TikTok

TikTok Download API

Returns direct, watermark-free download links for a public TikTok video or photo post, from its link, share link or numeric ID. You get every video rendition, best first, with its size, resolution, codec, bitrate and frame rate, every slideshow photo with its sound, the cover, and when each link expires. The links need no TikTok cookie.

GET /v1/tiktok/download

Try it

Example

cURL
curl -G 'https://socialtap.dev/v1/tiktok/download' \
  --data-urlencode 'url=https://www.tiktok.com/@niinoclock/video/7673108027645414678?is_from_webapp=1&sender_device=pc' \
  -H "x-api-key: $SOCIALTAP_API_KEY"
TypeScript SDK
import { SocialTap } from "socialtap";

const client = new SocialTap(); // apiKey defaults to process.env.SOCIALTAP_API_KEY

const res = await client.tiktok.download.get({ url: "https://www.tiktok.com/@niinoclock/video/7673108027645414678?is_from_webapp=1&sender_device=pc" });
console.log(res.data);
console.log(res.credits.charged, res.meta.request_id);
Node.js (fetch)
const params = new URLSearchParams({
  url: "https://www.tiktok.com/@niinoclock/video/7673108027645414678?is_from_webapp=1&sender_device=pc",
});
const res = await fetch(`https://socialtap.dev/v1/tiktok/download?${params}`, {
  headers: { "x-api-key": process.env.SOCIALTAP_API_KEY ?? "" },
});
const body = await res.json();
if (!res.ok) throw new Error(`${body.error.code}: ${body.error.message}`);
const { data, meta } = body;
console.log(data, meta.credits_charged);
Python (requests)
import os

import requests

res = requests.get(
    "https://socialtap.dev/v1/tiktok/download",
    params={"url": "https://www.tiktok.com/@niinoclock/video/7673108027645414678?is_from_webapp=1&sender_device=pc"},
    headers={"x-api-key": os.environ["SOCIALTAP_API_KEY"]},
)
body = res.json()
if not res.ok:
    raise RuntimeError(f"{body['error']['code']}: {body['error']['message']}")
data, meta = body["data"], body["meta"]
print(data, meta["credits_charged"])
Go (net/http)
package main

import (
	"encoding/json"
	"fmt"
	"log"
	"net/http"
	"net/url"
	"os"
)

func main() {
	q := url.Values{}
	q.Set("url", "https://www.tiktok.com/@niinoclock/video/7673108027645414678?is_from_webapp=1&sender_device=pc")
	req, err := http.NewRequest("GET", "https://socialtap.dev/v1/tiktok/download?"+q.Encode(), nil)
	if err != nil {
		log.Fatal(err)
	}
	req.Header.Set("x-api-key", os.Getenv("SOCIALTAP_API_KEY"))
	res, err := http.DefaultClient.Do(req)
	if err != nil {
		log.Fatal(err)
	}
	defer res.Body.Close()
	var body struct {
		Data  json.RawMessage `json:"data"`
		Meta  map[string]any  `json:"meta"`
		Error *struct {
			Code    string `json:"code"`
			Message string `json:"message"`
		} `json:"error"`
	}
	if err := json.NewDecoder(res.Body).Decode(&body); err != nil {
		log.Fatal(err)
	}
	if body.Error != nil {
		log.Fatalf("%s: %s", body.Error.Code, body.Error.Message)
	}
	fmt.Println(string(body.Data), body.Meta["credits_charged"])
}
PHP
<?php

$query = http_build_query([
    'url' => 'https://www.tiktok.com/@niinoclock/video/7673108027645414678?is_from_webapp=1&sender_device=pc',
]);
$ch = curl_init('https://socialtap.dev/v1/tiktok/download?' . $query);
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => ['x-api-key: ' . getenv('SOCIALTAP_API_KEY')],
]);
$body = json_decode(curl_exec($ch), true);
if (curl_getinfo($ch, CURLINFO_RESPONSE_CODE) >= 400) {
    throw new RuntimeException($body['error']['code'] . ': ' . $body['error']['message']);
}
print_r($body['data']);
echo $body['meta']['credits_charged'], PHP_EOL;
Ruby
require "json"
require "net/http"

