io.github.zhuzhen-team/feishu-user-plugin

Official85 tools

by EthanQC · JavaScript

Feishu/Lark MCP server + CLI tool. 85 tools, 3 auth layers. Send as user via cookie+protobuf.

This MCP server and CLI tool provides Feishu/Lark integration. The implementation exposes 85 tools and supports 3 authentication layers. It supports sending messages “as user” using a cookie and protobuf. The project is described as MCP-compatible and includes Node.js (>= 18) distribution metadata.

🛠️ Key Features

Feishu/Lark MCP server + CLI tool
85 tools (tools list referenced as docs/TOOLS.md)
3 authentication layers
Send as user via cookie + protobuf

🚀 Use Cases

Use MCP tools to interact with Feishu/Lark (messaging use case implied by “send as user”)
Use the accompanying CLI tool alongside the MCP server
Integrate with developers building Claude/MCP workflows (topics include claude and mcp)

⚡ Developer Benefits

MCP-compatible server
protobuf-based “as user” message approach
CLI available for operational use
MIT license; Node.js >= 18

⚠️ Limitations

Tooling and capabilities are scoped to Feishu/Lark and “send as user” behavior, as described; no additional protocol details are provided beyond 3 auth layers and cookie+protobuf.

Topics

claudeclaude-codefeishuimlarkmcpmessagingprotobufcodexclifeishu-climcp-serverfeishu-mcp

Declared in the repository manifest (server.json). Not verified against a live endpoint.

manage_bitable_app

Manage a Bitable app. action=create (new app, optional wiki_space_id to attach), copy (duplicate an existing app), get_meta (read app metadata).

Parameters

No parameters.

manage_bitable_table

Manage a table inside a Bitable app. action=list, create (with optional initial fields), update (rename), delete.

Parameters

No parameters.

manage_bitable_field

Manage fields (columns) inside a Bitable table. action=list, create, update (Feishu requires `type` even when only renaming), delete.

Parameters

No parameters.

manage_bitable_view

Manage views inside a Bitable table. action=list, create, delete. (Feishu open API does not expose view update — recreate with a new name to change.)

Parameters

No parameters.

manage_bitable_record

Manage records (rows) inside a Bitable table. action=search, get, create, update, delete. create/update/delete accept arrays — single record or up to 500.

Parameters

No parameters.

list_calendars

List the current user's calendars (primary + shared + subscribed). Requires UAT — app identity only sees calendars it was explicitly invited to. Requires `calendar:calendar:readonly` scope on the…

Parameters

No parameters.

list_calendar_events

List events in a calendar within an optional time range. Typical usage: first list_calendars to find calendar_id (primary calendar has type="primary"), then list events in e.g. [now, now+7d] (Unix…

Parameters

No parameters.

get_calendar_event

Get full details of a single calendar event (summary, description, start/end, attendees, location, attachments, meeting link).

Parameters

No parameters.

create_calendar_event

Create a new calendar event. Requires `calendar:calendar.event:create` scope (re-run `npx feishu-user-plugin oauth` after enabling). The current identity (UAT-first) must have writer or owner…

Parameters

No parameters.

update_calendar_event

Patch fields on an existing calendar event. Pass only the fields you want to change. Requires `calendar:calendar.event:update` scope.

Parameters

No parameters.

delete_calendar_event

Delete a calendar event. Requires `calendar:calendar.event:delete` scope.

Parameters

No parameters.

respond_calendar_event

Respond to an event invitation. The current identity must be in the event's attendee list. Requires `calendar:calendar.event:reply` scope.

Parameters

No parameters.

get_freebusy

Query freebusy windows for one or more users in a time range. Use to find a meeting slot. Requires `calendar:calendar:readonly` (already in default scope set).

Parameters

No parameters.

search_contacts

Search Feishu users, bots, or group chats by name. Returns IDs.

Parameters

No parameters.

create_p2p_chat

Create or get a P2P (direct message) chat. Returns numeric chat_id.

Parameters

No parameters.

get_user_info

Look up a user's display name by user ID.

Parameters

No parameters.

get_login_status

Check cookie session validity and app credentials status. Also refreshes session.

Parameters

No parameters.

download_message_resource

Download an image or file attached to a message so the model can see / store it. v1.3.7 (C2.4) consolidates the v1.3.6 download_image (mode 1) + download_file. UAT-first, falls back to app.

