TikTok Shop
Connect TikTok Shop to manage products and inventory, work orders through shipping and tracking, handle returns and refunds, read settlements, and track shop performance.
You end up pasting three values from one TikTok Shop Partner Center app: the App Key, the App Secret, and the whole Copy authorization link URL that carries your service id and market domain.
Partner application before this connector works
TikTok Shop Partner Center requires a developer application per app, reviewed and approved by TikTok Shop, before the app goes Live and gains access to the products and scopes it requested - the docs are explicit that you do not have API access until the application is approved.
- Typical wait
- Not published. TikTok Shop Partner Center states no SLA for the developer application, and its review docs are behind a JavaScript-rendered portal that publishes no turnaround figure. Plan for at least a week and budget for several, and treat any specific week-count quoted in third-party blog posts as unverified.
- Cost
- No fee for Partner Center registration or the app application.
- Blocked until approved
- Every production Shop API domain: products, inventory, orders, fulfilment, logistics, finance/settlements, returns, affiliate and customer service. A shop owner cannot complete the authorisation flow for an app that is not Live, so no shop_cipher or access token for a real shop exists until approval lands. Products and scopes are approved against your stated use case - finance and customer service APIs in particular - so an approved app still cannot call endpoints outside what it was granted. Higher order-volume rate limits are a separate request after go-live requiring proof of monthly order volume; TikTok publishes no turnaround for it.
- Works meanwhile
- Register on TikTok Shop Partner Center, create the app and get an app key and app secret immediately, then develop against a development/test shop and the sandbox environment. The full OAuth handshake, payload shapes, HMAC request signing and webhook handling can all be built and verified before you submit.
Where to apply: partner.tiktokshop.com (or partner.us.tiktokshop.com for the US) > Manage Apps > create app > select products and scopes > submit the developer application for review. Watch the app status until it reads Live. Rate-limit increases go through Developer Tools > API Management.
- Request signing is mandatory and non-obvious - unsigned or wrongly signed calls fail even after approval, so build the HMAC-SHA256 signature against the test shop first.
- The app must be region-scoped correctly: US, UK/EU and SEA are separate Partner Center regions and an approval in one does not carry to another.
- Business/company verification with registration documents is expected for the partner account, not just a personal login.
- A privacy policy URL, a live demo video of the complete OAuth and data flow, and a clear written description of how seller data is stored and handled are all required in the submission - missing any one of them stalls the review.
- Asking for broad scopes 'to be safe' invites rejection; ask only for the product groups your integration demonstrably uses.
- Access tokens are shop-scoped and expire, and refresh tokens have their own lifetime, so plan token refresh before go-live rather than after.
- Setup time
- 30 min in Partner Center, plus developer onboarding and any app review
- Auth
- OAuth authorization
- API base URL
- https://open-api.tiktokglobalshop.com
- Rate limits
- TikTok Shop allocates QPS dynamically rather than publishing a fixed per-app quota. Capacity depends on how many shops have authorized you, the endpoint's weight and live platform load, so back off with jitter and use batch endpoints.
Before you begin
- A TikTok Shop Partner Center developer account with onboarding complete. Sign in to the Partner Center that matches your market, partner.us.tiktokshop.com for US and partner.tiktokshop.com for the rest of the world
- Market and Seller type decided before you create the app, because they may not be editable afterwards
- A backend-controlled Redirect URL to receive the authorization code
- A webhook URL, if the app needs order, product, fulfillment or authorization event notifications
- App review if the app is a Connector app, reaches 25 or more seller authorizations, or Partner Center flags it. US and UK compliance review can take three or more weeks
Get your credentials
Sign in to the Partner Center for your market
Open the Partner Center that matches your market, partner.us.tiktokshop.com for US shops and partner.tiktokshop.com everywhere else. Click Log in, or Join now to start developer onboarding.
Grow with TikTok Shop
Build apps and services for TikTok Shop sellers.
- Partner Center (US)
- partner.us.tiktokshop.com
- Partner Center (ROW)
- partner.tiktokshop.com
- Seller authorization (US)
- services.us.tiktokshop.com/open/authorize
- Seller authorization (ROW)
- services.tiktokshop.com/open/authorize
partner.us.tiktokshop.com may bounce you to partner.tiktokshop.com. That does not change your app's market.
Create the app under App & Service
Open App & Service from the navigation panel and click Create app & service. Select Custom, set Service category, Default name, Market and Seller type, turn on Enable API, add your Redirect URL, then click Create.
