Tiktok Organic Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Tiktok Organic Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
MCP server for TikTok organic analytics — video performance, engagement metrics, and profile insights via the TikTok Developer API.
Built for Claude Code and any MCP-compatible AI tool. Gives your AI assistant direct access to your TikTok account data — videos, views, likes, comments, shares, and follower stats.
Part of [The SEO Engine](https://lanternrow.com/seo-engine/) toolkit by Rex Jones — AI-powered SEO and social media tooling for agencies and businesses.
Single account:
{
"mcpServers": {
"tiktok-organic": {
"command": "npx",
"args": ["-y", "tiktok-organic-mcp"],
"env": {
"TIKTOK_ACCESS_TOKEN": "your_access_token"
}
}
}
}Multiple accounts:
{
"mcpServers": {
"tiktok-organic": {
"command": "npx",
"args": ["-y", "tiktok-organic-mcp"],
"env": {
"TIKTOK_ACCOUNTS": "[{\"name\":\"mybrand\",\"access_token\":\"act.xxx\",\"client_key\":\"abc123\",\"refresh_token\":\"rft.xxx\"},{\"name\":\"otherbrand\",\"access_token\":\"act.yyy\",\"client_key\":\"def456\",\"refresh_token\":\"rft.yyy\"}]"
}
}
}
}git clone https://github.com/lanternrow/tiktok-organic-mcp.git
cd tiktok-organic-mcp
npm install
npm run buildThen add to your Claude Code MCP settings:
{
"mcpServers": {
"tiktok-organic": {
"command": "node",
"args": ["/path/to/tiktok-organic-mcp/dist/index.js"],
"env": {
"TIKTOK_ACCESS_TOKEN": "your_access_token"
}
}
}
}user.info.basic — profile name, avataruser.info.profile — bio, verification statususer.info.stats — follower/following counts, total likesvideo.list — access to video listing and metrics https://www.tiktok.com/v2/auth/authorize/
?client_key={your_client_key}
&scope=user.info.basic,user.info.profile,user.info.stats,video.list
&response_type=code
&redirect_uri={your_redirect_uri} POST https://open.tiktokapis.com/v2/oauth/token/
Content-Type: application/x-www-form-urlencoded
client_key={client_key}
&client_secret={client_secret}
&code={auth_code}
&grant_type=authorization_code
&redirect_uri={redirect_uri}access_token and refresh_token from the responseTip: Access tokens expire after 24 hours. Use therefresh_tokentool or setTIKTOK_REFRESH_TOKENto enable automatic renewal.
Monitor multiple TikTok accounts from a single MCP server. Set the TIKTOK_ACCOUNTS environment variable as a JSON array:
[
{
"name": "mybrand",
"access_token": "act.xxx",
"client_key": "abc123",
"refresh_token": "rft.xxx"
},
{
"name": "otherbrand",
"access_token": "act.yyy",
"client_key": "def456",
"refresh_token": "rft.yyy"
}
]Each account object requires:
name — a unique label you pick (used in tool calls)access_token — the OAuth access tokenOptional:
client_key — needed for token refreshrefresh_token — needed for token refreshUsing accounts in tools: Every tool accepts an optional account parameter. If omitted, the first account in the array is used as default.
get_user_info(account: "mybrand")
get_videos(account: "otherbrand", max_count: 10)Backward compatible: If you only have one account, the legacy single-env-var format (TIKTOK_ACCESS_TOKEN) still works. It creates a default account named "default".
| Tool | Description |
|---|---|
list_accounts | List all configured TikTok accounts and the default |
| Tool | Description |
|---|---|
get_user_info | Profile metadata: username, bio, follower/following counts, total likes, video count, verification status |
get_videos | Paginated list of public videos with engagement metrics (views, likes, comments, shares) |
get_video_details | Detailed metrics for specific video IDs (batch up to 20) |
| Tool | Description |
|---|---|
refresh_token | Exchange refresh token for a new access token (requires client_key and refresh_token in account config) |
All read and utility tools accept an optional account parameter to target a specific account.
src/
index.ts # MCP server entry point, tool registration
accounts.ts # Multi-account resolution and configuration
client.ts # TikTok API HTTP client (native fetch, no dependencies)
types.ts # TypeScript interfaces for API responses
tools/
user.ts # get_user_info
videos.ts # get_videos, get_video_details
utils.ts # refresh_tokenfetch| Variable | Required | Description |
|---|---|---|
TIKTOK_ACCOUNTS | Yes | JSON array of account objects (see Multi-account support section) |
| Variable | Required | Description |
|---|---|---|
TIKTOK_ACCESS_TOKEN | Yes | OAuth access token from Login Kit flow |
TIKTOK_CLIENT_KEY | For refresh | App Client Key (needed for token refresh) |
TIKTOK_REFRESH_TOKEN | For refresh | Refresh token (needed for token refresh) |
npm run dev # Watch mode — recompiles on save
npm run build # Production build
npm start # Run the serverIssues and PRs welcome. If TikTok changes their API, please open an issue.
MIT — see LICENSE.
Built as part of The SEO Engine by Rex Jones.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.