Parameters

No parameters.

download_doc_image

Download an image embedded in a docx document so the model can see it. Pass the `image_token` from `get_doc_blocks` (block.image.token), and optionally the doc/wiki/URL token to scope the lookup…

Parameters

No parameters.

search_docs

Search Feishu documents by keyword. UAT-first with app fallback: with user identity (UAT) the search covers docs visible to YOU, including your personal space; via bot it only covers docs shared…

Parameters

No parameters.

read_doc

Read the raw text content of a Feishu document.

Parameters

No parameters.

get_doc_blocks

Get structured block tree of a document. Returns block types, content, and hierarchy for precise document analysis. Follows pagination internally and returns ALL blocks by default — hasMore:false in…

Parameters

No parameters.

create_doc

Create a new Feishu document. Can place directly under a Wiki space by passing wiki_space_id (optionally wiki_parent_node_token for nested placement) — the plugin creates the doc in drive then…

Parameters

No parameters.

manage_doc_block

Manage content blocks in a document. Single tool replaces v1.3.6 create_doc_block / update_doc_block / delete_doc_blocks.

Parameters

No parameters.

read_doc_markdown

Read a Feishu doc as Markdown (vs get_doc_blocks JSON). Saves ~60% tokens for RAG / digest / summarisation use cases. Accepts native docx token, wiki node token, or full Feishu URL. Embedded images…

Parameters

No parameters.

list_files

List files in a Drive folder. UAT-first with app fallback: with user identity (UAT), empty folder_token lists YOUR personal-space ("我的空间") root; via bot it can only see folders shared with the bot…

Parameters

No parameters.

create_folder

Create a new folder in Drive.

Parameters

No parameters.

upload_drive_file

Upload a file from disk to a Feishu Drive folder (drive/v1/files/upload_all, parent_type=explorer). Returns file_token + url. If wiki_space_id is provided, the uploaded file is then attached to that…

Parameters

No parameters.

manage_drive_file

Manage a Drive file/doc/folder. action=copy (duplicate to a new name + folder), move (relocate, returns task_id), delete (remove, returns task_id). `type` is always required (Feishu rejects with…

Parameters

No parameters.

get_new_events

Drain real-time events from the machine-level shared event log. v1.3.8 used per-process in-memory buffers (with duplicate-event problem); v1.3.9 uses ~/.feishu-user-plugin/events.jsonl with a single…

Parameters

No parameters.

manage_ws_status

Inspect or control the machine-level WS owner. Actions: info (status dump), reconnect (owner-only; restart WS), claim (try become owner; force=true to steal active lock), rotate (owner-only; force…

Parameters

No parameters.

create_group

Create a new group chat (as bot). Can add initial members.

Parameters

No parameters.

update_group

Update group chat name or description.

Parameters

No parameters.

list_members

List all members in a group chat.

Parameters

No parameters.

manage_members

Add or remove members from a group chat. The Feishu API rejects with code 9499 when the IDs in `member_ids` do not match `member_id_type` — pass `member_id_type` explicitly when using union_id or…

Parameters

No parameters.

get_chat_info

Get chat details: name, description, member count, owner. Supports both oc_xxx and numeric chat_id.

Parameters

No parameters.

read_p2p_messages

Read P2P (direct message) chat history using user_access_token. Works for chats the bot cannot access. Returns newest messages first by default. Auto-expands merge_forward messages into their child…

Parameters

No parameters.

list_user_chats

List group chats the user is in. Note: only returns groups, not P2P. For P2P chats, use search_contacts → create_p2p_chat → read_p2p_messages. Requires OAuth setup.

Parameters

No parameters.

list_chats

List all chats the bot has joined. Returns chat_id, name, type.

Parameters

No parameters.

read_messages

Read message history from any group. Accepts oc_xxx ID, numeric ID, or chat name (auto-searched). Auto-falls back to UAT for external groups the bot cannot access. Returns newest messages first by…

Parameters

No parameters.

search_messages

Search the user's IM history by keyword. Wraps Feishu `POST /open-apis/search/v2/message`. Requires UAT with the `search:message` scope (re-run `npx feishu-user-plugin oauth` after v1.3.12 SCOPES…

Parameters

No parameters.

send_message_as_bot

Send a message as the bot to any chat. Supports text, post, interactive, etc. This is the reliable path for @-mentions: include `<at user_id="ou_xxx">Name</at>` inline in text content and Feishu…

Parameters

No parameters.

reply_message

Reply to a specific message by message_id (as bot). Only works for text messages; other types return error 230054.

