Guides · Setup

How to Get Your TikTok API for Business App Approved

Last updated:

In short

TikTok API for Business app approval is the review TikTok runs on your own developer profile and developer app before granting access to the API endpoints your permission scopes cover.

Two things cause most rejections: a developer profile that fails TikTok's company email and website rules, and an app description that does not name every permission scope requested. Fix both before submitting. A rejected app can be edited and resubmitted without creating a new one.

Summarize this approval guide with AI ChatGPTClaudePerplexity

The two rejections that stop most apps

Both of these are avoidable, and both are worth reading before you open the application form. They are the reason most teams end up contacting support.

Rejection 1 — TikTok's message

"Your application includes the 'TikTok Accounts' scope, but no corresponding submission of the Accounts API Access Application Form was found under your developer profile's email address."

Fix: submit the Accounts API Access Application Form using the same email address as your developer profile, or remove the TikTok Accounts scope from the request. Jump to the permissions step.

Rejection 2 — TikTok's message

"Your description of using TikTok's API for Business product doesn't align with your scope of permission. If you want to use more features via API, please specify your usage in the description."

Fix: either expand the description so it names every permission category you requested, or reduce the requested permissions to match what the description already explains. Jump to the description step.

Whose app is being approved

Yours. Your agency registers its own developer profile on the TikTok API for Business portal and creates its own developer app, under your own legal entity, your own company domain, and your own company website. TikTok reviews that profile and that app.

This guide covers the TikTok approval only. A separate guide for connecting a TikTok advertiser account to Outloop will be published once the product connector is developed and passes a real authenticated runtime proof.

Before you start

Three prerequisites, all mandatory, in this order:

Business Center verification has two separate steps, each reviewed independently: Company Information, which requires an official registration document, and Legal Representative Information, which requires a government ID and ID number. Passing one does not pass the other.

The business name you enter must match the uploaded document exactly. If the company has changed its name, upload the Certificate of Change of Name — not the original incorporation certificate. A mismatch here causes rejection.

1. Get the developer profile approved

This step is easy to underestimate. The developer profile is reviewed on its own, and it must be approved before you can create an app at all — TikTok's documentation states that applying for a developer app without an approved profile produces an error.

Source note. This section is drawn from TikTok's published developer-registration requirements rather than from a registration we ran ourselves. The app-level steps that follow are the ones we have been through directly.

TikTok's documentation lists rejection causes for developer profiles:

Primary Developer Location means where your development team sits, not where the business operates. TikTok states you will be notified of the profile review result in three business days.

2. Create the developer app

With the profile approved, log in to the TikTok for Business Developers portal and click Create an App. Give it a descriptive name that says what it does — TikTok's own examples are of the form "Video Upload Tool" or "TikTok Media Buy Platform".

This is the name of the developer app, not a mobile app. If you manage TikTok ads promoting several mobile apps, TikTok is explicit that you can handle them inside one developer app rather than creating one each. TikTok's documentation also states that each developer can have up to five developer applications.

The Create New App dialog has four fields, each with its own character limit — app name 50, app description 500, advertiser redirect URL 100 — plus the permission picker:

TikTok Create New App dialog showing the App name, App description, Advertiser redirect URL and Scope of permission fields with their character counters.
The Create New App dialog. The counters show the real limits: 50 characters for the name, 500 for the description, 100 for the redirect URL.

3. Write the app description

This field causes more rejections than anything else on the form. TikTok calls it, in the field's own help text, "the main reference during the review" and asks for four things:

TikTok App description field help tooltip listing the four elements the application description must contain to pass the audit.
The App description help text. TikTok's public documentation describes a shorter two-part format, but this in-product guidance is what the reviewer works from — write to these four.

You have 500 characters for all four. That constraint is the reason the cheaper fix for a scope mismatch is usually to request fewer permissions rather than to write more.

The rule that matters most: every permission category you request must be named in the description. The reviewer reads the description, compares it against the permission list, and rejects the application on any gap.

Replace every [bracketed] placeholder below with your own details before submitting. Structure it as what the product does, then an explicit capability list naming each permission family, then how access is isolated and audited, then the client reference if you need one.

[YOUR COMPANY] is [a marketing agency / a technology company] operating [YOUR PRODUCT], used by our [team] to manage advertising for accounts we are authorized to manage.

Intended uses: we integrate the TikTok API for Business to [read campaign, ad group and ad structure], [retrieve performance reporting], [upload creative assets] and [manage campaign operations]. These functions technically require the [NAME EACH PERMISSION SCOPE YOU SELECTED] permission scopes.

Developer app access controls: access is limited to [our own organization's accounts / advertiser accounts that have explicitly authorized our app]. Each client's data is kept separate, actions are performed only on the authorized advertiser account, and activity is logged for review.

Cooperative client: [CLIENT NAME], advertiser account ID [ADVERTISER ID], authorized us to manage their TikTok advertising.

Keep it accurate rather than ambitious. Describing capabilities you have not built invites a scope mismatch in the other direction.

