authorizations before using a recommended video or creator in an ad.

Representative catalog paths

/business/video/recommend/
/spark_ad/recommend/
/tto/post/recommend/

Requested sub-permissions 2 catalog entries

Video Spark Ads recommendation
Creator Spark Ads recommendation

22. CTM (click-to-message) event management

Intended merchant workflow: For ads with eligible instant-messaging destinations, merchant tools will create, retrieve or list message event sets and select the appropriate set for the destination account and conversation optimization or measurement.

Data and action boundaries: The objects are event-set IDs, configuration and destination-account associations. This scope does not provide chat-history access, private-message sending or an automated customer-service inbox.

Representative catalog paths

/ctm/create/
/ctm/message_event_set/get/
/ctm/list/

Requested sub-permissions 2 catalog entries

Create CTM (click-to-message) event sets
List CTM (click-to-message) event sets

23. Brand Safety

Intended merchant workflow: Merchant advertising tools will inspect and update eligible video exclusions, TikTok inventory filters and profile exclusions, and review available change logs to apply the merchant's placement standards.

Data and action boundaries: Placement and exclusion changes require the merchant's instructions and product eligibility. Filters reduce specified placement risks within TikTok's supported controls; they are not a guarantee about all ad placements.

Representative catalog paths

/video_exclusion_list/get/
/tiktok_inventory_filters/update/
/profile_exclusion_list/update/

Requested sub-permissions 3 catalog entries

Video exclusion list
TikTok inventory filters
Profile exclusion list

24. Partner insights

Intended merchant workflow: If TikTok approves the relevant partner arrangement and data specification, an integration will submit or update permitted partner-insight data in the format and purpose TikTok defines.

Data and action boundaries: The requested permission is Update insights, not unrestricted insight retrieval. Source data needs the relevant merchant's permission. Required fields, eligibility and permitted purposes must be confirmed before implementation; an approved partner workflow is not currently claimed.

Integration condition: The detailed public endpoint contract has not been verified. This is a conditional intended use awaiting TikTok's specification, rather than a completed integration.

Representative catalog paths

/partner_insights/update/

Requested sub-permissions 1 catalog entries

Update insights

25. Payment portfolio

Intended merchant workflow: Eligible customer finance tools will read accessible portfolios, linked advertiser accounts and users. On authorized finance-manager instructions, they may create portfolios, update advertiser links and allocate or adjust credit lines within TikTok's permitted limits.

Data and action boundaries: These actions involve financial administration and require explicit customer finance authority, eligible business entities and applicable TikTok roles. Credit-line changes are not implied by ordinary advertising access. No active portfolio or completed credit-allocation integration is currently claimed.

Representative catalog paths

/payment_portfolio/get/
/payment_portfolio/create/
/payment_portfolio/advertiser/update/
/payment_portfolio/credit_line/update/

Requested sub-permissions 2 catalog entries

Write
Read

26. Custom conversion management

Intended merchant workflow: Merchant measurement tools will list, read, create, update or delete custom conversion definitions and conditions associated with an authorized event source, to measure or optimize specified business actions.

Data and action boundaries: Changes require the merchant's instructions and event-source access. The permission configures conversion definitions; it does not authorize inventing events or collecting additional customer profiles.

Representative catalog paths

/custom_conversion/list/
/custom_conversion/create/
/custom_conversion/update/
/custom_conversion/delete/

Requested sub-permissions 2 catalog entries

Create and update custom conversion
Read custom conversion

Official references

Updated October 8, 2026. This page explains the application scope and intended integration requirements. TikTok makes the approval and endpoint-availability decisions.