Parameters

No parameters.

forward_message

Forward a message to another chat or user. `receive_id` may be a group chat_id (oc_xxx), an open_id (ou_xxx), a union_id, a user_id, or an email — set `receive_id_type` to match (default: chat_id).

Parameters

No parameters.

delete_message

Recall/delete a message (bot can only delete its own messages).

Parameters

No parameters.

update_message

Edit a sent message (bot can only edit its own messages). Feishu supports edit only for `text` and `interactive` (card) messages — other types (post, image, file, etc.) are rejected by the API.

Parameters

No parameters.

pin_message

Pin or unpin a message in a chat.

Parameters

No parameters.

add_reaction

Add an emoji reaction to a message.

Parameters

No parameters.

delete_reaction

Remove an emoji reaction from a message.

Parameters

No parameters.

send_as_user

Send a text message as the logged-in Feishu user. Supports reply threading and real @-mentions (triggers push notifications).

Parameters

No parameters.

send_to_user

Search user by name → create P2P chat → send text message. All in one step.

Parameters

No parameters.

send_to_group

Search group by name → send text message. All in one step.

Parameters

No parameters.

batch_send

Send the same or different content to multiple targets in one call. Each target dispatches sequentially with a small delay (anti-rate-limit) and reports per-target success/error. Identity is the…

Parameters

No parameters.

send_image_as_user

Send an image as the logged-in user (NOT bot). Requires image_key from a prior upload_image call. Cookie-protobuf wire format requires both imageKey + thumbnailKey — when no separate thumbnail is…

Parameters

No parameters.

send_file_as_user

Send a file as the logged-in user. Requires file_key (upload via Official API first).

Parameters

No parameters.

send_post_as_user

Send a rich text (POST) message with title and formatted paragraphs. Supports real @-mentions that trigger notifications.

Parameters

No parameters.

send_card_as_user

Send an interactive Feishu card to a chat via bot identity (Official API). User-identity cookie protobuf path is server-side disabled at the auth tier — confirmed by exhaustive brute-force in…

Parameters

No parameters.

list_user_okrs

List a user's OKRs. Requires the user's open_id (get yours via get_login_status or search_contacts). Filter by period_ids to narrow to a specific quarter.

Parameters

No parameters.

get_okrs

Batch-fetch full OKR details (objectives, key results, progress, alignments) by OKR IDs.

Parameters

No parameters.

list_okr_periods

List OKR periods (quarters / years) defined in the tenant. Use period_ids from this to filter list_user_okrs.

Parameters

No parameters.

create_okr_progress_record

Add a progress note to an OKR objective or key result. Feishu requires `source_title`, `source_url`, and a block-structured `content`; this tool exposes a simple `content_text` and auto-wraps it…

Parameters

No parameters.

list_okr_progress_records

List progress records for an OKR. Feishu has no native list endpoint — this tool calls get_okrs internally and walks the objective_list / kr_list to extract progress_record IDs (with their target_id…

Parameters

No parameters.

delete_okr_progress_record

Delete an OKR progress record by its progress_id (from list_okr_progress_records).

Parameters

No parameters.

list_profiles

List all available identity profiles (each profile has its own LARK_COOKIE / APP_ID / APP_SECRET / UAT). v1.3.9 SSOT: profiles live in ~/.feishu-user-plugin/credentials.json::profiles. Legacy…

Parameters

No parameters.

switch_profile

Switch the active identity profile. Atomically writes credentials.json::active; cached clients in this process are invalidated; cross-process MCPs (Codex / another Claude Code) auto-sync via…

Parameters

No parameters.

manage_profile_hints

Inspect / set / clear profileHints — the resourceKey → profileName cache the auto-switch middleware uses to remember which profile owns each Feishu resource. Useful when a hint goes stale (e.g., a…

Parameters

No parameters.

list_tasks

List the current user's tasks. Filter by completion or type.

