Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, email [email protected] and we’ll put it right.

Hermoso

REMOTE · APP.HERMOSO.AI · 2 COMPONENTS · SCANNED AUG 4

AI ad studio: competitor ad research, video + image ads, social publishing, campaigns. 262 tools.

+3 this week 78 Trust /100
Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. How we score →

Endpoint Security97
  • The endpoint's TLS certificate is valid, in date, and uses a strong key. View diagnostics → Pass
  • Authorisation is enforced on tool calls, advertised via RFC 9728 protected-resource metadata. Discovery is public, which costs nothing: no tool can be invoked without a token. View diagnostics → Pass
  • HTTPS is enforced; there's no plaintext access path. View diagnostics → Pass
  • The HSTS (Strict-Transport-Security) header is present. View diagnostics → Pass
  • DNSSEC is configured correctly; the domain's records validate against the full chain to the root. View diagnostics → Pass
  • The authorisation server offers only Dynamic Client Registration (RFC 7591), which MCP 2026-07-28 deprecated in favour of Client ID Metadata Documents. View diagnostics → Partial
Transport & Reachability100
Schema Quality & AI Usability51
  • 100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
  • AI-judged instruction clarity (poor).Fail
  • Context-footprint check failed: tool/resource definitions use about 64729 tokens (~245/item across 264 items; 262 tools + 2 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management30
  • Stability observed for 9 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial
Tool Coverage96
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 86% of tool parameters carry a description.Partial
  • Structured output schemas are declared (100% of tools); any adoption earns full credit.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
  • Supports UI / widget rendering.Pass
Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

remote · app.hermoso.ai

# add to Claude Code
claude mcp add --transport http hermoso-ai-hermoso https://app.hermoso.ai/mcp
# ~/.codex/config.toml
[mcp_servers.hermoso-ai-hermoso]
url = "https://app.hermoso.ai/mcp"
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "hermoso-ai-hermoso": {
      "type": "remote",
      "url": "https://app.hermoso.ai/mcp",
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add hermoso-ai-hermoso --url https://app.hermoso.ai/mcp --transport streamable-http
# ~/.hermes/config.yaml
mcp_servers:
  hermoso-ai-hermoso:
    url: "https://app.hermoso.ai/mcp"
// mcp.json
{
  "mcpServers": {
    "hermoso-ai-hermoso": {
      "type": "http",
      "url": "https://app.hermoso.ai/mcp"
    }
  }
}

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 4 Aug 26 −4
    • Schema quality: excellent → poor functional
    • This server's schema is too large to store in full, so we cannot compare its tools day to day functional
  • 3 Aug 26 +5
    • Schema quality: poor → excellent functional
    • This server's schema is too large to store in full, so we cannot compare its tools day to day functional
  • 2 Aug 26 +1
    • This server's schema is too large to store in full, so we cannot compare its tools day to day functional
  • 1 Aug 26 −6
    • Schema quality: 47049 → 54919 functional
    • Schema quality: excellent → poor functional
    • This server's schema is too large to store in full, so we cannot compare its tools day to day functional
  • 31 Jul 26 +7
    • Schema quality: 184 → 211 functional
    • Tool coverage: 95% → 84% functional
    • Schema quality: good → excellent functional
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
    • This server's schema is too large to store in full, so we cannot compare its tools day to day functional
  • 30 Jul 26 +4
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 29 Jul 26 −4
    • Schema quality: good → poor functional
    • New tool “list_tiktok_videos” functional
    • New tool “post_to_tiktok” functional
    • New tool “tiktok_account” functional
    • New tool “tiktok_creator_info” functional
  • 28 Jul 26 +5
    • Schema quality: 155 → 185 functional
    • Schema quality: poor → good functional
    • “render_ad” added an optional parameter “allowGenericProduct” cosmetic
Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 4 Aug 2026 · Probed https://app.hermoso.ai/mcp

TLS valid

Negotiated TLS 1.3 with TLS_AES_128_GCM_SHA256 .

