TopTik — TikTok data
REMOTE · MCP.TOPTIK.APP · SCANNED SEP 20
TikTok data for agents: videos, creators, comments, search, transcripts. 25 tools, pay per call.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score → Why this is hard to score →
Endpoint Security46
- The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
- Authorisation not fully verified: no authorisation is required to call this server, and 25 tool(s) never declared a destructiveHint. The MCP spec treats an absent hint as destructive by default, so we cannot call this surface safe. See how to fix → View diagnostics → Unverified
- HTTPS enforcement could not be verified: the plaintext port answered with HTTP 406, which proves neither a plaintext path nor enforcement. View diagnostics → Unverified
- HSTS check failed: the Strict-Transport-Security header is absent. See how to fix → View diagnostics → Fail
- DNSSEC check failed: this domain isn't protected by DNSSEC. See how to fix → View diagnostics → Fail
Transport & Reachability100
- Verified streamable-http transport via a live MCP handshake. View diagnostics → Pass
Schema Quality & AI Usability73
- AI-judged instruction clarity (excellent).Pass
- Context-footprint check failed: tool/resource definitions use about 3715 tokens (~148/item across 25 items; 25 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
- Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management7
- Stability observed for 2 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage100
- 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
- 100% of tool parameters carry a description.Pass
Tool Safety100
- No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
- We read all 25 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
- An AI judge read all 26 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
- Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
How do I install the TopTik — TikTok data MCP server?
TopTik — TikTok data is a hosted endpoint at https://mcp.toptik.app/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.
remote · mcp.toptik.app
claude mcp add --transport http app-toptik-tiktok 'https://mcp.toptik.app/mcp'
{
"mcpServers": {
"app-toptik-tiktok": {
"url": "https://mcp.toptik.app/mcp"
}
}
} {
"servers": {
"app-toptik-tiktok": {
"type": "http",
"url": "https://mcp.toptik.app/mcp"
}
}
} [mcp_servers.app-toptik-tiktok] url = "https://mcp.toptik.app/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"app-toptik-tiktok": {
"type": "remote",
"url": "https://mcp.toptik.app/mcp",
"enabled": true
}
}
} openclaw mcp add app-toptik-tiktok --url 'https://mcp.toptik.app/mcp' --transport streamable-http
mcp_servers:
app-toptik-tiktok:
url: "https://mcp.toptik.app/mcp" {
"McpServers": {
"app-toptik-tiktok": {
"Transport": "http",
"Url": "https://mcp.toptik.app/mcp"
}
}
} assistant mcp add app-toptik-tiktok -t streamable-http -u 'https://mcp.toptik.app/mcp'
{
"mcpServers": {
"app-toptik-tiktok": {
"type": "http",
"url": "https://mcp.toptik.app/mcp"
}
}
} The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.
Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 20 Sept 26 +1
No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.
- 19 Sept 26 0
- Stability: unverified → 0.03 ▲ functional
- 18 Sept 26 60
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 20 Sept 2026 · Probed https://mcp.toptik.app/mcp
TLS valid
Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .
| Subject | Issuer | Valid from | Valid until | Key | Signature | Serial |
|---|---|---|---|---|---|---|
| CN=toptik.app | CN=WE1,O=Google Trust Services,C=US | 17 Sept 2026 | 16 Dec 2026 | ECDSA 256 | ECDSA-SHA256 | 4eb0c23ea079a1440e750825d1cc28d0 |
| SANs: toptik.app, mcp.toptik.app, *.mcp.toptik.app | ||||||
| CN=WE1,O=Google Trust Services,C=US (CA) | CN=GTS Root R4,O=Google Trust Services LLC,C=US | 13 Dec 2023 | 20 Feb 2029 | ECDSA 256 | ECDSA-SHA384 | 7ff31977972c224a76155d13b6d685e3 |
| CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) | CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE | 15 Nov 2023 | 28 Jan 2028 | ECDSA 384 | SHA256-RSA | 7fe530bf331343bedd821610493d8a1b |
Background: What to check on a remote MCP endpoint →
DNSSEC insecure
Validation of mcp.toptik.app. — Not signed
| Zone | DS | Keys | Algorithms | Outcome |
|---|---|---|---|---|
| . | trust_anchor | 20326, 38696 | 8, 8 | Verified |
| app. | present | 23684 | 8 | Verified |
| toptik.app. | absent | Unsigned (proven) parent-signed NSEC/NSEC3 proves an unsigned delegation |
Authentication No authorisation required
The endpoint answered without asking for a token. Anyone who knows the URL can reach it.