Parameters

No parameters.

get_task

Get full details of a single task by GUID.

Parameters

No parameters.

create_task

Create a new task. summary is required; due / members / etc. are optional.

Parameters

No parameters.

update_task

Patch a task. **update_fields** is required by Feishu — list which fields to update (e.g. ["summary","due","completed_at"]).

Parameters

No parameters.

complete_task

Mark a task complete (or uncomplete it). Convenience wrapper around update_task with completed_at.

Parameters

No parameters.

delete_task

Permanently delete a task.

Parameters

No parameters.

manage_task_members

Add or remove members on a task. Members are objects {id:"<open_id>", role:"assignee"|"follower", type?:"user", name?:""}.

Parameters

No parameters.

upload_image

Upload an image file to Feishu. Returns image_key for use with send_image_as_user.

Parameters

No parameters.

upload_file

Upload a file to Feishu. Returns file_key for use with send_file_as_user.

Parameters

No parameters.

upload_bitable_attachment

Upload a file as a Bitable attachment (drive/v1/medias/upload_all with parent_type=bitable_image or bitable_file). Returns file_token suitable for writing into a Bitable Attachment-type field via…

Parameters

No parameters.

list_wiki_spaces

List all accessible Wiki spaces. Follows pagination internally and returns ALL spaces (pre-v1.3.17 silently capped at 50). If the upstream cursor stalls, the response carries truncated:true +…

Parameters

No parameters.

search_wiki

Search Wiki nodes by keyword. UAT-first with app fallback: with user identity (UAT) the search covers wiki spaces visible to YOU; via bot it only covers spaces the bot was invited to. Response…

Parameters

No parameters.

list_wiki_nodes

List nodes in a Wiki space (50 per page). When hasMore is true, pass the returned pageToken back as page_token to fetch the next page. A page may be EMPTY while hasMore is still true (Feishu…

Parameters

No parameters.

get_wiki_node

Resolve a Wiki node token to its underlying object (docx / bitable / sheet / mindnote / file). Returns obj_type + obj_token + space_id so you can read/write the real resource via the usual docx /…

Parameters

No parameters.

create_wiki_node

Create a new Wiki node inside a space. obj_type picks the underlying resource (doc/sheet/bitable/mindnote/file/docx/slides). UAT-first so the resource is owned by the user.

Parameters

No parameters.

update_wiki_node

Rename a Wiki node (only `title` is updatable via the wiki API; the underlying resource content is edited via docx/bitable/sheet tools).

Parameters

No parameters.

move_wiki_node

Move a Wiki node to a different parent (within the same space) or to a different space. Pass at least one of target_parent_token / target_space_id.

Parameters

No parameters.

copy_wiki_node

Deep-copy a Wiki node into a different location (and optionally a different space). Underlying resource is duplicated.

Parameters

No parameters.

delete_wiki_node

Delete a Wiki node. Calls `DELETE /open-apis/wiki/v2/spaces/{space_id}/nodes/{node_token}`. The Feishu SDK does not type this endpoint, so the call goes through raw REST (UAT-first; bot fallback…

Parameters

No parameters.

README.md12 KBView on GitHub

feishu-user-plugin —— 飞书 MCP 服务器 + CLI 工具

中文 · English · Docs · CHANGELOG · npm

飞书 / Lark MCP 服务器，覆盖 IM、文档、多维表格、知识库、云空间、日历、任务 v2、OKR、实时事件。85 工具 · 3 层鉴权 · 9 MCP prompts · MIT licensed · Node ≥18。

兼容 Claude Code、Codex、Cursor、Windsurf、VS Code、Claude Desktop、OpenClaw 等 MCP 客户端。

用户身份发消息有两条路径：飞书官方 OAuth scope im:message.send_as_user（需要创建自建应用 + 管理员审批），或本仓的 cookie + protobuf 路径（cookie 抓出来就跑）。本仓不再是物理性独家，但仍然是"个人开发者 / 没有管理员权限 / 想快速试用户身份发消息"场景的简便选项。

