这是一款基于 Playwright 开发的小红书自动搜索和评论工具,作为 MCP Server,可通过特定配置接入 MCP Client,帮助用户自动完成登录小红书、搜索关键词、获取笔记内容及发布智能评论等操作。
MCPpedia last refreshed this data
RedBook Search Comment MCP is an MCP server that 这是一款基于 Playwright 开发的小红书自动搜索和评论工具,作为 MCP Server,可通过特定配置接入 MCP Client,帮助用户自动完成登录小红书、搜索关键词、获取笔记内容及发布智能评论等操作。. Its tool list has not been published yet over stdio, requires no API key, and scores 45/100 on MCPpedia's security, maintenance and efficiency rubric.
Config is the same across clients - only the file and path differ.
{
"mcpServers": {
"xiaohongshu MCP": {
"args": [
"/绝对路径/到/xiaohongshu_mcp.py",
"--stdio"
],
"command": "/绝对路径/到/venv/bin/python3"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
本项目基于 JonaFly/RednoteMCP 并结合我自己的使用经验,进行优化和改进(by windsurf)。在此向原作者表示衷心的感谢!
Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.
uvx 'fastmcp' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Five weighted categories - click any category to see the underlying evidence.
FastMCP: Post-transform component authorization is skipped on direct calls
## Maintainer assessment and remediation This report is accepted as a FastMCP authorization vulnerability. In supported configurations, a server transform can change the metadata used by a component's authorization policy. Direct lookups previously checked the original component but returned the transformed component without rechecking its policy. A client that knows the component identifier can invoke a tool or retrieve a resource or prompt that the configured policy denies. The fixes authori
FastMCP MCP client wrappers construct M2M OAuth providers without issuer binding — client secret redirectable to attacker-advertised authorization server
## Maintainer assessment and remediation This report is accepted as a FastMCP credential-binding vulnerability. Affected versions of the OAuth client credentials providers do not expose the authorization-server issuer that owns pre-registered credentials. An untrusted or compromised MCP server can therefore advertise a different authorization server and receive the client secret or a signed assertion. Signing keys themselves remain local; assertion replayability depends on the assertion source
FastMCP: Missing Consent Verification in OAuth Proxy Callback Facilitates Confused Deputy Vulnerabilities
## Summary While testing the *GitHubProvider* OAuth integration, which allows authentication to a FastMCP MCP server via a FastMCP OAuthProxy using GitHub OAuth, it was discovered that the FastMCP OAuthProxy does not properly validate the user's consent upon receiving the authorization code from GitHub. In combination with GitHub’s behavior of skipping the consent page for previously authorized clients, this introduces a Confused Deputy vulnerability. ## Technical Details An adversary can initi
FastMCP has a Command Injection vulnerability - Gemini CLI
Server names containing shell metacharacters (e.g., `&`) can cause command injection on Windows when passed to `fastmcp install claude-code` or `fastmcp install gemini-cli`. These install paths use `subprocess.run()` with a list argument, but on Windows the target CLIs often resolve to `.cmd` wrappers that are executed through `cmd.exe`, which interprets metacharacters in the flattened command string. PoC: ```python from fastmcp import FastMCP mcp = FastMCP(name="test&calc") @mcp.tool def rol
FastMCP OAuth Proxy token reuse across MCP servers
While testing the OAuth Proxy implementation, it was noticed that the server does not properly respect the `resource` parameter submitted by the client in the authorization and token request. Instead of issuing the token explicitly for this MCP server, the token is issued for the `base_url` passed to the `OAuthProxy` during initialization. **Affected File:** *https://github.com/jlowin/fastmcp/blob/main/src/fastmcp/server/auth/oauth_proxy.py#L828* **Affected Code:** ```python self._jwt_issuer:
Be the first to review
Have you used this server?
Share your experience - it helps other developers decide.
Sign in to write a review.
Others in browser / marketing
Open-source web scraper for AI agents with scrape, crawl, and map tools
Firecrawl, the context API for AI agents: search, scrape, interact with the web, plus paper search.
Search-first MCP server for JavaScript reverse engineering: 735 tools across 36 domains.
Extract data from any website with thousands of scrapers, crawlers, and automations on Apify Store ⚡
MCP Security Weekly
Get CVE alerts and security updates for RedBook Search Comment MCP and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
本项目基于 JonaFly/RednoteMCP 并结合我自己的使用经验,进行优化和改进(by windsurf)。在此向原作者表示衷心的感谢!
