← Back to search

io.github.lanternrow/tiktok-organic-mcp

lanternrow Scanned 15h ago

TikTok organic analytics — video performance, engagement metrics, and profile insights.

MCP Registry ↗
B
75.5 / 100

Versions

1.0.0latest
first seen Jun 5, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 5

list_accounts
annotations: none low

List all configured TikTok accounts available for querying.

get_user_info
annotations: none low

Get a TikTok user

get_videos
annotations: none low

Get a paginated list of the user

get_video_details
annotations: none low

Get detailed performance metrics for specific TikTok videos by ID. Returns views, likes, comments, shares, duration, and more. Max 20 video IDs per request.

refresh_token
annotations: none low

Refresh the TikTok access token for an account using its stored refresh token. Returns new access and refresh tokens. Requires client_key and refresh_token in the account config.

Permissions 3

network medium
Server uses network capabilities via: fetch()
shell high
Server uses shell capabilities via: child_process, execSync()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 24

low
Tool 'list_accounts' has no annotations annotation_checker · 100%
low
Tool 'get_user_info' has no annotations annotation_checker · 100%
low
Tool 'get_videos' has no annotations annotation_checker · 100%
low
Tool 'get_video_details' has no annotations annotation_checker · 100%
low
Tool 'refresh_token' has no annotations annotation_checker · 100%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.12.1 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.12.1 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.12.1 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: list_accounts manifest_parser · 70%
info
Tool: get_user_info manifest_parser · 70%
info
Tool: get_videos manifest_parser · 70%
info
Tool: get_video_details manifest_parser · 70%
info
Tool: refresh_token manifest_parser · 70%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (4) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 95 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%