Connections & Capabilities
Connects To
Capabilities
Quickstart
Install
npm install -g @wenyan-md/mcpConfig
{
"mcpServers": {
"wenyan-mcp": {
"name": "公众号助手",
"command": "wenyan-mcp",
"env": {
"WECHAT_APP_ID": "your_app_id",
"WECHAT_APP_SECRET": "your_app_secret"
}
}
}
}Exposed MCP Tools (4)
list_themesLists available themes for publishing articles.
Read-only operation, no side effects.
register_themeRegisters a new theme based on a provided CSS URL.
Adds a new theme, but doesn't directly modify existing content. Risk of malicious CSS.
delete_themeDeletes a previously registered theme.
Removes a theme, potentially affecting future publications.
publish_articlePublishes a Markdown article to a WeChat official account.
Writes content to a live platform, potentially affecting a large audience.
Safety Assessment
Wenyan MCP server's safety depends on proper configuration and secure handling of WeChat credentials. Publishing articles carries inherent risks, but the limited scope of actions reduces the attack surface. Using Docker improves isolation, but the underlying WeChat API remains a potential vulnerability.
- Requires explicit configuration of WeChat credentials.
- Docker deployment option provides environment isolation.
- Limited set of specific actions: listing themes, registering themes, deleting themes, and publishing articles.
- Relies on WeChat's own security measures for published content.
- Writes to WeChat's platform, potentially affecting a live audience.
- Requires providing WeChat App ID and App Secret, which must be protected.
- Improperly configured themes could lead to unexpected formatting or security issues.
- No explicit input validation or sanitization mentioned for Markdown content.
