BioTech Open Platform

Use an App Key and App Secret to obtain tokens and securely call APIs authorized for your application.

Supported version

This documentation applies to west/openAPI 1.2.1. Actual API availability also depends on endpoint registration, status, and application grants in the deployed environment.

Complete your first request

Obtain application credentials: A platform administrator creates an application and securely delivers its one-time app_key and app_secret.
Exchange credentials for tokens: Your server calls /openapi/auth/token to obtain a 24-hour Access Token and a 30-day Refresh Token.
Call an authorized API: Send the Access Token in an Authorization: Bearer header when requesting an authorized /openapi/* endpoint.
Handle errors and limits: Record X-Request-Id and use the HTTP status and Retry-After header to handle expiration, rejection, and rate limiting.

Available APIs

The external API surface currently contains three public authentication endpoints and two protected endpoints:

Issue, refresh, and revoke tokens.
Retrieve the current OpenAPI caller context.
List Douyin Selected Alliance settlement orders.

View the API overview, or follow the quickstart to complete your first request.