Multi-Account WeChat Publishing for Agents

One machine, several official accounts: name each account in config, then make the target explicit on every side effect. Full reference.

Config

wechat:
  default_account: main
  accounts:
    main:
      appid: wx1234567890abcdef
      secret: your_main_secret
    client-a:
      appid: wx0987654321fedcba
      secret: your_client_secret

Account names must match ^[a-z0-9][a-z0-9_-]{0,63}$.

Selection is explicit

The chain is: --wechat-account flag → WECHAT_ACCOUNT env → wechat.default_account → direct wechat.appid/secret → the single named account. Multiple accounts without a default fail closed with WECHAT_ACCOUNT_AMBIGUOUS instead of guessing.

Discovery without secrets

md2wechat config wechat-accounts --json

Returns accounts[{name, appid, current}] and default_account. It never outputs secrets — not even masked.

Per-command targeting

md2wechat convert article.md --draft --cover cover.jpg --wechat-account client-a

The API key boundary

Named accounts and fixed-egress proxy mode require a valid MD2WECHAT_API_KEY, validated via HEAD /api/auth/validate before any side effect. The legacy single-account path keeps working without one. See Whitelist for the egress story and Publishing API for the draft flow.