Privacy

Local MCP server

The MCP server runs on your computer over stdio and calls TikTok’s official APIs after you configure authorization. Sarztech does not operate a remote MCP server or keep a server-side database or history of fetched metrics.

With the default file backend, credentials are stored at ~/.config/tiktok-studio-mcp/credentials.json. The file can contain your TikTok client key, client secret, refresh token, granted scopes and account identifier (open_id). New directories are created with 0700 permissions and credential files with 0600; the file is not encrypted at rest. Access tokens are held in process memory while the server runs.

Post captions and current lifetime counters are fetched from TikTok and returned to your MCP client when requested. The server does not keep a separate metrics history.

Services that may receive data

TikTok receives authorization and API requests, account identifiers and requested post IDs. Confirmed video uploads send the selected media and posting settings to TikTok; photo requests send their public image URLs and post text. Your MCP client receives tool results and may pass prompts and results to its configured model provider under that provider’s privacy policy. The MCP server does not add a separate AI API.

This website is a static site hosted by Cloudflare. Its code does not set cookies or run analytics, forms or client-side scripts. Cloudflare may process ordinary technical request information under its own privacy policy.

Removing access

With the default file backend, stop the server and delete the credentials file to remove this installation’s saved credentials; deletion does not revoke the TikTok authorization or clear a running process’s in-memory token. Revoke the app in your TikTok account settings to end that grant. If you configured another credentials backend, remove its saved values there too.

Chat transcripts and model-provider history are controlled separately through your MCP client and provider.

Contact

The operator is available through the public @sarztech TikTok profile. Do not send credentials, tokens or private account screenshots.