Grounded Docs MCP Server — Watchlist

MCP100 Assessment

Watchlist / Tracking

Why we’re tracking it

Follow indexing and source-refresh behavior because documentation freshness is its value

Reviewed Oct 5, 2026 · Documentation review; complete setup workflow not independently tested

Best fit

Coding assistants that need current local documentation and source context.

What we know

A local documentation index/MCP that fetches official web, GitHub, npm, PyPI and local-file content for search and retrieval.

Maintenance / activity evidence

Observed Oct 4, 2026 (UTC)Merge pull request 524 from arabold/test/refresh-timeout-retries

Tracking evidence observed Oct 5, 2026. These dated signals do not establish current maintenance. Reviewed enrichment confidence: high.

Activity source · commits ↗Activity source · releases ↗

Verification gaps / watch-outs

Installation and comprehensive security have not been independently audited.
Reads/indexes websites, repos and local files. Writes: Index management writes local data.
No default localhost auth established
Sensitive access: Local files, Source code, Private docs if indexed

Local-first indexing reduces exposure, but local-file scope and optional cloud embeddings must be controlled.

Security source · repository notice ↗

Full authority, access and evidence limits are available in Review context and Access & risk.

Popularity

1,785 repository stars · 5.3k package downloads / 30 days

Stars observed Oct 6, 2026. Downloads observed Oct 6, 2026.

All limitations / Review context

How does the current server refresh sources and expose grounded document tools?

The bounded assessment reviewed the official README, repository notices, security policy path, and security page for known material public-tracking blockers. No such blocker was identified. This is a public-tracking assessment, not an installation safety certification.

Local-first indexing reduces exposure, but local-file scope and optional cloud embeddings must be controlled.
Reads/indexes websites, repos and local files.
No default localhost auth established
Index remains local; optional embedding providers receive selected text.
Reviewed write actions: Index management writes local data
Sensitive access: Local files, Source code, Private docs if indexed
Installation, client compatibility and comprehensive security have not been independently audited. Authentication and access depend on the configured services.
A project-specific SECURITY.md policy was not available at the fetched official path; the review remains limited to published repository notices.
No installation, runtime, client matrix, or complete tool-contract audit was performed in this review.
The fetched official SECURITY.md path returned HTTP 404; it was not treated as positive evidence.
Network access is required to fetch sources.
Optional embedding providers can receive indexed text.
Remote binding needs operator-managed access controls.

Original activity observations

2026-10-04T23:33:06Z: Merge pull request 524 from arabold/test/refresh-timeout-retries

Technical identity

github.com/arabold/docs-mcp-server

Exact implementation source: https://github.com/arabold/docs-mcp-server ↗
Reviewed resource type: MCP Server
Repository identity: arabold/docs-mcp-server
Package identity: npm:@arabold/docs-mcp-server
Service endpoint: http://localhost:6280/sse

Evidence & Sources

Evidence basis: Recorded source evidence
Setup runtime verification: Not independently runtime-tested by MCP100 for this setup workflow.

Reviewed Oct 5, 2026 · Latest source observation Oct 6, 2026

GitHub repository ↗
arabold/docs-mcp-server
Recorded repository material and project history.
Package registry ↗
@arabold/docs-mcp-server
Recorded package identity, distribution or download evidence.
Includes references whose attribution is not established.

Setup · Watchlist

Install & Agents

Claude Desktop

Publisher instructions with a documented client setup path.

Source evidence observed Oct 13, 2026.

Additional setup details required — see the specific gaps below.

Install / connect
Publisher instructions
Publisher-documented setup follows; complete prerequisites and client configuration in the correct environment.
npx @arabold/docs-mcp-server@latest
Configure / authenticate
Publisher instructions
For HTTP setup, start the official server on localhost:6280/mcp and configure the chosen client using the official Streamable HTTP example. Default config.yaml location differs on macOS/Linux/Windows. Inspect network/file access policies before turning on indexing or internet scraping.
Advanced configuration · claude desktop json
{ "mcpServers": { "docs-mcp-server": { "type": "http", "url": "http://localhost:6280/mcp" } } }
Check connection
MCP100 setup guide
Check the local docs-mcp-server UI and the configured client tool list. Use publisher docs-mcp-server config to inspect loaded configuration; note that indexing/search results are separate from MCP process readiness.
docs-mcp-server config
Remove / uninstall / revoke
MCP100 setup guide
Remove the docs-mcp-server connection from the client and stop its standalone process/container. For a Compose deployment in the project folder, use `docker compose down` without `-v` to preserve persistent documentation indexes.

Official Documentation & Sources

What it does

A local documentation index/MCP that fetches official web, GitHub, npm, PyPI and local-file content for search and retrieval.

Capability: Files & Knowledge
Resource type: MCP Server
Industry: Software & Technology
Best fit: Coding assistants that need current local documentation and source context.

Representative uses

Index documentation
Search docs locally
Fetch a URL as Markdown
Expose local docs through MCP/web UI

Limitations

Network access is required to fetch sources.
Optional embedding providers can receive indexed text.
Remote binding needs operator-managed access controls.

Reviewed access

Access & risk

Review the exact access boundary before connecting this MCP to accounts, credentials, or sensitive data.

Authentication: No default localhost auth established
Permissions: Reads/indexes websites, repos and local files.
Data handling: Index remains local; optional embedding providers receive selected text.
Cost: free
Risk and cautions: Local-first indexing reduces exposure, but local-file scope and optional cloud embeddings must be controlled.

Access scope and cautions

Write actions: Index management writes local data
Sensitive access: Local files Source code Private docs if indexed
Risk level: moderate

FAQ

Based on reviewed evidence as of 2026-10-06. Watchlist tracking is not a recommendation or a security certification.

Which tasks are documented for this implementation?

The reviewed tasks include: Index documentation; Search docs locally; Fetch a URL as Markdown; Expose local docs through MCP/web UI.

What setup and authentication are documented?

Recorded installation/entrypoint step: npx @arabold/docs-mcp-server@latest. Recorded endpoint: http://localhost:6280/sse. Recorded transport: sse, streamable_http. Recorded environment-variable notes: OPENAI_API_KEY. No configuration values are supplied here. Prerequisites: Node.js 22+ or Docker. These are the documented setup details, not a claim that installation or client compatibility was independently tested. Authentication: No auth documented for default localhost deployment.

Can it modify data or perform write operations?

Documented write actions include: Index management writes local data. Recorded permission boundary: Reads/indexes websites, repos and local files.

What data-handling boundary should I consider?

Index remains local; optional embedding providers receive selected text. Recorded sensitive-access context: Local files; Source code; Private docs if indexed.

What limitations and risks should I check before use?

Local-first indexing reduces exposure, but local-file scope and optional cloud embeddings must be controlled. Network access is required to fetch sources. Optional embedding providers can receive indexed text. Remote binding needs operator-managed access controls. A project-specific SECURITY.md policy was not available at the fetched official path; the review remains limited to published repository notices.

Is this an official MCP?

arabold is listed as Community implementation in MCP100’s current evidence.