Toutiao

Toutiao (今日头条) is ByteDance's AI-driven content recommendation platform, launched in 2012, aggregating news, articles, short video and micro-posts into a personalized feed for hundreds of millions of readers in China. Creators publish through 头条号 (Toutiao Hao) accounts on mp.toutiao.com, and third-party developers integrate through the ByteDance open-platform stack: Toutiao account OAuth 2.0 and user-profile APIs served from open.snssdk.com and documented on the Douyin Open Platform under the toutiao-or-xigua section, a content-sync and video publishing surface available to approved applications, mini-programs via the ByteDance mini-app developer platform, and advertising APIs that have since migrated from ad.toutiao.com to OceanEngine (巨量引擎). Toutiao publishes no OpenAPI, AsyncAPI, llms.txt or A2A agent card; its developer program is registration- and approval-gated and its documentation is client-side rendered in Chinese.

Toutiao publishes 1 API on the APIs.io network. Tagged areas include Company, News, Content, Media, and Social.

Toutiao’s developer surface includes documentation, API reference, signup flow, authentication, and 13 more developer resources.

21.8/100 emerging ▬ flat Agent 13/100 agent aware Full breakdown ↓
scored 2026-08-17 · rubric v0.11.0
1 APIs
CompanyNewsContentMediaSocialRecommendationPublishingByteDanceChinaOAuth

Kin Score

Kin Score Kin Score How this is scored →
scored 2026-08-17 · rubric v0.11.0
Composite quality — 21.8/100 · emerging
Contract Quality 0.0 / 25
Developer Ergonomics 7.0 / 20
Commercial Clarity 6.8 / 20
Operational Transparency 0.0 / 13
Governance 0.4 / 12
Discoverability 7.6 / 10
Agent readiness — 13/100 · agent aware
Machine-Readable Contract 0 / 18
Agentic Access Contract 0 / 10
MCP Server 0 / 12
Machine-Readable Auth 10 / 10
Idempotency 0 / 9
Stable Error Semantics 8 / 8
Request/Response Examples 0 / 7
Rate-Limit Signaling 0 / 7
Typed Event Surface 0 / 6
Agent Skills 0 / 5
Well-Known Catalog 0 / 4
Consent & Bot Identity 0 / 3
A2A Agent Card 0 / 8
Dry-Run / Simulate Mode 0 / 4
Improve this rating by publishing the missing artifacts — every area above can be raised, and the full rubric is at apis.io/rating/. This rating is computed from github.com/api-evangelist/toutiao: open an issue to ask a question, or submit a pull request to add artifacts. Want it done for you? Prioritized profiling — $2,500 →

APIs 1

Individual APIs this provider publishes, each with its own machine-readable definition.

Toutiao Open API (OAuth + User Profile)

Toutiao account OAuth 2.0 and user-profile API, served from the open.snssdk.com host and documented on the Douyin Open Platform under the toutiao-or-xigua permission section. Su...

Security Posture 2

Authentication, domain security, vulnerability disclosure, and trust-center signals.

Toutiao Authentication

oauth2 · 1 scheme

SECURITY

Toutiao Domain Security

TLSv1.2 · HSTS · DMARC

SECURITY

Scopes 1

OAuth scopes governing access to this provider's APIs.

Toutiao Scopes

1 scope · authorizationCode

1 scopes

SCOPES

Resources

Get Started 2

Portal, sign-up, and the first successful call

Documentation 2

Reference material describing how the API behaves

Agent Surfaces 1

MCP servers, agent skills, and machine-readable catalogs

Design & Contract 4

Pagination, idempotency, versioning, errors, and events

Build 1

SDKs, sample code, and the tooling you integrate with

Access & Security 3

Authentication, authorization, and security posture

Commercial 2

Pricing, plans, and the legal terms of use

Company 1

The organization behind the API

Other 1

Properties that don't map to a standard resource type

Source (apis.yml)

