What KALAMI does, and what it does not do.

KALAMI organizes company access to authorized TikTok account information and publishing workflows. It provides an operating record for employees, managers, and account owners rather than a consumer-facing social network or a personal-use application.

An account owner starts TikTok Login Kit authorization from KALAMI and completes consent on TikTok. KALAMI only treats the account as authorized after TikTok returns a successful OAuth response.

KALAMI does not request, collect, or store TikTok passwords. It does not use scraped login pages or browser automation to obtain account access.

• Read the authorized account profile and permitted statistics.
• Read the authorized account's permitted public video list.
• Prepare files and Direct Post tasks where TikTok grants the account the required publishing permission.
• Send a selected video to TikTok Inbox as a draft where TikTok grants video-upload permission; the creator completes editing and posting in TikTok.
• Show a pending or failed provider state when TikTok does not authorize, accept, or complete an action.

Approved internal automation services such as Hermes can use the tenant-scoped API at /api/hermes/v1/openapi.json. The API supports authorized account and video reads, multipart media upload, publish-task creation, scheduling, submission, and status refresh.

An administrator or boss creates a tenant-scoped API key inside the authenticated workspace. Keys are limited to their assigned tenant and scopes, are stored as salted hashes, and are shown only once. Use the key as a bearer credential; never place it in browser code or commit it to source control.

TikTok OAuth and the required official scopes remain a hard provider gate. Until TikTok grants and accepts the account authorization, Hermes receives an explicit pending or failure response and KALAMI does not claim that a video was published.

Hermes 密钥管理 · TikTok OAuth 配置检查

Company administrators assign users, departments, positions, and roles. The workspace uses these assignments to limit who can view, manage, or operate business records.

TikTok decides where its products and APIs are available. KALAMI does not represent that a local network configuration changes TikTok regional availability, and users must complete TikTok authorization from a supported region and network.

An account owner or authorized administrator can remove an account from the workspace. KALAMI removes the associated local authorization record and no longer treats the account as available for new publishing work.