November 5, 2026 · Ahmed · More by Ahmed
TikTok's First Agent-to-Agent Ads Diagnosis Tool
TikTok shipped MCP Authorization and its first Agent-to-Agent tool, tiktok_ads_diagnosis_agent — what the OAuth flow requires and what it diagnoses.
In August 2026, TikTok for Business shipped MCP Authorization — a set of endpoints for connecting a custom AI agent to TikTok's Model Context Protocol (MCP) server — alongside its first Agent-to-Agent (A2A) tool, tiktok_ads_diagnosis_agent. For teams building AI agents or automation tools against TikTok's advertising APIs, including anyone building ad tooling that talks to the TikTok Ads API, this is worth reading past the headline: the authorization mechanics and the precise scope of that first diagnosis tool are both more specific than "TikTok has an MCP server now."
MCP Authorization Is Its Own Endpoint Group
MCP Authorization sits on top of two selectable MCP server URLs — tt-ads-mcp-flat and tt-ads-mcp-layer — and covers the full OAuth-style lifecycle: authorization server metadata and discovery, client registration, user authorization, code-for-token exchange, token refresh, and token revocation. Each token request binds to one specific server path, so a token issued against tt-ads-mcp-layer doesn't work against tt-ads-mcp-flat.
The Token Exchange Uses PKCE
Exchanging an authorization code for tokens requires a code_verifier alongside the code itself: TikTok's server hashes the verifier with SHA-256 and compares it to the original code_challenge from the authorization request before issuing anything. Get it wrong and the token endpoint returns invalid_grant with code_verifier does not match code_challenge — along with distinct error messages for a missing grant_type, code, code_verifier, or redirect_uri, an unsupported grant type, an expired code, a mismatched redirect_uri, or a token bound to the wrong server. The access token comes back scoped to mcp:tt4b, which the docs describe only as the permissions needed to access TikTok for Business MCP server features — there's no finer-grained breakdown of what that single scope actually grants.
What tiktok_ads_diagnosis_agent Actually Covers
tiktok_ads_diagnosis_agent, announced the same day as MCP Authorization, is TikTok's first A2A tool: a hosting agent can invoke it to get natural-language diagnosis of performance issues, generated by TikTok's own diagnosis models rather than a third party's. The documented scope is specific — it troubleshoots non-GMV Max ad accounts. TikTok's docs don't say whether or when GMV Max account diagnosis is coming; they're simply silent on it, which is a meaningfully different thing from "not supported."
A Marketplace for MCP Servers Followed Two Months Later
TikTok added a separate capability on October 30, 2026: registering and managing third-party MCP servers through a "My Agentic Hub" module in the developer portal, letting developers publish their servers to what TikTok calls a centralized marketplace for AI-powered automated advertising solutions. That's a distinct launch from the August MCP Authorization and A2A work — TikTok also shipped integration guides for connecting its MCP server to Claude, ChatGPT, and Cursor in October, along with a best-practices guide for tool usage in custom agents.