TikTok

TikTok Profile API

Beta

Returns a public TikTok account: user ID, username, display name, bio, bio link, avatar, verification badge, whether the account is private, its business category, join date and exact follower, following, video and total like counts. Accepts a username with or without the @, a tiktok.com profile URL, or a numeric user ID.

GET /v1/tiktok/profile

Try it

Example

cURL
curl -G 'https://staging.socialtap.dev/v1/tiktok/profile' \
  --data-urlencode 'handle=https://www.tiktok.com/@nasa' \
  -H "x-api-key: $SOCIALTAP_API_KEY"
Node.js
const params = new URLSearchParams({
  handle: "https://www.tiktok.com/@nasa",
});
const res = await fetch(`https://staging.socialtap.dev/v1/tiktok/profile?${params}`, {
  headers: { "x-api-key": process.env.SOCIALTAP_API_KEY ?? "" },
});
const body = await res.json();
if (!res.ok) throw new Error(`${body.error.code}: ${body.error.message}`);
const { data, meta } = body;
console.log(data, meta.credits_charged);
Python
import os

import requests

res = requests.get(
    "https://staging.socialtap.dev/v1/tiktok/profile",
    params={"handle": "https://www.tiktok.com/@nasa"},
    headers={"x-api-key": os.environ["SOCIALTAP_API_KEY"]},
)
body = res.json()
if not res.ok:
    raise RuntimeError(f"{body['error']['code']}: {body['error']['message']}")
data, meta = body["data"], body["meta"]
print(data, meta["credits_charged"])
Go
package main

import (
	"encoding/json"
	"fmt"
	"log"
	"net/http"
	"net/url"
	"os"
)

func main() {
	q := url.Values{}
	q.Set("handle", "https://www.tiktok.com/@nasa")
	req, err := http.NewRequest("GET", "https://staging.socialtap.dev/v1/tiktok/profile?"+q.Encode(), nil)
	if err != nil {
		log.Fatal(err)
	}
	req.Header.Set("x-api-key", os.Getenv("SOCIALTAP_API_KEY"))
	res, err := http.DefaultClient.Do(req)
	if err != nil {
		log.Fatal(err)
	}
	defer res.Body.Close()
	var body struct {
		Data  json.RawMessage `json:"data"`
		Meta  map[string]any  `json:"meta"`
		Error *struct {
			Code    string `json:"code"`
			Message string `json:"message"`
		} `json:"error"`
	}
	if err := json.NewDecoder(res.Body).Decode(&body); err != nil {
		log.Fatal(err)
	}
	if body.Error != nil {
		log.Fatalf("%s: %s", body.Error.Code, body.Error.Message)
	}
	fmt.Println(string(body.Data), body.Meta["credits_charged"])
}
PHP
<?php

$query = http_build_query([
    'handle' => 'https://www.tiktok.com/@nasa',
]);
$ch = curl_init('https://staging.socialtap.dev/v1/tiktok/profile?' . $query);
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => ['x-api-key: ' . getenv('SOCIALTAP_API_KEY')],
]);
$body = json_decode(curl_exec($ch), true);
if (curl_getinfo($ch, CURLINFO_RESPONSE_CODE) >= 400) {
    throw new RuntimeException($body['error']['code'] . ': ' . $body['error']['message']);
}
print_r($body['data']);
echo $body['meta']['credits_charged'], PHP_EOL;
Ruby
require "json"
require "net/http"

uri = URI("https://staging.socialtap.dev/v1/tiktok/profile")
uri.query = URI.encode_www_form('handle' => 'https://www.tiktok.com/@nasa')
req = Net::HTTP::Get.new(uri)
req["x-api-key"] = ENV.fetch("SOCIALTAP_API_KEY")
res = Net::HTTP.start(uri.host, uri.port, use_ssl: uri.scheme == "https") { |http| http.request(req) }
body = JSON.parse(res.body)
raise "#{body["error"]["code"]}: #{body["error"]["message"]}" unless res.is_a?(Net::HTTPSuccess)
pp body["data"]
puts body["meta"]["credits_charged"]
Java
import java.net.URI;
import java.net.URLEncoder;
import java.net.http.HttpClient;
import java.net.http.HttpRequest;
import java.net.http.HttpResponse;
import java.nio.charset.StandardCharsets;

