# TikTok Download API

TikTok

Returns direct, watermark-free download links for a public TikTok video or photo post, from its link, share link or numeric ID. You get every video rendition, best first, with its size, resolution, codec, bitrate and frame rate, every slideshow photo with its sound, the cover, and when each link expires. The links need no TikTok cookie.

GET `/v1/tiktok/download`

## Example

cURL:

```shell
curl -G 'https://socialtap.dev/v1/tiktok/download' \
  --data-urlencode 'url=https://www.tiktok.com/@niinoclock/video/7673108027645414678?is_from_webapp=1&sender_device=pc' \
  -H "x-api-key: $SOCIALTAP_API_KEY"
```

TypeScript SDK:

```typescript
import { SocialTap } from "socialtap";

const client = new SocialTap(); // apiKey defaults to process.env.SOCIALTAP_API_KEY

const res = await client.tiktok.download.get({ url: "https://www.tiktok.com/@niinoclock/video/7673108027645414678?is_from_webapp=1&sender_device=pc" });
console.log(res.data);
console.log(res.credits.charged, res.meta.request_id);
```

Node.js (fetch):

```javascript
const params = new URLSearchParams({
  url: "https://www.tiktok.com/@niinoclock/video/7673108027645414678?is_from_webapp=1&sender_device=pc",
});
const res = await fetch(`https://socialtap.dev/v1/tiktok/download?${params}`, {
  headers: { "x-api-key": process.env.SOCIALTAP_API_KEY ?? "" },
});
const body = await res.json();
if (!res.ok) throw new Error(`${body.error.code}: ${body.error.message}`);
const { data, meta } = body;
console.log(data, meta.credits_charged);
```

Python (requests):

```python
import os

import requests

res = requests.get(
    "https://socialtap.dev/v1/tiktok/download",
    params={"url": "https://www.tiktok.com/@niinoclock/video/7673108027645414678?is_from_webapp=1&sender_device=pc"},
    headers={"x-api-key": os.environ["SOCIALTAP_API_KEY"]},
)
body = res.json()
if not res.ok:
    raise RuntimeError(f"{body['error']['code']}: {body['error']['message']}")
data, meta = body["data"], body["meta"]
print(data, meta["credits_charged"])
```

Go (net/http):

```go
package main

import (
	"encoding/json"
	"fmt"
	"log"
	"net/http"
	"net/url"
	"os"
)

func main() {
	q := url.Values{}
	q.Set("url", "https://www.tiktok.com/@niinoclock/video/7673108027645414678?is_from_webapp=1&sender_device=pc")
	req, err := http.NewRequest("GET", "https://socialtap.dev/v1/tiktok/download?"+q.Encode(), nil)
	if err != nil {
		log.Fatal(err)
	}
	req.Header.Set("x-api-key", os.Getenv("SOCIALTAP_API_KEY"))
	res, err := http.DefaultClient.Do(req)
	if err != nil {
		log.Fatal(err)
	}
	defer res.Body.Close()
	var body struct {
		Data  json.RawMessage `json:"data"`
		Meta  map[string]any  `json:"meta"`
		Error *struct {
			Code    string `json:"code"`
			Message string `json:"message"`
		} `json:"error"`
	}
	if err := json.NewDecoder(res.Body).Decode(&body); err != nil {
		log.Fatal(err)
	}
	if body.Error != nil {
		log.Fatalf("%s: %s", body.Error.Code, body.Error.Message)
	}
	fmt.Println(string(body.Data), body.Meta["credits_charged"])
}
```

