# io.github.Chaixueyuan/weapp-agent-mcp > Agent-first MCP server for WeChat Mini Program debugging & automation via WeChat DevTools. - name: io.github.Chaixueyuan/weapp-agent-mcp - version: 0.4.8 - connection class: L0 (run_local_package) - trust: 81/100 - quality: –/100 (not scored) - owner: not claimed - descriptor: https://api.protogrid.dev/v1/servers/io.github.Chaixueyuan%2Fweapp-agent-mcp - tools: https://api.protogrid.dev/v1/servers/io.github.Chaixueyuan%2Fweapp-agent-mcp/tools **Runs on your machine: something must execute the package.** Only local packages are published (npm, PyPI, OCI, …). The registry never executes them, so tools are unknown until you run it. ## Connection (mcpServers) ```json { "mcpServers": { "weapp-agent-mcp": { "command": "npx", "args": [ "-y", "@chaixueyuan/weapp-agent-mcp@0.4.8" ], "env": { "WEAPP_AUTO_ACCOUNT": "${WEAPP_AUTO_ACCOUNT}", "WEAPP_DEVTOOLS_TICKET": "${WEAPP_DEVTOOLS_TICKET}" } } } } ``` Placeholders to fill: `${WEAPP_AUTO_ACCOUNT}`, `${WEAPP_DEVTOOLS_TICKET}`. ## Trust - hygiene: 100 - liveness: n/a - freshness: 65 - provenance: 80 - drivers: +repository +namespace-matches-repo ~liveness-unmeasured ~updated-111d-ago - Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. ## Quality –/100 (not scored) Not scored: fewer than three checks apply, usually because no remote answered a credential-free probe or the server is a local package. ### protocol: n/a (weight 25) - n/a `protocol.modern`, `protocol.stateless`, `protocol.transport`, `protocol.list_ttl`: no remote answered a protocol handshake (not probed yet, unreachable, or local-only) ### authorization: n/a (weight 15) - n/a `auth.prm`, `auth.as_metadata`, `auth.cimd`: no remote uses OAuth - n/a `auth.secret_in_url`: no templated URL ### tool hygiene: n/a (weight 30) - n/a `tools.descriptions`, `tools.description_length`, `tools.schemas`, `tools.annotations`, `tools.directory_hints`, `tools.token_cost`, `tools.api_dump`: tool list unknown (behind auth, not probed, or empty) ### stability: n/a (weight 15) - n/a `stability.changes`, `stability.rug_pull`: tool list unknown ### dependencies: 33 (weight 15) - fail `deps.known_vulns`: 4 advisories to act on (malicious, or rated high or critical with a fix available): GHSA-8r9p-f939-6h3c in follow-redirects@1.16.0 (indirect, fixed in 1.16.1), GHSA-q3jh-wrc6-jgq8 in follow-redirects@1.16.0 (indirect, fixed in 1.16.1), GHSA-xvf7-4v9q-58w6 in jpeg-js@0.3.7 (indirect, fixed in 0.4.4), ...; 4 more of lower severity or without a fix - fail `deps.mcp_sdk_version`: @modelcontextprotocol/client 2.1.0 has 2 known advisories (GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h); update @modelcontextprotocol/client to 2.3.0 or later - pass `deps.resolvable`: @chaixueyuan/weapp-agent-mcp@0.4.8 resolved: 261 packages - tools: unknown - badge: [![protogrid quality](https://protogrid.dev/badge/io.github.Chaixueyuan/weapp-agent-mcp.svg)](https://protogrid.dev/servers/io.github.Chaixueyuan/weapp-agent-mcp) - Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. ### Tool changes _No tool definition changes recorded._ ## Dependencies - npm @chaixueyuan/weapp-agent-mcp@0.4.8: resolved, 260 dependencies, MCP SDK @modelcontextprotocol/sdk 1.30.1 - GHSA-xvch-5gv4-984h (critical) in `` minimist@0.0.8 ``, indirect, fixed in `` 0.2.4 ``, advisory summary: "Prototype Pollution in minimist" https://osv.dev/vulnerability/GHSA-xvch-5gv4-984h - GHSA-6qxp-vccf-f47h (high) in `` @modelcontextprotocol/client@2.1.0 ``, indirect, fixed in `` 2.2.0 ``, advisory summary: "MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server" https://osv.dev/vulnerability/GHSA-6qxp-vccf-f47h - GHSA-22jm-h49p-29qw (high) in `` @modelcontextprotocol/sdk@1.30.1 ``, direct, fixed in `` 1.32.0 ``, advisory summary: "MCP TypeScript SDK: Experimental tasks were not tied to the session that created them" https://osv.dev/vulnerability/GHSA-22jm-h49p-29qw - GHSA-6qxp-vccf-f47h (high) in `` @modelcontextprotocol/sdk@1.30.1 ``, direct, fixed in `` 1.31.0 ``, advisory summary: "MCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server" https://osv.dev/vulnerability/GHSA-6qxp-vccf-f47h - GHSA-8r9p-f939-6h3c (high) in `` follow-redirects@1.16.0 ``, indirect, fixed in `` 1.16.1 ``, advisory summary: "follow-redirects sensitiveHeaders regex escaping can expose credential headers" https://osv.dev/vulnerability/GHSA-8r9p-f939-6h3c - GHSA-q3jh-wrc6-jgq8 (high) in `` follow-redirects@1.16.0 ``, indirect, fixed in `` 1.16.1 ``, advisory summary: "follow-redirects array-form headers bypass cross-origin credential stripping" https://osv.dev/vulnerability/GHSA-q3jh-wrc6-jgq8 - GHSA-xvf7-4v9q-58w6 (high) in `` jpeg-js@0.3.7 ``, indirect, fixed in `` 0.4.4 ``, advisory summary: "Infinite loop in jpeg-js" https://osv.dev/vulnerability/GHSA-xvf7-4v9q-58w6 - GHSA-6prh-2h8m-c8cw (moderate) in `` @modelcontextprotocol/client@2.1.0 ``, indirect, fixed in `` 2.3.0 ``, advisory summary: "MCP TypeScript client SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom headers and request bodies" https://osv.dev/vulnerability/GHSA-6prh-2h8m-c8cw - GHSA-6prh-2h8m-c8cw (moderate) in `` @modelcontextprotocol/sdk@1.30.1 ``, direct, fixed in `` 1.32.0 ``, advisory summary: "MCP TypeScript client SDK: HTTP client transports and OAuth requests followed cross-origin redirects and re-sent custom headers and request bodies" https://osv.dev/vulnerability/GHSA-6prh-2h8m-c8cw - GHSA-5r4p-p66f-jhc7 (moderate) in `` hono@4.13.9 ``, indirect, fixed in `` 4.13.11 ``, advisory summary: "Hono: \`serveStatic\` decodes the request path a second time, leading to bypass of middleware on static paths" https://osv.dev/vulnerability/GHSA-5r4p-p66f-jhc7 - GHSA-w7q9-p3jq-fmhm (moderate) in `` jpeg-js@0.3.7 ``, indirect, fixed in `` 0.4.0 ``, advisory summary: "Uncontrolled resource consumption in jpeg-js" https://osv.dev/vulnerability/GHSA-w7q9-p3jq-fmhm - GHSA-vh95-rmgr-6w4m (moderate) in `` minimist@0.0.8 ``, indirect, fixed in `` 0.2.1 ``, advisory summary: "Prototype Pollution in minimist" https://osv.dev/vulnerability/GHSA-vh95-rmgr-6w4m - GHSA-x565-32qp-m3vf (moderate) in `` phin@2.9.3 ``, indirect, fixed in `` 3.7.1 ``, advisory summary: "phin may include sensitive headers in subsequent requests after redirect" https://osv.dev/vulnerability/GHSA-x565-32qp-m3vf Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. ## Remotes _none_ ## Packages - npm @chaixueyuan/weapp-agent-mcp@0.4.8 secrets: WEAPP_AUTO_ACCOUNT, WEAPP_DEVTOOLS_TICKET ## Tools (0) _none observed_