Code Pluginsource linked

社媒数据助手 抖音 MCP | Douyin MCPv0.2.6

SocialDataX / 社媒数据助手 为抖音 / Douyin 提供社媒研究支持:热榜、作品搜索、作品详情、评论回复、达人信息、达人作品和短剧/合集。

douyin-insights-openclaw-plugin·runtime douyin-insights-openclaw-plugin·by @devinchen2014
Community code plugin. Review compatibility and verification before install.
openclaw plugins install clawhub:douyin-insights-openclaw-plugin
Latest release: v0.2.6Download zip

Capabilities

configSchema
Yes
configUiHints
Yes
Executes code
Yes
HTTP routes
0
Providers
douyin-insights
Runtime ID
douyin-insights-openclaw-plugin

Compatibility

Built With Open Claw Version
2026.5.9
Plugin Api Range
>=2026.0.0
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
Purpose & Capability
The manifest, README, and code consistently describe a Douyin social-media research plugin that exposes read-only lookup, search, comments, profile, and series tools; the code forwards those tool calls to a fixed hosted MCP endpoint and does not implement posting, editing, login, local file access, or destructive behavior.
Instruction Scope
Tool schemas are narrow and purpose-aligned, but the artifacts do not fully explain what prompt/query data, URLs, profile identifiers, or returned social-media data the hosted service may retain or process.
Install Mechanism
The package contains only the plugin manifest, README, license, package metadata, and a JavaScript extension; there are no install scripts or hidden files in the tarball, but the MCP SDK dependency is specified with a caret range rather than pinned exactly.
Credentials
Requiring Node, a SocialDataX API key, and network access to https://mcp.52choujiang.com is proportionate for a hosted MCP connector, though users should treat all submitted Douyin keywords, URLs, and identifiers as sent to that third-party service.
Persistence & Privilege
Activation is not on startup, there is no background worker, persistence mechanism, privilege escalation, endpoint override, filesystem mutation, or credential-store scraping; the plugin reads only declared API key environment variables for authorization.
Scan Findings in Context
[SQP-2] expected: The external MCP endpoint and API-key flow are expected for this connector and are disclosed, but the scanner's privacy-transparency concern is valid because the artifacts lack retention/operator/jurisdiction details for submitted research queries and Douyin identifiers.
[SC1] expected: Using the MCP SDK is expected for an MCP forwarding plugin; the unpinned caret dependency is a supply-chain hygiene issue, not evidence of malicious behavior in the reviewed artifact.
Assessment
Install only if you are comfortable sending Douyin search terms, profile or video URLs, IDs, and related lookup data to the SocialDataX hosted endpoint using your API key. Avoid submitting sensitive research queries, and prefer a release with clearer privacy terms and pinned dependencies for stricter environments.

Verification

Tier
source linked
Scope
artifact only
Summary
Validated package structure and linked the release to source metadata.
Commit
8274047
Tag
main
Provenance
No
Scan status
clean

Tags

latest
0.2.6

社媒数据助手 抖音 MCP | Douyin MCP

This directory contains an OpenClaw native plugin shim for the hosted 抖音 MCP service by SocialDataX.

The plugin registers namespaced OpenClaw tools and forwards each call to a remote, read-only streamable-http MCP endpoint:

  • Endpoint: https://mcp.52choujiang.com/douyin/mcp
  • API key environment variable: SOCIALDATAX_API_KEY
  • Product: SocialDataX / 社媒数据助手
  • Website: https://socialdatax.com
  • Package name: douyin-insights-openclaw-plugin
  • Version: 0.2.6
  • Search terms: Douyin, 抖音, social media research, Douyin content insights, hot search, video and image/text works, creator analytics, comments, comment replies, creator profiles, creator short-drama series

Capabilities

The hosted Douyin MCP supports read-only social media intelligence workflows:

  • Search related Douyin works by keyword.
  • Fetch the current Douyin main hot search list.
  • Resolve Douyin content page links, short links, share text, or aweme IDs into structured details.
  • Fetch work details, first-level comments, and comment replies.
  • Read creator profile information.
  • Fetch creator work lists for content style and account research.
  • Fetch creator short-drama series lists.

The service does not provide account login, posting, editing, liking, commenting, or other account actions.

Plugin Structure

This package uses the native OpenClaw plugin path:

  • openclaw.plugin.json declares the native plugin manifest and tool contracts.
  • package.json declares the OpenClaw extension entry and MCP SDK dependency.
  • index.js registers thin forwarding tools that call the hosted MCP service.
  • Runtime metadata declares the required node binary, SOCIALDATAX_API_KEY, and the hosted MCP service domain.

It intentionally does not include .codex-plugin/ or .mcp.json, because OpenClaw gives openclaw.plugin.json native-plugin precedence when both marker types are present.

API Key

Set the shared API key before using this plugin:

export SOCIALDATAX_API_KEY="<SOCIALDATAX_API_KEY>"

The key is sent as:

Authorization: Bearer ${SOCIALDATAX_API_KEY}

The plugin sends the key only to the fixed endpoint https://mcp.52choujiang.com/douyin/mcp. It does not support overriding the endpoint URL.

Do not commit real API keys to code, docs, issues, or screenshots.

Tool Names

The native plugin registers namespaced tool names that match the earlier MCP server prefix convention. For example, the remote MCP tool douyin_search_videos is exposed as:

douyin-insights__douyin_search_videos

Publishing Check

Use ClawHub dry-run before publishing:

source ~/.nvm/nvm.sh
nvm use 24.13.0
clawhub package publish <public-checkout>/douyin-insights-openclaw \
  --family code-plugin \
  --name douyin-insights-openclaw-plugin \
  --display-name "社媒数据助手 抖音 MCP | Douyin MCP" \
  --version 0.2.6 \
  --source-repo <public-owner/public-repo> \
  --source-commit <public-commit-sha> \
  --source-path douyin-insights-openclaw \
  --dry-run \
  --json

Publish from a public GitHub source or pass explicit public --source-repo, --source-commit, and --source-path values. Do not publish from a private source checkout.