Docs MCP Server

Findings (16)

• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  Turns off TLS certificate checking, allowing traffic interception.

  src/scraper/fetcher/HttpFetcher.ts:193
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  follow-redirects@1.16.1: 1 known vulnerability

  GHSA-mrwp-f3q8-3g9p

  package-lock.json
• mediumMedium. Worth checking, often a vulnerable dependency or a setup problem.
  undici@6.29.0: 5 known vulnerabilities

  GHSA-2m5v-pch6-74hx, GHSA-4qv8-2p9j-2685, GHSA-9fm3-97px-rjf6, GHSA-qrxm-fqhp-jwvm, GHSA-xjj6-f33q-929c

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/scraper/fetcher/BrowserFetcher.test.ts:548
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/scraper/fetcher/HttpFetcher.test.ts:430
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/scraper/fetcher/ManagedBrowser.test.ts:74
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/scraper/fetcher/ManagedBrowser.test.ts:105
• lowLow. Minor, or common in normal tools. Shown for information.
  In tests/examples/docs: Contacts a hard-coded IP address instead of a domain name.

  src/scraper/middleware/HtmlPlaywrightMiddleware.test.ts:519
• lowLow. Minor, or common in normal tools. Shown for information.
  glob@13.0.6: 1 known vulnerability

  GHSA-3g3m-2fjr-6pw4

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  ip-address@10.7.2: 1 known vulnerability

  GHSA-rxp7-6hxx-x8q5

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  minimatch@10.2.5: 1 known vulnerability

  GHSA-g3hv-75wg-m249

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  minimatch@10.2.6: 1 known vulnerability

  GHSA-g3hv-75wg-m249

  package-lock.json
• lowLow. Minor, or common in normal tools. Shown for information.
  package.json has a postinstall script

  echo 'Skipping Playwright browser install. See README.md for details.'

  package.json
• lowLow. Minor, or common in normal tools. Shown for information.
  package.json has a prepare script

  husky || true

  package.json
• lowLow. Minor, or common in normal tools. Shown for information.
  No manifest declaring network access and environment variables (agent.json)
• lowLow. Minor, or common in normal tools. Shown for information.
  Contacted these domains while starting up (no manifest to compare against)

  cdn.playwright.dev, playwright.download.prss.microsoft.com, storage.googleapis.com

Network activity

Tools exposed (12)

• scrape_docs

  Scrape and index documentation from a URL for a library. Use this tool to index a new library or a new version. Scraping a library version that already exists is rejected unless `replace` is true; use refresh_version to update an existing version in place.

• refresh_version

  Re-scrape a previously indexed library version, updating only changed pages.

• search_docs

  Search up-to-date documentation for a library or package. Examples: - {library: "react", query: "hooks lifecycle"} -> matches latest version of React - {library: "react", version: "18.0.0", query: "hooks lifecycle"} -> matches React 18.0.0 or earlier - {library: "typescript", version: "5.x", query:

• read_page

  Read the full content of an indexed documentation page, for example a URL returned by `search_docs` or `list_pages`. Long pages are returned in parts; the response says how to continue.

• list_pages

  List the indexed pages of a library version, with an optional URL filter and pagination.

• list_libraries

  List all indexed libraries and their versions. Use this to find the correct library name.

• find_version

  Find the best matching version for a library. Use to identify available or closest versions.

• list_jobs

  List all indexing jobs. Optionally filter by status.

• get_job_info

  Get details for a specific indexing job. Use the 'list_jobs' tool to find the job ID.

• cancel_job

  Cancel a queued or running indexing job. Use the 'list_jobs' tool to find the job ID.

• remove_docs

  Remove indexed documentation for a library version. Use only if explicitly instructed.

• fetch_url

  Fetch a single URL and convert its content to Markdown. Use this tool to read the content of any web page.