这是一款基于 Playwright 开发的小红书自动搜索和评论工具,作为 MCP Server,可通过特定配置接入 MCP Client(如Claude for Desktop),帮助用户自动完成登录小红书、搜索关键词、获取笔记内容及发布智能评论等操作。
2.0主要优化内容如下:
Python 环境准备:确保系统已安装 Python 3.8 或更高版本。若未安装,可从 Python 官方网站下载并安装。
项目获取:将本项目克隆或下载到本地。
创建虚拟环境:在项目目录下创建并激活虚拟环境(推荐):
# 创建虚拟环境
python3 -m venv venv
# 激活虚拟环境
# Windows
venv\Scripts\activate
# macOS/Linux
source venv/bin/activate
安装依赖:在激活的虚拟环境中安装所需依赖:
pip install -r requirements.txt
pip install fastmcp
安装浏览器:安装Playwright所需的浏览器:
playwright install
在 MCP Client(如Claude for Desktop)的配置文件中添加以下内容,将本工具配置为 MCP Server:
{
"mcpServers": {
"xiaohongshu MCP": {
"command": "/绝对路径/到/venv/bin/python3",
"args": [
"/绝对路径/到/xiaohongshu_mcp.py",
"--stdio"
]
}
}
}
重要提示:
- 请使用虚拟环境中Python解释器的完整绝对路径
- 例如:
/Users/username/Desktop/RedBook-Search-Comment-MCP/venv/bin/python3- 同样,xiaohongshu_mcp.py也需要使用完整绝对路径
直接运行:在项目目录下,激活虚拟环境后执行:
python3 xiaohongshu_mcp.py
通过 MCP Client 启动:配置好MCP Client后,按照客户端的操作流程进行启动和连接。
在MCP Client(如Claude for Desktop)中连接到服务器后,可以使用以下功能:
工具函数:
mcp0_login()
在MCP客户端中的使用方式: 直接发送以下文本:
帮我登录小红书账号
或:
请登录小红书
功能说明:首次使用时会打开浏览器窗口,等待用户手动扫码登录。登录成功后,工具会保存登录状态。
工具函数:
mcp0_search_notes(keywords="关键词", limit=5)
在MCP客户端中的使用方式: 发送包含关键词的搜索请求:
帮我搜索小红书笔记,关键词为:美食
指定返回数量:
帮我搜索小红书笔记,关键词为旅游,返回10条结果
功能说明:根据关键词搜索小红书笔记,并返回指定数量的结果。默认返回5条结果。
工具函数:
mcp0_get_note_content(url="笔记URL")
在MCP客户端中的使用方式: 发送包含笔记URL的请求:
帮我获取这个笔记的内容:https://www.xiaohongshu.com/search_result/xxxx
或:
请查看这个小红书笔记的内容:https://www.xiaohongshu.com/search_result/xxxx
功能说明:获取指定笔记URL的详细内容,包括标题、作者、发布时间和正文内容。
工具函数:
mcp0_get_note_comments(url="笔记URL")
在MCP客户端中的使用方式: 发送包含笔记URL的评论请求:
帮我获取这个笔记的评论:https://www.xiaohongshu.com/search_result/xxxx
或:
请查看这个小红书笔记的评论区:https://www.xiaohongshu.com/search_result/xxxx
功能说明:获取指定笔记URL的评论信息,包括评论者、评论内容和评论时间。
工具函数:
mcp0_post_smart_comment(url="笔记URL", comment_type="评论类型")
在MCP客户端中的使用方式: 发送包含笔记URL和评论类型的请求:
帮我在这个笔记发布专业类型的评论:https://www.xiaohongshu.com/search_result/xxxx
或:
请在这个小红书笔记下发布一条引流评论:https://www.xiaohongshu.com/search_result/xxxx
评论类型参数可选值:
"引流" (默认):引导用户关注或私聊"点赞":简单互动获取好感"咨询":以问题形式增加互动"专业":展示专业知识建立权威功能说明:在指定笔记下发布智能评论,系统会根据笔记内容和指定的评论类型自动生成适合的评论内容。
连接失败:
浏览器会话问题:
如果遇到Page.goto: Target page, context or browser has been closed错误:
依赖安装问题:
如果遇到ModuleNotFoundError错误: