飞书 Remote MCP 配置#

#!/bin/bash
# 飞书 UAT 一键生成脚本（通用版）
# 使用前请先配置 APP_ID 和 APP_SECRET

# ========== 配置区域 ==========
APP_ID="YOUR_APP_ID"           # 替换为你的 App ID
APP_SECRET="YOUR_APP_SECRET"   # 替换为你的 App Secret
REDIRECT_URI="http://localhost:8080/callback"
# ==============================

LOG_FILE="/tmp/feishu_code_$$.txt"

# 检查配置
if [ "$APP_ID" = "YOUR_APP_ID" ] || [ "$APP_SECRET" = "YOUR_APP_SECRET" ]; then
    echo "❌ 请先配置 APP_ID 和 APP_SECRET"
    echo ""
    echo "编辑脚本，将以下内容替换为你的应用凭证："
    echo "  APP_ID=\"你的App ID\""
    echo "  APP_SECRET=\"你的App Secret\""
    echo ""
    echo "获取方式：https://open.feishu.cn/app/ → 选择应用 → 凭证与基础信息"
    exit 1
fi

# 检查依赖
if ! command -v jq &> /dev/null; then
    echo "❌ 未安装 jq，请先安装："
    echo "  macOS: brew install jq"
    echo "  Linux: apt-get install jq 或 yum install jq"
    exit 1
fi

# 清理旧的日志文件
rm -f "$LOG_FILE"

# 检查端口是否被占用
if lsof -Pi :8080 -sTCP:LISTEN -t >/dev/null 2>&1 ; then
    echo "⚠️  端口 8080 已被占用，正在尝试释放..."
    kill -9 $(lsof -t -i:8080) 2>/dev/null
    sleep 1
fi

# 启动本地服务器接收回调
python3 - "$LOG_FILE" << 'PYTHON_SCRIPT' &
import http.server
import socketserver
from urllib.parse import urlparse, parse_qs
import sys

log_file = sys.argv[1]

class Handler(http.server.SimpleHTTPRequestHandler):
    def do_GET(self):
        query = urlparse(self.path).query
        params = parse_qs(query)
        if 'code' in params:
            code = params['code'][0]
            self.send_response(200)
            self.send_header('Content-type', 'text/html; charset=utf-8')
            self.end_headers()
            self.wfile.write('<h1>授权成功！</h1><p>可以关闭此窗口</p>'.encode('utf-8'))
            with open(log_file, 'w') as f:
                f.write(code)
        else:
            self.send_response(200)
            self.end_headers()
    def log_message(self, format, *args):
        pass

socketserver.TCPServer.allow_reuse_address = True
with socketserver.TCPServer(("", 8080), Handler) as httpd:
    httpd.handle_request()
PYTHON_SCRIPT

SERVER_PID=$!

# 等待服务器启动
sleep 2

# 生成授权URL
AUTH_URL="https://open.feishu.cn/open-apis/authen/v1/authorize?app_id=${APP_ID}&redirect_uri=${REDIRECT_URI}&scope=docx:document:readonly%20docx:document:create%20docx:document:write_only%20search:docs:read%20wiki:wiki:readonly%20contact:user:search%20contact:user.base:readonly%20docs:document.comment:read%20docs:document.comment:create%20board:whiteboard:node:create%20board:whiteboard:node:read%20board:whiteboard:node:update"

echo "请在浏览器中打开以下URL进行授权："
echo ""
echo "$AUTH_URL"
echo ""

# 尝试自动打开浏览器
if command -v open &> /dev/null; then
    open "$AUTH_URL" 2>/dev/null
elif command -v xdg-open &> /dev/null; then
    xdg-open "$AUTH_URL" 2>/dev/null
fi

# 等待授权码
echo "等待授权..."
for i in {1..60}; do
    if [ -f "$LOG_FILE" ]; then
        CODE=$(cat "$LOG_FILE")
        break
    fi
    sleep 1
done