uri = URI("https://socialtap.dev/v1/tiktok/download")
uri.query = URI.encode_www_form('url' => 'https://www.tiktok.com/@niinoclock/video/7673108027645414678?is_from_webapp=1&sender_device=pc')
req = Net::HTTP::Get.new(uri)
req["x-api-key"] = ENV.fetch("SOCIALTAP_API_KEY")
res = Net::HTTP.start(uri.host, uri.port, use_ssl: uri.scheme == "https") { |http| http.request(req) }
body = JSON.parse(res.body)
raise "#{body["error"]["code"]}: #{body["error"]["message"]}" unless res.is_a?(Net::HTTPSuccess)
pp body["data"]
puts body["meta"]["credits_charged"]
Java
import java.net.URI;
import java.net.URLEncoder;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;
import java.nio.charset.StandardCharsets;

public class Main {
    public static void main(String[] args) throws Exception {
        String query = "url=" + encode("https://www.tiktok.com/@niinoclock/video/7673108027645414678?is_from_webapp=1&sender_device=pc");
        HttpRequest request = HttpRequest.newBuilder()
            .uri(URI.create("https://socialtap.dev/v1/tiktok/download?" + query))
            .header("x-api-key", System.getenv("SOCIALTAP_API_KEY"))
            .GET()
            .build();
        HttpResponse<String> response = HttpClient.newHttpClient()
            .send(request, HttpResponse.BodyHandlers.ofString());
        // An error is {"error": {"code", "message", ...}}; success is {data, meta}, meta.credits_charged its price.
        if (response.statusCode() >= 400) throw new RuntimeException(response.body());
        System.out.println(response.body());
    }

    static String encode(String value) {
        return URLEncoder.encode(value, StandardCharsets.UTF_8);
    }
}
.NET
using System.Text.Json;

using var http = new HttpClient();
http.DefaultRequestHeaders.Add("x-api-key", Environment.GetEnvironmentVariable("SOCIALTAP_API_KEY"));

var query = string.Join("&",
    "url=" + Uri.EscapeDataString("https://www.tiktok.com/@niinoclock/video/7673108027645414678?is_from_webapp=1&sender_device=pc"));
var res = await http.GetAsync("https://socialtap.dev/v1/tiktok/download?" + query);
using var body = JsonDocument.Parse(await res.Content.ReadAsStringAsync());
if (!res.IsSuccessStatusCode)
{
    var error = body.RootElement.GetProperty("error");
    throw new Exception($"{error.GetProperty("code")}: {error.GetProperty("message")}");
}
Console.WriteLine(body.RootElement.GetProperty("data"));
Console.WriteLine(body.RootElement.GetProperty("meta").GetProperty("credits_charged"));
Rust
// Cargo.toml: reqwest = { version = "0.12", features = ["blocking", "json"] }, serde_json = "1"
use std::env;

