Connect Cursor to TikTok

Can Cursor post to TikTok?

Postgale is the secure layer for AI agents on social media. MCP (Model Context Protocol) is the open standard that lets AI assistants such as Claude and Cursor use outside tools. An MCP server is what they connect to. Cursor does not reach TikTok on its own; with Postgale connected it gets tools for the TikTok accounts you connected and nothing else.

What do you need?

• A TikTok account; the creator signs in once with TikTok and grants video publishing.
• A Postgale workspace, and a sign-in or an API key for the agent.
• A video (MP4) or 1 to 35 photos on a public HTTPS URL that TikTok accepts (TikTok verifies the media domain).
• Cursor, set up as below (Cursor’s agent with MCP).

Step 1: connect your TikTok account

1. Create a Postgale workspace and open Dashboard → Accounts.
2. Choose Connect TikTok and sign in with the account you own, on the platform’s own page. Postgale stores the tokens encrypted and refreshes them.

Step 2: connect Cursor to Postgale

1. Create a Postgale workspace and connect the social accounts the agent may use under Dashboard → Accounts.
2. In Cursor, open Settings → MCP and add a server, or edit .cursor/mcp.json in the project (or ~/.cursor/mcp.json for every project). The URL alone is enough:

{
  "mcpServers": {
    "postgale": {
      "url": "https://postgale.com/mcp"
    }
  }
}

1. Cursor shows a sign-in prompt for the server. A Postgale page opens in the browser: sign in, pick the workspace the app may use and approve. The consent page names the app and where it returns to; approve only requests you started yourself.
2. Cursor lists the Postgale tools under the server once it connects; enable them for the agent.
3. In the agent chat, ask: “Which social accounts are connected in Postgale?” to check the connection.

Can I use an API key instead?

Yes, for shared or automated setups where nobody should sign in personally. In Postgale, open Dashboard → API keys, create a key and copy it (it starts with sk_ and is shown once). Connect the social accounts the agent may use under Dashboard → Accounts. Then add a headers block:

{
  "mcpServers": {
    "postgale": {
      "url": "https://postgale.com/mcp",
      "headers": {
        "Authorization": "Bearer sk_…"
      }
    }
  }
}

Keep the key out of version control: use the global file, or an environment variable if your Cursor version supports ${env:…} in mcp.json.

What can I ask Cursor to do on TikTok?

Check the connection first: “Which TikTok accounts are connected in Postgale?” Then, in plain language:

Ask your agent“Upload this video to TikTok with the caption “Behind the scenes of the fall shoot”. I’ll choose the privacy setting.”

Ask your agent“Write three caption options for this TikTok clip and save the best one as a draft.”

Ask your agent“How did our last five TikTok videos do? Show views and likes.”

{
  "content": "Three fabrics, one cut.",
  "platforms": [
    {
      "accountId": "acc_tiktok",
      "platformSpecificData": {
        "mediaUrl": "https://media.example.com/fall-drop.mp4",
        "privacyLevel": "PUBLIC_TO_EVERYONE",
        "disableComment": false,
        "disableDuet": true,
        "disableStitch": true
      }
    }
  ],
  "publishNow": true
}

Which TikTok rules does Postgale enforce?

• Privacy level is mandatory and must be one of the levels TikTok returns for that creator. There is no default.
• Comment, duet and stitch are off unless the person turns them on, as TikTok’s guidelines require. Stitch stays off when the creator’s settings disable it.
• Branded content cannot be posted as private. Postgale rejects that combination before calling TikTok.
• Media must come from a URL prefix TikTok has verified for the app; unverified URLs are refused early with the reason.
• Until TikTok has audited the app, TikTok only allows private posts, to private accounts, for a limited number of creators per day. Postgale applies that rule and explains it instead of letting the post fail silently.
• Access tokens last 24 hours and refresh tokens rotate; Postgale refreshes before expiry and stores the rotated token.

How do I keep a person in the loop?

• Approval: tick “Hold posts from this app for approval” when you sign in, or in the Postgale dashboard require approval for the API key the agent uses (or for the whole workspace, or one account). Posts then wait as pending approval; comment replies and moderation, direct messages, WhatsApp sends and edits to live posts wait in the same queue. A person approves, edits or rejects each one in Dashboard → Approvals; the agent’s own key or sign-in cannot approve.
• Tool annotations: every Postgale tool declares whether it only reads, writes, or publishes live, deletes or spends. Clients that honour annotations ask before destructive tools run.
• Audit log: every write the agent makes is recorded with the key or the connected app, the action and the time.
• Revoking: each sign-in appears under Dashboard → Connected apps and each key under Dashboard → API keys; either can be revoked at any time.

What can’t an agent do on TikTok through Postgale?

• Read or reply to TikTok comments, or send TikTok messages. Postgale’s TikTok integration covers publishing and video analytics.
• Publish publicly from an app TikTok has not audited yet. That restriction is TikTok’s and applies to every tool.
• Post from a URL on a domain TikTok has not verified for the app.

Common questions