⚠ 注意限定范围：cookie 路径"零应用门槛"只对纯文本 / post 类用户身份发消息严格成立：send_to_user / send_to_group / send_as_user / send_post_as_user / batch_send（text/post 模式）5 个工具。send_image_as_user / send_file_as_user 的发送本身走 cookie，但 image_key / file_key 必须先经 Official API（upload_image / upload_file）上传；send_card_as_user 服务端禁了 cookie 通道，始终走 bot。本仓其他能力（读群消息、操作文档 / 表格 / 知识库 / 云空间 / 日历 / 任务 / OKR / 实时事件等）也仍然需要创建飞书自建应用（LARK_APP_ID + LARK_APP_SECRET），跟官方 MCP / CLI 完全一样。

与官方对比（飞书 2026 年也发了 MCP + CLI）

larksuite/lark-openapi-mcp —— 官方 OpenAPI MCP，⚠ Beta + 最后更新 2025-08（9 个月前），README 明文不支持文件上传下载、不支持文档编辑；1271 个 endpoint 工具但 preset.default 仅 ~20，其余"未做兼容性测试"
larksuite/cli —— 官方 CLI（9.9k stars，活跃），17 业务域 200+ commands + 24 AI Agent Skills，已支持 +messages-send --as user（走 OAuth scope im:message.send_as_user），但 CLI 形态而不是 MCP，Codex / Cursor / Windsurf 等用它要 shell out

什么时候用本仓：

想以用户身份发消息 / 读 P2P 私聊但不想 / 不能创建飞书自建应用（个人开发者 / 没管理员权限）—— cookie 路径零门槛
用 MCP 协议（Codex / Cursor / Windsurf / VS Code 等）+ 不需要邮件 / 审批 / HR / 会议纪要等本仓未覆盖的域
多 MCP 客户端共存且需要"实时事件全机精确投递一次"（v1.3.9+ 机器级 WS SSOT）

什么时候用官方：需要邮件 / 审批 / 考勤 / HR / 招聘 / 会议纪要等业务系统域；或已有飞书应用 + 管理员批了 OAuth scope，偏好官方长期稳定路径。

完整诚实对比见 docs/COMPARISON.md。

用法

code

你：帮我以我身份给王小明发：今天的代码 review 我看完了，有 3 个 nit
Claude：[调用 send_to_user]  Sent

code

你：总结"工程组"群今天 9 点之后的讨论，发个日报到 #日报频道
Claude：[read_messages → 总结 → send_to_group]  Sent

安装

bash

npx feishu-user-plugin setup --app-id <APP_ID> --app-secret <APP_SECRET>
npx feishu-user-plugin oauth         # 拿用户 OAuth UAT
# 重启 Claude Code / Codex

cookie 获取（Playwright 自动扫码 / DevTools 手动）、创建飞书应用、各客户端配置详见 docs/AUTH-SETUP.md。

三层鉴权

鉴权层	凭证	覆盖能力	工具数
用户身份（cookie + protobuf）	`LARK_COOKIE`	以用户身份发文本 / 图片 / 文件 / 富文本 / @ / 批量	8
官方 API（机器人）	`LARK_APP_ID` + `LARK_APP_SECRET`	群消息读写、文档、多维表格、知识库、云空间、日历、任务 v2、OKR、联系人、实时事件 WS	70+
用户 OAuth UAT	`LARK_USER_ACCESS_TOKEN` + `LARK_USER_REFRESH_TOKEN`	P2P 私聊读取、用户 chat 列表；写入文档 / Bitable / 日历资源时以用户为 owner	2 显式 + 全工具 UAT-first

三层独立 —— 配置任意一层，对应工具可用。

核心能力

以你身份发消息（8）：text / image / file / 富文本 post / 卡片 / 批量；差异化锚点 —— 飞书官方 API 没有 send_as_user
读群与 P2P 私聊（17）：群消息 / 私聊 / merge_forward 自动展开 / URL + 飞书文档链接自动提取 / 外部群自动 fallback 到 UAT
文档生态（27）：飞书文档（含 read_doc_markdown 省 ~60% token）/ 多维表格（500 条批量）/ 知识库（含 write CRUD）/ 云空间
协作工具（21）：日历（读+写）/ 任务 v2（含成员管理）/ OKR（读+进展记录）/ 联系人
实时事件（2）：机器级 SSOT WS，每条事件全机精确投递一次
诊断与多账号（4）：N 个 profile 自动切换，写路径不切（避免错号建资源）