public class Main {
    public static void main(String[] args) throws Exception {
        String query = "handle=" + encode("https://www.tiktok.com/@nasa");
        HttpRequest request = HttpRequest.newBuilder()
            .uri(URI.create("https://staging.socialtap.dev/v1/tiktok/profile?" + query))
            .header("x-api-key", System.getenv("SOCIALTAP_API_KEY"))
            .GET()
            .build();
        HttpResponse<String> response = HttpClient.newHttpClient()
            .send(request, HttpResponse.BodyHandlers.ofString());
        // An error is {"error": {"code", "message", ...}}; success is {data, meta}, meta.credits_charged its price.
        if (response.statusCode() >= 400) throw new RuntimeException(response.body());
        System.out.println(response.body());
    }

    static String encode(String value) {
        return URLEncoder.encode(value, StandardCharsets.UTF_8);
    }
}
.NET
using System.Text.Json;

using var http = new HttpClient();
http.DefaultRequestHeaders.Add("x-api-key", Environment.GetEnvironmentVariable("SOCIALTAP_API_KEY"));

var query = string.Join("&",
    "handle=" + Uri.EscapeDataString("https://www.tiktok.com/@nasa"));
var res = await http.GetAsync("https://staging.socialtap.dev/v1/tiktok/profile?" + query);
using var body = JsonDocument.Parse(await res.Content.ReadAsStringAsync());
if (!res.IsSuccessStatusCode)
{
    var error = body.RootElement.GetProperty("error");
    throw new Exception($"{error.GetProperty("code")}: {error.GetProperty("message")}");
}
Console.WriteLine(body.RootElement.GetProperty("data"));
Console.WriteLine(body.RootElement.GetProperty("meta").GetProperty("credits_charged"));
Rust
// Cargo.toml: reqwest = { version = "0.12", features = ["blocking", "json"] }, serde_json = "1"
use std::env;

fn main() -> Result<(), Box<dyn std::error::Error>> {
    let res = reqwest::blocking::Client::new()
        .get("https://staging.socialtap.dev/v1/tiktok/profile")
        .query(&[("handle", "https://www.tiktok.com/@nasa")])
        .header("x-api-key", env::var("SOCIALTAP_API_KEY")?)
        .send()?;
    let ok = res.status().is_success();
    let body: serde_json::Value = res.json()?;
    if !ok {
        return Err(format!("{}: {}", body["error"]["code"], body["error"]["message"]).into());
    }
    println!("{} {}", body["data"], body["meta"]["credits_charged"]);
    Ok(())
}
200 OK
{
  "data": {
    "approximate_fields": [],
    "avatar_url": "https://p16-common-sign.tiktokcdn-us.com/tos-useast5-avt-0068-tx/e5143212a59c09a008bf50f487d54d1f~tplv-tiktokx-cropcenter:1080:1080.jpeg?dr=9640&refresh_token=9341391e&x-expires=4070908800&x-signature=SCRUBBED&t=4d5b0474&ps=13740610&shp=a5d48078&shcp=81f88b70&idc=useast5",
    "banner_url": null,
    "bio": "Making the seemingly impossible, possible.✨",
    "category": null,
    "country_code": null,
    "created_at": "2026-07-20T15:55:49Z",
    "display_name": "NASA",
    "external_links": [
      {
        "title": null,
        "url": "https://science.nasa.gov/feature/artemis-ii-preliminary-lunar-science-report"
      }
    ],
    "id": "7664638705177150477",
    "is_private": false,
    "is_verified": true,
    "location": null,
    "metrics": {
      "follower_count": 2140425,
      "following_count": 23,
      "post_count": 60,
      "total_like_count": 11385816,
      "total_view_count": null
    },
    "platform": "tiktok",
    "platform_specific": {},
    "type": "organization",
    "unknown_fields": [],
    "url": "https://www.tiktok.com/@nasa",
    "username": "nasa"
  },
  "meta": {
    "request_id": "req_3f9c2a7d1e8b4c6a9f0e2d4b6a8c0e1f",
    "platform": "tiktok",
    "source": "page",
    "is_cached": false,
    "credits_charged": 1,
    "latency_ms": 0,
    "fetched_at": "2026-10-25T12:00:00Z",
    "input": {
      "kind": "profile",
      "id": "7664638705177150477",
      "url": "https://www.tiktok.com/@nasa"
    },
    "credits_remaining": 9999,
    "client_request_id": null,
    "warnings": [],
    "mode": "live"
  }
}
x-api-keystringheaderrequired

