Flaghand and TikTok

Last updated October 25, 2026

Flaghand lets creators and their AI agents prepare photo slideshow posts and publish them to the creator's own TikTok account, through TikTok's official Login Kit and Content Posting API. An agent can draft a post. Only the account owner can send it to TikTok, from Flaghand's TikTok posting screen, by approving it with their passkey. Flaghand never posts to TikTok without that approval.

Connecting TikTok

In Flaghand, open Settings and choose Connect TikTok. Flaghand sends you to TikTok's authorization screen, where you sign in and approve access. You type your TikTok password only on TikTok. TikTok then returns you to:

https://ss-content.com/api/tiktok/auth/callback

Our server checks the request, exchanges TikTok's code for login tokens, stores the tokens encrypted, and records your TikTok account ID and the permissions you granted.

Permissions we ask for

Permission	What Flaghand uses it for
`user.info.basic`	Your TikTok display name and avatar, so you can see which account a post goes to. Not your followers, messages or other content
`video.upload`	Sending a post to your TikTok inbox as a draft, which you finish and publish in the TikTok app
`video.publish`	Reading your current posting options from TikTok, and publishing directly to your account when you choose to

Before anything goes to TikTok

When you publish directly to your profile, Flaghand's TikTok posting screen shows, every time:

Your account. Your TikTok name and avatar, refreshed from TikTok when the screen opens. If TikTok says the account can't post right now, or a video is longer than TikTok allows for it, Flaghand stops and tells you why.
Title. The caption, which you can edit.
Who can view. You choose from the options TikTok gives for your account. Nothing is chosen for you.
Interactions. Allow comments (and Duet and Stitch for videos) start off. Any your TikTok settings turn off are greyed out.
Disclose post content. Off unless you turn it on. Then choose Your brand (labelled "Promotional content") and/or Branded content (labelled "Paid partnership"). Branded content can't be private: "Only me" is unavailable, with the note "Branded content visibility cannot be set to private."
Declaration. "By posting, you agree to TikTok's Music Usage Confirmation", and TikTok's Branded Content Policy when Branded content is on, with links to both.
Preview. Every slide, exactly as it will be sent.
Approve. You approve with your passkey. That is your consent to send this post. Agents can't do this step.

After you approve, Flaghand tells you it can take a few minutes for the post to appear on TikTok, checks its status until TikTok reports it finished or failed, and warns you not to send it twice while it's processing. Until TikTok completes its review of Flaghand, posts published directly can only be private ("Only me"); sending drafts to your inbox works either way.

When you send a post to your TikTok inbox instead, the screen shows your account, the caption, the preview and the passkey approval, then tells you when the draft is in your inbox. You choose who can view it, comments, music and disclosure in TikTok, then post it there.

Flaghand adds nothing to your content: no watermark, logo or Flaghand branding.

What we receive and keep

From TikTok: your TikTok account ID, display name and avatar link; the permissions you granted; access and refresh tokens and when they expire (stored encrypted); the posting options TikTok returns when you post; and each post's publish ID and status.
Not received: your TikTok password, followers, messages, or anyone else's data.
Use: only to run your posting in Flaghand. We don't sell it, use it for advertising, or train AI models on it.
Slide images: to publish a photo post, TikTok downloads the images from an unlisted address under https://ss-content.com/pull. We take them down once TikTok has them. Videos are uploaded straight to TikTok.

Disconnecting and deleting