xiangsu-mcpSAFE
像塑 MCP | AI Agent scene editing, scripting and playtesting for Douyin Xiangsu. Effect House compatibility unverified.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
让 AI Agent 通过 Model Context Protocol(MCP)操作抖音像塑:编辑场景、绑定素材、初始化 TypeScript 脚本、编译、截图和验证交互。
Xiangsu MCP is an independent MCP server for the Douyin Xiangsu AR effect editor. It exposes scene editing, asset binding, TypeScript scripting, compilation, preview screenshots and interactive playtesting to MCP clients. Windows + Xiangsu 9.4.0, 9.4.1 and 9.5.2 have been tested. Core regression workflows passed on 9.4.0/9.4.1; session binding, text layout and batch preflight, screenshots, compilation and recording passed on 9.5.2. Xiangsu 9.4.0 and later can be installed by default; untested workflows and versions require further verification. International TikTok Effect House compatibility is not verified.
- 项目版本:0.2.2,使用 Node.js 和 stdio MCP,编辑器侧通过用户插件桥接。
- 当前提供 105 个工具入口;入口数量包含兼容入口和明确未接入的云端入口,不代表 105 项均已实测。
- 独立社区项目,非字节跳动、抖音或 TikTok 官方产品。不宣称完整替代官方 Agent / Ask AI。
- 安装 · 功能与验证状态 · AI 使用指引 · English quick start
功能与验证状态
“已实测”指在像塑测试副本中完成相应操作并读回、编译或检查真实预览;不表示该工具的全部参数组合均已覆盖。详细证据范围见 9.4 验证记录 与 9.5.2 验证记录。
0.2.2 修复像塑 9.5.2 的截图及文字布局兼容问题,23 项自动测试通过。 9.5.2 已实测截图、文字模式与尺寸批次预检、官方编译和短视频录制;详见 9.5.2 验证记录。9.4.0/9.4.1 的历史核心回归范围保持,详见 9.4.1 审查记录。新版新增的两项预览操作尚未接入。
9e0ca9cd1b91OBSERVED · 2026-10-10Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add xiangsu-editor-mcp -- npx -y [email protected]
{
"mcpServers": {
"xiangsu-editor-mcp": {
"command": "npx",
"args": [
"-y",
"[email protected]"
]
}
}
}Exposed tools (1)
1 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
userScript | read | 兼容旧版脚本初始化/依赖同步/资源绑定;新任务优先 setupGameScript |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- UNDECLARED (1 observation(s))
- Network
- none-observed
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (7)
const root=await fs.mkdtemp(path.join(os.tmpdir(),'xiangsu-adapter-'));t.after(()=>fs.rm(root,{recursive:true,force:true}));const root=await fs.mkdtemp(path.join(os.tmpdir(),'xiangsu-extract-'));t.after(()=>fs.rm(root,{recursive:true,force:true}));t.after(async()=>{await client.close();runtime.stop();await fs.rm(temp,{recursive:true,force:true});});const temp=await fs.mkdtemp(path.join(os.tmpdir(),'xiangsu-path-test-'));t.after(()=>fs.rm(temp,{recursive:true,force:true}));const root=await fs.mkdtemp(path.join(os.tmpdir(),'xiangsu-lock-'));t.after(()=>fs.rm(root,{recursive:true,force:true}));lines.push('','## 尚未验证的重要功能','','- 对象/分组复制、重排;组件创建与删除。','- 资源与包导入、预制件实例化、内置资源创建和属性修改。','- OMTL/AUSL 材质创建、编译与修复。','- 声音/触摸/拖拽等交互、视频录制。','- 工程快照创建/恢复;快照路径限制可能需要根据官方实际返回继续适配。','- 新增 Game2D 玩法的运行时行为(本轮验证脚Gates applied: no_behavioural_pass, no_license.
9e0ca9cd1b91full audit observations/trust-audit/mcp-server/sleepyquq__xiangsu-mcp.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-10 | 9e0ca9cd1b91 | SAFE | B | 89 | first audit |
Questions
What is the xiangsu-mcp MCP server?
像塑 MCP | AI Agent scene editing, scripting and playtesting for Douyin Xiangsu. Effect House compatibility unverified.
What tools does xiangsu-mcp expose?
1 in total: 1 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is xiangsu-mcp safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does xiangsu-mcp need?
No credential environment variables were found in its source, so it appears to need none.
How does xiangsu-mcp run?
It speaks stdio, so it runs as a local process your client starts. It is published on npm as xiangsu-editor-mcp at 0.2.2.
How current is this page?
The grade is for one exact copy of the source (9e0ca9cd1b91), read on 2026-10-10. The repository is watched and re-audited when it changes.