Subject Issuer Valid from Valid until Key Signature Serial
CN=hermoso.ai CN=WE1,O=Google Trust Services,C=US 19 Jun 2026 17 Sept 2026 ECDSA 256 ECDSA-SHA256 63a5baa530e903420eec34570d57f4a9
SANs: hermoso.ai, *.hermoso.ai
CN=WE1,O=Google Trust Services,C=US (CA) CN=GTS Root R4,O=Google Trust Services LLC,C=US 13 Dec 2023 20 Feb 2029 ECDSA 256 ECDSA-SHA384 7ff31977972c224a76155d13b6d685e3
CN=GTS Root R4,O=Google Trust Services LLC,C=US (CA) CN=GlobalSign Root CA,OU=Root CA,O=GlobalSign nv-sa,C=BE 15 Nov 2023 28 Jan 2028 ECDSA 384 SHA256-RSA 7fe530bf331343bedd821610493d8a1b
DNSSEC secure

Validation of app.hermoso.ai. Secure

Zone DS Keys Algorithms Outcome
. trust_anchor 20326, 38696 8, 8 Verified
ai. present 3799 8 Verified
hermoso.ai. present 2371 13 Verified
app.hermoso.ai. Verified address RRset verified with the apex keys
Authentication Enforced and verified

The endpoint asked for a token and published valid RFC 9728 metadata describing how to get one.

Result Enforced and verified
Enforced On tool calls
HTTP status 200

WWW-Authenticate challenge Bearer resource_metadata="https://app.hermoso.ai/.well-known/oauth-protected-resource"

Bearer resource_metadata="https://app.hermoso.ai/.well-known/oauth-protected-resource"
Header Value
strict-transport-security max-age=31536000; includeSubDomains
content-security-policy default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'self'; form-action 'self' https://checkout.stripe.com https://billing.stripe.com; script-src 'self' 'sha256-o4CNZsbLcGxYjUla7wnADobq8qG6y8YGnP55NYa2nAs=' 'sha256-BKNh3xXp/pdj0zVQ+Ah5gILPUFgPKUkeFewLtpsvM4k=' 'sha256-5+PJDvYPp8nlqbQN3R/bn7qIISHSw0oHIrvzbg+Hde8=' 'sha256-Kxj8AWehU6E3AcrEv3RvphfVVTtl0HdcUM9mH96PEhw=' 'sha256-oudBqHjGcU6XLFUFksuZAUiXXNRanzF0XfPx0yhoqC0=' https://www.gstatic.com https://www.google.com https://apis.google.com https://www.googletagmanager.com https://www.googleadservices.com https://googleads.g.doubleclick.net https://connect.facebook.net https://bzrcdn.openai.com https://cdn.mxpnl.com https://challenges.cloudflare.com https://widget.intercom.io https://js.intercomcdn.com https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' https://fonts.gstatic.com https://js.intercomcdn.com https://fonts.intercomcdn.com data:; img-src 'self' data: blob: https:;
x-content-type-options nosniff
x-frame-options SAMEORIGIN
referrer-policy strict-origin-when-cross-origin

Protected resource metadata

Document https://app.hermoso.ai/.well-known/oauth-protected-resource
Retrieved Yes
Resource https://app.hermoso.ai/mcp
Authorisation server https://app.hermoso.ai
Transports 2 probes
Transport URL Outcome Status Location
streamable-http https://app.hermoso.ai/mcp Verified 200
http (plaintext) http://app.hermoso.ai/mcp HTTPS enforced 301 https://app.hermoso.ai/mcp
MCP tools — 262 exposed · ~63,110 tokens partial

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens
set_pinterest_ads_status ~239

No description provided.

NameTypeReqDescription
adAccountIdstring
adGroupIdstring
adIdstring
campaignIdstring
confirmboolean
levelstring
statusstringyes
NameTypeReqDescription
idstring
levelstring
notestring
okboolean
statusstring
verifiedStatus

No examples provided.

set_post_refill ~617

No description provided.

NameTypeReqDescription
assetCooldownDaysnumber
boardIdstring
channelsarray
daysAheadnumber
dryRunboolean
enabledboolean
linkedinOrganizationIdstring
maxCreditsPerDaynumber
maxImagesPerDaynumber
maxVideosPerDaynumber
pageIdstring
postsPerDaynumber
NameTypeReqDescription
daysAheadnumber
dryRunboolean
enabledboolean
runningboolean

No examples provided.

set_product_image ~270

No description provided.

NameTypeReqDescription
brandIdstring
imageUrlstringyes
source_notestring
NameTypeReqDescription
attachedboolean
source_note
summarystring
url

No examples provided.

set_reddit_ads_status ~281

No description provided.