fn main() -> Result<(), Box<dyn std::error::Error>> {
    let res = reqwest::blocking::Client::new()
        .get("https://socialtap.dev/v1/tiktok/download")
        .query(&[("url", "https://www.tiktok.com/@niinoclock/video/7673108027645414678?is_from_webapp=1&sender_device=pc")])
        .header("x-api-key", env::var("SOCIALTAP_API_KEY")?)
        .send()?;
    let ok = res.status().is_success();
    let body: serde_json::Value = res.json()?;
    if !ok {
        return Err(format!("{}: {}", body["error"]["code"], body["error"]["message"]).into());
    }
    println!("{} {}", body["data"], body["meta"]["credits_charged"]);
    Ok(())
}
200 OK
{
  "data": {
    "approximate_fields": [
      "published_at",
      "duration_ms",
      "files[].duration_ms"
    ],
    "author": {
      "avatar_url": "https://p16-common-sign.tiktokcdn-us.com/tos-maliva-avt-0068/6fff7b147d5d98ee78f58331d80bbd93~tplv-tiktokx-cropcenter:100:100.jpeg?dr=9640&refresh_token=ab57b0a4&x-expires=4070908800&x-signature=SCRUBBED&t=4d5b0474&ps=13740610&shp=a5d48078&shcp=81f88b70&idc=useast5",
      "display_name": "Niina",
      "id": null,
      "is_verified": null,
      "url": "https://www.tiktok.com/@niinoclock",
      "username": "niinoclock"
    },
    "duration_ms": 495000,
    "files": [
      {
        "audio_codec": "aac",
        "bitrate_kbps": 707,
        "duration_ms": 495000,
        "expires_at": null,
        "frame_rate": 56,
        "height": 1920,
        "is_video_only": false,
        "is_watermarked": false,
        "item_index": 0,
        "mime_type": "video/mp4",
        "size_bytes": 43793391,
        "thumbnail_url": "https://p19-common-sign.tiktokcdn-us.com/tos-no1a-p-0037-no/oUy8yNAQEvDAfIJFF3DCBUWr9lBLjICeQ2ygfb~tplv-tiktokx-origin.image?dr=9636&x-expires=4070908800&x-signature=SCRUBBED&t=4d5b0474&ps=13740610&shp=81f88b70&shcp=a70a8312&idc=useast5",
        "type": "video",
        "url": "https://www.tiktok.com/aweme/v1/play/?faid=1988&file_id=05419a9f22f241869a7d8f699fce95b3&is_play_url=1&item_id=7673108027645414678&line=0&ply_type=2&pt=dHQ0ZC5wbGF5ZXIuYXBpJi9wbGF5ZXIvYXBpL3YxL2l0ZW1zJjIwMjYxMTAxMjMxNzIxNTU4QjcyNjBERUUxRTUxRjE3OTImMTc5MzU3NTA0MSYxMDc3MjUzYTdmNjc&…",
        "video_codec": "h265",
        "width": 1080
      },
      {
        "audio_codec": "aac",
        "bitrate_kbps": 877,
        "duration_ms": 495000,
        "expires_at": null,
        "frame_rate": 30,
        "height": 1280,
        "is_video_only": false,
        "is_watermarked": false,
        "item_index": 0,
        "mime_type": "video/mp4",
        "size_bytes": 54354244,
        "thumbnail_url": "https://p19-common-sign.tiktokcdn-us.com/tos-no1a-p-0037-no/oUy8yNAQEvDAfIJFF3DCBUWr9lBLjICeQ2ygfb~tplv-tiktokx-origin.image?dr=9636&x-expires=4070908800&x-signature=SCRUBBED&t=4d5b0474&ps=13740610&shp=81f88b70&shcp=a70a8312&idc=useast5",
        "type": "video",
        "url": "https://www.tiktok.com/aweme/v1/play/?faid=1988&file_id=e591b038bf824943831335499464cc8d&is_play_url=1&item_id=7673108027645414678&line=0&ply_type=2&pt=dHQ0ZC5wbGF5ZXIuYXBpJi9wbGF5ZXIvYXBpL3YxL2l0ZW1zJjIwMjYxMTAxMjMxNzIxNTU4QjcyNjBERUUxRTUxRjE3OTImMTc5MzU3NTA0MSYxMDc3MjUzYTdmNjc&…",
        "video_codec": "h264",
        "width": 720
      },
      {
        "audio_codec": "aac",
        "bitrate_kbps": 443,
        "duration_ms": 495000,
        "expires_at": null,
        "frame_rate": 30,
        "height": 1280,
        "is_video_only": false,
        "is_watermarked": false,
        "item_index": 0,
        "mime_type": "video/mp4",
        "size_bytes": 27449177,
        "thumbnail_url": "https://p19-common-sign.tiktokcdn-us.com/tos-no1a-p-0037-no/oUy8yNAQEvDAfIJFF3DCBUWr9lBLjICeQ2ygfb~tplv-tiktokx-origin.image?dr=9636&x-expires=4070908800&x-signature=SCRUBBED&t=4d5b0474&ps=13740610&shp=81f88b70&shcp=a70a8312&idc=useast5",
        "type": "video",
        "url": "https://www.tiktok.com/aweme/v1/play/?faid=1988&file_id=ef73ad47ea274064b3f9aa901f63c9eb&is_play_url=1&item_id=7673108027645414678&line=0&ply_type=2&pt=dHQ0ZC5wbGF5ZXIuYXBpJi9wbGF5ZXIvYXBpL3YxL2l0ZW1zJjIwMjYxMTAxMjMxNzIxNTU4QjcyNjBERUUxRTUxRjE3OTImMTc5MzU3NTA0MSYxMDc3MjUzYTdmNjc&…",
        "video_codec": "h265",
        "width": 720
      }
    ],
    "id": "7673108027645414678",
    "platform": "tiktok",
    "platform_specific": {
      "tiktok": {
        "is_download_allowed": null
      }
    },
    "platform_type": "video",
    "published_at": "2026-08-12T11:38:00Z",
    "text": "Finally back with another Japanese meal tutorial! This time, I'm showing you how I make a Japanese cream stew 😋 Easy to make and arrange with different ingredients too! #japan #japanesefood #japantiktok #cookingtutorial #stew",
    "thumbnail_url": "https://p19-common-sign.tiktokcdn-us.com/tos-no1a-p-0037-no/oUy8yNAQEvDAfIJFF3DCBUWr9lBLjICeQ2ygfb~tplv-tiktokx-origin.image?dr=9636&x-expires=4070908800&x-signature=SCRUBBED&t=4d5b0474&ps=13740610&shp=81f88b70&shcp=a70a8312&idc=useast5",
    "title": null,
    "type": "video",
    "unknown_fields": [],
    "url": "https://www.tiktok.com/@niinoclock/video/7673108027645414678"
  },
  "meta": {
    "request_id": "req_3f9c2a7d1e8b4c6a9f0e2d4b6a8c0e1f",
    "platform": "tiktok",
    "source": "api",
    "is_cached": false,
    "credits_charged": 1,
    "latency_ms": 466,
    "fetched_at": "2026-10-25T12:00:00Z",
    "input": {
      "kind": "video",
      "id": "7673108027645414678",
      "url": "https://www.tiktok.com/@niinoclock/video/7673108027645414678"
    },
    "credits_remaining": 9999,
    "client_request_id": null,
    "warnings": []
  }
}

