Upload Post Skill
Upload Post Skill is a cross-platform publishing gateway for AI agents. After a user authorizes their own account, the agent can upload that user's own content to supported platforms through official APIs.
Service Model
- Cross-platform aggregation: one skill, multiple platform connectors.
- Server-centric architecture: all OAuth credentials and runtime states are stored server-side.
- No credential exposure in skill output: users and agents do not receive raw access or refresh tokens.
- User-driven control: every connection starts with explicit OAuth authorization by the account owner.
How Authorization and Posting Works
- User receives an authorization URL and completes login/consent on the platform's official page.
- The platform redirects back to this service, which stores encrypted authorization credentials.
- The agent can request upload on behalf of that user only after authorization is active.
- Users can revoke authorization in platform settings or by requesting disconnection through this service.
Product and Scope Mapping (Review Summary)
| Platform Product | Scope | How the Scope Is Used |
|---|---|---|
| TikTok Login Kit | user.info.basic | Used to identify the authorized TikTok account (for account binding and status display only). |
| TikTok Content Posting API | video.upload | Used for inbox/draft upload flow where the creator reviews and completes publishing in TikTok. |
| TikTok Content Posting API | video.publish | Used for direct-post flow after platform approval and only for user-authorized accounts. |
| TikTok Content Posting API (optional) | video.list | Used only if enabled, to read posting status/history for the same authorized account. |
Data Boundary
This skill is an execution interface, not a data-export interface. It is designed for upload tasks and status reporting only. Credential secrets and sensitive account tokens are never returned through skill responses.