200 OK:

```json
{
  "data": {
    "approximate_fields": [
      "published_at",
      "duration_ms",
      "files[].duration_ms"
    ],
    "author": {
      "avatar_url": "https://p16-common-sign.tiktokcdn-us.com/tos-maliva-avt-0068/6fff7b147d5d98ee78f58331d80bbd93~tplv-tiktokx-cropcenter:100:100.jpeg?dr=9640&refresh_token=ab57b0a4&x-expires=4070908800&x-signature=SCRUBBED&t=4d5b0474&ps=13740610&shp=a5d48078&shcp=81f88b70&idc=useast5",
      "display_name": "Niina",
      "id": null,
      "is_verified": null,
      "url": "https://www.tiktok.com/@niinoclock",
      "username": "niinoclock"
    },
    "duration_ms": 495000,
    "files": [
      {
        "audio_codec": "aac",
        "bitrate_kbps": 707,
        "duration_ms": 495000,
        "expires_at": null,
        "frame_rate": 56,
        "height": 1920,
        "is_video_only": false,
        "is_watermarked": false,
        "item_index": 0,
        "mime_type": "video/mp4",
        "size_bytes": 43793391,
        "thumbnail_url": "https://p19-common-sign.tiktokcdn-us.com/tos-no1a-p-0037-no/oUy8yNAQEvDAfIJFF3DCBUWr9lBLjICeQ2ygfb~tplv-tiktokx-origin.image?dr=9636&x-expires=4070908800&x-signature=SCRUBBED&t=4d5b0474&ps=13740610&shp=81f88b70&shcp=a70a8312&idc=useast5",
        "type": "video",
        "url": "https://www.tiktok.com/aweme/v1/play/?faid=1988&file_id=05419a9f22f241869a7d8f699fce95b3&is_play_url=1&item_id=7673108027645414678&line=0&ply_type=2&pt=dHQ0ZC5wbGF5ZXIuYXBpJi9wbGF5ZXIvYXBpL3YxL2l0ZW1zJjIwMjYxMTAxMjMxNzIxNTU4QjcyNjBERUUxRTUxRjE3OTImMTc5MzU3NTA0MSYxMDc3MjUzYTdmNjc&…",
        "video_codec": "h265",
        "width": 1080
      },
      {
        "audio_codec": "aac",
        "bitrate_kbps": 877,
        "duration_ms": 495000,
        "expires_at": null,
        "frame_rate": 30,
        "height": 1280,
        "is_video_only": false,
        "is_watermarked": false,
        "item_index": 0,
        "mime_type": "video/mp4",
        "size_bytes": 54354244,
        "thumbnail_url": "https://p19-common-sign.tiktokcdn-us.com/tos-no1a-p-0037-no/oUy8yNAQEvDAfIJFF3DCBUWr9lBLjICeQ2ygfb~tplv-tiktokx-origin.image?dr=9636&x-expires=4070908800&x-signature=SCRUBBED&t=4d5b0474&ps=13740610&shp=81f88b70&shcp=a70a8312&idc=useast5",
        "type": "video",
        "url": "https://www.tiktok.com/aweme/v1/play/?faid=1988&file_id=e591b038bf824943831335499464cc8d&is_play_url=1&item_id=7673108027645414678&line=0&ply_type=2&pt=dHQ0ZC5wbGF5ZXIuYXBpJi9wbGF5ZXIvYXBpL3YxL2l0ZW1zJjIwMjYxMTAxMjMxNzIxNTU4QjcyNjBERUUxRTUxRjE3OTImMTc5MzU3NTA0MSYxMDc3MjUzYTdmNjc&…",
        "video_codec": "h264",
        "width": 720
      },
      {
        "audio_codec": "aac",
        "bitrate_kbps": 443,
        "duration_ms": 495000,
        "expires_at": null,
        "frame_rate": 30,
        "height": 1280,
        "is_video_only": false,
        "is_watermarked": false,
        "item_index": 0,
        "mime_type": "video/mp4",
        "size_bytes": 27449177,
        "thumbnail_url": "https://p19-common-sign.tiktokcdn-us.com/tos-no1a-p-0037-no/oUy8yNAQEvDAfIJFF3DCBUWr9lBLjICeQ2ygfb~tplv-tiktokx-origin.image?dr=9636&x-expires=4070908800&x-signature=SCRUBBED&t=4d5b0474&ps=13740610&shp=81f88b70&shcp=a70a8312&idc=useast5",
        "type": "video",
        "url": "https://www.tiktok.com/aweme/v1/play/?faid=1988&file_id=ef73ad47ea274064b3f9aa901f63c9eb&is_play_url=1&item_id=7673108027645414678&line=0&ply_type=2&pt=dHQ0ZC5wbGF5ZXIuYXBpJi9wbGF5ZXIvYXBpL3YxL2l0ZW1zJjIwMjYxMTAxMjMxNzIxNTU4QjcyNjBERUUxRTUxRjE3OTImMTc5MzU3NTA0MSYxMDc3MjUzYTdmNjc&…",
        "video_codec": "h265",
        "width": 720
      }
    ],
    "id": "7673108027645414678",
    "platform": "tiktok",
    "platform_specific": {
      "tiktok": {
        "is_download_allowed": null
      }
    },
    "platform_type": "video",
    "published_at": "2026-08-12T11:38:00Z",
    "text": "Finally back with another Japanese meal tutorial! This time, I'm showing you how I make a Japanese cream stew 😋 Easy to make and arrange with different ingredients too! #japan #japanesefood #japantiktok #cookingtutorial #stew",
    "thumbnail_url": "https://p19-common-sign.tiktokcdn-us.com/tos-no1a-p-0037-no/oUy8yNAQEvDAfIJFF3DCBUWr9lBLjICeQ2ygfb~tplv-tiktokx-origin.image?dr=9636&x-expires=4070908800&x-signature=SCRUBBED&t=4d5b0474&ps=13740610&shp=81f88b70&shcp=a70a8312&idc=useast5",
    "title": null,
    "type": "video",
    "unknown_fields": [],
    "url": "https://www.tiktok.com/@niinoclock/video/7673108027645414678"
  },
  "meta": {
    "request_id": "req_3f9c2a7d1e8b4c6a9f0e2d4b6a8c0e1f",
    "platform": "tiktok",
    "source": "api",
    "is_cached": false,
    "credits_charged": 1,
    "latency_ms": 466,
    "fetched_at": "2026-10-25T12:00:00Z",
    "input": {
      "kind": "video",
      "id": "7673108027645414678",
      "url": "https://www.tiktok.com/@niinoclock/video/7673108027645414678"
    },
    "credits_remaining": 9999,
    "client_request_id": null,
    "warnings": []
  }
}
```

