wop-mcp
OfficialClick on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@wop-mcp生成一对 RSA2048 密钥,私钥保存到本地,别在对话里显示"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
wop-mcp
万联易达开放平台(WOP)MCP Server —— 让 AI 助手安全、正确地完成 WOP 对接
简介
wop-mcp 是万联易达开放平台(WOP)的 Model Context Protocol Server,
帮助开发者通过 AI 助手(Claude Desktop、Cursor、Claude Code 等)完成 WOP 对接:
📚 文档获取:接入指南、API 索引、接口详情(自动穿透文档 URL 的时间戳后缀)
🔐 密钥对生成:RSA2048 / SM2,公钥按分发契约编码返回,可直接上报平台
🛡️ 安全纪律:私钥只写入本地 0600 文件,永不回显进 AI 对话(对齐 wop-skills SECURITY 纪律)
🔌 即插即用:stdio transport,
uvx wop-mcp(PyPI 发布后)一行接入
Related MCP server: doc-hub-mcp
工具总览
工具 | 说明 |
| 接入指南(三步流程、securityReq 组合、公钥编码、SDK 列表)+ 实时 |
| API 详情;入参支持 API 路径(如 |
| 文档中心任意子页 / 外链内容(相对路径自动拼接基址,如 |
|
|
快速开始
方式一:uvx 直接运行(PyPI 发布后)
uvx wop-mcp方式二:源码运行
git clone https://github.com/wop-platform/wop-mcp.git
cd wop-mcp
uv sync
uv run wop-mcp在 AI 工具中配置
Cursor
{
"mcpServers": {
"wop-mcp": {
"command": "uvx",
"args": ["wop-mcp"],
"timeout": 600,
"autoApprove": ["wop_overview", "wop_api_detail", "wop_link_detail"]
}
}
}Claude Desktop
macOS:~/Library/Application Support/Claude/claude_desktop_config.json
Windows:%APPDATA%\Claude\claude_desktop_config.json
{
"mcpServers": {
"wop-mcp": {
"command": "uvx",
"args": ["wop-mcp"]
}
}
}源码方式将 command/args 替换为:
{
"command": "uv",
"args": ["--directory", "/path/to/wop-mcp", "run", "wop-mcp"]
}
wop_gen_key_pair写本地私钥文件,建议保留人工确认(未列入 autoApprove)。
环境变量
变量 | 默认值 | 说明 |
|
| 文档中心基址 |
|
| 私钥落盘目录(0600 文件) |
|
|
|
|
| HTTP 超时秒数 |
安全纪律
私钥只落盘不回显:
wop_gen_key_pair返回值不含任何私钥材料;私钥以 0600 权限独占创建于WOP_KEYS_DIR。公钥即上报格式:RSA = X.509 SPKI DER 的 Base64;SM2 = 未压缩点
04‖X‖Y(65 字节)的 Base64(crypto-strategy-spec §3.4,D10/D12)。契约自检:每次生成后经 wop-python-sdk 官方加载器回读(含 SM2 曲线校验),编码不合约即报错。
keys/目录已入.gitignore,严禁将私钥文件提交入库或粘贴进对话。
算法说明(与 spec 的差异)
本工具密钥生成支持 RSA2048 / SM2。crypto-strategy-spec v0.4 草案的 securityReq
国际族档位为 RSA3072/RSA4096;平台实际接受的 RSA 档位以商户中心审核为准。
国密族与国际族禁止跨族组合。
开发
uv sync # 安装依赖(含 dev 组)
uv run pytest --cov=wop_mcp --cov-fail-under=95 # 测试 + 覆盖率门禁
npm i -g lefthook && lefthook install # 激活 git 钩子(commitlint + 覆盖率门禁)提交信息遵循 Conventional Commits(commitlint 校验)
CI:GitHub Actions,Python 3.10–3.13 矩阵,覆盖率红线 95%
许可证
MIT © 2026 wop-platform
Available Tools
4 toolswop_api_detailA
获取万联易达开放平台(WOP)指定 API 接口的详细定义。
支持三种入参形态(按优先级):
1. API 路径:如 /staffing/open/v1/invoice/apply(可带 POST/GET 前缀,
支持省略业务域前缀的后缀匹配)
2. 接口中文名:如 转账提交
3. 完整 .md URL:直通下载
匹配到多个接口时返回候选列表,请用更精确的路径或 URL 重试。
Args:
api: str - API 路径、接口中文名或完整 .md URL
Returns:
str: API 接口详情(markdown 格式:基本信息、请求参数、响应参数、示例等)
| Name | Required | Description | Default |
|---|---|---|---|
| api | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
wop_gen_key_pairA
生成 WOP 对接所需的非对称密钥对(RSA2048 / SM2)。
安全纪律:私钥只写入本地 0600 文件,不会出现在返回值或对话中;
返回的 publicKey 为分发契约编码(RSA:SPKI DER Base64;
SM2:未压缩点 04‖X‖Y Base64),可直接上报平台。
Args:
algorithm: str - "RSA2048"(别名 "RSA")或 "SM2",默认 "RSA2048"
Returns:
Dict 包含 algorithm / publicKey / privateKeyFile(路径) / message
| Name | Required | Description | Default |
|---|---|---|---|
| algorithm | No | RSA2048 |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
wop_link_detailA
获取万联易达开放平台(WOP)文档中心子页面或外部链接的详细内容。
接受完整 URL,或文档中心相对路径(自动拼接文档中心基址,