Long arrays and strings are shortened for display; real responses are complete.

x-api-keystringheaderrequired

Your API key. Authentication

urlstringrequiredmax 2,048 chars

TikTok video or photo post link (web, mobile, embed, player or share link) or a numeric post ID.

Examplehttps://www.tiktok.com/@niinoclock/video/7673108027645414678

url takes TikTok video and post links; another kind of link, or another platform's, fails free with invalid_input. Unknown parameters are rejected with a suggestion, never ignored (Requests).

Parameters every endpoint accepts
max_ageintegermin 0

Accept a cached response up to this many seconds old. Cache hits cost 0 credits. Omit to always fetch fresh. The Cache-Control: max-age=N request header is equivalent; max_age wins when both are sent.

fieldsstring

Return only these fields of each item: comma-separated paths in the schema's notation (id,text,metrics.view_count,segments[].text; a parent path keeps the whole object). Unknown paths are rejected. Applied after the cache, so it changes neither the price nor cache hits; page and meta are always returned whole.

Response

application/json

200

{data, meta}. data is a download object; meta describes the request (meta). Fields only TikTok has are under platform_specific.tiktok.

platformstring

Platform ID (tiktok, instagram, …).

idstring

Platform-native ID of the post (equals post.id).

urlstring uri

Canonical URL of the post.

typestring

The post's content shape, as post.type. New values may be added; treat unknown values as other.

One ofvideoimagecarouselaudio

platform_typestringnullable

The platform's own product label, lowercase (reel, short, story, …), as post.platform_type.

titlestringnullable

Headline (Reddit title, Facebook video title); null on caption-only platforms.

textstringnullable

Caption or body as plain text.

authorobject

The posting account.

