Server data from the Official MCP Registry
AI copilot for WeChat Mini Program - compile-fix, size analysis, compliance. 20 tools.
AI copilot for WeChat Mini Program - compile-fix, size analysis, compliance. 20 tools.
harmony-mcp is a WeChat miniprogram automation tool with reasonable architectural separation and legitimate use cases. However, the codebase has several security concerns that should be addressed: incomplete input validation in compliance rules, overly broad file system scanning permissions without rate-limiting or depth constraints, potential for unsafe subprocess execution patterns in the CLI execution layer, and sensitive configuration detection that could expose user environment details. The permissions align with the tool's purpose but implementation gaps create exploitability. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.
4 files analyzed · 13 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-xiaoxuzhu303-prog-harmony-mcp": {
"args": [
"-y",
"@yujiamei/harmony-mcp"
],
"command": "npx"
}
}
}Be the first to review this server!
by Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
by mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.