# TikTok Web X-Bogus Signature API

> Returns a signed TikTok Web request URL containing the required X-Bogus token. The endpoint takes an unsigned target API URL and a browser User-Agent string.

Source: https://www.sandbase.ai/model/tiktok/web/generate-xbogus
API reference: https://www.sandbase.ai/model/tiktok/web/generate-xbogus/docs

## Facts

- Provider: TikTok
- Type: Data API
- Endpoint: `POST https://api.sandbase.ai/v1/api/tiktok/web/generate-xbogus`
- Price: $0.0015 per call
- Free allowance: 100 calls per organization per UTC day, shared across eligible APIs
- Capabilities: api, tiktok
- Billing: pay per use from one SandBase balance; no provider account or subscription needed

## Call it

`POST https://api.sandbase.ai/v1/api/tiktok/web/generate-xbogus` with `Authorization: Bearer $SANDBASE_API_KEY` and the parameters as a JSON body.

| Parameter | Type | Required | Allowed values |
| --- | --- | --- | --- |
| `url` | string | yes |  |
| `user_agent` | string | yes |  |

## FAQ

### How do I use the TikTok Web X-Bogus Signature API?

Send a POST request to https://api.sandbase.ai/v1/api/tiktok/web/generate-xbogus with your SandBase API key in the Authorization header (Bearer) and the parameters as a JSON body. You can also try it in the Playground on this page without writing code.

### How much does the TikTok Web X-Bogus Signature API cost?

$0.0015 per call. Every organization gets 100 free calls per UTC day, shared across eligible SandBase APIs including this one; after that each call is billed at this price from your SandBase balance. There is no subscription.

### What parameters does the TikTok Web X-Bogus Signature API accept?

Required: url (string) and user_agent (string). The Parameters table and the Playground on this page list every field.

### What does the TikTok Web X-Bogus Signature API return?

A JSON response returned in the same HTTP request (synchronous). The README on this page includes a sample response.

### Do I need a TikTok developer account or API key?

No. TikTok Web X-Bogus Signature runs through SandBase, so one SandBase API key covers this endpoint and every other API and model in the catalog. You do not need to apply for TikTok API access separately.

## README

### TikTok Web X-Bogus Signature API

Produces an X-Bogus signed TikTok URL using the target `url` and the caller's `user_agent`.

#### Use cases

- Signing TikTok Web requests for data collection scripts.
- Generating valid X-Bogus query tokens for web scraping workflows.
- Aligning API request URLs with specific browser User-Agent headers.

#### Request

```bash
curl -X POST "https://api.sandbase.ai/v1/api/tiktok/web/generate-xbogus" \
  -H "Authorization: Bearer $SANDBASE_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"url": "https://www.tiktok.com/tag/cat?_r=1&name=cat&u_code=f02lm2f78d1elh&_d=f02ll161mcjihj&share_challenge_id=7551&sharer_language=en&source=h5_m", "user_agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:145.0) Gecko/20100101 Firefox/145.0"}'
```

#### Parameters

| Name | Type | Required | Description |
|---|---|---|---|
| `url` | string | Yes | Unsigned API URL |
| `user_agent` | string | Yes | User browser User-Agent |

#### Example response

Real response for the request above, trimmed to the main fields. User names and long IDs are masked.

```json
{
  "url": "https://www.tiktok.com/tag/cat?_r=1&name=cat&u_code=f02lm2f78d1elh&_d=f02ll161mc…"
}
```

#### Notes

- Requires both an unsigned target `url` and the matching browser `user_agent` string.

#### Related APIs

- [TikTok Video IDs from URLs (Batch)](/model/tiktok/web/all-aweme-id): Resolves and extracts TikTok video IDs from a list of video URLs.
- [TikTok User Sec User ID Extractor](/model/tiktok/web/all-sec-user-id): Returns a list of sec_user_id identifiers corresponding to TikTok user profile URLs.
- [TikTok Profile Unique IDs](/model/tiktok/web/all-unique-id): Resolves a batch of TikTok user homepage links to retrieve their corresponding unique identifiers.