# 清理
kill $SERVER_PID 2>/dev/null
wait $SERVER_PID 2>/dev/null

if [ -z "$CODE" ]; then
    echo "❌ 未获取到授权码（超时60秒）"
    rm -f "$LOG_FILE"
    exit 1
fi

echo "✅ 获取到授权码"
rm -f "$LOG_FILE"

# 获取 app_access_token
APP_ACCESS_TOKEN=$(curl -s -X POST 'https://open.feishu.cn/open-apis/auth/v3/app_access_token/internal' \
  -H 'Content-Type: application/json' \
  -d "{\"app_id\":\"${APP_ID}\",\"app_secret\":\"${APP_SECRET}\"}" | jq -r '.app_access_token')

if [ -z "$APP_ACCESS_TOKEN" ] || [ "$APP_ACCESS_TOKEN" = "null" ]; then
    echo "❌ 获取 app_access_token 失败，请检查 APP_ID 和 APP_SECRET"
    exit 1
fi

# 换取 UAT
RESULT=$(curl -s -X POST 'https://open.feishu.cn/open-apis/authen/v1/oidc/access_token' \
  -H "Authorization: Bearer ${APP_ACCESS_TOKEN}" \
  -H 'Content-Type: application/json' \
  -d "{\"grant_type\":\"authorization_code\",\"code\":\"${CODE}\"}")

UAT=$(echo $RESULT | jq -r '.data.access_token')
REFRESH_TOKEN=$(echo $RESULT | jq -r '.data.refresh_token')

if [ -z "$UAT" ] || [ "$UAT" = "null" ]; then
    echo "❌ 获取 UAT 失败"
    echo "错误信息: $(echo $RESULT | jq -r '.message')"
    exit 1
fi

echo ""
echo "✅ UAT 生成成功！"
echo ""
echo "User Access Token (有效期2小时):"
echo "$UAT"
echo ""
echo "Refresh Token (有效期30天):"
echo "$REFRESH_TOKEN"
echo ""
echo "MCP 配置示例:"
echo "X-Lark-MCP-UAT: $UAT"
echo ""
echo "注意: Token 已复制到剪贴板（如果支持）"

# 尝试复制到剪贴板
if command -v pbcopy &> /dev/null; then
    echo "$UAT" | pbcopy
elif command -v xclip &> /dev/null; then
    echo "$UAT" | xclip -selection clipboard
fi

chmod +x feishu_uat.sh
./feishu_uat.sh

# 步骤1: 获取 app_access_token
APP_ACCESS_TOKEN=$(curl -s -X POST 'https://open.feishu.cn/open-apis/auth/v3/app_access_token/internal' \
  -H 'Content-Type: application/json' \
  -d '{
    "app_id": "YOUR_APP_ID",
    "app_secret": "YOUR_APP_SECRET"
  }' | jq -r '.app_access_token')

# 步骤2: 用授权码换取 User Access Token
curl -s -X POST 'https://open.feishu.cn/open-apis/authen/v1/oidc/access_token' \
  -H "Authorization: Bearer $APP_ACCESS_TOKEN" \
  -H 'Content-Type: application/json' \
  -d '{
    "grant_type": "authorization_code",
    "code": "YOUR_CODE"
  }' | jq '.'

{
  "code": 0,
  "data": {
    "access_token": "u-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
    "refresh_token": "ur-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
    "expires_in": 7200,
    "refresh_expires_in": 2592000
  }
}

{
  "mcpServers": {
    "feishu": {
      "transport": "http",
      "url": "https://mcp.feishu.cn/mcp",
      "headers": {
        "Content-Type": "application/json",
        "X-Lark-MCP-UAT": "u-xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
        "X-Lark-MCP-Allowed-Tools": "search-doc,create-doc,fetch-doc,update-doc,list-docs,get-comments,add-comments,search-user,get-user,fetch-file"
      }
    }
  }
}

curl -X POST 'https://open.feishu.cn/open-apis/authen/v1/oidc/refresh_access_token' \
  -H 'Content-Type: application/json' \
  -d '{
    "grant_type": "refresh_token",
    "refresh_token": "YOUR_REFRESH_TOKEN"
  }'