Atlas / MCP servers / dodopayments / Context

ContextSAFE

Name: Context
Author: dodopayments

mcp/dodopayments/context-1

MCP server by dodopayments · context · context api · context7 · Audited 2026-10-07

⚑ Report / re-scan Source ↗

Self-hosted MCP server for your documentation

Verdict

SAFE

Grade

Trust score

89 /100

Exposed tools

1 1r · 0w · 0d

Transport

streamable-http

License

Apache-2.0

Stars

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

Self-hosted MCP server for your documentation. Index your documentation from across the sources and serve it via the Model Context Protocol (MCP) and REST API.

Quick Start

# Scaffold a new project
npx contextmcp init my-docs-mcp

# Follow the prompts, then:
cd my-docs-mcp
npm install

# Configure your API keys
cp .env.example .env
# Edit .env with your PINECONE_API_KEY and an embedding provider key
# (OPENAI_API_KEY for provider: openai, or GEMINI_API_KEY for provider: gemini)

# Configure your documentation sources
# Edit config.yaml

# Index your documentation
npm run reindex

# Edit the cloudflare-worker
# Deploy the MCP server
cd cloudflare-worker
npm install
npm run deploy

What is ContextMCP?

ContextMCP creates a searchable knowledge base from your documentation that AI assistants can query via the Model Context Protocol (MCP).

Supported Content Types

How It Works

Parse - Extract content from your docs, APIs, and READMEs
Chunk - Split into semantic chunks optimized for search
Embed - Generate embeddings using OpenAI or Gemini
Store - Upload to Pinecone vector database
Search - Query via MCP from

Read from source at commit 36eedcf4586fOBSERVED · 2026-10-07

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code

claude mcp add contextmcp-website --env COHERE_API_KEY=${COHERE_API_KEY} --env GEMINI_API_KEY=${GEMINI_API_KEY} --env OPENAI_API_KEY=${OPENAI_API_KEY} --env PINECONE_API_KEY=${PINECONE_API_KEY} -- npx -y [email protected]

claude-desktop

{
  "mcpServers": {
    "contextmcp-website": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "COHERE_API_KEY": "${COHERE_API_KEY}",
        "GEMINI_API_KEY": "${GEMINI_API_KEY}",
        "OPENAI_API_KEY": "${OPENAI_API_KEY}",
        "PINECONE_API_KEY": "${PINECONE_API_KEY}"
      }
    }
  }
}

Exposed tools (1)

1 read · 0 write · 0 destructive.

Tool	Risk	Description
`search_docs`	read

Trust audit

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	WARN
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (7 observation(s))
Network: declared (8 observation(s))
Shell: declared (1 observation(s))
Dependencies: not all pinned
Secrets in source: none-found

Findings (13)

MEDIUMObfuscation / stealth · obf.zero_width · CWE-506, CWE-94

deployments/dodopayments/config.yaml:1

# ContextMCP Configuration for Dodo Payments

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

packages/cli/scripts/copy-template.mjs:9

const srcDir = path.resolve(__dirname, '../../template');

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

packages/cli/src/commands/init.ts:164

path.resolve(__dirname, '../../template'),

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

packages/template/cloudflare-worker/src/index.ts:32

} from '../../src/search-core';

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

packages/template/server/scripts/sync-shared.mjs:18

const CANONICAL = resolve(here, '../../src/search-core.ts');

LOWFilesystem / path · fs.traversal · CWE-22, CWE-59

packages/template/server/src/shared/search-core.drift.test.ts:3

import { renderVendored, readCanonical, readVendored, PATHS } from '../../scripts/sync-shared.mjs';

LOWNetwork egress · net.raw_ip · CWE-200, CWE-319

packages/template/server/src/index.test.ts:25

base = `http://127.0.0.1:${port}`;

LOWNetwork egress · net.raw_ip · CWE-200, CWE-319

packages/template/server/src/index.test.ts:150

base = `http://127.0.0.1:${port}`;

LOWSupply chain · supply.unpinned · CWE-829, CWE-1357

deployments/dodopayments/cloudflare-worker/package.json

@google/genai, @pinecone-database/pinecone, agents, ai, openai, zod, @cloudflare/workers-types, typescript

Why it matters. 9 dependency range(s) float