WeChat IP Whitelist Errors and the Fixed Egress Fix

If you see ip xxx.xxx.xxx.xxx not in whitelist, only your WeChat side-effect calls are blocked. The Convert API is not a WeChat side effect and never needs a whitelist — see Auth.

Which calls check the whitelist

Material upload, draft creation, and image posts go through the WeChat open platform, which checks the caller IP against the platform whitelist. Rendering does not.

The three-step fix

curl ifconfig.me

1. Get the egress IP of the machine that runs the CLI.
2. Add it in the WeChat MP platform under 开发接口管理 → IP 白名单.
3. Wait 1-5 minutes and retry.

When the error keeps coming back

• Home and office broadband rotate public IPs; today's entry expires.
• CI runners such as GitHub Actions get a new egress range per run.

The fixed egress answer

wechat:
  proxy_url: http://user:pass@host:port

The proxy applies only to WeChat side effects (upload, draft add, image posts). It does not affect the Convert API, image providers, discovery, or preview. Proxy mode requires a valid MD2WECHAT_API_KEY, and md2wechat config show always masks the password. Full details: WeChat IP Whitelist.

Related

• Publishing API — where drafts actually go
• Multi-Account Publishing — named accounts share the same egress story