| Result | No authorisation required |
|---|---|
| HTTP status | 200 |
Background: How OAuth 2.1 works in the 2026 MCP spec →
Transports 2 probes
| Transport | URL | Outcome | Status | Location |
|---|---|---|---|---|
| streamable-http | https://mcp.toptik.app/mcp | Verified | 200 | |
| http (plaintext) | http://mcp.toptik.app/mcp | Inconclusive | 406 |
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →
tiktok_comment_replies ~164
Replies under one comment. Worth calling only when tiktok_video_comments reported reply_count above 0.
| Name | Type | Req | Description |
|---|---|---|---|
| comment_id | string | yes | comment_id from tiktok_video_comments. |
| count | integer | – | Replies per page. (1-50, default 20) |
| cursor | integer | – | Offset from the previous response. Omit for page one. (default 0) |
| expand | boolean | – | false (default): a compact JSON summary sized for a model's context. true: the complete, unmodified response from the data API — can exceed 500 KB for list tools, so ask for it only when a field you… |
| id | string | yes | The numeric video id. |
No output schema declared.
No examples provided.
tiktok_creator_followers ~150
A sample of a creator's followers (most recent), plus the total. One page only: TikTok does not page this list reliably, so this is a sample and not an export.
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | Followers to return. (1-50, default 20) |
| expand | boolean | – | false (default): a compact JSON summary sized for a model's context. true: the complete, unmodified response from the data API — can exceed 500 KB for list tools, so ask for it only when a field you… |
| id | string | yes | sec_uid (MS4w…) or numeric uid. |
No output schema declared.
No examples provided.
tiktok_creator_following ~136
A sample of the accounts a creator follows, plus the total. One page only, for the same reason as followers.
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | Accounts to return. (1-50, default 20) |
| expand | boolean | – | false (default): a compact JSON summary sized for a model's context. true: the complete, unmodified response from the data API — can exceed 500 KB for list tools, so ask for it only when a field you… |
| id | string | yes | sec_uid (MS4w…) or numeric uid. |
No output schema declared.
No examples provided.
tiktok_creator_liked_videos ~170
Videos a creator has liked. Only works when the account keeps its likes public; most do not, and a private list returns no videos.
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | Videos per page. (1-35, default 20) |
| cursor | integer | – | max_cursor from the previous page. Omit for page one. (default 0) |
| expand | boolean | – | false (default): a compact JSON summary sized for a model's context. true: the complete, unmodified response from the data API — can exceed 500 KB for list tools, so ask for it only when a field you… |
| id | string | yes | sec_uid (MS4w…). A numeric uid is not accepted here. |
No output schema declared.
No examples provided.
tiktok_creator_playlists ~140
A creator's playlists (TikTok calls them mixes or series). Most creators have none, which returns total 0.
| Name | Type | Req | Description |
|---|---|---|---|
| cursor | integer | – | cursor from the previous page. Omit for page one. (default 0) |
| expand | boolean | – | false (default): a compact JSON summary sized for a model's context. true: the complete, unmodified response from the data API — can exceed 500 KB for list tools, so ask for it only when a field you… |
| id | string | yes | sec_uid (MS4w…) or numeric uid. |
No output schema declared.