Create app & service
Market and Seller type are creation-time choices.
Connector apps prepare for app review even when distributed privately.
Enable the API scopes the connector needs
Open App & Service > your app > Manage > Manage API and tick only the access scopes you need. Click Save.
Manage API
Scopes decide which endpoints a seller's token can reach.
Add a scope later and the seller must reauthorize before their token carries it.
Copy the App Key and App Secret
Open App credentials / Basic information on the app detail page. Copy App Key into PopMCP's App key field and App Secret into App secret.
Basic information
Credentials for token exchange and request signing.
| Credential | Value | Handling |
|---|---|---|
| App Key | 6h****k9q2 | Public |
| App Secret | 8f2c****d51a | Server-side only |
| Service ID | 77****3406 | Public |
All three values sit on the same App credentials panel.
Copy the authorization link into PopMCP
Click Copy authorization link on the app page and paste the whole URL into PopMCP's Authorization link field. Do not hand-edit the host.
Seller authorization
Share this link with every seller who needs to authorize.
| Seller | Shop | Status | Expires |
|---|---|---|---|
| Acme Supply USLocal seller | acme-supply-us | Authorized | Sep 4, 2026 |
| Acme Supply UKLocal seller | acme-supply-uk | Pending | Not yet |
The auth_code the link returns is single-use and short-lived.
Connect in PopMCP
Open your workspace, choose TikTok Shop in the marketplace, and fill in the connect dialog:
| Field | What to enter |
|---|---|
| App keytext | Partner Center → App & Service → your app → App key. Public — it is sent on every API request. |
| App secretsecret | Same screen as the app key. Used server-side only to sign requests; stored encrypted and never sent to the browser or to any tool.Encrypted with AES-256-GCM on save and never shown again. |
| Authorization linktext | Partner Center → your app → 'Copy authorization link', pasted whole. It carries both the service id and the right consent domain for your market (US sellers get services.us.tiktokshop.com). A bare service id works too and is treated as non-US. |
https://app.popmcp.com/api/providers/tiktok-shop/callbackIn Partner Center → App & Service → your app → Basic information, enable API and set this exact URL as the Redirect URL, then save. TikTok Shop only ever redirects to the URL registered on the app, so authorization fails until this matches.
PopMCP verifies the credential against TikTok Shop immediately. On success the connection flips to Verified and its MCP tools are provisioned.
Verify it worked
PopMCP shows TikTok Shop as Connected. Behind the scenes it exchanges the seller's auth_code at https://auth.tiktok-shops.com/api/v2/token/get and then calls Get Authorized Shops. When that returns your shop, the product, order and fulfilment tools appear.
Troubleshooting
The token exchange fails with an invalid grant type
Why: TikTok Shop expects grant_type=authorized_code, not the standard OAuth authorization_code.
Fix: PopMCP handles this. If you are testing by hand, use exactly authorized_code.
The seller lands on the consent page but sees the wrong region or a domain error
Why: The authorization link belongs to a different market than the seller's shop.
Fix: Re-copy the authorization link from the Partner Center that matches your market. US apps use services.us.tiktokshop.com and everywhere else uses services.tiktokshop.com.
The pasted authorization link redirects to an unfamiliar host
Why: TikTok currently 301-redirects the US entry to services.tiktokshops.us, and the redirect keeps the query string intact.
Fix: Paste the link exactly as Partner Center gives it. A bare service id also works and is treated as non-US.
auth_code is rejected as expired or already used
Why: The code is valid for 30 minutes and can only be redeemed once.
Fix: Have the seller reopen the authorization link and finish the PopMCP connect step immediately.
An endpoint returns a permission error after the seller authorized
Why: The scope was added to the app after the seller granted access, so their token does not include it.
Fix: Enable the scope in Partner Center, then ask the seller to open the authorization link again. Check granted_scopes in the new token.
No online seller can authorize the app
Why: The app is still in the development stage.
Fix: Test with a Seller Center test account created under Development Shops in Partner Center, then follow the launch or review path for your app type.
The connection stops working after about a week
Why: The access token has a default validity of 7 days.
Fix: PopMCP refreshes it automatically against https://auth.tiktok-shops.com/api/v2/token/refresh. If it still drops, the seller may have cancelled authorization under Seller Center > App Store > My apps and incidents, so ask them to reauthorize.