完整工具列表 + 跨域 caveat + 用法 patterns 见 docs/TOOLS.md。

9 个 MCP prompts（slash commands）

Prompt	说明
`/send`	以用户身份发消息
`/reply`	读最近消息然后回
`/digest`	群 / P2P 最近消息总结
`/search`	搜联系人 / 群
`/doc`	搜 / 读 / 建文档
`/table`	操作多维表格
`/wiki`	搜知识库
`/drive`	列云空间 / 建文件夹
`/status`	检查三层鉴权状态

客户端配置

环境变量统一，配置文件位置和顶层键不同：

客户端	配置文件	顶层键
Claude Code	`~/.claude.json`（推荐全局）/ `.mcp.json`	`mcpServers.feishu-user-plugin`
Claude Desktop	`~/Library/Application Support/Claude/claude_desktop_config.json` (macOS)	`mcpServers.feishu`
Codex	`~/.codex/config.toml`	`[mcp_servers.feishu-user-plugin]`
Cursor	`.cursor/mcp.json`（项目级）	`mcpServers.feishu`
VS Code (Copilot)	`.vscode/mcp.json`	`servers.feishu`（注意 `servers`，非 `mcpServers`）
OpenClaw	`~/.openclaw/openclaw.json`	`mcp.servers.feishu-user-plugin`
Windsurf	`~/.codeium/windsurf/mcp_config.json`	`mcpServers.feishu`

bash

npx feishu-user-plugin setup                       # Claude Code
npx feishu-user-plugin setup --client codex        # Codex
npx feishu-user-plugin setup --client both         # 都写

各客户端完整 JSON 模板见 README.en.md MCP Client Configuration；详细安装与凭证流程见 docs/AUTH-SETUP.md。

多账号

~/.feishu-user-plugin/credentials.json 支持多 profile（默认 + 任意附加），单台机器一处配置覆盖多个飞书账号 / 多个企业。

bash

npx feishu-user-plugin list-profiles
npx feishu-user-plugin switch-profile <name>
npx feishu-user-plugin keepalive --all       # 跨 profile keepalive

读路径工具失败码 91403 / 1254301 / 1254000 / 99991672 / HTTP 403 时自动跨 profile retry。写路径不自动切（避免错号创建资源）。单调用覆盖：传 via_profile: "<name>" 钉到指定 profile。

详见 docs/TOOLS.md "多 profile auto-switch"。

实时事件

机器上单进程持有 WS owner 锁，所有 MCP 进程共享 events.jsonl，每条事件全机恰好一次。

bash

mcp call manage_ws_status --action info
mcp call manage_ws_status --action claim --force true

默认订阅 ["im.message.receive_v1"]。要订阅审批 / 日历 / vc 等其他事件，编辑 credentials.json::profiles[<active>].events，然后 manage_ws_status(action=reconfig) 不重启重新订阅。

仅支持 feishu.cn —— Lark 国际版（lark.com）的 WSClient 当前不支持。

已知限制

Cookie 寿命：12-24 小时无心跳过期，需重新登录 feishu.cn 拿 cookie
协议变化：cookie + protobuf 层依赖飞书 web 客户端的协议，飞书更新可能失效（机器人能力不受影响）
卡片：cookie 通道发卡片服务端不可用，机器人通道可发
Lark 国际版：实时事件 WS 不支持
已删除：md → wiki 双向同步（飞书 wiki block schema 离散度高，无损往返不现实）、Mermaid → 飞书画板（依赖 wiki 主线一并删）。详见 ROADMAP.md 的"已删除"段

文档

文档	角色
docs/TOOLS.md	工具详细 + 跨域 caveat + 用法 patterns
docs/AUTH-SETUP.md	安装 / 三层鉴权 / Cookie 抓取 / OAuth Scopes
docs/TROUBLESHOOTING.md	错误码与诊断
docs/RELEASING.md	发版流程 + team-skills 同步 + 公告规则
docs/REFACTOR-NOTES.md	文件职责矩阵
docs/CREDENTIALS-FORMAT.md	凭证 schema
docs/TESTING-METHODOLOGY.md	测试方法
CONTRIBUTING.md	贡献流程（中英双语）
ROADMAP.md	路线图（forward-only）
CHANGELOG.md	历史变更