Your API key. Keys starting with st_test_ are test keys: recorded responses, free. Authentication

NameTypeDescriptionExample
handle requiredstring
max 2,048 chars
TikTok username with or without the @ (nasa, @nasa), a profile URL (tiktok.com/@nasa, m.tiktok.com/@nasa, with or without query parameters), or a numeric user ID (tiktok.com/share/user/<id> or the bare ID). Usernames are case-insensitive.nasa
handlestringrequiredmax 2,048 chars

TikTok username with or without the @ (nasa, @nasa), a profile URL (tiktok.com/@nasa, m.tiktok.com/@nasa, with or without query parameters), or a numeric user ID (tiktok.com/share/user/<id> or the bare ID). Usernames are case-insensitive.

Examplenasa

handle takes TikTok profile links; another kind of link, or another platform's, fails free with invalid_input. Unknown parameters are rejected with a suggestion, never ignored (Requests).

Parameters every endpoint accepts
NameTypeDescriptionExample
max_age optionalinteger
min 0
Accept a cached response up to this many seconds old. Cache hits cost 0 credits. Omit to always fetch fresh. The Cache-Control: max-age=N request header is equivalent; max_age wins when both are sent.—
fields optionalstringReturn only these fields of each item: comma-separated paths in the schema's notation (id,text,metrics.view_count,segments[].text; a parent path keeps the whole object). Unknown paths are rejected. Applied after the cache, so it changes neither the price nor cache hits; page and meta are always returned whole.—
max_ageintegermin 0

Accept a cached response up to this many seconds old. Cache hits cost 0 credits. Omit to always fetch fresh. The Cache-Control: max-age=N request header is equivalent; max_age wins when both are sent.

fieldsstring

Return only these fields of each item: comma-separated paths in the schema's notation (id,text,metrics.view_count,segments[].text; a parent path keeps the whole object). Unknown paths are rejected. Applied after the cache, so it changes neither the price nor cache hits; page and meta are always returned whole.

Response

application/json

200

{data, meta}. data is a profile object; meta describes the request (meta). The fields are the shared profile schema, the same on every platform.

