Why every TikTok API post comes out “Only me”
You call the Content Posting API with privacy_level PUBLIC_TO_EVERYONE and get unaudited_client_can_only_post_to_private_accounts back, or the video lands on the profile visible only to you. Nothing is wrong with your code: this is how TikTok treats every app it hasn't audited.
Checked against the platform's official documentation on 2026-10-21. These rules change; confirm against the docs before relying on them.
What TikTok allows an unaudited app to do
TikTok's Content Sharing Guidelines put three limits on any API client that hasn't passed review:
- Private only. Posts must use
SELF_ONLYvisibility. Request anything else and the API answers withunaudited_client_can_only_post_to_private_accounts. - Private accounts only. The account you post to has to be set to private at the moment you post.
- Five users a day. At most 5 different users can post through the app in any 24-hour window.
That is enough to build and test against your own account, and nothing more. If anyone else is meant to publish through your product, you need the audit.
What the audit actually checks
The review is about your posting screen, not your backend. TikTok wants to see a demo of the real flow, and it must follow the guidelines closely:
- Fetch the creator's info when the post screen opens and show their nickname, so the user knows which account they are posting to. If TikTok says they can't post right now, stop and tell them.
- Let the user pick visibility from
privacy_level_optionsin a dropdown with no default selected. - Show Comment, Duet and Stitch toggles, off by default, greyed out where the creator has disabled them.
- Offer the commercial content disclosure: a toggle, off by default, with “Your brand” and “Branded content” options and the matching label notices. Branded content can't be private.
- Show the declaration before the post button: “By posting, you agree to TikTok's Music Usage Confirmation” (plus the Branded Content Policy when that option is selected).
- Show a preview, let users edit any preset caption or hashtags, add no watermarks of your own, and upload only after the user explicitly confirms.
- Tell users processing can take a few minutes, and poll the publish status so they can see the outcome.
After you pass
Public posting unlocks, but caps remain. Your app gets a daily limit on
active creators, based on the usage you estimated in the application, and
each creator account can receive roughly 15 posts a day across every app
posting to it. Keep sending the disclosure fields (brand_organic_toggle,
brand_content_toggle) and is_aigc for AI-generated
video. An audited UI that collects them but drops them on the way to the
API still mislabels posts.
Even after the audit, “success” from the API doesn't mean the video is live: publishing is asynchronous. The silent publishing failures guide covers how to confirm a post actually went out.
Questions people arrive with
What does unaudited_client_can_only_post_to_private_accounts mean?
Your TikTok app has not passed the Content Posting API audit. Until it does, TikTok only lets it post with SELF_ONLY visibility, to accounts that are themselves set to private, for at most 5 users in any 24 hours. Asking for any other privacy level returns this error.
Can I make an unaudited app's TikTok posts public afterwards?
Only by hand. The account owner has to switch the account to public, then change each post's privacy in the TikTok app. The API cannot do it for an unaudited client.
How long does the TikTok Content Posting audit take?
Plan for weeks, not days, and for at least one round of changes. The audit reviews a demo of your real posting flow against TikTok's Content Sharing Guidelines, so most of the time goes into building the required posting screen.
Does passing the audit remove all limits?
No. Audited apps get a daily cap on active creators, based on the usage you estimated in the application, and TikTok caps each creator account at roughly 15 posts a day across all apps that post to it.
Related guides
- Self-hosted TikTok publishing: internal-use rejection and options
- n8n: video to TikTok, Instagram and YouTube (downloadable workflow)
- What publishing API access actually takes (TikTok, Instagram, YouTube)
- Why your integration reports success when nothing published
- TikTok: url_ownership_unverified on PULL_FROM_URL
- Are YouTube API uploads still forced to private?
- QPost vs Ayrshare: publishing API comparison
If you'd rather not run the review yourself
QPost is already audited by TikTok and handles the OAuth, token refresh and media hosting for TikTok, Instagram and YouTube. Your users connect their own accounts, and you publish through one REST API or an MCP server. Free while in beta.