TikTok Shop: server-level public app and App Store installs #1533

Follow-up to #1522 / #1523.

Why

Most TikTok Shop sellers cannot create their own Partner Center app: TikTok only lets sellers with an assigned account manager register as seller developers. So the TikTok Shop connector, which today needs the seller's own App key, App secret and Service ID, works only for a few sellers.

A server can register one public TikTok Shop app (an ISV app in the TikTok Shop App Store) and let every seller authorize that app. TikTok reviews such an app before it is listed, and its reviewers install it from the App Store. That install sends the seller to our Redirect URL with a code but without a state we issued, which the callback refuses today.

Proposal

1. Server app. New optional server variables: TIKTOK_SHOP_PLATFORM_APP_KEY, TIKTOK_SHOP_PLATFORM_APP_SECRET and TIKTOK_SHOP_PLATFORM_SERVICE_ID.
   • When they are set and a TikTok Shop connector leaves its own App key empty, the connector signs, authorizes and renews with the server app.
   • A connector that has its own App key keeps using it, as today.
   • The server secret is never written to a connector and never shown in the dashboard.
2. Setup. When the server app is available, the setup page does not ask for App key, App secret or Service ID. The seller can still enter their own app.
3. Store-initiated install. When the callback has a code but no state we issued, and the server app is configured, it does the following:
   • it stores a single-use install record;
   • it forwards the seller to the dashboard, where they sign in or sign up;
   • it adds a TikTok Shop connector to their workspace, or reuses one that still waits for authorization;
   • it exchanges the code with the server app.

Cloud and self-hosted

The behaviour is identical in both modes and depends only on the server variables.

• Self-hosted: with the variables unset, nothing changes.
• Cloud: sets them to the AnythingMCP app.