rednote-gate MCP server
io.github.YashShelar007/rednote-gate·v1.1.1·1 starsMCP server for one throwaway RedNote account. Every write waits for a human Approve click.
1 stars644 downloads/wk
Reviews
Write oneNobody has reviewed rednote-gate yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
rednote-gate tools (15, 4 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
rednote_create_draftwrite actionQueue a photo note to be saved as a draft, after human approval. Does NOT post. Returns a queue id.
rednote_create_postwrite actionQueue a photo note for human approval. Does NOT post. Returns a queue id.
rednote_create_video_postwrite actionQueue a video note for human approval. Does NOT post. One MP4 or MOV, absolute path, up to 500 MB. RedNote processes the video after upload, which can take minutes.
rednote_get_commentsRead the first page of comments on a note: id, author, text. Read only. Use these values for rednote_reply_comment.
rednote_get_noteRead one note: title, body, author, tags, counts. Read only.
rednote_helpWhat rednote-gate can do: every tool and prompt, the current mode, and what is left of today's budget. Never touches RedNote.
rednote_like_noteQueue a like on a note for human approval. Does NOT like it yet. Likes have their own daily cap (10 by default). Pass noteTitle so the human sees which note.
rednote_login_statusCheck whether the saved RedNote session is logged in (main site and creator site). Read only.
rednote_make_cardsRender text-card images (1080x1440 PNG, RedNote's 3:4) on this computer, for notes without photos. Never touches RedNote.
rednote_my_notesList the logged-in account's own notes, newest first: noteId, title, likes, url. Read only. Use the url for comments and replies on your own notes.
rednote_open_approval_pageOpen the approval page in the user's browser so they can approve or reject queued writes. Returns no link.
rednote_post_commentwrite actionQueue a comment on a note for human approval. Does NOT post. Returns a queue id.
rednote_queue_statusList recent queued writes and what happened to them. Read only. Never touches the browser.
rednote_reply_commentQueue a reply to one comment for human approval. Does NOT post. Pass commentId, commentAuthor and commentText exactly as rednote_get_comments returned them.
rednote_searchSearch RedNote notes by keyword. Read only. Returns note urls that carry the xsec_token other tools need.
Public scan report
scanner v0.1.10 · 2026-10-13 · same rubric, same numbers if you re-run it
- Code scan16 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 6 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How rednote-gate compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 92/100
- higher than 95% of 48,255 servers
- Tools
- 15
- the typical server has 7
- Tools that change things
- 27%
- typical: 0%. Fewer write tools means less an agent can break
- GitHub stars
- 1
- more than 65% of 28,688 servers
- Downloads a week
- 644
- more than 91% of 12,191 servers with a package
What its tools let an agent do: 11 read · 4 change
Install rednote-gate in Claude Code, Cursor or VS Code
Runs npx -y rednote-gate on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add rednote-gate -- npx -y rednote-gate
What the publisher says
From the rednote-gate repository's README, as published. We do not edit it. Read it on GitHub
rednote-gate
中文说明
rednote-gate drives ONE dedicated throwaway RedNote (Xiaohongshu) account. Never point it at a primary or brand account. It works by browser automation, which is against RedNote's terms of service. The account can be rate limited or banned. Only use an account you can afford to lose.
Website: https://yashshelar007.github.io/rednote-gate/
It is a local MCP server for Claude Code, Claude Desktop and Codex. Reads run directly. Every write waits in a queue until a human clicks Approve on a local web page.
Quick start
Install from npm
npm install -g rednote-gate
rednote-gate setupThat installs Chromium, opens the QR login for your throwaway account, and connects rednote-gate to Claude Code. Your data and login live in ~/.rednote-gate.
Or from a clone
git clone https://github.com/YashShelar007/rednote-gate.git
cd rednote-gate
npm run setupSame steps, plus the build. A clone that already has a login in .session/ keeps its data in the clone folder.
Then use rednote-gate's prompts. Claude Code shows them as slash commands:
Or just ask in plain words ("post these two photos about my hike"). The first time you use a rednote tool, a small background service starts. It owns the browser, the approval page and the worker, and it keeps running after you close Claude Code, so the approval page always works and approved items always run. It closes the browser window after 5 idle minutes. Stop it with rednote-gate stop (npm run stop in a clone). When something is queued, the approval page opens in your browser and your Mac shows a notification. You click Approve. About 30 seconds later it runs, and the page shows a screenshot of the result. You get a notification when it is done, or if RedNote ever shows a captcha.
Status: every flow was checked against the live site on 2026-10-06 on a rednote.com account, headed: four reads, and one real publish, draft, comment and reply, each approved by a human on the approval page. See Last verified against the live site.
How it fits together
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
rednote-gate: common questions
- Is rednote-gate MCP server safe?
- Yes, by our scan: it is graded A (92/100). Read the rednote-gate safety report
- How do I install rednote-gate?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does rednote-gate need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is rednote-gate maintained?
- The last commit was 28 days ago (2026-10-07). The latest release is v1.1.1.
- How does rednote-gate compare with other MCP servers?
- safety score 92/100 (higher than 95% of 48,255 servers); tools 15 (the typical server has 7); tools that change things 27% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.