Is io.github.xiaoxuzhu303-prog/harmony-mcp safe to use?

io.github.xiaoxuzhu303-prog/harmony-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.

How do I install io.github.xiaoxuzhu303-prog/harmony-mcp?

io.github.xiaoxuzhu303-prog/harmony-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can io.github.xiaoxuzhu303-prog/harmony-mcp do?

io.github.xiaoxuzhu303-prog/harmony-mcp provides 12 tools: wechat_preview, wechat_upload, wechat_build_npm, wechat_project_info, wechat_package_size and 7 more. See the full tools list on the server page for descriptions and parameters.

What AI clients work with io.github.xiaoxuzhu303-prog/harmony-mcp?

io.github.xiaoxuzhu303-prog/harmony-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.

Is io.github.xiaoxuzhu303-prog/harmony-mcp actively maintained?

io.github.xiaoxuzhu303-prog/harmony-mcp is actively maintained — last commit was 10 days ago. It has 3 GitHub stars.

io.github.xiaoxuzhu303-prog/harmony-mcp

@yujiamei/harmony-mcp

AI copilot for WeChat Mini Program - auto compile-fix, size analysis, smart subpackage. 16 tools.

3 60/wk 12 tools GitHub npm

No known CVEs

No license

Actively maintained

Last commit 10d ago

Works with most clients

Transport: stdio, http

12 tools · ~514 tok

Grade B · 0.3% of 200K ctx

Edit this pageView history

Other

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "harmony-mcp": {
      "args": [
        "-y",
        "@yujiamei/harmony-mcp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-xiaoxuzhu303-prog-harmony-mcp)](https://mcppedia.org/s/io-github-xiaoxuzhu303-prog-harmony-mcp)

Read me

What io.github.xiaoxuzhu303-prog/harmony-mcp does

微信小程序与 HarmonyOS 设备自动化 MCP Server。让 Kiro、Cursor、Claude Desktop 等 AI 客户端直接执行本地开发者工具能力：编译诊断、合规预检、包体积分析、一键上传和鸿蒙设备操作。

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@yujiamei/harmony-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

81/100across 5 weighted dimensions

How we score →

0255075100

−19

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @yujiamei/harmony-mcp against OSV.dev.

Inventory

Tools (12)

Click any tool to inspect its schema.

~514 tokens total

Inventory

Prompts (4)

/harmony-check

One-click environment pre-check

/harmony-audit

Full code audit and scoring report

/harmony-shrink

Package size analysis and subpackage suggestions

/harmony-publish

Compliance pre-check, compilation diagnosis, and version confirmation

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.xiaoxuzhu303-prog/harmony-mcp safe to use?: io.github.xiaoxuzhu303-prog/harmony-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.xiaoxuzhu303-prog/harmony-mcp?: io.github.xiaoxuzhu303-prog/harmony-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.xiaoxuzhu303-prog/harmony-mcp do?: io.github.xiaoxuzhu303-prog/harmony-mcp provides 12 tools: wechat_preview, wechat_upload, wechat_build_npm, wechat_project_info, wechat_package_size and 7 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.xiaoxuzhu303-prog/harmony-mcp?: io.github.xiaoxuzhu303-prog/harmony-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.
Is io.github.xiaoxuzhu303-prog/harmony-mcp actively maintained?: io.github.xiaoxuzhu303-prog/harmony-mcp is actively maintained — last commit was 10 days ago. It has 3 GitHub stars.

Similar servers

Others in other

View all →

Pi Lean Ctx95

Pi Coding Agent extension (CLI-first) — routes bash/read/grep/find/ls through lean-ctx CLI for strong token savings. Optional MCP bridge can register advanced tools.

3.0k 6

io.github.asklokesh/loki-mode94

Autonomous spec-to-product coding-agent CLI with an MCP server exposing 34 tools over stdio.

992 8

Sigmap94

97% token reduction for AI coding sessions — zero deps, 21 languages, MCP server

531 6

Sunpeak93

App framework, testing framework, and inspector for MCP Apps.

193 1

MCP Security Weekly

Get CVE alerts and security updates for io.github.xiaoxuzhu303-prog/harmony-mcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Other

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "harmony-mcp": {
      "args": [
        "-y",
        "@yujiamei/harmony-mcp"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-xiaoxuzhu303-prog-harmony-mcp)](https://mcppedia.org/s/io-github-xiaoxuzhu303-prog-harmony-mcp)

Read me

What io.github.xiaoxuzhu303-prog/harmony-mcp does

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@yujiamei/harmony-mcp' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

harmony-mcp

当前 npm 稳定版：v0.5.0，共 36 个工具。

不需要云开发，不需要小程序 CI 密钥，不需要 IP 白名单。默认通过微信开发者工具官方 CLI 工作。

Quick Start · 核心能力 · 工具列表 · 配置 · FAQ

Quick Start

前置条件

Node.js >= 20
已安装微信开发者工具：下载地址
微信开发者工具中已开启「设置 -> 安全 -> 服务端口」

Kiro / Cursor / Claude Desktop

三类客户端配置内容相同，只是配置文件路径不同。

{
  "mcpServers": {
    "harmony-mcp": {
      "command": "npx",
      "args": ["-y", "@yujiamei/harmony-mcp"]
    }
  }
}

常见配置路径：

客户端	配置文件
Kiro	`.kiro/settings/mcp.json`
Cursor	`.cursor/mcp.json`
Claude Desktop macOS	`~/Library/Application Support/Claude/claude_desktop_config.json`
Claude Desktop Windows	`%APPDATA%\Claude\claude_desktop_config.json`

