// SCAN REPORT

XHS-MCP

13 tools. 5 can modify or destroy data without limits.

5 write tools that can modify data. Rate limits recommended.

Last updated: 4 Jul 2026

5 can modify or destroy data

8 read-only

13 tools total

Community server · catalogue entry verified 04/07/2026

How to control XHS-MCP ↓

TOOL MAP

What XHS-MCP exposes to your agents

Read (8) Write / Execute (5) Destructive / Financial (0)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

High Risk

The most dangerous XHS-MCP tools

Execute · Medium xhs_generate_cover This tool triggers an external operation (image generation) based on input arguments. Execute · Medium xhs_login This tool triggers an external browser automation action (opening a browser window and performing a login flow). Write · Medium xhs_create_or_update_post This tool creates new notes or modifies existing drafts, which are reversible write operations. Write · High xhs_post This tool creates new content on the Xiaohongshu platform by publishing notes.

5 of XHS-MCP's 13 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control XHS-MCP

PolicyLayer is an MCP gateway — it sits between your AI agents and XHS-MCP, and nothing reaches the server without passing your rules. These are the rules we recommend:

Rate limit write operations

{
  "xhs_create_or_update_post": {
    "limits": [
      {
        "counter": "xhs_create_or_update_post_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "xhs_check_login": {
    "limits": [
      {
        "counter": "xhs_check_login_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register XHS-MCP — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON XHS-MCP →

Instant setup, no code required.

FULL CATALOGUE

All 13 XHS-MCP tools

EXECUTE 2 tools

Execute xhs_generate_cover 为指定的笔记生成发布需要的封面图片 Execute xhs_login 登录小红书账号（会打开浏览器窗口进行登录）

WRITE 3 tools

Write xhs_create_or_update_post 创建或更新待发布的笔记文件，添加到发布队列。创建后的笔记可以通过 post 命令发布到小红书。 Write xhs_post 发布指定的笔记到小红书。需要传入笔记的文件名（queue文件名，不包含.txt后缀） Write xhs_save_example 保存范文（txt格式，文件名必须以.txt结尾）

READ 8 tools

Read xhs_check_login 检查小红书登录状态（返回简单的登录状态信息） Read xhs_get_my_profile 获取当前登录用户的资料信息（包括账户名、粉丝数、关注数、获赞与收藏等） Read xhs_get_note_detail 根据笔记ID获取笔记详情（包括标题、内容、标签、图片等） Read xhs_get_operation_data 获取小红书近期笔记运营数据（首页数据、账户统计、粉丝数据） Read xhs_get_queue_post_detail 根据文件名获取待发布笔记的详情（包括标题、内容、图片、标签等） Read xhs_get_recent_notes 获取近期已发布的笔记列表 Read xhs_list_queue_posts 读取已经写好的，准备发布的笔记列表 Read xhs_read_posting_guidelines 读取发帖指导原则并生成发帖计划建议。注意：要添加待发布的笔记，请使用 xhs_create_or_update_post 工具，传入标题和内容等参数。标题将作为唯一键，如果已存在相同标题的笔记则会更新。

FAQ

Questions about XHS-MCP

How do I prevent bulk modifications through XHS-MCP? +

The XHS-MCP server has 3 write tools including xhs_create_or_update_post, xhs_post, xhs_save_example. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach XHS-MCP.

How many tools does the XHS- MCP server expose? +

13 tools across 2 categories: Read, Write. 8 are read-only. 5 can modify, create, or delete data.

How do I enforce a policy on XHS-MCP? +

Register the XHS- MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every XHS-MCP tool call.

Deterministic rules across all 13 XHS-MCP tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON XHS-MCP →

Instant setup, no code required.

13 XHS-MCP tools catalogued and risk-classified — across an index of 43,000+ MCP servers.