apis.yml Raw ↑
aid: toutiao
name: Toutiao
description: 'Toutiao (今日头条) is ByteDance''s AI-driven content recommendation platform, launched in 2012, aggregating news,
  articles, short video and micro-posts into a personalized feed for hundreds of millions of readers in China. Creators publish
  through 头条号 (Toutiao Hao) accounts on mp.toutiao.com, and third-party developers integrate through the ByteDance open-platform
  stack: Toutiao account OAuth 2.0 and user-profile APIs served from open.snssdk.com and documented on the Douyin Open Platform
  under the toutiao-or-xigua section, a content-sync and video publishing surface available to approved applications, mini-programs
  via the ByteDance mini-app developer platform, and advertising APIs that have since migrated from ad.toutiao.com to OceanEngine
  (巨量引擎). Toutiao publishes no OpenAPI, AsyncAPI, llms.txt or A2A agent card; its developer program is registration- and approval-gated
  and its documentation is client-side rendered in Chinese.'
image: https://sf3-cdn-tos.douyinstatic.com/obj/eden-cn/uhbfnupkbps/toutiao_favicon.ico
url: https://raw.githubusercontent.com/api-evangelist/toutiao/refs/heads/main/apis.yml
x-type: company
x-source: harvest:secondary-market
specificationVersion: '0.20'
created: '2026-08-05'
modified: '2026-08-05'
tags:
- Company
- News
- Content
- Media
- Social
- Recommendation
- Publishing
- ByteDance
- China
- OAuth
apis:
- name: Toutiao Open API (OAuth + User Profile)
  description: Toutiao account OAuth 2.0 and user-profile API, served from the open.snssdk.com host and documented on the
    Douyin Open Platform under the toutiao-or-xigua permission section. Supports the authorization-code flow (authorize, access_token,
    refresh_token, renew_refresh_token) and returns the authorized user's open_id, nickname and avatar; the mobile_alert permission
    additionally returns an AES-encrypted phone number. Scopes are namespaced toutiao.* and are granted per-application in
    the open-platform console. Access tokens are valid 15 days, refresh tokens 30 days. No OpenAPI is published for this surface.
  humanURL: https://open.douyin.com/platform/resource/docs/develop/permission/toutiao-or-xigua/OAuth2.0/
  baseURL: https://open.snssdk.com
  tags:
  - OAuth
  - Authentication
  - Identity
  properties:
  - type: Documentation
    url: https://open.douyin.com/platform/resource/docs/develop/permission/toutiao-or-xigua/OAuth2.0/
  - type: Authentication
    url: authentication/toutiao-authentication.yml
  - type: OAuthScopes
    url: scopes/toutiao-scopes.yml
  - type: ErrorCatalog
    url: errors/toutiao-problem-types.yml
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
common:
- type: DomainSecurity
  url: security/toutiao-domain-security.yml
- type: Website
  url: https://www.toutiao.com/
- type: DeveloperPortal
  url: https://open.toutiao.com/
- type: Documentation
  url: https://open.douyin.com/platform/resource/docs/develop/permission/toutiao-or-xigua/OAuth2.0/
- type: APIReference
  url: https://open.douyin.com/platform/resource/docs/ability/content-management/toutiao-publish-solution/
- type: SignUp
  url: https://mp.toutiao.com/auth/page/login
- type: TermsOfService
  url: https://www.toutiao.com/user_agreement/
- type: PrivacyPolicy
  url: https://www.toutiao.com/privacy_protection/
- type: Authentication
  url: authentication/toutiao-authentication.yml
- type: OAuthScopes
  url: scopes/toutiao-scopes.yml
- type: ErrorCatalog
  url: errors/toutiao-problem-types.yml
- type: Conventions
  url: conventions/toutiao-conventions.yml
- type: Lifecycle
  url: lifecycle/toutiao-lifecycle.yml
- type: Conformance
  url: conformance/toutiao-conformance.yml
- type: Packages
  url: packages/toutiao-packages.yml
- type: LLMsTxt
  url: llms/toutiao-llms.txt
- type: SecondaryMarket
  url: https://forgeglobal.com/toutiao_stock/
x-enrichment:
  date: '2026-08-05'
  status: minimal
  artifacts_added: 10
  pass: local-v1
x-coverage:
  state: unreadable
  reason: no-machine-readable-spec
  detail: ByteDance documents the Toutiao OAuth and user-profile API publicly on the Douyin Open Platform and the endpoints
    answer live on open.snssdk.com, but no OpenAPI, AsyncAPI, GraphQL SDL, Postman collection or JSON Schema is published
    on any Toutiao, snssdk or ByteDance host — and open.douyin.com returns a 200 HTML single-page-app shell for /openapi.json
    and every /.well-known/ path, byte-identical to a nonexistent control path, so there is nothing for a machine to fetch.
  evidence:
  - url: https://open.snssdk.com/oauth/access_token/
    status: 200
  - url: https://open.snssdk.com/openapi.json
    status: 404
  - url: https://open.douyin.com/platform/resource/docs/develop/permission/toutiao-or-xigua/OAuth2.0/
    status: 200
  - url: https://open.douyin.com/openapi.json
    status: 200
  - url: https://www.toutiao.com/.well-known/agent-card.json
    status: 404
  checked: '2026-08-05'