完整 docs/ 索引：docs/README.md。

贡献

Issues / PR 欢迎。提交前先看 CONTRIBUTING.md。

飞书改协议导致功能挂掉 —— 开 issue 带错误日志即可。

隐私 / Privacy

本地运行的 MCP 服务器，凭证留在用户本机，不上报遥测，不与插件作者后台通信。完整文本见 PRIVACY.md。

收集：插件本身不收集任何数据；LARK_COOKIE / LARK_APP_ID / LARK_APP_SECRET / LARK_USER_ACCESS_TOKEN / LARK_USER_REFRESH_TOKEN 全部由用户主动配置，来源于用户自己的飞书 / Lark 账号
处理：仅处理用户通过 MCP 工具调用主动请求的消息 / 文档 / 多维表格 / 知识库 / 云空间 / 日历 / 任务 / OKR / 联系人，不留存、不分析
存储：~/.feishu-user-plugin/credentials.json（mode 0600）；可选事件日志 ~/.feishu-user-plugin/events.jsonl（10 MB / 20 MB 自动轮转）
第三方：仅与用户自己的飞书租户和用户运行的 AI 客户端通信，无 CDN / 分析 / 错误上报
保留：完全用户控制；rm -rf ~/.feishu-user-plugin && npm uninstall -g feishu-user-plugin 即清空
联系：GitHub Issues，安全问题在 issue 标题前加 [security]

A locally-run MCP server. Credentials stay on the user's machine; no telemetry, no phone-home. Full text at PRIVACY.md.

Collected: nothing by the plugin itself; the five LARK_* envs are supplied by the user from their own Feishu / Lark account
Processed: only the messages / docs / bitable / wiki / drive / calendar / tasks / OKR / contacts the user explicitly requests via MCP tool calls
Stored: ~/.feishu-user-plugin/credentials.json (mode 0600); optional event log at ~/.feishu-user-plugin/events.jsonl
Third-party: only the user's own Feishu tenant and the AI client the user runs (Claude Code / Codex / Cursor / etc.)
Retention: entirely user-controlled; rm -rf ~/.feishu-user-plugin && npm uninstall -g feishu-user-plugin removes everything
Contact: GitHub Issues; security disclosures with [security] prefix in the title

License

MIT

致谢

cv-cat/LarkAgentX —— 早期飞书 web 协议研究（Python）
cv-cat/OpenFeiShuApis —— 底层 API 研究
Model Context Protocol —— MCP 标准 + Anthropic / PulseMCP / GitHub / Stacklok 共维 registry

Install

Tools (85)

manage_bitable_appmanage_bitable_tablemanage_bitable_fieldmanage_bitable_viewmanage_bitable_recordlist_calendarslist_calendar_eventsget_calendar_event

Configuration

Environment variables

LARK_COOKIEsecret

Feishu web session cookie. Required for user-identity messaging tools (send_to_user, send_as_user, etc).

LARK_APP_ID

Feishu Open Platform self-built app App ID (cli_xxxxxxxxxxxx). Required for Official API tools (docs, bitable, wiki, drive, calendar, tasks, OKR, group messaging).

LARK_APP_SECRETsecret

Feishu Open Platform self-built app App Secret. Used together with LARK_APP_ID.

LARK_USER_ACCESS_TOKENsecret

User OAuth UAT for P2P chat reading and as user-owner on resource creation. Obtained via 'npx feishu-user-plugin oauth'.

LARK_USER_REFRESH_TOKENsecret

Refresh token for UAT auto-renewal.

Add to VS Code Add to Cursor

claude_desktop_config.json

json

{
  "mcpServers": {
    "feishu-user-plugin": {
      "command": "npx",
      "args": [
        "-y",
        "feishu-user-plugin@1.4.1"
      ],
      "env": {
        "LARK_COOKIE": "<YOUR_LARK_COOKIE>",
        "LARK_APP_ID": "<YOUR_LARK_APP_ID>",
        "LARK_APP_SECRET": "<YOUR_LARK_APP_SECRET>",
        "LARK_USER_ACCESS_TOKEN": "<YOUR_LARK_USER_ACCESS_TOKEN>",
        "LARK_USER_REFRESH_TOKEN": "<YOUR_LARK_USER_REFRESH_TOKEN>"
      }
    }
  }
}