Connect your TikTok Shop seller account to EcomCentral using the Open Platform API with HMAC-SHA256 signed requests.
app_secret.
EcomCentral handles signing automatically — you only supply the credential set below.
access_token/api/shop/get_authorized_shop response, or visible in TikTok Seller Center under Account → Shop infoaccess_token credential in EcomCentral (use Rotate Keys on the connection detail page).
| Key | Required | Description | Example |
|---|---|---|---|
app_key |
Required | App Key from TikTok Open Platform | abc123xyz |
app_secret |
Required | App Secret — used to HMAC-sign every request | s3cr3t… |
access_token |
Required | OAuth 2.0 access token for your seller account | TKT_… |
shop_id |
Required | Your TikTok Shop ID | 7123456789 |
base_url |
Optional | API host — defaults to the global endpoint | https://open-api.tiktokglobalshop.com |
appKey for App Key; appSecret for App Secret;
accessToken for access token; shopId for Shop ID; baseUrl for base URL.
TikTok Shop uses these canonical order status values:
| Operation | Method | Endpoint |
|---|---|---|
| Test connection | GET | /api/shop/get_authorized_shop |
| List orders | GET | /api/orders/search |
| Order detail | GET | /api/orders/detail/query |
| Upload tracking | POST | /api/fulfillment/tracking_number/upload |
| Confirm delivery | POST | /api/fulfillment/order/update_shipping_info |
| List products | GET | /api/products/search |
| Product detail | GET | /api/products/details |
| Feature | Supported | Notes |
|---|---|---|
| View orders (paginated) | ✅ | Cursor-based; best-effort page mapping |
| View order detail | ✅ | Address, line items, tracking, timestamps |
| Upload tracking number | ✅ | Tracking number + optional shipping provider ID |
| Confirm delivery | ✅ | Triggers CONFIRM_DELIVERY action |
| View products (paginated) | ✅ | SKU, name, price, stock across variants |
| View product detail | ✅ | Images, SKU variants, per-warehouse stock |
| Update stock quantity | ❌ | Not available — no per-SKU stock write in TikTok Shop API |
| Test connection | ✅ | Shop authorization check + HMAC validation |
TikTok returns a non-zero code when the HMAC signature is invalid. The signature
covers the path, sorted query params, and scalar body fields — all keyed by app_secret.
Verify the app_key + app_secret pair is correct and that your server
clock is accurate (requests include a timestamp).
TikTok access tokens have a limited lifetime. Re-run the OAuth authorization flow and update the
access_token credential via Rotate Keys on the connection detail page.
The shop_id must match the shop your access token is authorized for. Click
⚡ Test — a successful response shows the authorized shop name and ID you can
cross-check.
The TikTok Shop Open Platform API does not expose a per-SKU inventory write endpoint at this time. Manage stock levels directly in TikTok Seller Center.