Xhs Mcp Service

小红书（XHS/RED）MCP 服务。通过本地 xhs-mcp-server 服务提供完整的小红书操作能力。 当用户提到小红书、红书、XHS、RED、发笔记、搜笔记、小红书运营等任何与小红书相关的操作时使用此技能。 ⚠️ 前置条件：需要先启动 xhs-mcp-server 服务（默认 http://localho...

What to consider before installing/running: - This package implements a local automation server that will control your Xiaohongshu account via Puppeteer and stored cookies. If you run it, npm install will download Chromium (Puppeteer) and the service will persist session cookies to data/cookies.json — treat that file as highly sensitive (it contains authentication cookies). Keep it on a trusted machine and with tight file permissions. - The documentation repeatedly refers to localhost, but the server code defaults to binding XHS_HOST='0.0.0.0' which will accept connections from any network interface. Unless you intentionally need remote access, set XHS_HOST=127.0.0.1 (or the equivalent) before starting, or firewall the port. Exposing the MCP endpoint on the network could allow others to control your account if they can reach the host. - The code performs real actions (likes, comments, publishes) against the service using your account. Use test accounts for experimentation and be cautious about automated publishing or bulk operations (risk of platform restrictions/ban). - Review the source (especially src/xhs-tools.js and any code that performs network requests) yourself to ensure there are no unexpected external callbacks or telemetry endpoints. Confirm there are no hardcoded remote endpoints that exfiltrate cookies or data. - Because SKILL.md uses a hard-coded example Windows path and recommends running login which opens a browser for QR scan, run the project in a controlled environment (VM, container, or isolated host) if you are unsure. - If you decide to run: (1) audit code, (2) set XHS_HOST=127.0.0.1, (3) restrict port via firewall, (4) protect data/cookies.json, and (5) prefer using a disposable/test account for initial trials. If you want, I can point to the exact lines/files that set the host binding and the cookies path so you (or your admin) can change them before running.