wenyan-mcp

MCP server · GitHub · ★ 1.4k · graded 2026-10-22Source linked

文颜 MCP Server 可以让 AI 自动将 Markdown 文章排版后发布至微信公众号。

No outside reports on file

Only use this if you fully trust the developer, keep WeChat credentials in a secure vault, and never let this tool access untrusted Markdown files.

Based on public adoption and transparency signals as of Oct 22, 2026. Our opinion, not a code audit or security guarantee.

Was this verdict for Wenyan MCP helpful?

What it can access

Local filesReads local filesNOTED
Command executionNo shell command runner notedLOW
Network reachConnects to outside service APINOTED
CredentialsNo API token requiredLOW
Package sourceGitHub (caol64/wenyan-mcp)PUBLIC

Inferred from this listing’s public package details and description. Check the project’s source before installing.

Install

No npm or PyPI package is listed. Install from source: github.com/caol64/wenyan-mcp ↗

All setup options ↓

Check this skill Watch it in my stack Compare README badge View project

Everything known

We found nothing about this project in the sources we read (last checked 2026-10-30). That does not mean it has no problems.

0 incidents · 0 advisories · 0 news articles · 0 community threads · checked 2026-10-30

Popularity grade: C (from public signals such as stars and downloads, not a code review). Graded 2026-10-22.

Sources we read: OSV, GitHub Advisory Database, CISA Known Exploited Vulnerabilities, 44 security news feeds and our incident library. Last checked 2026-10-30.

Check a specific version →

About Wenyan MCP

This MCP server lets AI automatically format Markdown articles and publish them to WeChat Official Accounts (a Chinese social media platform). It connects AI tools to WeChat's publishing system so articles can be sent out without manual steps.

Who it’s for

Content creators and teams in China or using WeChat who want to automate publishing workflows. Users need WeChat Official Account credentials and familiarity with MCP server setup.

Alternatives

Zapier + WeChat integration: No-code automation platform with WeChat connectors (requires Zapier account).
IFTTT: Simple automation for social media posting (cloud-based, limited customization).
WeChat's native scheduling tools: Built-in publishing features in WeChat Official Account backend (no AI automation).

Setup

Check these steps against the project’s own instructions before running anything.

Follow the project's README at https://github.com/caol64/wenyan-mcp (opens external site) for detailed installation and configuration instructions specific to your system and WeChat account setup.

Why this grade

CC — Moderate risk signals

Signal-based grade (3/7 points): well starred on GitHub, public source code. This reflects adoption and transparency, not a code review.

Popularity and upkeep

34/100

GitHub stars: 1.4k
Listing last refreshed: 2026-10-29

These are public popularity signals, not a maintenance check. Look at the repository’s commit history and open issues.

Risks to watch for

WeChat credential exposure: Requires storing WeChat API keys or authentication tokens; if leaked, attackers can publish to your account or access your followers.
AI sees sensitive content: The AI processes your Markdown articles and account details, which could expose private information if the AI system is compromised.
Malicious formatting tricks: A attacker could inject hidden code or formatting in Markdown that tricks the AI into publishing unwanted content to your audience.
No access controls shown: The description doesn't explain what permissions the tool actually requests from WeChat or how it limits what the AI can do.
Unverified project: 0 npm downloads and limited public usage make it hard to confirm if security issues exist.

How to lower the risk

Least-privilege permissions

Create a dedicated WeChat account or use a separate app password just for this tool.
Never give it admin rights to your main WeChat account if possible.

Network isolation

Run the MCP server on a trusted machine, not shared or public servers.
Restrict network access to only required WeChat endpoints.

Monitoring

Check your WeChat Official Account publish history regularly for unexpected posts.
Enable login alerts on your WeChat account.

Red flags to watch for

Slow or frozen responses (could mean the tool is exfiltrating data).
Unexpected posts appearing without your approval.
The tool requesting credentials beyond WeChat API keys.

Questions

How do I install Wenyan MCP?

Wenyan MCP does not publish a standalone npm or PyPI package. Clone or follow the setup instructions in its source repository at github.com/caol64/wenyan-mcp.

Are there security reports about Wenyan MCP?

No reports found for this package in our research (last checked 2026-10-30). Wenyan MCP currently holds Grade C (Moderate risk signals) based on public adoption and transparency signals. Key risk areas to watch include wechat credential exposure, ai sees sensitive content, malicious formatting tricks.

Is Wenyan MCP actively maintained?

Wenyan MCP has 1.4k GitHub stars. Our directory data was last refreshed on 2026-10-29. Check recent commit activity, release tags, and open issues at github.com/caol64/wenyan-mcp before pinning it in production.

What are alternatives to Wenyan MCP?

Notable alternatives to Wenyan MCP include Zapier + WeChat integration (No-code automation platform with WeChat connectors (requires Zapier account)), IFTTT (Simple automation for social media posting (cloud-based, limited customization)), WeChat's native scheduling tools (Built-in publishing features in WeChat Official Account backend (no AI automation)). You can also compare Wenyan MCP side by side with other MCP servers in the Related tools section on this page.

Maintain or use Wenyan MCP? Show its live grade in your GitHub README, docs site, or run a check from the terminal before you install.

AgentArmorHQ Risk Grade C for Wenyan MCP

GitHub README Markdown:

markdown

[![AgentArmorHQ Risk Grade for Wenyan MCP](https://agentarmorhq.com/api/badge/caol64-wenyan-mcp)](https://agentarmorhq.com/skills/caol64-wenyan-mcp)

HTML embed:

html

<a href="https://agentarmorhq.com/skills/caol64-wenyan-mcp"><img src="https://agentarmorhq.com/api/badge/caol64-wenyan-mcp" alt="AgentArmorHQ Risk Grade for Wenyan MCP" height="20" /></a>

Terminal check:

terminal

curl -fsSL https://agentarmorhq.com/api/cli | node --input-type=module - check "caol64-wenyan-mcp"

Share with your security lead

Need sign-off to use wenyan-mcp? Copy this note for Slack, a ticket or a pull request.

### AgentArmorHQ Security Review Memo: wenyan-mcp
- **Listing URL:** https://agentarmorhq.com/skills/caol64-wenyan-mcp
- **Type:** App connector
- **Risk Grade:** Grade C (Moderate risk signals)
- **Outside Security Advisories on File:** 0
- **Public Adoption:** 1.4k GitHub stars

#### Permission & Blast-Radius Signals
- **Local files:** Reads local files
- **Command execution:** No shell command runner noted
- **Network reach:** Connects to outside service API
- **Credentials:** No API token required
- **Package source:** GitHub (caol64/wenyan-mcp)

#### Recommended Hardened Setup
- **Source Repo:** https://github.com/caol64/wenyan-mcp
- **Controls:** Pin an exact version in `.mcp.json`, scope access to a single workspace folder, and use a least-privilege read-only token where supported.

_Based on public adoption and transparency signals as of Oct 22, 2026. Our opinion, not a code audit or security guarantee._

Key facts

Type: App connector
Publisher: caol64
Source code: github.com/caol64/wenyan-mcp
Est. context load: ~850 tokens / turn (~5 tool schemas, 0.43% of 200k context)
Popularity: 1.4k GitHub stars
Last updated: 2026-10-29
Last graded: 2026-10-22

Community

Discussions for Wenyan MCP

Ask questions or share configuration tips. Governed by our Community Rules & Terms.

No posts match this filter yet.

Be the first to ask a question or share a working tip.

Was this listing for Wenyan MCP helpful?

Check before you install, in Claude

Your assistant answers Block, Review or No known issues for any package before it installs it.

Get this check inside Claude