@wisflux/docmost-local-mcp

MCP server for Docmost that is built for self-hosted instances, especially deployments that do not have an enterprise license but still want reliable MCP access from local IDEs and AI tools.

The package is launched with npx, while the actual server is a Rust binary downloaded from GitHub Releases during install. That binary handles stdio MCP traffic, local authentication UX, session storage, and Docmost API access.

The main reason this project exists: bring MCP access to self-hosted Docmost setups without making an enterprise license a prerequisite.

Why This Project

Many MCP integrations are designed around hosted or enterprise assumptions. This project is intentionally optimized for self-hosted Docmost:

• Works against your own Docmost base URL
• Uses Docmost email/password authentication
• Stores session state locally for reuse
• Opens a local auth flow instead of requiring a separate hosted control plane
• Ships as a simple npx entrypoint for easy IDE integration

If you run your own Docmost and want it available inside Cursor, Claude Desktop, or another MCP client, this package is the straightforward path.

Highlights

• Strong fit for self-hosted Docmost instances without enterprise licensing
• Rust server core with a small Node launcher for predictable local installs
• Native auth window on supported platforms, with browser fallback
• Explicit Docmost instance selection via startup config
• Session reuse with JWT expiry checks and automatic re-login
• OS keychain credential storage on supported platforms
• Clean tool surface for spaces, pages, comments, members, and current user context

Available Tools

• list_spaces: list available Docmost spaces
• get_space: fetch details for a specific space
• search_docs: search documentation, optionally scoped to a space
• search_pages: backward-compatible alias for search_docs
• get_page: fetch a page and return its content as Markdown
• list_pages: list recent pages in a space
• list_child_pages: list child pages for a parent page ID
• get_comments: list comments for a page
• list_workspace_members: list workspace members
• get_current_user: fetch the authenticated user and workspace context

Roadmap

Write support is planned next.

Planned write tools:

Requirements

• Node.js 18 or newer for npx
• A reachable Docmost instance
• Email/password authentication enabled in that Docmost instance

Quick Start

Run the server directly with npx:

npx -y @wisflux/docmost-local-mcp --base-url=https://docs.example.com

You can also provide the base URL with an environment variable:

DOCMOST_BASE_URL=https://docs.example.com npx -y @wisflux/docmost-local-mcp

MCP Client Configuration

Most MCP clients can launch the server directly with npx:

{
  "mcpServers": {
    "docmost": {
      "command": "npx",
      "args": ["-y", "@wisflux/docmost-local-mcp", "--base-url=https://docs.example.com"]
    }
  }
}

This setup works well when you want a fixed Docmost instance per client configuration. If --base-url or DOCMOST_BASE_URL is set, the login page shows that URL prefilled and locks the field. If no base URL is configured, the login flow asks for it during interactive sign-in.

Authentication Flow

1. Your MCP client launches the server over stdio.
2. On the first authenticated tool call, the server starts a local HTTP login page on 127.0.0.1.
3. The server opens a native auth window when available, or falls back to the system browser.
4. You enter your email and password there. If --base-url or DOCMOST_BASE_URL is set, the Docmost URL is prefilled and locked.
5. The server signs in through /api/auth/login, extracts the authToken cookie, stores the session, and optionally stores credentials for automatic re-login.
6. Future requests reuse the saved token until it is close to expiry or rejected by Docmost.

Local State And Credential Storage

The server stores local state in:

~/.docmost-local-mcp/

Files used there:

• config.json: last base URL and email
• session.json: saved auth token and expiry

Credentials are stored in the OS keychain when available, which is the preferred path on supported platforms.

If secure OS credential storage is unavailable, the server falls back to encrypted local credential storage so it can still support login reuse without writing plain-text credentials. That fallback is intentionally secondary to keychain-backed storage.

Platform Notes

The native auth window uses the system webview on each platform:

• macOS: WKWebView
• Windows: WebView2
• Linux: WebKitGTK

Important caveats:

• Windows needs the WebView2 runtime available
• Linux desktop environments need WebKitGTK packages installed
• When the binary is built without the native-webview feature, browser fallback is always used

Tool Reference

list_spaces

Returns Docmost space names, slugs, and IDs.

search_docs

Inputs:

• query: required search text
• space_id: optional Docmost space ID

search_pages

Inputs:

• query: required search text
• space_id: optional Docmost space ID

This is a backward-compatible alias for page search. search_docs remains available.

get_space

Inputs:

• space_id: required Docmost space ID

get_page

Inputs:

• slug_id: the page slug ID returned by search_docs

list_pages

Inputs:

• space_id: required Docmost space ID
• limit: optional page count limit
• cursor: optional pagination cursor

list_child_pages

Inputs:

• page_id: required parent page ID
• limit: optional page count limit
• cursor: optional pagination cursor

get_comments

Inputs:

• page_id: required page ID
• limit: optional comment count limit
• cursor: optional pagination cursor

list_workspace_members

Inputs:

• limit: optional member count limit
• cursor: optional pagination cursor
• query: optional member search text
• admin_view: optional admin visibility flag

get_current_user

Inputs:

• none

Development

For maintainer and contributor workflow details, see CONTRIBUTING.md.

License

MIT