tiktok-mcp-cliCAUTION
TikTok MCP server and CLI for Claude Code, Codex and AI agents. 14 tools for your profile, video stats, top posts, publishing videos and photo carousels, drafts and post status.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://www.npmjs.com/package/@thenavidm/tiktok-mcp-cli) [](./LICENSE) [](https://github.com/thenavidm/tiktok-mcp-cli/actions) [](https://youtube.com/@thenavidm?sub_confirmation=1) [](https://x.com/thenavidm) [](https://linkedin.com/in/thenavidm)
TikTok MCP server and CLI for Claude Code, Codex and AI agents. 14 tools for your profile, video stats, top posts, publishing videos and photo carousels, drafts and post status.
One install gives you both surfaces, the same 14 tools under the same names.
It reads your real numbers. Views, likes, comments and shares per post, straight from TikTok rather than a scraper's guess.
It publishes too: a video or a photo carousel, or a draft into your TikTok inbox that you finish in the app.
Everything is scoped to accounts you connect yourself.
Built and maintained by Navid Moazzez. Built on Slipway, which turns one definition of each tool into the MCP server and the CLI.
You: Which of my TikToks beat my median view count this year, and what do they share? Claude: [stats_summary -> top_videos] Median is 4,180 views across your last 60. Eleven beat it. Nine of the eleven open on a face with no text overlay. Your median post opens on a title ca
627677344281OBSERVED · 2026-10-11Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add tiktok-mcp-cli -- npx -y @thenavidm/[email protected]
{
"mcpServers": {
"tiktok-mcp-cli": {
"command": "npx",
"args": [
"-y",
"@thenavidm/[email protected]"
]
}
}
}Exposed tools (10)
5 read · 4 write · 1 destructive. Blast radius: 1 tool can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.
| Tool | Risk | Description |
|---|---|---|
get_videos | read | Fetch up to 20 of your videos by id, with full stats. Also the way to refresh a cover_image_url: those links expire 6 hours after they are issued, so a cover that 404s needs this call rather than a cached URL. |
list_accounts | read | Every TikTok account this server can act as, with the name to pass as |
list_videos | read | Your public TikTok posts, newest first, with views, likes, comments, shares and a computed engagement rate. Pages past TikTok |
post_photos | write | Publish a photo carousel of up to 35 images from public URLs. Returns a publish_id; poll get_post_status with it. Same domain-verification and audit rules as post_video. |
post_video | write | Publish a video straight to the account from a public URL. Returns a publish_id; poll get_post_status with it, because the call returns as soon as TikTok accepts the job, long before the post is live. While your app is unaudited every post lands private no matter which privacy_level you pass. |
revoke_access | destructive | Hands the token back to TikTok and removes your app from the account |
search_my_videos | read | Find your posts whose title or description matches a query. TikTok has no search over your own library, so this pages recent videos and filters locally. A miss means it is not in the last |
send_photos_to_drafts | write | Send photos to the account |
send_video_to_drafts | write | Send a video to the account |
top_videos | read | Your best posts, ranked. TikTok has no ranked endpoint, so this pages recent videos and sorts them locally: |
Trust audit
CAUTIONgrade B · trust 89/100 Install with care. The audit found things worth knowing before you trust its output.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | WARN |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | WARN |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (1 observation(s))
- Network
- declared (6 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (9)
CMD node -e "fetch('http://127.0.0.1:8000/health').then(r=>process.exit(r.ok?0:1)).catch(()=>process.exit(1))"const safe = text.replace(/```/g, "```");
revoke_access
.mcpbignore
http://127.0.0.1:8481/callback/
register `http://127.0.0.1:*/callback/` once and stop worrying about it.
http://127.0.0.1:8481/callback/
| `redirect_uri` error during `auth` | The URI in your app is not byte-identical to `http://127.0.0.1:8481/callback/`, usually the trailing slash |
@thenavidm/slipway, zod, @types/node, typescript, vitest
Gates applied: no_behavioural_pass.
627677344281full audit observations/trust-audit/mcp-server/thenavidm__tiktok-mcp-cli.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-11 | 627677344281 | CAUTION | B | 89 | first audit |
Questions
What is the tiktok-mcp-cli MCP server?
TikTok MCP server and CLI for Claude Code, Codex and AI agents. 14 tools for your profile, video stats, top posts, publishing videos and photo carousels, drafts and post status.
What tools does tiktok-mcp-cli expose?
10 in total: 5 read-only, 4 that write, and 1 that can delete or overwrite (revoke_access). Every one is listed on this page with its risk.
Is tiktok-mcp-cli safe to connect to an agent?
With care. The audit graded it B (89/100) and found 9 things worth knowing before you trust this server, listed below with the exact line each was found on. Separately from the audit: 1 of its tools can destroy data, so scope the token you give it to what you actually need.
What credentials does tiktok-mcp-cli need?
No credential environment variables were found in its source, so it appears to need none.
How current is this page?
The grade is for one exact copy of the source (627677344281), read on 2026-10-11. The repository is watched and re-audited when it changes.