MinerU-EcosystemSAFE
Parse PDFs, images, doc, docx, ppt, pptx, xls, xlsx, html into Markdown using MinerU API.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
The official ecosystem toolkit for [MinerU](https://github.com/opendatalab/MinerU) Open API
Empowering developers and AI agents with seamless document parsing capabilities — PDF · Word · PPT · Images · Web pages → Markdown / JSON · VLM+OCR dual engine · 109 languages · MCP Server · LangChain / RAGFlow / Dify / FastGPT native integration.
[](LICENSE) [](https://github.com/opendatalab/MinerU) [](https://mineru.net)
中文文档
📖 Overview
MinerU-Ecosystem provides a full suite of tools, SDKs, and integrations built on top of the MinerU Open API. Whether you're building production pipelines, integrating with LangChain for RAG, or enabling AI agents to parse documents on the fly — this repository has you covered.
MinerU is an open-source, high-accuracy document parsing engine that converts unstructured documents (PDFs, images, Office files, etc.) into machine-readable Markdown and JSON, purpose-built for LLM pre-training, RAG, and agentic workflows.
Core capabilities:
- Formulas → LaTeX · Tables → HTML, accurate complex layout reconstruction
- Supports scanned docs, handwriting, multi-column layouts, cross-page table merging
- Output follows human reading order with automatic header/footer removal
- VLM + OCR dual engine, 109-language OCR recognition
🏗️ Repository Structure
MinerU-Ecosystem/ ├── cli/ # Command-line tool for document parsing ├── sdk/ # Multi-language SDKs │ ├── python/ # Python SDK │ ├── go/ # Go SDK │ └── typescript/ # TypeScript SDK ├── langchain_mineru/ # LangChain document loader integration ├── lla
afc5ee9053d2OBSERVED · 2026-10-06Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add mineru-open-mcp --env MINERU_API_TOKEN=${MINERU_API_TOKEN} -- None mineru-open-mcp==1.0.22Exposed tools (1)
1 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
parse_documents | read | Route to MinerU document parsing (see tool `description` for full agent guidance). |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (4 observation(s))
- Network
- declared (8 observation(s))
- Shell
- none-observed
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (10)
.gitlab-ci.yml
"url": "http://127.0.0.1:8001/mcp"
"url": "http://127.0.0.1:8001/mcp"
"url": "http://127.0.0.1:8001/mcp"
"url": "http://127.0.0.1:8001/mcp"
fflate, @types/node, tsup, typescript, vitest
curl -fsSL https://cdn-mineru.openxlab.org.cn/open-api-cli/install.sh | sh
curl -fsSL https://cdn-mineru.openxlab.org.cn/open-api-cli/install.sh | sh
curl -fsSL https://cdn-mineru.openxlab.org.cn/open-api-cli/install.sh | sh
curl -fsSL https://cdn-mineru.openxlab.org.cn/open-api-cli/install.sh | sh
Gates applied: no_behavioural_pass.
afc5ee9053d2full audit observations/trust-audit/mcp-server/opendatalab__mineru-ecosystem.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-06 | afc5ee9053d2 | SAFE | B | 89 | first audit |
Questions
What is the MinerU-Ecosystem MCP server?
Parse PDFs, images, doc, docx, ppt, pptx, xls, xlsx, html into Markdown using MinerU API.
What tools does MinerU-Ecosystem expose?
1 in total: 1 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is MinerU-Ecosystem safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does MinerU-Ecosystem need?
It reads LLM_API_KEY, MINERU_API_TOKEN and MINERU_TOKEN from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does MinerU-Ecosystem run?
It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as mineru-open-sdk at 0.1.1.
How current is this page?
The grade is for one exact copy of the source (afc5ee9053d2), read on 2026-10-06. The repository is watched and re-audited when it changes.