Windows 如果 npx 启动不稳定，可以改用全局安装：

npm install -g @yujiamei/harmony-mcp

然后将配置改为：

{
  "mcpServers": {
    "harmony-mcp": {
      "command": "harmony-mcp",
      "args": []
    }
  }
}

核心能力

场景	你可以对 AI 说	做什么
一键发版	"帮我发个版本，描述是修复购物车 bug"	读取版本、构建 npm、上传代码
编译诊断	"编译报错了，帮我定位"	调用开发者工具编译，解析错误并给出修复建议
包体积分析	"主包快超了，帮我看看"	分析包体积、定位大文件、给出分包建议
合规预检	"发版前检查一下合规"	扫描 32 条审核高频规则
代码审计	"帮我检查代码质量"	扫描 14 条运行时规则并评分
鸿蒙设备	"把这个 HAP 装到设备上"	通过 HDC 安装、启动、看日志、传文件

一键发版

你：帮我发个版本，描述是修复了购物车 bug
AI：读取项目信息... OK
    构建 npm... OK
    上传代码 v1.2.4... OK
    发版完成。去微信后台提交审核即可。

编译诊断

你：编译报错了，帮我定位
AI：pages/cart/cart.js:42 Cannot find module 'utils/pay'
    类型：模块缺失
    源码：src/pages/cart/cart.tsx
    建议：检查 import 路径或补齐对应模块

合规预检

wechat_compliance_check 覆盖隐私弹窗、授权时机、虚拟支付、强制登录、web-view 域名、HTTPS、页面路径、tabBar、诱导分享、内容安全和敏感信息硬编码等高频审核问题。

工具列表

v0.5.0 稳定版共 36 个工具：

分类	数量	代表工具
微信基础操作	10	`wechat_preview`、`wechat_auto_preview`、`wechat_cache_clean`
微信项目分析	4	`wechat_project_info`、`wechat_package_size`、`wechat_subpackage_suggest`
微信项目检查	4	`wechat_config_validate`、`wechat_audit`、`wechat_compliance_check`
微信智能流程	2	`wechat_diagnose`、`wechat_publish`
微信 CI / 环境 / 运行时	8	`wechat_ci_preview`、`wechat_ready_check`、`wechat_runtime_diagnose`
HarmonyOS 设备操作	8	`harmony_list_devices`、`harmony_install`、`harmony_log`

完整工具表见 docs/TOOLS.md。

配置

默认情况下无需配置。只有在微信开发者工具或 HDC 不在常见路径时，才需要在运行目录创建 harmony-mcp.json。

{
  "cliPath": "D:\\Program Files\\Tencent\\微信web开发者工具\\cli.bat",
  "hdcPath": "D:\\Huawei\\Sdk\\openharmony\\toolchains\\hdc.exe",
  "appJsonPath": "src/app.json"
}

也可以通过环境变量指定微信开发者工具 CLI：

WECHAT_DEVTOOLS_CLI="D:\\Program Files\\Tencent\\微信web开发者工具\\cli.bat"

Roadmap

下一阶段继续补强：

能力	状态
HarmonyOS 真机验证矩阵	计划中
uni-app / Taro 源码映射增强	计划中
运行时诊断 Beta 稳定化	持续迭代
工具清单自动校验	计划中

MCP Prompts

在支持 MCP Prompts 的客户端中输入 /，可以看到 4 个快捷指令：

指令	功能
`/harmony-check`	一键环境预检
`/harmony-audit`	全量代码审计与评分报告
`/harmony-shrink`	包体积分析与分包建议
`/harmo

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

81/100across 5 weighted dimensions

How we score →

0255075100

−19

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @yujiamei/harmony-mcp against OSV.dev.

Inventory

Tools (12)

Click any tool to inspect its schema.

~514 tokens total

Inventory

Prompts (4)

/harmony-check

One-click environment pre-check

/harmony-audit

Full code audit and scoring report

/harmony-shrink

Package size analysis and subpackage suggestions

/harmony-publish

Compliance pre-check, compilation diagnosis, and version confirmation

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.xiaoxuzhu303-prog/harmony-mcp safe to use?: io.github.xiaoxuzhu303-prog/harmony-mcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
How do I install io.github.xiaoxuzhu303-prog/harmony-mcp?: io.github.xiaoxuzhu303-prog/harmony-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.xiaoxuzhu303-prog/harmony-mcp do?: io.github.xiaoxuzhu303-prog/harmony-mcp provides 12 tools: wechat_preview, wechat_upload, wechat_build_npm, wechat_project_info, wechat_package_size and 7 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.xiaoxuzhu303-prog/harmony-mcp?: io.github.xiaoxuzhu303-prog/harmony-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.
Is io.github.xiaoxuzhu303-prog/harmony-mcp actively maintained?: io.github.xiaoxuzhu303-prog/harmony-mcp is actively maintained — last commit was 10 days ago. It has 3 GitHub stars.

Similar servers

Others in other

View all →

Pi Lean Ctx95

Pi Coding Agent extension (CLI-first) — routes bash/read/grep/find/ls through lean-ctx CLI for strong token savings. Optional MCP bridge can register advanced tools.

3.0k 6

io.github.asklokesh/loki-mode94

Autonomous spec-to-product coding-agent CLI with an MCP server exposing 34 tools over stdio.

992 8

Sigmap94

97% token reduction for AI coding sessions — zero deps, 21 languages, MCP server

531 6

Sunpeak93

App framework, testing framework, and inspector for MCP Apps.

193 1

MCP Security Weekly

Get CVE alerts and security updates for io.github.xiaoxuzhu303-prog/harmony-mcp and similar servers.