Long arrays and strings are shortened for display; real responses are complete.

> [!NOTE]
>
> **Good to know**
>
> - files\[0\] is the best file: the highest resolution with its sound.
> - Links can expire at expires_at, which is null when a link names no expiry, so request again for fresh ones.
> - Links come from TikTok's play redirector or its CDN and work from any IP without cookies, so follow redirects when you download.
> - TikTok's own watermarked file is listed with a null url, because TikTok serves it only with its cookie.
> - platform_specific.tiktok.is_download_allowed is the creator's setting for saving in TikTok's app, often null, and the public files are served either way.
> - A video's sound is the AAC track inside each video file, and a separate sound file is listed for photo posts and for some videos.
> - author.id and author.is_verified are often null here, and the TikTok Profile API returns the account's numeric ID and badge.

## Authorizations

`x-api-key`stringheaderrequired

Your API key. [Authentication](https://socialtap.dev/docs/authentication/index.md)

## Query parameters

| Name | Type | Description | Example |
| --- | --- | --- | --- |
| `url` required | `string`<br>max 2,048 chars | TikTok video or photo post link (web, mobile, embed, player or share link) or a numeric post ID. | `https://www.tiktok.com/@niinoclock/video/7673108027645414678` |

`url` takes TikTok video and post links; another kind of link, or another platform's, fails free with [`invalid_input`](https://socialtap.dev/docs/errors/index.md#invalid_input). Unknown parameters are rejected with a suggestion, never ignored ([Requests](https://socialtap.dev/docs/requests/index.md)).

