Which integrations are available for this server?

Provides tools for operating a WeChat Official Account, including searching internal API/workflow catalog and executing tools for tasks like file uploads, draft management, and user data retrieval.

How do I use wemp-operator-mcp?

1. Click on "Deploy Server". 2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state. 3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@wemp-operator-mcp search for available API workflows" That's it! The server will respond to your query, and you can continue using it as needed. Here is a step-by-step guide with screenshots.

wemp-operator-mcp

by xiaowangzhixiao

Overview Schema Source Related Servers Discussions Admin

JavaScript

Remote

wemp-operator-mcp

Public HTTP MCP server and agent Skill for operating a WeChat Official Account.

The server is designed for public deployment behind HTTPS. It keeps WeChat credentials on the server, exchanges and caches access_token from a fixed egress IP, and exposes only two MCP tools to agents:

tool_search: discover the internal API/workflow catalog.
run_tool: execute one discovered internal tool.

The companion Skill configures a local agent to call your public MCP endpoint through mcporter.

Languages

English: this README, docs/en
简体中文：中文 README，中文文档

Related MCP server: mcp-server-wechat-mp

Why One Repository

The MCP server and Skill are versioned together in this repository because the Skill documents the exact public contract exposed by the server. Keeping them together prevents schema drift between file upload handling, tool_search metadata, and run_tool examples.

Features

HTTP Streamable MCP endpoint at /mcp.
Bearer token authentication for every MCP and upload request.
Server-side WeChat access_token exchange using WEMP_WECHAT_APP_ID and WEMP_WECHAT_APP_SECRET.
Token cache with early refresh, single-flight refresh, and one retry after WeChat token-expired responses.
Temporary file upload endpoint at /uploads for remote MCP file tools.
HTTPS URL file source support with SSRF protections.
Dangerous tools are disabled by default, including publish/delete/mass-send and blacklist operations.
Local CLI remains available for development and local automation.

Architecture

Local Agent + Skill
        |
        | mcporter HTTP MCP
        v
HTTPS reverse proxy
        |
        v
wemp-operator-mcp container
        |
        | fixed public egress IP
        v
WeChat Official Account APIs

For public deployment, add your server's public egress IP to the WeChat Official Account API IP allowlist. Agents only need the MCP bearer token; they do not receive your WeChat AppSecret or access_token.

Public API

MCP

POST /mcp
Authorization: Bearer <WEMP_MCP_TOKEN>

Public MCP tools:

tool_search(query?: string, category?: string, limit?: number)
run_tool(name: string, arguments?: object)

Example:

mcporter call wemp-operator-mcp.tool_search \
  --args '{"query":"draft image","limit":10}' \
  --output json

mcporter call wemp-operator-mcp.run_tool \
  --args '{"name":"get_user_summary","arguments":{"date":"2026-06-21"}}' \
  --output json

File Upload

Remote MCP servers cannot read local paths from the caller machine. Upload the file first:

POST /uploads
Authorization: Bearer <WEMP_MCP_TOKEN>
Content-Type: multipart/form-data

The form must contain exactly one file field. Successful response:

{
  "uploadId": "cfa59bda-0d99-4ad7-9afe-77efb8b09c80",
  "filename": "cover.png",
  "mimeType": "image/png",
  "size": 123456,
  "expiresAt": "2026-06-21T12:00:00.000Z"
}

Use the returned uploadId with file tools:

mcporter call wemp-operator-mcp.run_tool \
  --args '{"name":"upload_article_image","arguments":{"source":{"uploadId":"cfa59bda-0d99-4ad7-9afe-77efb8b09c80"}}}' \
  --output json

Or pass a public HTTPS URL:

mcporter call wemp-operator-mcp.run_tool \
  --args '{"name":"upload_article_image","arguments":{"source":{"url":"https://example.com/image.png","filename":"image.png"}}}' \
  --output json

File source tools:

upload_temp_media
upload_permanent_media
upload_article_image
create_draft_from_file

MCP file tools intentionally do not accept filePath. Local CLI scripts may still use local paths.

Quick Start: Docker

Clone the repository.

git clone https://github.com/xiaowangzhixiao/wemp-operator-mcp.git
cd wemp-operator-mcp

Create an environment file.

cp .env.example .env

Edit .env:

WEMP_MCP_TOKEN=replace-with-a-random-token
WEMP_WECHAT_APP_ID=wx...
WEMP_WECHAT_APP_SECRET=replace-with-your-app-secret
WEMP_MCP_HOST=0.0.0.0
WEMP_MCP_PORT=3333
WEMP_MCP_ENABLE_DANGEROUS_TOOLS=0

Generate a token:

openssl rand -hex 32

Run the server.

docker compose up -d --build
curl --fail http://127.0.0.1:3333/healthz

Put Nginx or another HTTPS reverse proxy in front of the container.

Use deploy/nginx.example.conf as a starting point. Replace mcp.example.com with your own domain and set certificate paths for your certificate provider.

Add your server public IP to the WeChat Official Account allowlist.

In the WeChat Official Account admin console, go to the developer settings and add the public egress IP of the server running this container.

