Hermoso is a marketing MCP server: 718+ tools over one OAuth’d endpoint that let an agent research the ads already running in a market, generate finished image and video ads, publish them, and build the paid campaigns behind them. Grok Bot reaches all of it through one connection. This page is about one slice of that — what Grok Bot can actually do on TikTok, and what TikTok will not let it do.
Connect Hermoso to Grok Bot
- Install and sign in.
Your browser opens once. Nothing to create and nothing to paste: the credential is stored owner-only innpm install -g hermoso && hermoso auth login~/.hermoso/config.json. On a machine with no browser,hermoso auth login --token hmk_…takes a key from Settings → Agents & API keys instead. - Add the server. One command, and no key in any file, because
hermoso mcpreads the sign-in above:
Or write it intogrok mcp add hermoso -- npx -y hermoso mcp~/.grok/config.tomlyourself:[mcp_servers.hermoso] command = "npx" args = ["-y", "hermoso", "mcp"] - Or use the hosted endpoint, which installs nothing:
x.ai documents what happens next: servers that require OAuth trigger a browser flow on first use, and the tokens are stored undergrok mcp add --transport http hermoso https://app.hermoso.ai/mcp~/.grok/mcp_credentials.json. You never hold a key either way. - Ask a Bot for something. “Pull my three closest competitors’ longest-running ads and remix the best hook into a 9:16 video,” or “post this render to the channel.” The agent picks the tools; you approve the spend.
Hermoso is not affiliated with or endorsed by xAI and does not claim to be. The command shapes, the config.toml keys and the OAuth behaviour above are quoted from x.ai’s own MCP server reference, read on 2026-08-27. Two things worth knowing before you pick a form: --scope project writes .grok/config.toml next to a repo instead of your home directory, which is the right choice when one project should always run against one brand, and /mcps in the TUI opens the MCP tab of the extensions modal if you would rather see the server listed than trust that it registered.
Then connect TikTok itself, once, under Settings → Connectors in Hermoso. That is an OAuth consent screen, so it is the one step that needs a browser — everything after it is a tool call.
The TikTok tools Grok Bot gets
post_to_tiktok— uploads a finished video, or a photo post of up to 35 images, either straight to the profile or into your TikTok drafts. It also carries the interaction settings — comments, duet, stitch — the cover frame, and the branded-content disclosure.schedule_post— queues it for later on the shared calendar.tiktok_account / tiktok_creator_info— the account’s bio, verification, follower and video counts, and what privacy levels the account itself allows.list_tiktok_videos— recent posts with views, likes, comments and shares.search_tiktok— keyword search across public TikTok — the research half.
Two more operational facts. TikTok photo posts are pulled from a URL rather than uploaded, so the host serving the images has to be verified in TikTok’s developer portal before photo posts can go out at all. And there are no TikTok comment or moderation tools here — publishing and reading are covered, replying is not.
TikTok limits worth knowing before you automate anything
| Text | A TikTok video caption is capped at 2,200 characters, a photo-post caption at 4,000, and a photo title at 90. It is enforced when the post is created or queued — refused while you are still there to fix it, rather than silently cut on the way out. |
|---|---|
| Visibility | This is the one to read before you plan anything. TikTok’s content-sharing guidelines restrict an unaudited app to self-only posts, TikTok enforces it at post time, and Hermoso refuses up front rather than failing hours later: “until the app passes TikTok’s review, their content-sharing guidelines restrict it to SELF_ONLY (private-to-you) posts. Two things that DO work right now: post with privacy SELF_ONLY, or send it to TikTok drafts (destination 'draft') and publish it yourself in the app.” Hermoso has not passed TikTok’s review yet, so that is today’s behaviour — and the scheduler removes public from TikTok’s options at enqueue rather than accepting a schedule that is guaranteed to fail. |
| Carousel | Up to 35 images as a TikTok photo post, images only. That number is TikTok’s: “An array containing up to 35 photo content URLs.” The order is the slideshow, so slide order is the product. One image is simply a one-slide post, not a refusal. |
| Which account | None — TikTok publishes to the connected account. |
Try it in Grok Bot
Ask for it in ordinary language — these are sentences, not a DSL:
“Each week, render three hook variations from whatever angle is working and upload all three to my TikTok drafts with captions.”