**Parameters every endpoint accepts**

| Name | Type | Description | Example |
| --- | --- | --- | --- |
| `max_age` optional | `integer`<br>min 0 | Accept a cached response up to this many seconds old. Cache hits cost 0 credits. Omit to always fetch fresh. The Cache-Control: max-age=N request header is equivalent; max_age wins when both are sent. | — |
| `fields` optional | `string` | Return only these fields of each item: comma-separated paths in the schema's notation (id,text,metrics.view_count,segments\[\].text; a parent path keeps the whole object). Unknown paths are rejected. Applied after the cache, so it changes neither the price nor cache hits; page and meta are always returned whole. | — |

## Response

### 200

`{data, meta}`. `data` is a [download](https://socialtap.dev/resources/download/index.md) object; `meta` describes the request ([meta](https://socialtap.dev/docs/reference/index.md#meta)). Fields only TikTok has are under `platform_specific.tiktok`.

| Field | Type | Description |
| --- | --- | --- |
| `data.platform` | `string` | Platform ID (tiktok, instagram, …). |
| `data.id` | `string` | Platform-native ID of the post (equals post.id). |
| `data.url` | `string` (uri) | Canonical URL of the post. |
| `data.type` | `string` | The post's content shape, as post.type. New values may be added; treat unknown values as other.<br>One of `video`, `image`, `carousel`, `audio` |
| `data.platform_type` | `string` or `null` | The platform's own product label, lowercase (reel, short, story, …), as post.platform_type. |
| `data.title` | `string` or `null` | Headline (Reddit title, Facebook video title); null on caption-only platforms. |
| `data.text` | `string` or `null` | Caption or body as plain text. |
| `data.author` | `object` | The posting account. |
| `data.author.id` | `string` or `null` | Platform-native account ID; null when only the handle is known. |
| `data.author.username` | `string` or `null` | Handle without the @; null when the account has none. |
| `data.author.display_name` | `string` or `null` | Display name shown on the profile. |
| `data.author.url` | `string` (uri) or `null` | Canonical profile URL. |
| `data.author.avatar_url` | `string` (uri) or `null` | Profile picture URL. Platform CDN URLs can expire within hours. |
| `data.author.is_verified` | `boolean` or `null` | Platform verification badge; null where the platform has no badge. |
| `data.published_at` | `string` (date-time) or `null` | When the post went public, RFC 3339 UTC. |
| `data.duration_ms` | `integer` or `null` | Length of the post's primary video or audio in milliseconds; null for photo posts. |
| `data.thumbnail_url` | `string` (uri) or `null` | Largest cover or poster image URL of the post (the first attachment's; each file's own is files\[\].thumbnail_url); CDN links can expire within hours. |
| `data.files` | `object[]` | The post's files by item_index, the sound last; each item's best first (a url, the item's own kind before its separate audio, no watermark, with sound, not a manifest, then resolution). At least one has a url. |
| `data.files[].item_index` | `integer` or `null` | 0-based position of the file's attachment in display order (post.media\[item_index\]); null for the post's sound (a slideshow's soundtrack). |
| `data.files[].type` | `string` | Kind of file, as media\[\].type. New values may be added; treat unknown values as other.<br>One of `video`, `image`, `audio`, `gif` |
| `data.files[].url` | `string` (uri) or `null` | Direct CDN file URL, fetchable without cookies or headers; null when the platform serves it only with its cookie or to the IP that asked. |
| `data.files[].expires_at` | `string` (date-time) or `null` | When url stops working, RFC 3339 UTC, read from its signature; null when unknown or it does not expire. |
| `data.files[].mime_type` | `string` or `null` | IANA media type without parameters (video/mp4, image/jpeg, audio/mp4); application/vnd.apple.mpegurl (HLS) or application/dash+xml (DASH) for a streaming manifest. |
| `data.files[].size_bytes` | `integer` or `null` | File size in bytes; an estimate from bitrate × duration is in approximate_fields. |
| `data.files[].width` | `integer` or `null` | Width in pixels (images and video). |
| `data.files[].height` | `integer` or `null` | Height in pixels (images and video). |
| `data.files[].duration_ms` | `integer` or `null` | Duration in milliseconds (video and audio); null for images and when unknown. |
| `data.files[].bitrate_kbps` | `integer` or `null` | Average bitrate in kbit/s (video and audio), rounded; null when unknown. |
| `data.files[].frame_rate` | `number` or `null` | Frames per second (video and gif), to two decimals (an NTSC 30000/1001 is 29.97); null for images and audio and when unknown. |
| `data.files[].video_codec` | `string` or `null` | Video codec (h264 plays everywhere; h265, vp9 and av1 need newer players); null for images and audio. New values may be added; treat unknown values as other.<br>One of `h264`, `h265`, `vp9`, `av1` |
| `data.files[].audio_codec` | `string` or `null` | Audio codec of the file's sound; null when it has none. New values may be added; treat unknown values as other.<br>One of `aac`, `opus`, `mp3` |
| `data.files[].is_watermarked` | `boolean` or `null` | The platform's logo or the author's handle is burned into the picture (TikTok's download file); false: the clean original. Null for audio. |
| `data.files[].is_video_only` | `boolean` or `null` | True: video without its sound, which is the audio file of the same item_index. False: it plays with its sound, or has none. Null for images and audio. |
| `data.files[].thumbnail_url` | `string` (uri) or `null` | Cover image of this file's attachment (post.media\[item_index\].thumbnail_url), built like url; null for images and audio and when unknown. |
| `data.platform_specific` | `object` | Fields only this platform has, under its ID (platform_specific.\<platform>); each null when unknown. |
| `data.platform_specific.tiktok` | `object` or `null` | A TikTok download's own fields. |
| `data.platform_specific.tiktok.is_download_allowed` | `boolean` or `null` | The creator lets viewers save the post in TikTok's app; false: saving is turned off (the files stay public). Null when TikTok does not say. |
| `data.approximate_fields` | `string[]` | JSON paths of estimated or rounded values (a size from bitrate × duration, a duration in whole seconds). \[\] when all exact. |
| `data.unknown_fields` | `string[]` | JSON paths of lists whose \[\] means unknown rather than none. \[\] when every list is known. |

not_found, private_or_unavailable and no_media are item-level: the request was fine, the item can't be returned.

### 400

400 Bad Request: 1 error code. Free: errors cost nothing.

| Code | HTTP | Retry | Meaning | What to do |
| --- | --- | --- | --- | --- |
| `invalid_input` | 400 | No | A parameter is missing or malformed, or the link is not one this endpoint takes. | Fix the parameter named in param as the message says. For a link of the wrong kind, call an endpoint listed in details.endpoints, when there is one. |

### 401

401 Unauthorized: 1 error code. Free: errors cost nothing.

| Code | HTTP | Retry | Meaning | What to do |
| --- | --- | --- | --- | --- |
| `unauthorized` | 401 | No | The x-api-key header is missing, or its key is unknown or revoked. On the dashboard's routes: the session cookie is missing or expired. | Send a valid API key in the x-api-key header. No key yet? A person gets one at details.signup_url; an AI agent follows details.agent_auth_url. |

### 402

402 Payment Required: 2 error codes. Free: errors cost nothing.

| Code | HTTP | Retry | Meaning | What to do |
| --- | --- | --- | --- | --- |
| `insufficient_credits` | 402 | No | The account does not have enough credits for this request. | Have a person buy credits at details.purchase_url (or make them a checkout link with details.checkout), then repeat the request. Do not retry automatically. |
| `spend_limit_reached` | 402 | No | The API key reached its spend limit for this period. The account may still have credits. | Wait until details.resets_at, or raise the key's spend limit (PATCH /v1/api_keys/{id}). Do not retry automatically. |

### 403

403 Forbidden: 2 error codes. Free: errors cost nothing.

| Code | HTTP | Retry | Meaning | What to do |
| --- | --- | --- | --- | --- |
| `forbidden` | 403 | No | The API key is valid but may not make this request, and details.reason says why: the account is suspended, the key lacks the route's scope, waits for its owner to confirm it by email, has expired, or was used from an IP outside its allowlist, or a rotated key's previous secret was used for a call that needs the admin scope. A running job stops with it too when its account is suspended or the key that created it is revoked or expires. It is about the key, never the item: a private item is private_or_unavailable, also 403, so branch on the code. | Act on details.reason. suspended: contact [support](mailto:support@socialtap.dev). scope: use a key with details.required_scope. previous_secret: use the new secret. key_pending: have the owner open the emailed link. key_expired or key_revoked: create a new key. ip_not_allowed: call from an allowed IP. |
| `private_or_unavailable` | 403 | No | The item exists but is not public: it is private, age- or region-restricted, or needs a login to view. It shares 403 with forbidden (which is about the key), so branch on the code. | Only public items can be fetched. Do not retry. |

