← Back to search

com.docfork/docfork-mcp

docfork streamable_http Scanned 35d ago

Up-to-date docs for AI agents. DEPRECATED: Use io.github.docfork/docfork instead.

C
73.3 / 100

Versions

2.2.5latest
May 25, 2026
2.2.4
May 24, 2026
2.2.3
May 24, 2026
2.2.2
May 18, 2026
2.2.1
Apr 19, 2026
+ show 30 moreshow less
2.2.0
Apr 14, 2026
2.1.0
Mar 4, 2026
2.0.1
Feb 12, 2026
1.4.0
Jan 18, 2026
1.3.4
Jan 16, 2026
1.3.3
Jan 14, 2026
1.3.2
Jan 14, 2026
1.3.1
Jan 14, 2026
1.3.0
Jan 10, 2026
1.2.2
Jan 5, 2026
1.2.1
Dec 26, 2025
1.2.0
Dec 23, 2025
1.1.0
Dec 22, 2025
1.0.6
Dec 22, 2025
1.0.5
Dec 12, 2025
1.0.4
Nov 4, 2025
1.0.1
Nov 4, 2025
1.0.0
Oct 5, 2025
0.7.2
Sep 17, 2025
0.7.1
Sep 12, 2025
0.6.1
Aug 10, 2025
0.6.0
Aug 10, 2025
0.5.5
Aug 10, 2025
0.5.3
Jun 18, 2025
0.5.2
Jun 10, 2025
0.5.0
Jun 8, 2025
0.4.6
Jun 6, 2025
0.4.5
Jun 5, 2025
0.4.4
Jun 5, 2025
0.0.1
May 20, 2025
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 2

search_docs
annotations: verified low

\ Search a library's indexed documentation and return relevant sections with titles, summaries, and URLs. Results are sourced from official, versioned documentation. Usage: - Be specific in your query. Include the feature, API, or concept you need. Good: "server-side rendering with App Router". Bad: "rendering". - The library parameter accepts a simple name (e.g., react, nextjs) or exact owner/repo for precision (e.g., vercel/next.js, TanStack/query). - When multiple library candidates appear, prefer exact name matches and official organizations over forks. - After 2 searches without finding the relevant section, switch to fetch_doc on the best result URL or the library's documentation root rather than searching again. - Use fetch_doc on result URLs to retrieve full documentation content.

readOnlyHint true
fetch_doc
annotations: verified low

\ Retrieve full documentation content from a URL and return it as rendered markdown. Use this tool to get complete pages — including code examples, API signatures, and prose — from search_docs result URLs. - Pass a URL directly from search_docs results to retrieve that section's full content. - Trim the URL anchor or path to a parent directory to get a broader table of contents with section previews. - Returns rendered markdown that preserves code blocks, headings, and document structure. - Only works on Docfork-indexed documentation — use WebFetch for URLs not returned by search_docs. - If search_docs returns sparse or no results, try fetch_doc on the library's root documentation URL (e.g. https://github.com/owner/repo/tree/main/docs) to browse available content.

readOnlyHint true

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs/promises
shell high
Server uses shell capabilities via: child_process
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 24

medium
Vulnerable dependency: vitest@3 (GHSA-5xrq-8626-4rwp) dependency_analyzer · 95%
info
Tool 'search_docs' annotations are consistent annotation_checker · 80%
info
Tool 'fetch_doc' annotations are consistent annotation_checker · 80%
high
Hardcoded OAuth client ID in docfork-docfork-3cb4ba2/packages/dgrep/src/lib/device-flow.ts auth_checker · 85%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: turbo@2.8.7 (GHSA-3qcw-2rhx-2726) dependency_analyzer · 95%
medium
Vulnerable dependency: turbo@2.8.7 (GHSA-hcf7-66rw-9f5r) dependency_analyzer · 95%
medium
Vulnerable dependency: @hey-api/openapi-ts@0.97.2 (GHSA-hhx9-57xq-r5rw) dependency_analyzer · 95%
info
SBOM generated: 312 components sbom_generator · 100%
medium
Vulnerable dependency: vitest@3 (GHSA-82fw-gwwq-j7x9) dependency_analyzer · 95%
medium
Vulnerable dependency: vitest@3 (GHSA-9crc-q9x8-hgqq) dependency_analyzer · 95%
medium
Vulnerable dependency: smol-toml@1.6.1 (GHSA-7w5x-hrqm-74c2) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: search_docs manifest_parser · 85%
info
Tool: fetch_doc manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (19) manifest_parser · 80%
medium
Hardcoded OAuth client ID in docfork-docfork-3cb4ba2/packages/dgrep/src/lib/device-flow.ts oauth_scope_analyzer · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%