No examples provided.
tiktok_creator_profile ~125
A creator's profile: handle, nickname, bio, follower, following and video counts, privacy and verification flags, and avatar.
| Name | Type | Req | Description |
|---|---|---|---|
| expand | boolean | – | false (default): a compact JSON summary sized for a model's context. true: the complete, unmodified response from the data API — can exceed 500 KB for list tools, so ask for it only when a field you… |
| id | string | yes | sec_uid (MS4w…) or numeric uid, from tiktok_resolve_username. |
No output schema declared.
No examples provided.
tiktok_creator_videos ~174
A creator's posts, newest first, with stats. Page by passing the previous response's max_cursor as cursor until has_more is 0. Pinned posts appear on page one only.
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | Posts per page. (1-35, default 20) |
| cursor | integer | – | max_cursor from the previous page. Omit for page one. (default 0) |
| expand | boolean | – | false (default): a compact JSON summary sized for a model's context. true: the complete, unmodified response from the data API — can exceed 500 KB for list tools, so ask for it only when a field you… |
| id | string | yes | sec_uid (MS4w…) or numeric uid. |
No output schema declared.
No examples provided.
tiktok_explore_feed ~127
TikTok's Explore / Discover feed: what is trending now. Not personalised and not cached, so each call returns a fresh set; call again for more.
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | Videos to return. (1-18, default 12) |
| expand | boolean | – | false (default): a compact JSON summary sized for a model's context. true: the complete, unmodified response from the data API — can exceed 500 KB for list tools, so ask for it only when a field you… |
No output schema declared.
No examples provided.
tiktok_hashtag_resolve ~116
Hashtag name to its id, with total video and view counts. Feed the id to tiktok_hashtag_videos.
| Name | Type | Req | Description |
|---|---|---|---|
| expand | boolean | – | false (default): a compact JSON summary sized for a model's context. true: the complete, unmodified response from the data API — can exceed 500 KB for list tools, so ask for it only when a field you… |
| name | string | yes | The hashtag, with or without #. |
No output schema declared.
No examples provided.
tiktok_hashtag_videos ~163
Videos under a hashtag. Pages hold about 12 videos whatever count asks for; page with cursor.
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | Videos per page; TikTok caps this near 12. (1-30, default 20) |
| cursor | integer | – | cursor from the previous page. Omit for page one. (default 0) |
| expand | boolean | – | false (default): a compact JSON summary sized for a model's context. true: the complete, unmodified response from the data API — can exceed 500 KB for list tools, so ask for it only when a field you… |
| id | string | yes | hashtag id from tiktok_hashtag_resolve. |
No output schema declared.
No examples provided.
tiktok_live_streams ~162
Live rooms matching a keyword, each with playable stream URLs per quality (FLV always, HLS when TikTok provides it), title and viewer count. URLs are signed (see expires_at), but a room usually ends long before its signature does; if one quality fails, try another.
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | Rooms to return. (1-30, default 20) |
| expand | boolean | – | false (default): a compact JSON summary sized for a model's context. true: the complete, unmodified response from the data API — can exceed 500 KB for list tools, so ask for it only when a field you… |
| q | string | yes | Search keywords. |
No output schema declared.
No examples provided.
tiktok_places_search ~129
Search TikTok places (points of interest) by name: address, coordinates, rating, review count and video count.
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | Places to return. (1-30, default 20) |
| expand | boolean | – | false (default): a compact JSON summary sized for a model's context. true: the complete, unmodified response from the data API — can exceed 500 KB for list tools, so ask for it only when a field you… |
| q | string | yes | Place name or keywords. |
No output schema declared.
No examples provided.
tiktok_resolve_username ~136
Resolve a TikTok @handle to the account's numeric uid and sec_uid. Start here: every tiktok_creator_* tool takes the sec_uid this returns. An empty user_list means no exact match was found.
| Name | Type | Req | Description |
|---|---|---|---|
| expand | boolean | – | false (default): a compact JSON summary sized for a model's context. true: the complete, unmodified response from the data API — can exceed 500 KB for list tools, so ask for it only when a field you… |
| handle | string | yes | The @handle, with or without the leading @. |
No output schema declared.
