Xiaohongshu Mcp 1.0.0

Automate Xiaohongshu (RedNote) content operations using a Python client for the xiaohongshu-mcp server. Use for: (1) Publishing image, text, and video conten...

Security Scan

The skill's files and instructions are coherent with its stated purpose (a local-client for the xiaohongshu-mcp server); it requires running vendor binaries you must download and trust, but the skill itself only talks to a localhost API and does not request unrelated credentials or perform obvious exfiltration.

Purpose & Capability

Name/description match the shipped Python client and the SKILL.md: the client talks to a local xiaohongshu-mcp server (http://localhost:18060) to search, inspect, and publish notes. The requested actions and files are proportionate to automating Xiaohongshu tasks.

Instruction Scope

Runtime instructions are limited to downloading the MCP/login binaries (from the referenced GitHub repo), running the login QR flow, starting the local server, and using the included Python script to call localhost endpoints. The instructions do not ask the agent to read unrelated system files, environment variables, or to send data to third-party endpoints.

Install Mechanism

There is no automated install spec in the package (instruction-only). SKILL.md directs the user to GitHub Releases for vendor binaries (a legitimate release host). Users must manually download and grant execute permission — this is expected but requires trusting those binaries and verifying authenticity (checksums/signatures if available).

Credentials

The skill declares no required environment variables, no credentials, and no config paths. The included Python client uses only localhost and does not read environment variables or other secrets.

Persistence & Privilege

The skill is not always-enabled, does not request elevated agent privileges, and contains no code that modifies other skill configurations. Autonomous invocation remains possible (platform default) but is not combined with other concerning permissions.

Assessment

This skill appears internally consistent, but you must trust and verify the xiaohongshu-mcp binaries you download. Before using: (1) confirm the GitHub repository and release checksums/signatures, (2) run the MCP/login binaries in an isolated environment or VM if you are cautious, (3) avoid scanning your primary Xiaohongshu account during testing, and (4) review the upstream server's source (xpzouying/xiaohongshu-mcp) if you need higher assurance. The included Python client only communicates with localhost and does not itself exfiltrate data, but the local MCP server you run will hold your session and can perform actions on your account — treat those binaries as sensitive.

Xiaohongshu MCP Skill (with Python Client)

Automate content operations on Xiaohongshu (小红书) using a bundled Python script that interacts with the xpzouying/xiaohongshu-mcp server (8.4k+ stars).

Project: xpzouying/xiaohongshu-mcp

1. Local Server Setup

This skill requires the xiaohongshu-mcp server to be running on your local machine.

Step 1: Download Binaries

Download the appropriate binaries for your system from the GitHub Releases page.

Platform	MCP Server	Login Tool
macOS (Apple Silicon)	xiaohongshu-mcp-darwin-arm64	xiaohongshu-login-darwin-arm64
macOS (Intel)	xiaohongshu-mcp-darwin-amd64	xiaohongshu-login-darwin-amd64
Windows	xiaohongshu-mcp-windows-amd64.exe	xiaohongshu-login-windows-amd64.exe
Linux	xiaohongshu-mcp-linux-amd64	xiaohongshu-login-linux-amd64

Grant execute permission to the downloaded files:

chmod +x xiaohongshu-mcp-darwin-arm64 xiaohongshu-login-darwin-arm64

Step 2: Login (First Time Only)

Run the login tool. It will open a browser window with a QR code. Scan it with your Xiaohongshu mobile app.

./xiaohongshu-login-darwin-arm64

Important: Do not log into the same Xiaohongshu account on any other web browser, as this will invalidate the server's session.

Step 3: Start the MCP Server

Run the MCP server in a separate terminal window. It will run in the background.

# Run in headless mode (recommended)
./xiaohongshu-mcp-darwin-arm64

# Or, run with a visible browser for debugging
./xiaohongshu-mcp-darwin-arm64 -headless=false

The server will be available at http://localhost:18060.

2. Using the Skill

This skill includes a Python client (scripts/xhs_client.py) to interact with the local server. You can use it directly from the shell.

Available Commands

Command	Description	Example
status	Check login status	python scripts/xhs_client.py status
search <keyword>	Search for notes	python scripts/xhs_client.py search "咖啡"
detail <id> <token>	Get note details	python scripts/xhs_client.py detail "note_id" "xsec_token"
feeds	Get recommended feed	python scripts/xhs_client.py feeds
publish <title> <content> <images>	Publish a note	python scripts/xhs_client.py publish "Title" "Content" "url1,url2"

Example Workflow: Market Research

1. Check Status: First, ensure the server is running and you are logged in.

   python ~/clawd/skills/xiaohongshu-mcp/scripts/xhs_client.py status
   

2. Search for a Keyword: Find notes related to your research topic. The output will include the feed_id and xsec_token needed for the next step.

   python ~/clawd/skills/xiaohongshu-mcp/scripts/xhs_client.py search "户外电源"
   

3. Get Note Details: Use the feed_id and xsec_token from the search results to get the full content and comments of a specific note.

   python ~/clawd/skills/xiaohongshu-mcp/scripts/xhs_client.py detail "64f1a2b3c4d5e6f7a8b9c0d1" "security_token_here"
   

4. Analyze: Review the note's content, comments, and engagement data to gather insights.