FieldTypeDescription
data.platformstringPlatform ID (tiktok, youtube, …).
data.idstringPlatform-native account ID (string; YouTube UC…, Reddit without t2_).
data.usernamestring or nullHandle without the @; null when the account has none.
data.display_namestring or nullDisplay name, channel title or page name; null when empty or not exposed.
data.urlstring (uri)Canonical profile URL.
data.typestringCoarse account kind, as the platform labels it; unknown when it does not (TikTok labels organizations only). New values may be added; treat unknown values as unknown.
One of person, organization, community, unknown
data.biostring or nullProfile bio, channel description or page about text; null when empty or not exposed.
data.avatar_urlstring (uri) or nullProfile picture URL (largest available). Platform CDN URLs can expire within hours.
data.banner_urlstring (uri) or nullHeader or cover image URL.
data.is_verifiedboolean or nullPlatform verification badge; null where the platform has no badge.
data.is_privateboolean or nullTrue when the account's posts are not public.
data.categorystring or nullPlatform category label (e.g. Musician, Media & Entertainment), as shown; not normalized. Often set only for business or creator accounts.
data.external_linksobject[]Links in the bio or channel links; [] if none or not exposed.
data.external_links[].urlstring (uri)Link target, absolute (https:// is added where the platform stores the link without a scheme).
data.external_links[].titlestring or nullLink label shown by the platform.
data.locationstring or nullSelf-declared location text.
data.country_codestring or nullISO 3166-1 alpha-2 country the platform states for the account.
data.created_atstring (date-time) or nullAccount creation or join date, RFC 3339 UTC (some platforms give only the day: see approximate_fields).
data.metricsobjectCounts at fetch time; null = hidden or not exposed, 0 = zero.
data.metrics.follower_countinteger or nullFollowers or subscribers.
data.metrics.following_countinteger or nullAccounts this profile follows.
data.metrics.post_countinteger or nullPosts or videos as the platform counts them on the profile (for a private account, posts the caller cannot see).
data.metrics.total_like_countinteger or nullLikes received across all of the profile's posts (not likes given).
data.metrics.total_view_countinteger or nullLifetime views across all of the profile's posts.
data.platform_specificobjectFields only this platform has, under its ID (platform_specific.<platform>); each null when unknown.
data.approximate_fieldsstring[]JSON paths of values rounded by the platform or parsed from display text (e.g. metrics.follower_count). A list path (external_links) means the list may be incomplete. [] when all exact.
data.unknown_fieldsstring[]JSON paths of lists whose [] means unknown rather than none (a source that cannot see them); null already means unknown for every other field. [] when every list is known.
platformstring

Platform ID (tiktok, youtube, …).

idstring

Platform-native account ID (string; YouTube UC…, Reddit without t2_).

usernamestringnullable

Handle without the @; null when the account has none.

display_namestringnullable

Display name, channel title or page name; null when empty or not exposed.

urlstring uri

Canonical profile URL.

typestring

Coarse account kind, as the platform labels it; unknown when it does not (TikTok labels organizations only). New values may be added; treat unknown values as unknown.

One ofpersonorganizationcommunityunknown

biostringnullable

Profile bio, channel description or page about text; null when empty or not exposed.

avatar_urlstring urinullable

Profile picture URL (largest available). Platform CDN URLs can expire within hours.

banner_urlstring urinullable

Header or cover image URL.

is_verifiedbooleannullable

Platform verification badge; null where the platform has no badge.

is_privatebooleannullable

True when the account's posts are not public.

categorystringnullable

Platform category label (e.g. Musician, Media & Entertainment), as shown; not normalized. Often set only for business or creator accounts.

external_linksobject[]

Links in the bio or channel links; [] if none or not exposed.

ShowHide 2 child fields
urlstring uri

Link target, absolute (https:// is added where the platform stores the link without a scheme).

titlestringnullable

Link label shown by the platform.

locationstringnullable

Self-declared location text.

country_codestringnullable

ISO 3166-1 alpha-2 country the platform states for the account.

created_atstring date-timenullable

Account creation or join date, RFC 3339 UTC (some platforms give only the day: see approximate_fields).

metricsobject

Counts at fetch time; null = hidden or not exposed, 0 = zero.

ShowHide 5 child fields
follower_countintegernullable

Followers or subscribers.

following_countintegernullable

Accounts this profile follows.

post_countintegernullable

Posts or videos as the platform counts them on the profile (for a private account, posts the caller cannot see).

total_like_countintegernullable

Likes received across all of the profile's posts (not likes given).

total_view_countintegernullable

Lifetime views across all of the profile's posts.

platform_specificobject

Fields only this platform has, under its ID (platform_specific.<platform>); each null when unknown.

approximate_fieldsstring[]

JSON paths of values rounded by the platform or parsed from display text (e.g. metrics.follower_count). A list path (external_links) means the list may be incomplete. [] when all exact.

unknown_fieldsstring[]

JSON paths of lists whose [] means unknown rather than none (a source that cannot see them); null already means unknown for every other field. [] when every list is known.

not_found and private_or_unavailable are item-level: the request was fine, the item can't be returned.

