Wxapkg

Small MCP server for local .wxapkg inspection, decryption, and extraction.

This project was generated entirely by AI.

Use only on packages you own or are authorized to analyze. Do not commit or redistribute third-party Mini Program packages or extracted source code.

By default on Windows, the tool searches:

%APPDATA%\Tencent\xwechat\radium\users\*\applet\packages

That keeps user-specific IDs such as 8e7b2... out of the code and lets each teammate run it on their own machine.

Install

cd $env:USERPROFILE\Desktop\wxapkg-mcp
python -m venv .venv
.\.venv\Scripts\python -m pip install -e .

Project Layout

wxapkg-mcp/
|-- README.md
|-- pyproject.toml
|-- setup.py
|-- requirements.txt
|-- src/
|   `-- wxapkg_mcp/
|       |-- __init__.py
|       |-- main.py
|       |-- server.py
|       |-- cli.py
|       `-- core.py
|-- tests/
|   `-- test_core.py
`-- .gitignore

CLI

.\.venv\Scripts\wxapkg-tool roots
.\.venv\Scripts\wxapkg-tool apps
.\.venv\Scripts\wxapkg-tool appid wx87ceadd15865a6fb "C:\out\wx87ceadd15865a6fb"
.\.venv\Scripts\wxapkg-tool inspect "C:\path\to\__APP__.wxapkg"
.\.venv\Scripts\wxapkg-tool decrypt "C:\path\to\__APP__.wxapkg" "C:\out\__APP__.wxapkg" --appid wx...
.\.venv\Scripts\wxapkg-tool extract "C:\out\__APP__.wxapkg" "C:\out\extracted"
.\.venv\Scripts\wxapkg-tool batch "C:\path\to\packages\wx...\13" "C:\out" --appid wx...

MCP config

After installation, add this to your MCP client configuration:

{
  "mcpServers": {
    "wxapkg": {
      "command": "wxapkg-mcp"
    }
  }
}

Note: This assumes you have already run pip install -e . to install the package and make the command available.

Alternative: Using Python module directly

If you prefer to run it as a Python module without installing:

{
  "mcpServers": {
    "wxapkg": {
      "command": "python",
      "args": ["-m", "wxapkg_mcp.server"]
    }
  }
}

Exposed tools:

• find_wechat_package_roots
• list_wechat_apps
• inspect_wxapkg
• decrypt_wxapkg
• extract_wxapkg
• decrypt_and_extract_dir
• decrypt_and_extract_appid

For most agent workflows, call list_wechat_apps first, then decrypt_and_extract_appid with the chosen AppID. The server chooses the latest local version by default; pass version only when you need a specific version.