NameTypeReqDescription
adAccountIdstring
confirmboolean
idstringyes
kindstringyes
statusstringyes
NameTypeReqDescription
effectiveStatusstring
idstring
kindstring
namestring
notestring
statusstring

No examples provided.

set_role ~82

No description provided.

NameTypeReqDescription
confirmboolean
emailstringyes
rolestringyes
NameTypeReqDescription
emailstring
okboolean
rolestring

No examples provided.

set_youtube_thumbnail ~226

No description provided.

NameTypeReqDescription
imageUrlstringyes
videoIdstringyes
NameTypeReqDescription
bytesnumber
notestring
okboolean
thumbnailUrl
urlstring
videoIdstring

No examples provided.

stitch_video ~243

No description provided.

NameTypeReqDescription
aspectRatiostring
durationSecondsnumber
modelstring
resolutionstring
scenesarrayyes
voicestring
voiceoverstring
NameTypeReqDescription
jobIdstring
model
raw
stillRenderingboolean
url

No examples provided.

store_get ~199

No description provided.

NameTypeReqDescription
keystringyes
limitnumber
NameTypeReqDescription
keystring
value

No examples provided.

threads_insights ~84

No description provided.

NameTypeReqDescription
postIdstring
NameTypeReqDescription
metricsarray
scopestring

No examples provided.

tiktok_account ~89

No description provided.

Input schema present but exposes no named parameters.

NameTypeReqDescription
avatar
bio
displayName
followers
following
likes
openId
partialboolean
profileLink
username
verifiedboolean
videos

No examples provided.

tiktok_creator_info ~144

No description provided.

Input schema present but exposes no named parameters.

NameTypeReqDescription
avatar
commentDisabledboolean
duetDisabledboolean
maxDurationSeconds
nickname
privacyOptionsarray
stitchDisabledboolean
username

No examples provided.

update_brand ~183

No description provided.

NameTypeReqDescription
audiencestring
categorystring
domainstring
goalstring
namestring
positioningstring
sellsstring
stylestring
summarystring
voicestring
NameTypeReqDescription
brand
okboolean
updatedarray

No examples provided.

update_drive_file ~157

No description provided.

NameTypeReqDescription
fileIdstringyes
moveToFolderIdstring
namestring
removeFromFolderIdstring
trashboolean
NameTypeReqDescription
idstring
namestring
trashedboolean

No examples provided.

update_meta_object ~229

No description provided.

NameTypeReqDescription
adAccountIdstringyes
confirmboolean
dailyBudgetUsdnumber
namestring
objectIdstringyes
statusstring
targeting
NameTypeReqDescription
objectIdstring
okboolean
updatedarray

No examples provided.

update_onedrive_file ~109

No description provided.

NameTypeReqDescription
fileIdstringyes
moveToFolderIdstring
namestring
NameTypeReqDescription
idstring
namestring

No examples provided.

update_openai_ads_object ~341

No description provided.

NameTypeReqDescription
adGroupIdstring
adIdstring
billingEventstring
campaignIdstring
confirmboolean
contextHintsarray
countriesarray
creativeobject
dailyBudgetnumber
descriptionstring
endTimenumber
levelstring
lifetimeBudgetnumber
locationIdsarray
maxBidnumber
namestring
NameTypeReqDescription
idstring
levelstring
notestring
object
okboolean

No examples provided.

update_reddit_ads_ad ~121

No description provided.

NameTypeReqDescription
adAccountIdstring
adIdstringyes
clickUrlstring
namestring
postIdstring
NameTypeReqDescription
idstring
namestring
notestring
statusstring

No examples provided.

update_reddit_ads_ad_group ~218

No description provided.

NameTypeReqDescription
adAccountIdstring
adGroupIdstringyes
bidAmountnumber
bidStrategystring
bidTypestring
budgetnumber
endTimestring
goalTypestring
namestring
savedAudienceIdstring
schedulearray
startTimestring
targeting
NameTypeReqDescription
budget
idstring
namestring
notestring
statusstring

No examples provided.

update_reddit_ads_audience_users ~248

No description provided.

NameTypeReqDescription
actionstring
adAccountIdstring
customAudienceIdstringyes
usersarrayyes
NameTypeReqDescription
actionstring
customAudienceIdstring
notestring
okboolean
rowsnumber
sizeUpper

No examples provided.

update_reddit_ads_campaign ~147

No description provided.

