Loading…
XHS (Xiaohongshu) MCP for note search, hot list, post details, comments/replies, profiles, and transcript.
Do not connect
A critical issue was found. Do not connect this server as-is.
Scanned 1 month ago Due for re-check
A server can change after it's graded. Re-run the automated scan to refresh this report.
This grade is deterministic and reproducible: the same server surface always yields the same grade under a given algorithm version. It is a real automated assessment computed by the MCPGrade engine from what the probe actually observed — not a fabricated or opinion score. It is not a manual human pentest, so it can miss context-specific risks.
Every signal below was measured directly by the automated probe. The grade is derived only from evidence like this — nothing is assumed.
The xhs_mcp MCP server exposes 24 tools, focused primarily on web capabilities. Its published description reads: "XHS (Xiaohongshu) MCP for note search, hot list, post details, comments/replies, profiles, and transcript". It communicates over Streamable HTTP using the 2025-06-18 protocol revision, and does not require authorization to connect. MCPGrade currently rates xhs_mcp F — a critical issue was found and the server should not be connected as-is. Its most notable findings include "Data-exfiltration parameters" and "Data-exfiltration parameters". This report is a deterministic, reproducible automated assessment: the same observed surface always yields the same grade under a given algorithm version, and it is refreshed as new scans arrive and free to read — but it is not a substitute for a manual human security review. Always re-check xhs_mcp's advertised tools, transport security, and authorization posture before connecting an autonomous agent or sharing sensitive context with it.
Add xhs_mcp to an MCP client using the endpoint below. Review the grade and findings above before granting an autonomous agent access.
MCP endpoint
https://mcp.52choujiang.com/xhs/mcpStreamable HTTP transport. This is the MCP endpoint, not a website — paste it into your MCP client server list rather than a browser.
Captured passively during the read-only scan. Click any value to find servers that match it.
The tools this server advertises via tools/list — names, purposes, and the parameters each accepts, exactly as enumerated read-only.
根据笔记链接、短链接或分享文案获取单篇小红书笔记详情。 返回的 note_url 在任何使用场景都必须原样保留完整 URL，包括 xsec_token 等 query 参数；例如最终回答、展示、引用、存储、输出或传递；不得用 note_id 重新拼接链接；note_url 为 null 时不要用 note_id 合成公开链接。
根据 note_id 获取单篇小红书笔记详情。 返回的 note_url 非 null 时，在任何使用场景都必须原样保留完整 URL，包括 xsec_token 等 query 参数；例如最终回答、展示、引用、存储、输出或传递；不得用 note_id 重新拼接链接；note_url 为 null 时不要用 note_id 合成公开链接。
Sorted worst-first. Each finding shows its severity, what it means, its OWASP MCP Top-10 mapping, and a recommended fix — the check id links to the exact methodology row that produced it.
tool: xhs_get_note_detail_by_note_url
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
parameter "note_url"RecommendationRemove side-channel parameters; constrain tool inputs.
tool: xhs_pgy_get_note_detail_by_note_url
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
parameter "note_url"RecommendationRemove side-channel parameters; constrain tool inputs.
tool: xhs_get_product_review_replies
A tool description tries to alter the model’s use of another tool.
该 ID 时直接使用，否则可从 xhs_get_product_reviews 获取；支持 page_token 翻页，不接受 root_review_id。RecommendationDescriptions must describe only their own tool.
tool: xhs_search_suggestions
A tool description tries to alter the model’s use of another tool.
实际搜索笔记或商品时，分别使用 xhs_search_notes 或 xhs_search_products。RecommendationDescriptions must describe only their own tool.
tool: xhs_submit_video_speech_text_by_note_url
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
parameter "note_url"RecommendationRemove side-channel parameters; constrain tool inputs.
tool: xhs_get_note_comments_by_note_url
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
parameter "note_url"RecommendationRemove side-channel parameters; constrain tool inputs.
tool: xhs_get_user_info_by_profile_url
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
parameter "profile_url"RecommendationRemove side-channel parameters; constrain tool inputs.
tool: xhs_get_user_posted_notes_by_profile_url
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
parameter "profile_url"RecommendationRemove side-channel parameters; constrain tool inputs.
tool: xhs_get_topic_notes_by_topic_url
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
parameter "topic_url"RecommendationRemove side-channel parameters; constrain tool inputs.
tool: (server instructions)
A tool description tries to alter the model’s use of another tool.
d of generic web search or webpage lookup, unless the user explicitly requRecommendationDescriptions must describe only their own tool.
The server accepts tool enumeration (and likely invocation) with no authentication.