Environment Variables

Required:

WEMP_MCP_TOKEN: bearer token for MCP and upload requests.
WEMP_WECHAT_APP_ID: WeChat Official Account AppID.
WEMP_WECHAT_APP_SECRET: WeChat Official Account AppSecret.

Optional:

WEMP_MCP_HOST: default 127.0.0.1; use 0.0.0.0 in containers.
WEMP_MCP_PORT: default 3333.
WEMP_WECHAT_TOKEN_REFRESH_SKEW_SECONDS: default 300.
WEMP_MCP_ENABLE_DANGEROUS_TOOLS: set 1 to enable dangerous tools.
WEMP_MCP_UPLOAD_MAX_BYTES: default 52428800 (50 MiB).
WEMP_MCP_UPLOAD_TOTAL_BYTES: default 524288000 (500 MiB).
WEMP_MCP_UPLOAD_TTL_SECONDS: default 900.

Do not log or commit .env, AppSecret, WeChat access_token, or MCP bearer tokens.

Install The Agent Skill

The Skill lives at:

skills/wemp-operator-mcp

For Codex-style local skills:

npm run skill:install

Configure the MCP endpoint:

cd skills/wemp-operator-mcp
WEMP_MCP_URL='https://mcp.example.com/mcp' \
WEMP_MCP_TOKEN='<your-mcp-token>' \
node scripts/setup.mjs

Verify:

mcporter list wemp-operator-mcp
mcporter call wemp-operator-mcp.tool_search --args '{"limit":10}' --output json

Upload a local file through the Skill helper:

WEMP_MCP_URL='https://mcp.example.com/mcp' \
WEMP_MCP_TOKEN='<your-mcp-token>' \
node scripts/upload-file.mjs /absolute/path/to/cover.png

Local Development

Use Node.js 20.12 or newer.

Install dependencies:

npm install

Run tests:

npm test

Start a local MCP server:

WEMP_MCP_TOKEN=dev-token \
WEMP_WECHAT_APP_ID=wx... \
WEMP_WECHAT_APP_SECRET=... \
npm run mcp:start

Local CLI mode can still use config/wemp.json through:

node scripts/init.mjs

That local config is not used in MCP context.

Deployment Guides

Security Defaults

MCP and upload routes require the same bearer token.
Only tool_search and run_tool are public MCP tools.
The server never exposes AppSecret or WeChat access_token through MCP.
Dangerous operations are disabled unless WEMP_MCP_ENABLE_DANGEROUS_TOOLS=1.
File uploads are temporary and are deleted after TTL.
Public URL fetching only allows HTTPS and rejects private, loopback, link-local, multicast, and cloud metadata network ranges.

License

MIT

This server cannot be deployed

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Maintenance

ActivityInactive

ResponsivenessNo issues

Resources

GitHub Repository

Need Help?

Related Servers

Related MCP Connectors

China Marketing AI Intelligence MCP
ai.chinamarketing
Remote MCP server for China brand visibility, destination demand, and KOL discovery workflows.
Marketing Research & Data Social Media
2
Content RabbitOAuth
io.github.pooriaarab
Create, schedule, and publish social posts, manage accounts, and read analytics as MCP tools.
Social Media Marketing
1
OneOAuth
ai.withone
Search, document and execute authenticated API calls across 700+ apps via one MCP server
API Testing App Automation
110
Atako A
ai.atako
Remote MCP server to read and manage your Atako AI agents, messages, files, and integrations.
Agent Orchestration AI & Machine Learning
31

Related MCP Servers

WeChat Official Account MCP
Social Media Content Management Systems App Automation
Jungley8
F
license
Not graded
quality
D
maintenance
Enables management of WeChat Official Accounts by supporting draft creation, image uploads, and content publishing via the MCP protocol. It provides tools for interacting with the WeChat API, including secure token caching and draft list management.
Updated 8 months ago (2026-02-01 21:41 UTC)
-
mcp-server-wechat-mp
Content Management Systems Social Media
nxxxsooo
F
license
A
quality
F
maintenance
Enables AI agents to publish articles to WeChat Official Account (微信公众号). Supports image upload, draft creation, and publishing via standardized MCP protocol.
Updated 6 months ago (2026-03-17 14:40 UTC)
5
1
-
wechat_oa_mcp
Content Management Systems Social Media
kakaxi3019
F
license
A
quality
C
maintenance
Enables management of WeChat Official Account content, including creating, publishing, and deleting drafts and materials, through MCP tools.
Updated 10 months ago (2025-11-22 03:42 UTC)
5
27
-
wechat-mcp
Communication Social Media
Xwangtie
F
license
A
quality
D
maintenance
Enables AI agents to control WeChat through MCP protocol, including sending messages, managing contacts, and searching messages.
Updated 3 months ago (2026-06-24 13:31 UTC)
10
-

wemp-operator-mcp

Languages

Why One Repository

Features

Architecture

Public API

MCP

File Upload

Quick Start: Docker

Environment Variables

Install The Agent Skill

Local Development

Deployment Guides

Security Defaults

License

Maintenance

Resources

Related MCP Connectors

Related MCP Servers

WeChat Official Account MCP

mcp-server-wechat-mp

wechat_oa_mcp

wechat-mcp