400

400 Bad Request: 1 error code. Free: errors cost nothing.

CodeHTTPRetryMeaningWhat to do
invalid_input400NoThe request parameters are missing or malformed, or the URL is not a supported link for this endpoint.Fix the parameter named in param (the message says how); for a link of the wrong kind, call the endpoint the message names.

The request parameters are missing or malformed, or the URL is not a supported link for this endpoint.

Fix the parameter named in param (the message says how); for a link of the wrong kind, call the endpoint the message names.

401

401 Unauthorized: 1 error code. Free: errors cost nothing.

CodeHTTPRetryMeaningWhat to do
unauthorized401NoThe x-api-key header is missing, unknown or revoked (or, on the dashboard's routes, the session cookie is missing or expired).Send a valid API key in the x-api-key header; without one, get a key at details.signup_url (AI agents: POST details.agent_signup_url).
unauthorizedNo retry

The x-api-key header is missing, unknown or revoked (or, on the dashboard's routes, the session cookie is missing or expired).

Send a valid API key in the x-api-key header; without one, get a key at details.signup_url (AI agents: POST details.agent_signup_url).

402

402 Payment Required: 2 error codes. Free: errors cost nothing.

CodeHTTPRetryMeaningWhat to do
insufficient_credits402NoThe account does not have enough credits for this request.Buy credits (a human pays: details.purchase_url, or details.checkout makes a checkout link), then repeat the request; do not retry automatically.
spend_limit_reached402NoThe API key reached its spend limit for the current period; the account may still have credits.Wait until details.resets_at or raise the key's spend limit (PATCH /v1/api_keys/{id}); do not retry automatically.

The account does not have enough credits for this request.

Buy credits (a human pays: details.purchase_url, or details.checkout makes a checkout link), then repeat the request; do not retry automatically.

The API key reached its spend limit for the current period; the account may still have credits.

Wait until details.resets_at or raise the key's spend limit (PATCH /v1/api_keys/{id}); do not retry automatically.

403

403 Forbidden: 2 error codes. Free: errors cost nothing.

CodeHTTPRetryMeaningWhat to do
forbidden403NoThe API key is valid but may not make this request: its account is suspended, its scopes do not include the route, it is waiting for its owner's email confirmation, it is past its expiry, or the request came from an IP its allowlist does not include. A running job stops the same way when its account is suspended or the key that created it is revoked or expires. It is about the key, never the item (a private item is private_or_unavailable, also 403): branch on the code.Do what details.reason says: if suspended, contact support; otherwise use a key whose scopes cover the route (details.required_scope), have the owner confirm the emailed link, create a new key, or call from an allowed IP.
private_or_unavailable403NoThe item exists but is private, age- or region-gated, or requires a login to view. It shares 403 with forbidden (which is about the key): branch on the code.Only public items can be fetched; do not retry.
forbiddenNo retry

The API key is valid but may not make this request: its account is suspended, its scopes do not include the route, it is waiting for its owner's email confirmation, it is past its expiry, or the request came from an IP its allowlist does not include. A running job stops the same way when its account is suspended or the key that created it is revoked or expires. It is about the key, never the item (a private item is private_or_unavailable, also 403): branch on the code.

Do what details.reason says: if suspended, contact support; otherwise use a key whose scopes cover the route (details.required_scope), have the owner confirm the emailed link, create a new key, or call from an allowed IP.

The item exists but is private, age- or region-gated, or requires a login to view. It shares 403 with forbidden (which is about the key): branch on the code.

Only public items can be fetched; do not retry.

404

404 Not Found: 1 error code. Free: errors cost nothing.

CodeHTTPRetryMeaningWhat to do
not_found404NoThe item does not exist or was deleted.Check the URL or ID; do not retry.
not_foundNo retry

The item does not exist or was deleted.

Check the URL or ID; do not retry.