RecommendationRequire OAuth 2.1 authorization for any server exposing non-public tools.
tool: xhs_get_note_detail_by_note_url
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: xhs_get_note_detail_by_note_id
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: xhs_search_notes
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: xhs_search_products
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: xhs_get_product_detail
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: xhs_pgy_get_note_detail_by_note_id
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: xhs_pgy_get_note_detail_by_note_url
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: xhs_get_product_reviews
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: xhs_get_product_review_replies
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: xhs_get_search_hot_list
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: xhs_search_suggestions
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: xhs_get_video_speech_text_job
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: xhs_get_note_comments_by_note_id
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: xhs_get_note_comments_by_note_url
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: xhs_get_note_sub_comments_by_comment_id
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: xhs_get_user_info_by_user_id
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: xhs_get_user_info_by_profile_url
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: xhs_get_user_posted_notes_by_user_id
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: xhs_get_user_posted_notes_by_profile_url
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: xhs_get_topic_notes_by_topic_url
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: xhs_get_topic_notes_by_page_id
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: socialdatax_get_points_balance
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
Vantaj uptime monitoring via MCP — manage monitors, heartbeats, incidents, and status pages.
Unified gateway to Algeria's TKAWEN ecosystem: commerce, certification, and AI tools.
Provides access to the Cohereon Doctrine AI safety framework with governance components, tiered access, and agent onboarding.
Agentic rails for complex workflows with receipts, fees, and MCP tool access.
Structural TC39 spec lookup for ECMA-262 and ECMA-402 in AI agents, SHA-pinned and offline-first.
Structural TC39 spec lookup for ECMA-262 and ECMA-402 in AI agents, SHA-pinned and offline-first.
Kuaishou short-video data via SocialDataX — hot lists, video details, creator profiles, and comments.
Douyin hot search, work search/details, comments/replies, profiles, series, transcript.
Weibo hot search, post search/details, comments/replies, users, posts, and transcript.
WeChat Channels hot search, video search/details, comments/replies, users, and transcript.
搜索小红书 / Xiaohongshu / XHS / RedNote 相关笔记。用户需要按搜索词查找笔记时使用；已有笔记链接或 note_id 且需要单篇笔记详情时使用对应的详情工具；需要评论、回复或口播转文字时使用相应的 URL/ID 工具；支持 page_token 翻页。 返回的 note_url 在任何使用场景都必须原样保留完整 URL，包括 xsec_token 等 query 参数；
搜索小红书商品。用户需要按搜索词查找商品时使用；已有商品搜索结果中的 sku_id 时使用商品详情或商品评价工具；支持 page_token 翻页。
根据商品搜索结果中的 sku_id 获取小红书商品详情；不支持商品链接、spu_id 或搜索词。
根据 note_id 获取小红书蒲公英单篇笔记商业增强详情，包括正文、图片或视频摘要、作者、曝光量、阅读量、互动量和图文/视频报价。 这是蒲公英商业口径数据，不等同普通公开笔记详情；成功调用扣减 20 积分，失败不扣费。
根据笔记链接、短链接或分享文案获取小红书蒲公英单篇笔记商业增强详情。 这是蒲公英商业口径数据，不等同普通公开笔记详情；成功调用扣减 20 积分，失败不扣费。
根据商品搜索结果中的 sku_id 获取小红书商品评价，支持 sort_type、has_image 和 page_token 翻页；不支持商品链接、spu_id 或搜索词。
根据一级商品评价 review_id 获取其下回复；已有该 ID 时直接使用，否则可从 xhs_get_product_reviews 获取；支持 page_token 翻页，不接受 root_review_id。
获取小红书搜索热榜。
根据搜索词获取小红书候选搜索建议，用于补全搜索词；需要实际搜索笔记或商品时，分别使用 xhs_search_notes 或 xhs_search_products。
根据小红书视频笔记链接、短链接或分享文案提交口播转文字任务；提交完成后最多短等 240 秒，未完成时返回 job_id 和下一步查询动作。
根据小红书 note_id 提交视频笔记口播转文字任务；提交完成后最多短等 240 秒，未完成时返回 job_id 和下一步查询动作。
根据口播转文字提交工具返回的 job_id 查询任务状态；用于继续未完成任务，每次最多等待 240 秒，不触发重处理，也不要重复提交任务。
根据 note_id 获取单篇小红书笔记的一级评论，支持 sort_type 评论排序和 page_token 翻页。
根据笔记链接、短链接或分享文案获取单篇小红书笔记的一级评论，支持 sort_type 评论排序和 page_token 翻页。
根据 note_id 和一级评论 comment_id 获取二级评论，支持 page_token 翻页。
根据 user_id 获取单个小红书用户信息。
根据主页链接、短链接或分享文案获取单个小红书用户信息。
根据 user_id 获取用户已发布笔记列表，支持 page_token 翻页。
根据主页链接、短链接或分享文案获取用户已发布笔记列表，支持 page_token 翻页。
根据话题页链接、短链接或分享文案获取标签页笔记列表，支持 sort_type 排序和 page_token 翻页。
根据 page_id 获取标签页笔记列表，支持 sort_type 排序和 page_token 翻页。
Query the current API Key account's SocialDataX points balance.