NameTypeReqDescription
adAccountIdstring
budgetnumber
campaignIdstringyes
endTimestring
goalTypestring
namestring
spendCapnumber
startTimestring
NameTypeReqDescription
idstring
namestring
notestring
statusstring

No examples provided.

update_reddit_ads_post ~94

No description provided.

NameTypeReqDescription
adAccountIdstring
allowCommentsboolean
bodystring
headlinestring
postIdstringyes
NameTypeReqDescription
headlinestring
idstring
notestring

No examples provided.

update_reddit_ads_saved_audience ~118

No description provided.

NameTypeReqDescription
adAccountIdstring
namestring
savedAudienceIdstringyes
targeting
NameTypeReqDescription
activeAdGroups
idstring
namestring
notestring
statusstring

No examples provided.

update_settings ~167

No description provided.

NameTypeReqDescription
languagestring
themestring
watchEmailboolean
NameTypeReqDescription
changedarray
languagestring
notifications
okboolean
themestring

No examples provided.

update_youtube_video ~181

No description provided.

NameTypeReqDescription
descriptionstring
privacystring
tagsarray
titlestring
videoIdstringyes
NameTypeReqDescription
privacystring
titlestring
urlstring
videoIdstring

No examples provided.

upgrade_plan ~186

No description provided.

NameTypeReqDescription
periodstring
planstring
NameTypeReqDescription
actionstring
chargeUsdnumber
guidancestring
modestring
monthlyUsdnumber
periodstring
planstring
planLabelstring
plansarray
urlstring

No examples provided.

upload_file ~240

No description provided.

NameTypeReqDescription
dataUristring
namestring
pathstring
NameTypeReqDescription
bytesnumber
kindstring
urlstring

No examples provided.

upload_google_ads_asset ~227

No description provided.

NameTypeReqDescription
customerIdstring
imageUrlstring
loginCustomerIdstring
namestring
youtubeVideoIdstring
NameTypeReqDescription
assetResourceNamestring
kindstring
okboolean

No examples provided.

upload_meta_asset ~237

No description provided.

NameTypeReqDescription
adAccountIdstringyes
kindstring
namestring
urlstring
urlsarray
NameTypeReqDescription
assetsarray
hashstring
kindstring
okboolean
videoIdstring

No examples provided.

upscale_video ~42

No description provided.

NameTypeReqDescription
videostringyes
NameTypeReqDescription
jobIdstring
model
raw
stillRenderingboolean
url

No examples provided.

use_brand ~142

No description provided.

NameTypeReqDescription
brandstringyes
NameTypeReqDescription
brand
okboolean
sharedboolean

No examples provided.

x_mentions ~167

No description provided.

NameTypeReqDescription
maxResultsnumber
paginationTokenstring
sinceIdstring
NameTypeReqDescription
accountstring
costCreditsnumber
countnumber
mentionsarray
nextToken

No examples provided.

x_post_insights ~163

No description provided.

NameTypeReqDescription
granularitystring
idsarrayyes
NameTypeReqDescription
costCreditsnumber
errorsarray
granularitystring
postsarray

No examples provided.

x_post_insights_historical ~259

No description provided.

NameTypeReqDescription
endDatestring
granularitystring
idsarrayyes
startDatestring
NameTypeReqDescription
costCreditsnumber
endTimestring
errorsarray
granularitystring
postsarray
startTimestring

No examples provided.

x_post_metrics ~102

No description provided.

NameTypeReqDescription
idstringyes
NameTypeReqDescription
bookmarks
costCreditsnumber
idstring
impressions
likes
postedAt
quotes
replies
reposts
textstring
urlstring

No examples provided.

youtube_channel ~36

No description provided.

Input schema present but exposes no named parameters.

NameTypeReqDescription
idstring
subscribersstring
titlestring
videosstring
viewsstring

No examples provided.

youtube_video_insights ~197

No description provided.

NameTypeReqDescription
endDatestring
startDatestring
videoIdstringyes
NameTypeReqDescription
averageViewDurationnumber
averageViewPercentagenumber
commentsnumber
endDatestring
estimatedMinutesWatchednumber
likesnumber
sharesnumber
startDatestring
subscribersGainednumber
urlstring
videoIdstring
viewsnumber

No examples provided.