429

429 Too Many Requests: 1 error code. Free: errors cost nothing.

CodeHTTPRetryMeaningWhat to do
rate_limited429Yes, laterThe account exceeded its runaway-protection ceiling: plans do not limit request rate, but a high per-account safety ceiling stops broken client loops. Support raises it on request. Without an API key (signup, the MCP server's tool listing and find_endpoint), requests are limited per IP address instead.Wait for the number of seconds in the retry-after header, then retry; ask support to raise the ceiling if your sustained traffic needs more (calls without an API key: use one).
rate_limitedYes, later

The account exceeded its runaway-protection ceiling: plans do not limit request rate, but a high per-account safety ceiling stops broken client loops. Support raises it on request. Without an API key (signup, the MCP server's tool listing and find_endpoint), requests are limited per IP address instead.

Wait for the number of seconds in the retry-after header, then retry; ask support to raise the ceiling if your sustained traffic needs more (calls without an API key: use one).

500

500 Internal Error: 1 error code. Free: errors cost nothing.

CodeHTTPRetryMeaningWhat to do
internal500Yes, laterUnexpected SocialTap error.Retry with backoff; contact support with the request_id if it persists.
internalYes, later

Unexpected SocialTap error.

Retry with backoff; contact support with the request_id if it persists.

502

502 Bad Gateway: 1 error code. Free: errors cost nothing.

CodeHTTPRetryMeaningWhat to do
upstream_error502Yes, laterThe platform failed or returned something unexpected.Retry with backoff; failed requests are free.
upstream_errorYes, later

The platform failed or returned something unexpected.

Retry with backoff; failed requests are free.

503

503 Unavailable: 2 error codes. Free: errors cost nothing.

CodeHTTPRetryMeaningWhat to do
upstream_blocked503Yes, laterThe platform refused every attempt.Retry later with backoff; failed requests are free.
overloaded503Yes, laterSocialTap was momentarily at capacity and did not start the request: nothing was fetched or charged.Retry after the number of seconds in the retry-after header; failed requests are free.

The platform refused every attempt.

Retry later with backoff; failed requests are free.

overloadedYes, later

SocialTap was momentarily at capacity and did not start the request: nothing was fetched or charged.

Retry after the number of seconds in the retry-after header; failed requests are free.

From 1 credit per request. Charged only for successful requests. Errors are free. The price depends on the source that produced the result, reported as meta.source.

SourcePrice per successful requestPer 1,000 requests
Public page page1 credit$0.75–$1.45
Balance, sources and what you were charged

Your balance must be at least 1 credit to start a request; with less, it is refused with insufficient_credits (HTTP 402) and costs nothing. Only that minimum is set aside when the request starts.

meta.sourceSourceWhat it means
pagePublic pageData embedded in the platform's public web page.

meta.credits_charged and the x-credits-charged header show what you paid. How credits work · Packs

A key starting with st_test_ gets recorded responses, free and the same every time (test mode). The recorded inputs return their recording; any other input returns the example above.

9 recorded inputs and magic inputs
InputAnswer
qq7x2nouser0z404 not_found
scout2015200 OK
duolingo200 OK
khaby.lame200 OK
bts_official_bighit200 OK
zzq9x81nouser404 not_found
nasa Default200 OK
7000000000000000001404 not_found
107955200 OK

Magic inputs: send one of these as handle to get that error.

ErrorValue
invalid_inputsocialtap_test_invalid_input
insufficient_creditssocialtap_test_insufficient_credits
spend_limit_reachedsocialtap_test_spend_limit_reached
rate_limitedsocialtap_test_rate_limited
not_foundsocialtap_test_not_found
private_or_unavailablesocialtap_test_private_or_unavailable
upstream_blockedsocialtap_test_upstream_blocked
upstream_errorsocialtap_test_upstream_error
overloadedsocialtap_test_overloaded
internalsocialtap_test_internal

Endpoint ID tiktok.profile · operationId tiktok.profile.get · Product overview

Last updated