That walks search_tiktok → plan_ad → render_ad → post_to_tiktok. Approval is Grok Bot’s setting rather than ours, and the shared machine is the reason to think about it: isolation is per user, not per Bot, so anything one Bot connects, every Bot on that machine can reach. What Hermoso enforces underneath, whichever way you set it, is the spend fence. Every campaign object is created paused, and the only switches that arm real money refuse to run without an explicit confirmation flag.
Grok Bot on TikTok: the part that bites
Design the human tap into the job rather than around it. Hermoso is unaudited, so TikTok accepts only self-only posts from it, and drafts are the path that produces something you can actually publish. Three drafts a week that you clear in two minutes on your phone is a real workflow. A fully autonomous public TikTok pipeline is not available from any unaudited app, and a Bot retrying will not make it one.
On a team plan the server URL may need to go on your MCP allowlist before a Bot can reach it, which is an admin action rather than a failure. And for a long unattended run the hermoso CLI is the cheaper path: the agent shells out per command instead of carrying a 718-tool manifest through every turn of a job that might run for days.
Research TikTok before you post
There is no TikTok ad library to search the way Meta’s can be searched, so TikTok research is organic: search_tiktok finds what is working by keyword, and analyze_video will pull a clip apart into its hook, beats and on-screen text so the pattern can be reused rather than guessed at.
The paid half
TikTok Ads is one of the nine paid platforms Hermoso builds and reads campaigns on, and it is a separate connection from the organic one — the Marketing API approval that carries campaigns is not the content-sharing audit that governs posting, so the two halves of TikTok can be in different states at the same time. Hermoso says which is which rather than letting one imply the other. Campaigns are created paused on TikTok exactly as they are everywhere else, and only a confirm-gated status switch arms real money.
What Grok Bot cannot do on its own
An agent with a budget is only useful if the blast radius is bounded, so the fence is in the server rather than in a prompt. Every ad campaign, ad set, ad group and ad is created paused, and the status switches that arm real money refuse to run without an explicit confirmation flag. Every render is quoted first — hermoso_capabilities publishes each model’s exact credit cost before anything spends — and credits are reserved before the first provider call and settled at the exact cost afterwards, so a failed dispatch refunds rather than leaving you billed for nothing. Deletes are confirm-gated too, and every campaign tree is read back from the ad platform before your agent tells you what it built.
One step is deliberately not headless: linking an account is an OAuth consent screen, so you connect the channel once in a browser. Everything after that is a tool call.
The rest of the matrix
From Grok Bot, post to: Facebook · Instagram · Threads · YouTube · X · LinkedIn · Pinterest — or see everything Grok Bot can publish to.
Post to TikTok from: Claude · ChatGPT · Claude Code · Cursor · Codex · Cline · OpenClaw · Hermes
Frequently asked questions
Can Grok Bot post to TikTok?
Yes, through Hermoso's MCP server. Run npm install -g hermoso && hermoso auth login, then grok mcp add hermoso -- npx -y hermoso mcp. The browser sign-in stores the credential, so no key goes in config.toml. Grok Bot then has 718+ tools, including the ones that publish to TikTok — and the ones that research the ads already running in your market and render the creative in the first place.
How do I connect TikTok to Grok Bot?
Two steps, once each. Run npm install -g hermoso && hermoso auth login, then grok mcp add hermoso -- npx -y hermoso mcp. The browser sign-in stores the credential, so no key goes in config.toml. Then connect TikTok inside Hermoso under Settings → Connectors, which is an OAuth consent screen in a browser. After that Grok Bot publishes to TikTok as an ordinary tool call.
Can Grok Bot post privately or as a draft to TikTok?
Yes, and right now that is the point. While Hermoso is unaudited, TikTok accepts only a self-only (private to you) post from it, or an upload into your TikTok drafts that you publish yourself in the app. Hermoso refuses a visibility TikTok cannot honour at the moment you ask for it, rather than quietly publishing something weaker.
Can Grok Bot run TikTok ads as well as posting?
Yes — TikTok Ads is one of the nine paid platforms Hermoso manages, and it connects separately from organic TikTok publishing. The two are governed by different TikTok approvals, so one can be available while the other is still limited; Hermoso reports each honestly instead of inferring one from the other. Campaigns are created paused, and arming spend takes an explicit confirmation.
Start free — 25 credits at signup and 250+ more to earn, and every feature on every plan.
Start free → See pricing