4. Choose the permission scopes

The permission scopes determine which API endpoints your app can reach. Selecting a category shows the exact endpoint paths it covers, which is the fastest way to check whether you actually need it. The current categories are Ad Account Management, Ads Management, Audience Management, Reporting, Measurement, Creative Management, App Management, Pixel Management, DPA Catalog Management, Reach & Frequency, Lead Management, TikTok Creator Marketplace (TCM), TikTok Creator, Ad Comments, TikTok Business Plugin, Automated Rules, TikTok Accounts, Onsite Commerce Store, Offline Events Management, Ad Diagnosis, Mentions, CRM Event Management, Business Recommendation, CTX Events Management, Brand Safety, Partner Insights, Payment Portfolio, Custom Conversion Management, Minis Management and Business Verification — thirty in total.

The portal states the rule directly on the field:

TikTok Scope of permission field tooltip warning to only apply for required permissions or the request will be rejected.
"Please ensure to only apply for required permissions. Otherwise, the request will be rejected."

To widen scopes later, TikTok documents a self-service path: open My Apps, select the app, open Scope of permission, edit the selection, and give a reason that aligns with the newly selected scopes. No new application and no support ticket are needed, and TikTok states the review takes two to three business days.

Special case — the TikTok Accounts scope. TikTok's create-a-developer-app documentation states that starting 20 March 2026 the Accounts API Access Application Form must be completed before you submit a new developer app or request a scope increase that includes TikTok Accounts. It must be submitted under the same email address as your developer profile. If organic account features are not part of what you are building, leave this category unselected and the form does not apply.

TikTok Accounts is the only category carrying a warning marker in the picker, and its tooltip links straight to the form:

TikTok Accounts scope tooltip in the permission picker stating the Accounts API Access Application Form must be filled out or Accounts and Business Messaging API approvals may be rejected.
The warning marker beside TikTok Accounts. Failing to file the form can also affect Business Messaging API approval — not just the Accounts scope.

5. Set the advertiser redirect URL

After an advertiser approves the authorization, TikTok redirects them to this URL with the authentication code appended. TikTok's documentation states you can configure up to 10 advertiser redirect URLs, including localhost, and that adding one lets you generate a new advertiser authorization URL.

For a live integration, prefer a production HTTPS URL that the advertiser's browser can actually reach. Redirect URLs are matched exactly — any difference between the configured value and the one your authorization request sends produces a redirect mismatch error, usually surfaced as Redirect Url Not Match.

6. Reference a cooperative client

Where the description asks you to name the clients or accounts you work with, the reference has to be a genuine third-party client account — not one your own agency owns. An account already in Approved status is a stronger reference than one still in review.

You will find these under Business Center → Accounts → Advertiser accounts. The Owner column is what distinguishes an agency-owned account from a client-owned one, and the Status column is where you confirm the account is Approved rather than still in review.

TikTok Business Center Advertiser accounts tab showing the Account name, Status and Owner columns, with account names and owners redacted and statuses Approved, Requires billing info and In review visible.
Business Center → Accounts → Advertiser accounts. Account names and owners are redacted here because they identify real businesses. Read your own Owner column the same way: an account owned by your agency is not a third-party client reference, and one still In review is a weaker one than Approved.

The client does not have to sit in the same Business Center as your app. If you run several Business Centers, the account you reference can live in a different one from the developer app. The field asks only for an advertiser account ID and account name — there is no requirement that the two share a Business Center.

Get the client's permission before naming them or their advertiser account ID in an application to TikTok. The account belongs to them, not to you.

7. Submit and wait

Select every permission you need, then click Submit at the bottom of the dialog. TikTok states the review may take two to three business days.

To check progress, open My Apps and look at Verification Status. The status moves from Pending to either Approved or Rejected. If it is rejected, the reason appears at the top of the Edit App screen — edit the request and submit it again. A rejection does not mean starting over with a new app.

Budget for more than one round. Each resubmission starts a fresh review, so the published two-to-three-day window applies to each attempt, not to the whole journey. Two rejections means three review cycles. Plan the calendar around the number of rounds you might need, not a single window.

8. What approval looks like

Three things exist only after approval, and are blank before it:

TikTok My Apps list showing an approved developer app with the Online toggle enabled, Verification Status Approved, and the App ID and Secret columns redacted.
My Apps after approval: the Online toggle is on and Verification Status reads Approved. The App ID and Secret columns are redacted here — those are credentials for your app alone and should never appear in a screenshot, a ticket, or a repository.

Treat the App Secret as a credential from the moment it appears. Put it straight into a secure credential store — never into source code, a repository, a ticket, a screenshot, or a chat message.

With the app approved, the authorization code flow gets you a long-term access token for the advertiser accounts that authorize your app.

Troubleshooting rejections

Work from the most likely cause down. Both messages below are TikTok's own wording, quoted so they are searchable.

"…no corresponding submission of the Accounts API Access Application Form was found under your developer profile's email address."

"Your description of using TikTok's API for Business product doesn't align with your scope of permission."

"You cannot create an app while your developer profile is rejected."

Official documentation

TikTok decides all outcomes, and its documentation is the authority. These are the pages this guide draws on:

Outloop is an independent tool and is not affiliated with or endorsed by TikTok. Approval outcomes and review timings are decided and published by TikTok; this guide does not guarantee approval. Questions about this guide: support@outloop.co.

Summarize this approval guide with AI ChatGPTClaudePerplexity

Run client AI workflows without handing over API keys.

Outloop is available with guided onboarding for AI agencies, operators, and dev shops.

Frequently Asked Questions

TikTok API for Business app approval — FAQ