← Back to search

ai.smithery/docfork-mcp

docfork streamable_http Scanned 4d ago

@latest documentation and code examples to 9000+ libraries for LLMs and AI code editors in a singl…

C
73.3 / 100

Versions

0.6.0latest
first seen Aug 20, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 2

search_docs
annotations: verified low

\ Search a library's indexed documentation and return relevant sections with titles, summaries, and URLs. Results are sourced from official, versioned documentation. Usage: - Be specific in your query. Include the feature, API, or concept you need. Good: "server-side rendering with App Router". Bad: "rendering". - The library parameter accepts a simple name (e.g., react, nextjs) or exact owner/repo for precision (e.g., vercel/next.js, TanStack/query). - When multiple library candidates appear, prefer exact name matches and official organizations over forks. - After 2 searches without finding the relevant section, switch to fetch_doc on the best result URL or the library's documentation root rather than searching again. - Use fetch_doc on result URLs to retrieve full documentation content.

readOnlyHint true
fetch_doc
annotations: verified low

\ Retrieve full documentation content from a URL and return it as rendered markdown. Use this tool to get complete pages — including code examples, API signatures, and prose — from search_docs result URLs. - Pass a URL directly from search_docs results to retrieve that section's full content. - Trim the URL anchor or path to a parent directory to get a broader table of contents with section previews. - Returns rendered markdown that preserves code blocks, headings, and document structure. - Only works on Docfork-indexed documentation — use WebFetch for URLs not returned by search_docs. - If search_docs returns sparse or no results, try fetch_doc on the library's root documentation URL (e.g. https://github.com/owner/repo/tree/main/docs) to browse available content.

readOnlyHint true

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs/promises
shell high
Server uses shell capabilities via: child_process
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 31

info
Tool 'search_docs' annotations are consistent annotation_checker · 80%
info
Tool 'fetch_doc' annotations are consistent annotation_checker · 80%
high
Hardcoded OAuth client ID in docfork-docfork-3cb4ba2/packages/dgrep/src/lib/device-flow.ts auth_checker · 85%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: turbo@2.8.7 (GHSA-3qcw-2rhx-2726) dependency_analyzer · 95%
medium
Vulnerable dependency: turbo@2.8.7 (GHSA-hcf7-66rw-9f5r) dependency_analyzer · 95%
medium
Vulnerable dependency: smol-toml@1.6.1 (GHSA-7w5x-hrqm-74c2) dependency_analyzer · 95%
medium
Vulnerable dependency: smol-toml@1.6.1 (GHSA-r4xh-jqrq-34v2) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@3 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@3 (GHSA-82fw-gwwq-j7x9) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@3 (GHSA-9crc-q9x8-hgqq) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.29.0 (GHSA-22jm-h49p-29qw) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.29.0 (GHSA-46jr-4wx8-v453) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.29.0 (GHSA-6prh-2h8m-c8cw) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.29.0 (GHSA-6qxp-vccf-f47h) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.29.0 (GHSA-rvq5-wwqv-78pq) dependency_analyzer · 95%
medium
Vulnerable dependency: zod@4.3.6 (GHSA-mrhx-c7xc-m3w5) dependency_analyzer · 95%
medium
Vulnerable dependency: @hey-api/openapi-ts@0.97.2 (GHSA-hhx9-57xq-r5rw) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: search_docs manifest_parser · 85%
info
Tool: fetch_doc manifest_parser · 85%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (19) manifest_parser · 80%
medium
Hardcoded OAuth client ID in docfork-docfork-3cb4ba2/packages/dgrep/src/lib/device-flow.ts oauth_scope_analyzer · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 312 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%