ShowHide 6 child fields
idstringnullable

Platform-native account ID; null when only the handle is known.

usernamestringnullable

Handle without the @; null when the account has none.

display_namestringnullable

Display name shown on the profile.

urlstring urinullable

Canonical profile URL.

avatar_urlstring urinullable

Profile picture URL. Platform CDN URLs can expire within hours.

is_verifiedbooleannullable

Platform verification badge; null where the platform has no badge.

published_atstring date-timenullable

When the post went public, RFC 3339 UTC.

duration_msintegernullable

Length of the post's primary video or audio in milliseconds; null for photo posts.

thumbnail_urlstring urinullable

Largest cover or poster image URL of the post (the first attachment's; each file's own is files[].thumbnail_url); CDN links can expire within hours.

filesobject[]

The post's files by item_index, the sound last; each item's best first (a url, the item's own kind before its separate audio, no watermark, with sound, not a manifest, then resolution). At least one has a url.

ShowHide 16 child fields
item_indexintegernullable

0-based position of the file's attachment in display order (post.media[item_index]); null for the post's sound (a slideshow's soundtrack).

typestring

Kind of file, as media[].type. New values may be added; treat unknown values as other.

One ofvideoimageaudiogif

urlstring urinullable

Direct CDN file URL, fetchable without cookies or headers; null when the platform serves it only with its cookie or to the IP that asked.

expires_atstring date-timenullable

When url stops working, RFC 3339 UTC, read from its signature; null when unknown or it does not expire.

mime_typestringnullable

IANA media type without parameters (video/mp4, image/jpeg, audio/mp4); application/vnd.apple.mpegurl (HLS) or application/dash+xml (DASH) for a streaming manifest.

size_bytesintegernullable

File size in bytes; an estimate from bitrate × duration is in approximate_fields.

widthintegernullable

Width in pixels (images and video).

heightintegernullable

Height in pixels (images and video).

duration_msintegernullable

Duration in milliseconds (video and audio); null for images and when unknown.

bitrate_kbpsintegernullable

Average bitrate in kbit/s (video and audio), rounded; null when unknown.

frame_ratenumbernullable

Frames per second (video and gif), to two decimals (an NTSC 30000/1001 is 29.97); null for images and audio and when unknown.

video_codecstringnullable

Video codec (h264 plays everywhere; h265, vp9 and av1 need newer players); null for images and audio. New values may be added; treat unknown values as other.

One ofh264h265vp9av1

audio_codecstringnullable

Audio codec of the file's sound; null when it has none. New values may be added; treat unknown values as other.

One ofaacopusmp3

is_watermarkedbooleannullable

The platform's logo or the author's handle is burned into the picture (TikTok's download file); false: the clean original. Null for audio.

is_video_onlybooleannullable

True: video without its sound, which is the audio file of the same item_index. False: it plays with its sound, or has none. Null for images and audio.

thumbnail_urlstring urinullable

Cover image of this file's attachment (post.media[item_index].thumbnail_url), built like url; null for images and audio and when unknown.

platform_specificobject

Fields only this platform has, under its ID (platform_specific.<platform>); each null when unknown.

ShowHide 1 child field
tiktokobjectnullable

A TikTok download's own fields.

ShowHide 1 child field
is_download_allowedbooleannullable

The creator lets viewers save the post in TikTok's app; false: saving is turned off (the files stay public). Null when TikTok does not say.

approximate_fieldsstring[]

JSON paths of estimated or rounded values (a size from bitrate × duration, a duration in whole seconds). [] when all exact.

unknown_fieldsstring[]

JSON paths of lists whose [] means unknown rather than none. [] when every list is known.

not_found, private_or_unavailable and no_media are item-level: the request was fine, the item can't be returned.

400

400 Bad Request: 1 error code. Free: errors cost nothing.

A parameter is missing or malformed, or the link is not one this endpoint takes.

Fix the parameter named in param as the message says. For a link of the wrong kind, call an endpoint listed in details.endpoints, when there is one.

401

401 Unauthorized: 1 error code. Free: errors cost nothing.

unauthorizedNo retry

The x-api-key header is missing, or its key is unknown or revoked. On the dashboard's routes: the session cookie is missing or expired.

