# wxapkg-mcp

Small MCP server for local `.wxapkg` inspection, decryption, and extraction.

This project was generated entirely by AI.

Use only on packages you own or are authorized to analyze. Do not commit or redistribute third-party Mini Program packages or extracted source code.

By default on Windows, the tool searches:

```text
%APPDATA%\Tencent\xwechat\radium\users\*\applet\packages
```

That keeps user-specific IDs such as `8e7b2...` out of the code and lets each teammate run it on their own machine.

## Install

```powershell
cd $env:USERPROFILE\Desktop\wxapkg-mcp
python -m venv .venv
.\.venv\Scripts\python -m pip install -e .
```

## Project Layout

```text
wxapkg-mcp/
|-- README.md
|-- pyproject.toml
|-- setup.py
|-- requirements.txt
|-- src/
|   `-- wxapkg_mcp/
|       |-- __init__.py
|       |-- main.py
|       |-- server.py
|       |-- cli.py
|       `-- core.py
|-- tests/
|   `-- test_core.py
`-- .gitignore
```

## CLI

```powershell
.\.venv\Scripts\wxapkg-tool roots
.\.venv\Scripts\wxapkg-tool apps
.\.venv\Scripts\wxapkg-tool appid wx87ceadd15865a6fb "C:\out\wx87ceadd15865a6fb"
.\.venv\Scripts\wxapkg-tool inspect "C:\path\to\__APP__.wxapkg"
.\.venv\Scripts\wxapkg-tool decrypt "C:\path\to\__APP__.wxapkg" "C:\out\__APP__.wxapkg" --appid wx...
.\.venv\Scripts\wxapkg-tool extract "C:\out\__APP__.wxapkg" "C:\out\extracted"
.\.venv\Scripts\wxapkg-tool batch "C:\path\to\packages\wx...\13" "C:\out" --appid wx...
```

## MCP config

After installation, add this to your MCP client configuration:

```json
{
  "mcpServers": {
    "wxapkg": {
      "command": "wxapkg-mcp"
    }
  }
}
```

**Note:** This assumes you have already run `pip install -e .` to install the package and make the command available.

### Alternative: Using Python module directly

If you prefer to run it as a Python module without installing:

```json
{
  "mcpServers": {
    "wxapkg": {
      "command": "python",
      "args": ["-m", "wxapkg_mcp.server"]
    }
  }
}
```

Exposed tools:

- `find_wechat_package_roots`
- `list_wechat_apps`
- `inspect_wxapkg`
- `decrypt_wxapkg`
- `extract_wxapkg`
- `decrypt_and_extract_dir`
- `decrypt_and_extract_appid`

For most agent workflows, call `list_wechat_apps` first, then `decrypt_and_extract_appid` with the chosen AppID. The server chooses the latest local version by default; pass `version` only when you need a specific version.