### 404

404 Not Found: 2 error codes. Free: errors cost nothing.

| Code | HTTP | Retry | Meaning | What to do |
| --- | --- | --- | --- | --- |
| `not_found` | 404 | No | The item does not exist or was deleted. On GET /v1/requests/{id}/response: the response was not kept (details.reason says why). | Check the link or ID. Do not retry. |
| `no_media` | 404 | No | The post exists but has no file to download: a text or link post, or one whose media the platform does not serve logged out. | Do not retry. Fetch the post itself for its text and links. |

### 429

429 Too Many Requests: 1 error code. Free: errors cost nothing.

| Code | HTTP | Retry | Meaning | What to do |
| --- | --- | --- | --- | --- |
| `rate_limited` | 429 | Yes, later | The account passed its runaway-protection ceiling: a high per-account limit that stops a broken client loop (plans have no rate limit). Requests without an API key (signup, the MCP server's tool listing and find_endpoint) are limited per IP address instead. It also stops an account whose failed requests in the last hour cost far more than its successful ones paid for: failures are free within a limit (the message says so), and successes raise it. | Wait the seconds in the retry-after header, then retry. If your steady traffic needs more, ask [support](mailto:support@socialtap.dev) to raise the ceiling; without an API key, send one. |

### 500

500 Internal Error: 1 error code. Free: errors cost nothing.

| Code | HTTP | Retry | Meaning | What to do |
| --- | --- | --- | --- | --- |
| `internal` | 500 | Yes, later | An unexpected error on SocialTap's side. | Retry with backoff. If it keeps happening, contact [support](mailto:support@socialtap.dev) with the request_id. |

### 502

502 Bad Gateway: 1 error code. Free: errors cost nothing.

| Code | HTTP | Retry | Meaning | What to do |
| --- | --- | --- | --- | --- |
| `upstream_error` | 502 | Yes, later | The platform failed, or answered with something we could not read. | Retry with backoff. Failed requests are free. |

### 503

503 Unavailable: 2 error codes. Free: errors cost nothing.

| Code | HTTP | Retry | Meaning | What to do |
| --- | --- | --- | --- | --- |
| `upstream_blocked` | 503 | Yes, later | The platform refused every attempt, our own retries included. | Retry later with backoff. Failed requests are free. |
| `overloaded` | 503 | Yes, later | SocialTap was at capacity, or paused by its operators, and did not start the request. Nothing was fetched or charged. | Retry after the seconds in the retry-after header. Failed requests are free. |

## Pricing

From **1 credit** per request. Charged only for successful requests. Errors are free. The price depends on the source that produced the result, reported as `meta.source`; sources are tried cheapest first: Platform API → Public page.

| Source | Price per successful request | Per 1,000 requests |
| --- | --- | --- |
| Platform API `api` | 1 credit | $0.75–$1.97 |
| Public page `page` | 1 credit | $0.75–$1.97 |

**Balance, sources and what you were charged**

Your balance must be at least **1 credit** to start a request; with less, it is refused with [`insufficient_credits`](https://socialtap.dev/docs/errors/index.md#insufficient_credits) (HTTP 402) and costs nothing. Only that minimum is set aside when the request starts.

| meta.source | Source | What it means |
| --- | --- | --- |
| `api` | Platform API | The platform's public, logged-out API. |
| `page` | Public page | Data embedded in the platform's public web page. |

`meta.credits_charged` and the `x-credits-charged` header show what you paid. [How credits work](https://socialtap.dev/docs/credits/index.md) · [Packs](https://socialtap.dev/pricing/index.md)

Endpoint ID `tiktok.download` · operationId `tiktok.download.get` · [Product overview](https://socialtap.dev/apis/tiktok/download/index.md)

---

[HTML version](https://socialtap.dev/docs/reference/tiktok/download/) · [Docs index for AI agents](https://socialtap.dev/llms.txt) · [All docs in one file](https://socialtap.dev/llms-full.txt)