Send a valid API key in the x-api-key header. No key yet? A person gets one at details.signup_url; an AI agent follows details.agent_auth_url.

402

402 Payment Required: 2 error codes. Free: errors cost nothing.

The account does not have enough credits for this request.

Have a person buy credits at details.purchase_url (or make them a checkout link with details.checkout), then repeat the request. Do not retry automatically.

The API key reached its spend limit for this period. The account may still have credits.

Wait until details.resets_at, or raise the key's spend limit (PATCH /v1/api_keys/{id}). Do not retry automatically.

403

403 Forbidden: 2 error codes. Free: errors cost nothing.

forbiddenNo retry

The API key is valid but may not make this request, and details.reason says why: the account is suspended, the key lacks the route's scope, waits for its owner to confirm it by email, has expired, or was used from an IP outside its allowlist, or a rotated key's previous secret was used for a call that needs the admin scope. A running job stops with it too when its account is suspended or the key that created it is revoked or expires. It is about the key, never the item: a private item is private_or_unavailable, also 403, so branch on the code.

Act on details.reason. suspended: contact support. scope: use a key with details.required_scope. previous_secret: use the new secret. key_pending: have the owner open the emailed link. key_expired or key_revoked: create a new key. ip_not_allowed: call from an allowed IP.

The item exists but is not public: it is private, age- or region-restricted, or needs a login to view. It shares 403 with forbidden (which is about the key), so branch on the code.

Only public items can be fetched. Do not retry.

404

404 Not Found: 2 error codes. Free: errors cost nothing.

not_foundNo retry

The item does not exist or was deleted. On GET /v1/requests/{id}/response: the response was not kept (details.reason says why).

Check the link or ID. Do not retry.

no_mediaNo retry

The post exists but has no file to download: a text or link post, or one whose media the platform does not serve logged out.

Do not retry. Fetch the post itself for its text and links.

429

429 Too Many Requests: 1 error code. Free: errors cost nothing.

rate_limitedYes, later

The account passed its runaway-protection ceiling: a high per-account limit that stops a broken client loop (plans have no rate limit). Requests without an API key (signup, the MCP server's tool listing and find_endpoint) are limited per IP address instead. It also stops an account whose failed requests in the last hour cost far more than its successful ones paid for: failures are free within a limit (the message says so), and successes raise it.

Wait the seconds in the retry-after header, then retry. If your steady traffic needs more, ask support to raise the ceiling; without an API key, send one.

500

500 Internal Error: 1 error code. Free: errors cost nothing.

internalYes, later

An unexpected error on SocialTap's side.

Retry with backoff. If it keeps happening, contact support with the request_id.

502

502 Bad Gateway: 1 error code. Free: errors cost nothing.

upstream_errorYes, later

The platform failed, or answered with something we could not read.

Retry with backoff. Failed requests are free.

503

503 Unavailable: 2 error codes. Free: errors cost nothing.

The platform refused every attempt, our own retries included.

Retry later with backoff. Failed requests are free.

overloadedYes, later

SocialTap was at capacity, or paused by its operators, and did not start the request. Nothing was fetched or charged.

Retry after the seconds in the retry-after header. Failed requests are free.

From 1 credit per request. Charged only for successful requests. Errors are free. The price depends on the source that produced the result, reported as meta.source; sources are tried cheapest first: Platform API → Public page.

SourcePrice per successful requestPer 1,000 requests
Platform API api1 credit$0.75–$1.97
Public page page1 credit$0.75–$1.97
Balance, sources and what you were charged

Your balance must be at least 1 credit to start a request; with less, it is refused with insufficient_credits (HTTP 402) and costs nothing. Only that minimum is set aside when the request starts.

meta.sourceSourceWhat it means
apiPlatform APIThe platform's public, logged-out API.
pagePublic pageData embedded in the platform's public web page.

meta.credits_charged and the x-credits-charged header show what you paid. How credits work · Packs

Endpoint ID tiktok.download · operationId tiktok.download.get · Product overview

Last updated