Wenyan MCP
by caol64文颜 MCP Server 可以让 AI 自动将 Markdown 文章排版后发布至微信公众号。
Wenyan MCP is an open-source mcp server by caol64, written mainly in JavaScript, with 1,351 GitHub stars and the Apache-2.0 license. Its code was last updated Sep 20, 2026.
Scan summary: scanned Nov 5, 2026 at commit 83874e9. No capabilities flagged by our checks. Scan policy
ScannedScanned. The automated checks below ran on the commit shown. Read each line for what was and was not covered.
Full scan at
83874e9 · Nov 5, 2026 ScannedStatic, secrets and dependency checks completed with no critical findings. BuildsIt installed from a fresh machine. BootsIt started, and MCP servers answered the protocol handshake. No undeclared egressWhile running it only contacted the domains it declared. ReproducibleEarned in this scan.
Passed. This check ran and found nothing it flags.Static code scanpassPassed. This check ran and found nothing it flags.
Passed. This check ran and found nothing it flags.Secrets scanpassPassed. This check ran and found nothing it flags.
Flagged. This check found an issue. See the findings below.Dependency audit147 known vulnerabilitiesfailFlagged. This check found an issue. See the findings below.
Warning. This check found something worth reading in the findings below. It is not proof of a problem.ManifestnonewarnWarning. This check found something worth reading in the findings below. It is not proof of a problem.
Passed. This check ran and found nothing it flags.BuildpassPassed. This check ran and found nothing it flags.
Passed. This check ran and found nothing it flags.Boot & handshake4 toolspassPassed. This check ran and found nothing it flags.
Passed. This check ran and found nothing it flags.Network egresspassPassed. This check ran and found nothing it flags.
Passed. This check ran and found nothing it flags.Reproducible (×3)passPassed. This check ran and found nothing it flags.
Findings (30)
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- highHigh. Something risky that needs a close look before you install.dependencies issueDetails are available to the maintainer after claiming this listing.
- mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@hono/node-server@1.19.9: 3 known vulnerabilitiesGHSA-92pp-h63x-v22m, GHSA-frvp-7c67-39w9, GHSA-wc8c-qw6v-h7f6
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@modelcontextprotocol/sdk@0.6.0: 2 known vulnerabilitiesGHSA-6prh-2h8m-c8cw, GHSA-w48q-cv73-mx4w
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@modelcontextprotocol/sdk@1.27.1: 6 known vulnerabilitiesGHSA-22jm-h49p-29qw, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h, GHSA-f897-62hf-6gxq +1 more
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.@xmldom/xmldom@0.9.8: 17 known vulnerabilitiesGHSA-27p8-2357-5qqv, GHSA-2v35-w6hq-6mfw, GHSA-3px3-54cx-rmw9, GHSA-4w3w-2rp5-g8jm, GHSA-6gmq-8vp8-gcm6 +12 more
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.body-parser@2.2.2: 2 known vulnerabilitiesGHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@1.1.12: 7 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +2 more
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.brace-expansion@5.0.5: 7 known vulnerabilitiesGHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-jxxr-4gwj-5jf2, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +2 more
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.dompurify@3.4.1: 13 known vulnerabilitiesGHSA-55q2-fjhq-7xh7, GHSA-6688-9rhm-gjv2, GHSA-76mc-f452-cxcm, GHSA-c2j3-45gr-mqc4, GHSA-c6gr-qvv4-5v3f +8 more
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.express-rate-limit@8.2.1: 1 known vulnerabilityGHSA-46wh-pxpv-q5gq
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.fast-uri@3.1.0: 12 known vulnerabilitiesGHSA-333x-w4r6-6crp, GHSA-4c8g-83qw-93j6, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-hrr3-gc8f-f4qj +7 more