如 staffing/api/staffing/open/v1/invoice/apply.2026….md 或 llms-full.txt)。
Args:
url: str - 完整 URL 或文档中心相对路径
Returns:
str: 页面内容(markdown 格式)
| Name | Required | Description | Default |
|---|---|---|---|
| url | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
wop_overviewA
获取万联易达开放平台(WOP)的接入指南与全部 API 索引。
内容包含:三步接入流程、securityReq 算法组合、公钥分发编码、官方 SDK 与
工具列表,以及实时拉取的 llms.txt API 索引(按业务域分组)。
索引中的 API 可用 wop_api_detail 进一步获取详情,链接可用 wop_link_detail 获取。
Returns:
str: 接入指南 + API 索引(markdown 格式)
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
4 tool updates
v0.1.0- First observed
wop_api_detail - First observed
wop_gen_key_pair - First observed
wop_link_detail - First observed
wop_overview
TDQS
Scored across 4 tools
wop_overview and wop_gen_key_pair are clearly distinct, and wop_api_detail targets API definitions while wop_link_detail targets documentation pages. However, both detail tools accept URLs, so an agent could confuse which one to use for a given link despite the descriptions clarifying intent.
All tools use a consistent wop_ prefix and snake_case, which makes the set predictable. The only minor deviation is that wop_gen_key_pair uses a verb phrase while the other three are noun-oriented, but the pattern remains readable.
Four tools are well-scoped for a WOP integration server: one provides onboarding/index, two retrieve specific docs or API details, and one generates required key pairs. Each tool earns its place without redundancy or excessive surface area.
The server covers the core WOP integration lifecycle: overview/index, API detail lookup, documentation link retrieval, and key generation. Minor gaps exist, such as no standalone search across APIs or direct SDK download tool, but the overview and link tools provide workarounds.
Maintenance
Related MCP Connectors
Tailor Platform for AI assistants: search, list and read the platform documentation.
Gemmein docs, API reference, error explainers and a live integration check for coding agents.
Find, write, publish and check pages and API references in your DeveloperHub docs from an AI client
Access and search Branch's official API documentation directly within any AI agent or client.
Related MCP Servers
- FlicenseNot gradedqualityDmaintenanceEnables AI assistants to fetch, index, and perform semantic RAG-based searches on API documentation from various sources. It provides tools for hybrid search and collection management, allowing users to access up-to-date documentation from projects like Gemini and FastMCP.-
- FlicenseNot gradedqualityCmaintenanceProvides retrieval of WeChat Work and Feishu developer documentation, enabling AI assistants to query API references without switching browsers.20 npm19-
- AlicenseNot gradedqualityDmaintenanceProvides MCP tools to list and search OpenAI Agents SDK documentation, enabling LLMs to retrieve documentation topics and content via natural language queries.61 PyPIMIT
- AlicenseNot gradedqualityDmaintenanceProvides AI assistants with access to OpenAPI specifications, enabling API discovery, schema retrieval, and direct API execution with support for OAuth 2.0 and other authentication methods.5 npm1MIT