Reviewer guide

Purpose and current stage

crabai helps authorized local business users find relevant creators for potential collaborations. This is a pre-launch TikTok One integration. No TikTok One production users or historical API calls are claimed.

The current review deployment shows the proposed discovery workflow. Official creator results appear only after TikTok grants access, app credentials are configured, and a reviewer authorizes their own TikTok One account. Pending access is always labeled. There are no fabricated creator profiles.

How to evaluate

1. Open the home page and review the sample brief for a Long Island City arcade.
2. After API approval, enter the reviewer access code supplied with the application and connect your own TikTok One account.
3. Select one of the TikTok One accounts returned by TikTok, then search US / New York for a content keyword.
4. Review official public profiles and open source videos to assess local relevance.
5. Disconnect to discard the review session and its cached results.

New York is a state-level filter. Search results alone do not establish that a creator lives in Long Island City or serves a local audience.

Requested permissions

TikTok One (TTO): authorize the brand account and discover creators. TikTok Creator: read creator public profiles and videos. Requested leaf permissions: Read TikTok One (TTO) account, Get creator insights and Get creator media. Only brand-authorized public creator information is used. The portal also requests a logo and account-holder redirect when creator read permissions are selected; this application does not initiate creator-account authorization.

Campaign creation, ad operations, posting, private messages, automated outreach and creator-authorized private insights are outside this application.

Data handling

Authorization state and tokens are stored only in the server session for this review deployment, with an eight-hour maximum lifetime. Tokens and authorization codes are never shown in pages or access logs. Disconnecting discards the session. Only the authorizing review session can see its results. No cross-merchant data sharing or data resale is implemented. Persistent product caching will follow TikTok permissions and applicable retention terms.

No TikTok call occurs while access is disabled. Queries are bounded, manually triggered and limited to 20 calls per day across this demo. No media files are downloaded.