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.hono@4.12.3: 35 known vulnerabilitiesGHSA-26pp-8wgv-hjvm, GHSA-2gcr-mfcq-wcc3, GHSA-3hrh-pfw6-9m5x, GHSA-458j-xx4x-4375, GHSA-54fx-42gc-7vw4 +30 more
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ip-address@10.0.1: 6 known vulnerabilitiesGHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv, GHSA-mwp4-54f8-5fhr, GHSA-rpw4-54j3-4h4q, GHSA-rxp7-6hxx-x8q5 +1 more
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.js-yaml@3.14.1: 5 known vulnerabilitiesGHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68, GHSA-mh29-5h37-fv8m
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.minimatch@3.1.2: 3 known vulnerabilitiesGHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.path-to-regexp@8.3.0: 2 known vulnerabilitiesGHSA-27v5-c462-wpq7, GHSA-j3q9-mxjg-w52f
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.source-map-js@1.2.1: 1 known vulnerabilityGHSA-68fv-2mgg-jv7q
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.uuid@11.1.0: 1 known vulnerabilityGHSA-w5hq-g745-h8pq
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.ws@8.19.0: 2 known vulnerabilitiesGHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@3.25.76: 1 known vulnerabilityGHSA-mrhx-c7xc-m3w5
pnpm-lock.yaml - mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.zod@4.3.6: 1 known vulnerabilityGHSA-mrhx-c7xc-m3w5
pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.Possible example credential in docs/tests: generic-api-key
README.md:356 - lowLow. Minor, or common in normal tools. Shown for information.@humanfs/node@0.16.7: 1 known vulnerabilityGHSA-p498-v437-472g
pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.esbuild@0.27.7: 1 known vulnerabilityGHSA-g7r4-m6w7-qqqr
pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.katex@0.16.45: 1 known vulnerabilityGHSA-238p-pmpm-9mq7
pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.mermaid@11.14.0: 9 known vulnerabilitiesGHSA-2v8p-3f2j-5mp7, GHSA-3rrr-jr9j-h3q3, GHSA-6m6c-36f7-fhxh, GHSA-6x64-9x62-f2gx, GHSA-87f9-hvmw-gh4p +4 more
pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.minimatch@10.2.5: 1 known vulnerabilityGHSA-g3hv-75wg-m249
pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.qs@6.15.0: 4 known vulnerabilitiesGHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-q8mj-m7cp-5q26, GHSA-x5fp-wj9c-mxmx
pnpm-lock.yaml - lowLow. Minor, or common in normal tools. Shown for information.No manifest declaring network access and environment variables (agent.json)
Network activity
During install
registry.npmjs.org
While running
No connections
Tools exposed (4)
publish_articleFormat a Markdown article using a selected theme and publish it to '微信公众号'.
list_themesList the themes compatible with the 'publish_article' tool to publish an article to '微信公众号'.
register_themeRegister a custom theme compatible with the 'publish_article' tool to publish an article to '微信公众号'.
remove_themeRemove a custom theme compatible with the 'publish_article' tool to publish an article to '微信公众号'.
Automated result for the commit shown. See our scan policy. View the scan log
Maintainers can claim the listing to rescan, or dispute a result.
Wenyan MCP alternatives
View more →Similar mcp servers in Content & Writing, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.
| Name | Stars | Licence | Last updated | Scan |
|---|---|---|---|---|
| Wenyan MCP (this page) caol64 | 1.4k | Apache-2.0 | Sep 20, 2026 | Scanned, no flagged issues |
| Context7 upstash | 64k | MIT | Nov 1, 2026 | Scanned, no flagged issues |
| Md2wechat Skill geekjourneyx | 3.8k | None found | Oct 14, 2026 | Not scanned yet |
| Cortex cortex-docs | 3.3k | MIT | Oct 6, 2026 | Scanned, no flagged issues |
| Markdownify MCP zcaceres | 3k | MIT | Oct 26, 2026 | Scanned, no flagged issues |
| LLM Wiki Compiler atomicstrata | 2.2k | MIT | Oct 30, 2026 | Scanned, no flagged issues |