[tiktok-for-business] Add TikTok for Business plugin

[liam-ilan]

Add TikTok for Business plugin

TikTok has a hosted MCP server for TikTok Ads, but there is no plugin for it yet.

Changes

• Add a tiktok-for-business plugin in third_party/tiktok-for-business/. It uses TikTok's Progressive Disclosure server, https://business-api.tiktok.com/open_mcp/tt-ads-mcp-layer, which loads about 40 core tools up front and the rest of its roughly 400 tools when needed.
• Users sign in with their TikTok for Business account, so there is no key or developer app to set up. Sign-in lasts 30 days.
• Add TikTok's official app icon, a README, a CHANGELOG, and a LICENSE.
• List the plugin in .cursor-plugin/marketplace.json and the main README table.

Notes

• Some tools create and change campaigns, ad groups, and ads, which can spend ad budget. The README tells users to review every tool call.
• Checked the server: without sign-in it returns 401 and points to its sign-in metadata. That metadata is found at …/oauth/.well-known/openid-configuration and lists client self-registration and PKCE.
• TikTok's consent page does not restrict form-action, so local and app return addresses should not be blocked.
• node scripts/validate-plugins.mjs passes.
• Not yet tested: a full sign-in from Cursor or Grok Bot, and the tool list you see after sign-in.

---

Note

Medium Risk
New third-party ads connector exposes write tools that can change live campaigns and spend budget; marketplace listing only, but users must review tool approvals carefully.

Overview
Adds a new tiktok-for-business Cursor integration plugin that wires agents to TikTok’s hosted HTTP MCP server (tt-ads-mcp-layer) for Ads Manager workflows—campaigns, ad groups, ads, audiences, creatives, and reporting.

The plugin ships under third_party/tiktok-for-business/ with manifest, mcp.json, README (OAuth/PKCE sign-in, no API keys), CHANGELOG, LICENSE, and logo, and is registered in .cursor-plugin/marketplace.json and the root README plugin table. Unlike some ad plugins, mcp.json is URL-only; auth is described as TikTok OAuth at connect time.

^{Reviewed by Cursor Bugbot for commit 0096d94. Bugbot is set up for automated code reviews on this repo. Configure here.}