DocsBLOCK
Grounded Docs MCP Server: Open-Source Alternative to Context7, Nia, and Ref.Tools
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
Docs MCP Server solves the problem of AI hallucinations and outdated knowledge by providing a personal, always-current documentation index for your AI coding assistant. It fetches official docs from websites, GitHub, npm, PyPI, and local files, allowing your AI to query the exact version you are using.
✨ Why Grounded Docs MCP Server?
The open-source alternative to Context7, Nia, and Ref.Tools.
- ✅ Up-to-Date Context: Fetches documentation directly from official sources on demand.
- 🎯 Version-Specific: Queries target the exact library versions in your project.
- 💡 Reduces Hallucinations: Grounds LLMs in real documentation.
- 🔒 Private & Local: Runs entirely on your machine; your code never leaves your network.
- 🧩 Broad Compatibility: Works with any MCP-compatible client (Claude, Cline, etc.).
- 📁 Multiple Sources: Index websites, GitHub repositories, local folders, and zip archives.
- 📄 Rich File Support: Processes HTML, Markdown, PDF, Office documents (Word, Excel, PowerPoint), OpenDocument, RTF, EPUB, Jupyter Notebooks, and 90+ source code languages.
📄 Supported Formats
07fba194e483OBSERVED · 2026-09-24Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add docs-mcp-server --env API_KEY=${API_KEY} --env AWS_ACCESS_KEY_ID=${AWS_ACCESS_KEY_ID} --env AWS_SECRET_ACCESS_KEY=${AWS_SECRET_ACCESS_KEY} --env AWS_SESSION_TOKEN=${AWS_SESSION_TOKEN} -- npx -y @arabold/[email protected]{
"mcpServers": {
"docs-mcp-server": {
"command": "npx",
"args": [
"-y",
"@arabold/[email protected]"
],
"env": {
"API_KEY": "${API_KEY}",
"AWS_ACCESS_KEY_ID": "${AWS_ACCESS_KEY_ID}",
"AWS_SECRET_ACCESS_KEY": "${AWS_SECRET_ACCESS_KEY}",
"AWS_SESSION_TOKEN": "${AWS_SESSION_TOKEN}"
}
}
}
}Exposed tools (10)
9 read · 0 write · 1 destructive. Blast radius: 1 tool can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.
| Tool | Risk | Description |
|---|---|---|
cancel_job | read | Cancel a queued or running indexing job. Use the |
fetch_url | read | Fetch a single URL and convert its content to Markdown. Use this tool to read the content of any web page. |
find_version | read | Find the best matching version for a library. Use to identify available or closest versions. |
get_job_info | read | Get details for a specific indexing job. Use the |
list_jobs | read | List all indexing jobs. Optionally filter by status. |
list_libraries | read | List all indexed libraries. |
refresh_version | read | Re-scrape a previously indexed library version, updating only changed pages. |
remove_docs | destructive | Remove indexed documentation for a library version. Use only if explicitly instructed. |
scrape_docs | read | Scrape and index documentation from a URL for a library. Use this tool to index a new library or a new version. |
search_docs | read | Search up-to-date documentation for a library or package. Examples:\n\n |
Trust audit
BLOCKgrade F · trust 55/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | WARN |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | FAIL |
| L3 | Class-specific surface | WARN |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (4 observation(s))
- Network
- declared (5 observation(s))
- Shell
- declared (2 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (25)
const bodyContent = await framePage.$eval(
config.httpsAgent = new https.Agent({ rejectUnauthorized: false });npx @arabold/docs-mcp-server@latest fetch-url https://example.com/old-page --no-follow-redirects
ChunkExplorer.tsx
logger.debug(`Token validation capabilities: ${capabilities.join(", ")}`);logger.debug(`Attempting to verify token: ${token.substring(0, 20)}...`);logger.debug(`Extracted token: ${token.substring(0, 20)}...`);remove_docs
mixed-content.docx
sample.pptx
sample.xlsx
.openspec-target
.releaserc.json
.openspec.yaml
.openspec.yaml
.openspec.yaml
exec(sql: string): unknown;
.createHash("md5")import { server } from "../../test/mock-server";vi.mock("../../store", () => ({vi.mock("../../utils/config", async (importOriginal) => {const actual = await importOriginal<typeof import("../../utils/config")>();import { createDocumentManagement } from "../../store";it("aborts an analytics image beacon under the blocklist (not the image rule)", async () => {- **WHEN** a user attempts to fetch `http://127.0.0.1:9999/test`
Gates applied: no_behavioural_pass.
07fba194e483full audit observations/trust-audit/mcp-server/arabold__docs-1.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-09-24 | 07fba194e483 | BLOCK | F | 55 | score 56 -> 55 |
| 2026-09-19 | ff68add0beda | BLOCK | F | 56 | first audit |
Questions
What is the Docs MCP server?
Grounded Docs MCP Server: Open-Source Alternative to Context7, Nia, and Ref.Tools
What tools does Docs expose?
10 in total: 9 read-only, 0 that write, and 1 that can delete or overwrite (remove_docs). Every one is listed on this page with its risk.
Is Docs safe to connect to an agent?
No — not without reading the findings first. The audit graded it F (55/100) and found 3 critical or high issues in the source. Each one is listed on this page with the file and line it is on. Separately from the audit: 1 of its tools can destroy data, so scope the token you give it to what you actually need.
What credentials does Docs need?
It reads API_KEY, AWS_ACCESS_KEY_ID, AWS_SECRET_ACCESS_KEY, AWS_SESSION_TOKEN, AZURE_OPENAI_API_KEY, CONTEXT7_API_KEY, DOCS_MCP_AUTH_AUDIENCE, DOCS_MCP_AUTH_ENABLED, DOCS_MCP_AUTH_ISSUER_URL, GH_TOKEN, GITHUB_TOKEN and GOOGLE_API_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does Docs run?
It speaks sse, stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as @arabold/docs-mcp-server at 3.2.0.
How current is this page?
The grade is for one exact copy of the source (07fba194e483), read on 2026-09-24. The repository is watched and re-audited when it changes.