ArxivSAFE
An MCP server that enables interacting with the arXiv API using natural language
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
[](https://modelcontextprotocol.io) [](https://www.python.org/downloads/) [](https://opensource.org/licenses/MIT) [](https://smithery.ai/server/@prashalruchiranga/arxiv-mcp-server)
A Model Context Protocol (MCP) server that enables interacting with the arXiv API using natural language.
Features
- Retrieve metadata about scholarly articles hosted on arXiv.org
- Download articles in PDF format to the local machine
- Search arXiv database for a particular query
- Retrieve articles and load them into a large language model (LLM) context
Tools
- get_article_url
- Retrieve the URL of an article hosted on arXiv.org based on its title
title(String): Article title- download_article
- Download the article hosted on arXiv.org as a PDF file
title(String): Article title- load_article_to_context
- Load the article hosted on arXiv.org into context of a LLM
title(String): Article title- get_details
- Retrieve metadata of an article hosted on arXiv.org based on its title
title(String): Article title- search_arxiv
- Performs a search query on the arXiv API based on specified parameters and returns matching article metadata
all_fields(String): General keyword search across all metadata fieldstitle(String): Keyword(s) to search for within the titles of articlesauthor(String): Author name(s) to filter results byabstract(String): Keyword(s) to search for within article abstractsstart(int): Index of the first result to return
Setup
MacOS
Clone the repository
git clone https://github.com/prashalruchiranga/arxiv-mc
fe194665ab1fOBSERVED · 2026-10-08Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add arxiv-mcp-server -- uvx arxiv-mcp-server
{
"mcpServers": {
"arxiv-mcp-server": {
"command": "uvx",
"args": [
"arxiv-mcp-server"
]
}
}
}Exposed tools (5)
5 read · 0 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
download_article | read | |
get_article_url | read | |
get_details | read | |
load_article_to_context | read | |
search_arxiv | read |
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (2 observation(s))
- Shell
- none-observed
- Dependencies
- pinned
- Secrets in source
- none-found
Findings (1)
curl -LsSf https://astral.sh/uv/install.sh | sh
Gates applied: no_behavioural_pass.
fe194665ab1ffull audit observations/trust-audit/mcp-server/prashalruchiranga__arxiv-2.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-08 | fe194665ab1f | SAFE | B | 89 | first audit |
Questions
What is the Arxiv MCP server?
An MCP server that enables interacting with the arXiv API using natural language
What tools does Arxiv expose?
5 in total: 5 read-only, 0 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Arxiv safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does Arxiv need?
No credential environment variables were found in its source, so it appears to need none.
How does Arxiv run?
It speaks stdio, so it runs as a local process your client starts. It is published on PyPI as arxiv-mcp-server.
How current is this page?
The grade is for one exact copy of the source (fe194665ab1f), read on 2026-10-08. The repository is watched and re-audited when it changes.