No examples provided.
tiktok_search_creators ~169
Keyword search over accounts, with follower counts. Pages by offset, not cursor. For one exact @handle use tiktok_resolve_username instead: it is cheaper and more reliable.
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | Results per page. (1-30, default 10) |
| expand | boolean | – | false (default): a compact JSON summary sized for a model's context. true: the complete, unmodified response from the data API — can exceed 500 KB for list tools, so ask for it only when a field you… |
| offset | integer | – | Number of results to skip: 0, then count, then 2 x count. (default 0) |
| q | string | yes | Search keywords. |
No output schema declared.
No examples provided.
tiktok_search_hashtags ~119
Keyword search over hashtags, with post and view counts. One page only.
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | Results to return. (1-30, default 20) |
| expand | boolean | – | false (default): a compact JSON summary sized for a model's context. true: the complete, unmodified response from the data API — can exceed 500 KB for list tools, so ask for it only when a field you… |
| q | string | yes | Search keywords. |
No output schema declared.
No examples provided.
tiktok_search_lives ~136
Live rooms on air right now that match a keyword, with the host's account. One page only. For playable stream URLs use tiktok_live_streams.
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | Rooms to return. (1-30, default 20) |
| expand | boolean | – | false (default): a compact JSON summary sized for a model's context. true: the complete, unmodified response from the data API — can exceed 500 KB for list tools, so ask for it only when a field you… |
| q | string | yes | Search keywords. |
No output schema declared.
No examples provided.
tiktok_search_photos ~124
Keyword search over photo-mode (carousel) posts, with image URLs and stats. One page only.
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | Results to return. (1-30, default 20) |
| expand | boolean | – | false (default): a compact JSON summary sized for a model's context. true: the complete, unmodified response from the data API — can exceed 500 KB for list tools, so ask for it only when a field you… |
| q | string | yes | Search keywords. |
No output schema declared.
No examples provided.
tiktok_search_sounds ~148
Keyword search over sounds, with usage counts. cursor is an offset: pass the previous response's cursor.
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | Results per page. (1-30, default 20) |
| cursor | integer | – | cursor from the previous page. Omit for page one. (default 0) |
| expand | boolean | – | false (default): a compact JSON summary sized for a model's context. true: the complete, unmodified response from the data API — can exceed 500 KB for list tools, so ask for it only when a field you… |
| q | string | yes | Search keywords. |
No output schema declared.
No examples provided.
tiktok_search_videos ~208
Keyword search over videos. TikTok search is a bounded, re-ranked pool, not an endless list: ask for count 30, page with cursor, dedupe on video_id, and stop when two pages add nothing new.
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | Results per page. 30 yields the most distinct results per call. (1-30, default 20) |
| cursor | integer | – | cursor from the previous page. Omit for page one. (default 0) |
| expand | boolean | – | false (default): a compact JSON summary sized for a model's context. true: the complete, unmodified response from the data API — can exceed 500 KB for list tools, so ask for it only when a field you… |
| q | string | yes | Search keywords. |
| sort_type | integer | – | 0 = relevance (default), 1 = most liked. (0-3) |
No output schema declared.
No examples provided.
tiktok_sound_resolve ~113
Sound title to music id, with the closest candidates. Feed the id to tiktok_sound_videos.
| Name | Type | Req | Description |
|---|---|---|---|
| expand | boolean | – | false (default): a compact JSON summary sized for a model's context. true: the complete, unmodified response from the data API — can exceed 500 KB for list tools, so ask for it only when a field you… |
| title | string | yes | The sound's title as TikTok shows it. |
No output schema declared.
