MCP.Market

rednote-gate MCP server

by YashShelar007·io.github.YashShelar007/rednote-gate·v1.1.1·1 stars

MCP server for one throwaway RedNote account. Every write waits for a human Approve click.

A92/100grade A
What users say
No reviews yet
Be the first
Safety scan
A92/100

full report

Adoption
Growing

1 stars644 downloads/wk

Reviews

Write one

Nobody has reviewed rednote-gate yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

rednote-gate tools (15, 4 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • rednote_create_draftwrite action

    Queue a photo note to be saved as a draft, after human approval. Does NOT post. Returns a queue id.

  • rednote_create_postwrite action

    Queue a photo note for human approval. Does NOT post. Returns a queue id.

  • rednote_create_video_postwrite action

    Queue a video note for human approval. Does NOT post. One MP4 or MOV, absolute path, up to 500 MB. RedNote processes the video after upload, which can take minutes.

  • rednote_get_comments

    Read the first page of comments on a note: id, author, text. Read only. Use these values for rednote_reply_comment.

  • rednote_get_note

    Read one note: title, body, author, tags, counts. Read only.

  • rednote_help

    What rednote-gate can do: every tool and prompt, the current mode, and what is left of today's budget. Never touches RedNote.

  • rednote_like_note

    Queue a like on a note for human approval. Does NOT like it yet. Likes have their own daily cap (10 by default). Pass noteTitle so the human sees which note.

  • rednote_login_status

    Check whether the saved RedNote session is logged in (main site and creator site). Read only.

  • rednote_make_cards

    Render text-card images (1080x1440 PNG, RedNote's 3:4) on this computer, for notes without photos. Never touches RedNote.

  • rednote_my_notes

    List the logged-in account's own notes, newest first: noteId, title, likes, url. Read only. Use the url for comments and replies on your own notes.

  • rednote_open_approval_page

    Open the approval page in the user's browser so they can approve or reject queued writes. Returns no link.

  • rednote_post_commentwrite action

    Queue a comment on a note for human approval. Does NOT post. Returns a queue id.

  • rednote_queue_status

    List recent queued writes and what happened to them. Read only. Never touches the browser.

  • rednote_reply_comment

    Queue a reply to one comment for human approval. Does NOT post. Pass commentId, commentAuthor and commentText exactly as rednote_get_comments returned them.

  • rednote_search

    Search RedNote notes by keyword. Read only. Returns note urls that carry the xsec_token other tools need.

Public scan report

scanner v0.1.10 · 2026-10-13 · same rubric, same numbers if you re-run it

no findings
  • Code scan16 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 6 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 92/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How rednote-gate compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
92/100
higher than 95% of 48,255 servers
Tools
15
the typical server has 7
Tools that change things
27%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
1
more than 65% of 28,688 servers
Downloads a week
644
more than 91% of 12,191 servers with a package

What its tools let an agent do: 11 read · 4 change

Install rednote-gate in Claude Code, Cursor or VS Code

Runs npx -y rednote-gate on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add rednote-gate -- npx -y rednote-gate
Add to Cursor

What the publisher says

From the rednote-gate repository's README, as published. We do not edit it. Read it on GitHub

rednote-gate

中文说明

rednote-gate drives ONE dedicated throwaway RedNote (Xiaohongshu) account. Never point it at a primary or brand account. It works by browser automation, which is against RedNote's terms of service. The account can be rate limited or banned. Only use an account you can afford to lose.

Website: https://yashshelar007.github.io/rednote-gate/

It is a local MCP server for Claude Code, Claude Desktop and Codex. Reads run directly. Every write waits in a queue until a human clicks Approve on a local web page.

Quick start

Install from npm

npm install -g rednote-gate
rednote-gate setup

That installs Chromium, opens the QR login for your throwaway account, and connects rednote-gate to Claude Code. Your data and login live in ~/.rednote-gate.

Or from a clone

git clone https://github.com/YashShelar007/rednote-gate.git
cd rednote-gate
npm run setup

Same steps, plus the build. A clone that already has a login in .session/ keeps its data in the clone folder.

Then use rednote-gate's prompts. Claude Code shows them as slash commands:

Or just ask in plain words ("post these two photos about my hike"). The first time you use a rednote tool, a small background service starts. It owns the browser, the approval page and the worker, and it keeps running after you close Claude Code, so the approval page always works and approved items always run. It closes the browser window after 5 idle minutes. Stop it with rednote-gate stop (npm run stop in a clone). When something is queued, the approval page opens in your browser and your Mac shows a notification. You click Approve. About 30 seconds later it runs, and the page shows a screenshot of the result. You get a notification when it is done, or if RedNote ever shows a captcha.

Status: every flow was checked against the live site on 2026-10-06 on a rednote.com account, headed: four reads, and one real publish, draft, comment and reply, each approved by a human on the approval page. See Last verified against the live site.

How it fits together

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

rednote-gate: common questions

Is rednote-gate MCP server safe?
Yes, by our scan: it is graded A (92/100). Read the rednote-gate safety report
How do I install rednote-gate?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does rednote-gate need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is rednote-gate maintained?
The last commit was 28 days ago (2026-10-07). The latest release is v1.1.1.
How does rednote-gate compare with other MCP servers?
safety score 92/100 (higher than 95% of 48,255 servers); tools 15 (the typical server has 7); tools that change things 27% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.