PageIndexSAFE
MCP server for PageIndex. PageIndex is a vectorless reasoning-based RAG system which uses multi-step reasoning and tree search to retrieve information like a human expert would.
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
If you find this repo useful, please also star our [main PageIndex repo](https://github.com/VectifyAI/PageIndex) ⭐
[](https://github.com/VectifyAI/PageIndex) [](https://pageindex.ai/mcp) [](https://vectify.ai/pageindex)
📘 **PageIndex** is a vectorless, reasoning-based RAG system that represents documents as hierarchical tree structures. It enables LLMs to navigate and retrieve information through structure and reasoning, not vector similarity — much like a human would retrieve information using a book's index.
🔌 **PageIndex MCP** exposes this LLM-native, in-context tree index directly to LLMs via MCP, allowing platforms like Claude, Cursor, and other MCP-compatible agents or LLMs to reason over document structure and retrieve the right information — without vector databases.
Want to chat with long PDFs but hit context limit reached errors? Add your file to PageIndex to seamlessly chat with long PDFs on any agent/LLM platforms.
✨ Chat to long PDFs the human-like, reasoning-based way ✨
- Support local and online PDFs
- Free 1000 pages
- Unlimited conversations
For more information, visit the PageIndex MCP page.
💡 Looking for a fully hosted experience? Try **PageIndex App** 🤖: a human-like document analyst that lets you chat with long PDFs using the same agentic, reasoni
143e938d9126OBSERVED · 2026-10-02Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add mcp -- npx -y @pageindex/[email protected]
Trust audit
SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | PASS |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (3 observation(s))
- Shell
- declared (1 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (4)
.mcpbignore
.releaserc.json
@modelcontextprotocol/sdk, @types/lodash, date-fns, lodash, mime-types, open, p-retry, pkce-challenge
Gates applied: no_behavioural_pass.
143e938d9126full audit observations/trust-audit/mcp-server/vectifyai__pageindex.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-02 | 143e938d9126 | SAFE | B | 89 | first audit |
Questions
What is the PageIndex MCP server?
MCP server for PageIndex. PageIndex is a vectorless reasoning-based RAG system which uses multi-step reasoning and tree search to retrieve information like a human expert would.
Is PageIndex safe to connect to an agent?
The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.
What credentials does PageIndex need?
No credential environment variables were found in its source, so it appears to need none.
How does PageIndex run?
It speaks stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as @pageindex/mcp at 1.8.2.
How current is this page?
The grade is for one exact copy of the source (143e938d9126), read on 2026-10-02. The repository is watched and re-audited when it changes.