# Claude Code Weixin

> WeChat channel plugin for Claude Code — chat with Claude from WeChat

- **Type:** MCP server
- **Install:** `agentstack add mcp-yingwang-claude-code-weixin`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [yingwang](https://agentstack.voostack.com/s/yingwang)
- **Installs:** 0
- **Category:** [Integrations](https://agentstack.voostack.com/c/integrations)
- **Latest version:** 0.1.0
- **License:** MIT
- **Upstream author:** [yingwang](https://github.com/yingwang)
- **Source:** https://github.com/yingwang/claude-code-weixin

## Install

```sh
agentstack add mcp-yingwang-claude-code-weixin
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# claude-code-weixin

WeChat channel plugin for [Claude Code](https://github.com/anthropics/claude-code) — chat with Claude Code directly from WeChat.

Works just like the built-in Telegram channel: WeChat messages flow into your Claude Code session, and Claude replies back through WeChat.

## Architecture

```
WeChat User ←→ iLink Bot API ←→ [this plugin (MCP server)] ←→ Claude Code
                (long-poll)        stdio transport              (your session)
```

This is a Claude Code **channel plugin** — an MCP server with the `claude/channel` capability. Claude Code spawns it as a subprocess and communicates via stdio. Inbound WeChat messages arrive as MCP notifications, and Claude uses MCP tools (`reply`) to respond.

## Features

- Text messaging (send and receive)
- Image recognition (download, decrypt, and pass to Claude for vision)
- File download (PDF, documents — Claude can read and summarize)
- Video download
- Voice messages (server-side speech-to-text when available, or raw audio download)
- Outbound file/image/video sending via CDN upload
- Multi-bot support (multiple WeChat accounts in one session)
- QR code login (scan with WeChat to authorize)
- Pairing-based access control

## Setup

### Quick install (via npm)

```bash
npx claude-channel-weixin install
npx claude-channel-weixin login
claude --dangerously-load-development-channels plugin:weixin@claude-channel-weixin
```

### Or install manually (via GitHub)

```bash
claude plugin marketplace add https://github.com/yingwang/claude-code-weixin.git
claude plugin install weixin@claude-channel-weixin
npx claude-channel-weixin login
claude --dangerously-load-development-channels plugin:weixin@claude-channel-weixin
```

### What each step does

1. **Install** — registers the marketplace and installs the plugin into Claude Code
2. **Login** — shows a QR code in terminal; scan with WeChat to authorize; bot token auto-saved
3. **Start** — launches Claude Code with the WeChat channel enabled
4. **Pair** — send a message from WeChat, then approve the pairing code with `/weixin:access pair `

After pairing, messages flow through automatically.

## Slash Commands

| Command | Description |
|---------|-------------|
| `/weixin:configure` | Show current config status |
| `/weixin:configure clear` | Remove bot token |
| `/weixin:access pair ` | Approve a pairing request |
| `/weixin:access allow ` | Add user to allowlist |
| `/weixin:access remove ` | Remove user from allowlist |
| `/weixin:access policy ` | Set DM policy (pairing/allowlist/disabled) |
| `/weixin:access list` | Show allowed users |

## Configuration

Stored at `~/.claude/channels/weixin/`:

| File | Purpose |
|------|---------|
| `.env` | `WEIXIN_BOT_TOKEN=...` (chmod 600) |
| `config.json` | Channel settings (DM policy, API URL, etc.) |
| `allowlist.json` | Approved sender IDs |
| `sync-buf.dat` | Long-poll cursor (prevents duplicate messages) |

### Multi-bot support

To connect multiple WeChat accounts, add additional tokens to `.env`:

```
WEIXIN_BOT_TOKEN=first-token
WEIXIN_BOT_TOKEN_2=second-token
```

Each token gets its own long-poll monitor. All messages feed into the same Claude Code session.

## Security

- **Bot token**: Gives full access to send/receive messages as your WeChat bot. **Never share it or commit it to git.**
- **Sender allowlist**: Only paired/approved WeChat users can push messages to your Claude session
- **Pairing flow**: Unknown users get a 6-char code → you approve in terminal → they're added
- **Token storage**: Bot token stored with 600 permissions, never logged

## Development

```bash
npm install
npm run build
npm run dev          # watch mode
```

After code changes: `npm run build`, then kill the plugin process and `/reload-plugins` in Claude Code.

```bash
kill $(pgrep -f 'weixin.*server.js')
# then run /reload-plugins in Claude Code
```

## License

Apache-2.0

## Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [yingwang](https://github.com/yingwang)
- **Source:** [yingwang/claude-code-weixin](https://github.com/yingwang/claude-code-weixin)
- **License:** MIT

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** yes
- **Environment & secrets:** yes
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/mcp-yingwang-claude-code-weixin
- Seller: https://agentstack.voostack.com/s/yingwang
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.