No examples provided.
tiktok_sound_videos ~156
Videos TikTok associates with a sound. Treat it as a feed seeded by the sound, not a strict filter: some results use a different sound, so check music_id on each row.
| Name | Type | Req | Description |
|---|---|---|---|
| cursor | integer | – | cursor from the previous page. Omit for page one. (default 0) |
| expand | boolean | – | false (default): a compact JSON summary sized for a model's context. true: the complete, unmodified response from the data API — can exceed 500 KB for list tools, so ask for it only when a field you… |
| id | string | yes | music id from tiktok_sound_resolve or any video row. |
No output schema declared.
No examples provided.
tiktok_video_comments ~170
Top-level comments on a video, with like and reply counts. cursor is an offset: pass the previous response's cursor to continue. TikTok re-ranks between pages, so dedupe on comment_id.
| Name | Type | Req | Description |
|---|---|---|---|
| count | integer | – | Comments per page. (1-50, default 20) |
| cursor | integer | – | Offset from the previous response. Omit for page one. (default 0) |
| expand | boolean | – | false (default): a compact JSON summary sized for a model's context. true: the complete, unmodified response from the data API — can exceed 500 KB for list tools, so ask for it only when a field you… |
| id | string | yes | The numeric video id. |
No output schema declared.
No examples provided.
tiktok_video_download_url ~134
Direct media URLs for one post: no-watermark video, watermarked video, audio, covers, and the images of a photo post. Links only, no bytes; they are signed and expire (see expires), so fetch promptly.
| Name | Type | Req | Description |
|---|---|---|---|
| expand | boolean | – | false (default): a compact JSON summary sized for a model's context. true: the complete, unmodified response from the data API — can exceed 500 KB for list tools, so ask for it only when a field you… |
| id | string | yes | The numeric video id. |
No output schema declared.
No examples provided.
tiktok_video_stats ~126
One video or photo post by id: caption, plays, likes, comments, shares, saves, duration, hashtags, sound and author.
| Name | Type | Req | Description |
|---|---|---|---|
| expand | boolean | – | false (default): a compact JSON summary sized for a model's context. true: the complete, unmodified response from the data API — can exceed 500 KB for list tools, so ask for it only when a field you… |
| id | string | yes | The numeric video id — the digits after /video/ in a TikTok link. |
No output schema declared.
No examples provided.
tiktok_video_transcript ~151
A video's spoken text from TikTok's own caption track: one joined string plus timed cues. has_transcript false means the video has no caption track, which is common and is not an error.
| Name | Type | Req | Description |
|---|---|---|---|
| expand | boolean | – | false (default): a compact JSON summary sized for a model's context. true: the complete, unmodified response from the data API — can exceed 500 KB for list tools, so ask for it only when a field you… |
| id | string | yes | The numeric video id. |
| lang | string | – | Language tag such as en or es-MX. Omit to get the original track. |
No output schema declared.
No examples provided.
What is the TopTik — TikTok data MCP server?
TopTik — TikTok data is an MCP server listed in the public MCP registry as app.toptik/tiktok. TikTok data for agents: videos, creators, comments, search, transcripts. 25 tools, pay per call. This page covers its hosted endpoint (https://mcp.toptik.app/mcp).
Is the TopTik — TikTok data MCP server safe to use?
TopTik — TikTok data scores 61 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.
What tools does the TopTik — TikTok data MCP server expose?
TopTik — TikTok data exposes 25 tools: tiktok_resolve_username, tiktok_creator_profile, tiktok_creator_videos, tiktok_creator_liked_videos, tiktok_creator_followers, and 20 more. Their descriptions and schemas cost roughly 3,646 tokens of context every time the server is loaded.
Does the TopTik — TikTok data MCP server require authentication?
No. We connected to TopTik — TikTok data without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.
Is the TopTik — TikTok data MCP server still maintained?
TopTik — TikTok data is still listed as active in the MCP registry. We last reached this channel on 20 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.