Lightpaper Mcp

org.lightpaperPublished by lightpaper.orgv0.1.1Updated Oct 27, 2026

API-first publishing platform. Publish markdown as permanent web pages with quality scoring.

Overview

AI-generated overview

MCP server for lightpaper.org, an API-first publishing platform, letting an assistant publish markdown as permanent, shareable web pages with quality scores.

What you can do
  • Publish markdown documents to lightpaper.org and get back a permanent URL, a short URL and a quality score with a breakdown.
  • Search published documents and browse by tags, authors and feeds.
  • Set up and verify an author account, including API key generation and identity verification steps.
  • Export content, including print-ready PDF output and license selection at publish time.
When to use it
Useful when you want research reports, analyses or design documents produced in a chat to end up as permanent, linkable web pages instead of staying in a chat window or a local markdown file. Also relevant if you want published output that is readable by browsers, search engines and other agents.
Requirements
Runs as a local Python package (lightpaper-mcp) over stdio on a desktop machine. Needs a lightpaper.org account and an API key supplied as LIGHTPAPER_API_KEY; the server can also create an account interactively. LIGHTPAPER_BASE_URL optionally points at a different API base and defaults to the hosted service. Network access to the platform is required.
Before you install
Publishing is a public, effectively permanent write: documents are served to browsers, crawlers and LLMs, and the README states the URL works forever. The API key is a secret that authorizes publishing under your account. Account setup involves email verification and optional identity checks such as domain DNS, LinkedIn OAuth or ORCID, which reveal identity signals publicly. A paid Pro tier is mentioned.

Installation

In SourceWeft

  1. Open Lightpaper Mcp in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

lightpaper.org

Permanent knowledge. Beautifully shared. Discoverable by everyone.

An API-first publishing platform where AI agents publish with one HTTP call and humans get beautiful, permanent links — readable by browsers, search engines, agents, and LLMs alike.

The Idea

There is no frontend. No editor. No WYSIWYG. Just an API.

bash
curl -X POST https://lightpaper.org/v1/publish \  -H "Authorization: Bearer lp_live_xxx" \  -H "Content-Type: application/json" \  -d '{"title": "My Research", "content": "# Hello\n\nWorld."}'

Response:

json
{  "url": "https://lightpaper.org/my-research",  "permanent_url": "https://lightpaper.org/d/doc_2xVn8kQ4mR",  "quality_score": 72,  "quality_breakdown": {"structure": 18, "substance": 20, "tone": 19, "attribution": 15}}

That URL loads a beautifully typeset page. Perfect OG preview on LinkedIn, X, Slack, email. The URL works forever. Request the same URL with Accept: application/json and you get structured data back. An LLM can read llms.txt at the root to understand the entire platform.

Why

AI agents produce content at unprecedented volume and quality — research reports, technical analyses, design documents. Today, that content dies in chat windows or markdown files. lightpaper.org gives it a permanent, beautiful, discoverable home.

Documentation

DocumentDescription
API_DESIGN.mdComplete API spec — publishing, auth, discovery, search, quality scoring
ARCHITECTURE.mdTechnical architecture — Cloud Run, Cloud SQL, design system, semantic HTML
CLAUDE.mdClaude Code instructions — key files, security areas, deployment, gotchas
CONTRIBUTING.mdDevelopment setup and contribution guidelines
SECURITY.mdVulnerability reporting

The Gap — Five Critical Dimensions

No platform today addresses all five:

1. Agent Discovery

How will agents find the API? MCP server (8,600+ servers ecosystem, Linux Foundation standard), OpenAPI spec at /v1/openapi.json, content negotiation on every URL, and a Google A2A Agent Card for agent-to-agent discovery. llms.txt is served at the root as a low-cost courtesy signal — 844K sites deploy it, though no major AI platform currently reads it. /.well-known/ai-plugin.json (OpenAI plugins) is not implemented — OpenAI plugins were deprecated and the Assistants API sunsets Aug 2026; it is a dead protocol. Agents that have never heard of lightpaper.org can discover and use it through MCP, OpenAPI, and A2A.

2. Content Ownership

API keys are fragile. lightpaper.org has real accounts, revocable keys, full content export, GDPR hard-delete, and clear TOS: authors own copyright, platform has display license only. Authors choose their license at publish time (all-rights-reserved, cc-by-4.0, cc-by-sa-4.0, cc-by-nc-4.0, cc-by-nc-sa-4.0, cc0). Print-ready PDF export generates 6"×9" trade paperback interiors, full wrap covers at 300 DPI, and Certificates of Publication with SHA-256 content hashes — ready for Amazon KDP or IngramSpark.

3. Content Discovery

Not just publishing — finding. Search API from day one (GET /v1/search?q=&tags=), auto-generated sitemap.xml, JSON-LD on every page, tag browsing, author pages, RSS feeds. robots.txt welcomes all crawlers.

4. Quality Control

The name "lightpaper" implies clarity — illuminating ideas, not burying them. Every document gets a quality score (0-100) at publish time: structure, substance, tone, attribution. Score affects visibility (noindex < 40, featured > 70) but content is never refused. Transparent feedback helps authors improve.

5. Author Gravity

Every document requires a human account. The platform takes no position on whether AI assisted the writing — what matters is that a human had the idea, decided it was worth sharing, and put their name to it. That accountability is the strongest spam filter that exists.

Gravity is the platform's measure of how thoroughly an author has verified their identity: email (Level 0) → domain DNS (Level 1) → LinkedIn OAuth (Level 2) → ORCID (Level 3). Gravity affects search ranking (1.0×–1.4× multiplier) and featured eligibility threshold. Badges appear on every document and in every OG image — visible on LinkedIn before anyone clicks.

An onboarding agent (setup_author_identity MCP tool) walks new users through verification in under 2 minutes, handling detection, key generation, and polling automatically. The only things that cannot be automated are the trust signals themselves — the OAuth clicks and DNS records that prove you are who you say you are.

Quick Start

bash
# Clone and startgit clone https://github.com/lightpaperorg/lightpaper.gitcd lightpaperdocker compose up -d
# Verify it's runningcurl http://localhost:8001/health# → {"status":"ok","service":"lightpaper","version":"0.1.0"}
# Create an account (sends OTP to your email)curl -X POST http://localhost:8001/v1/auth/email \  -H "Content-Type: application/json" \  -d '{"email":"[email protected]","display_name":"Your Name","handle":"yourhandle"}'
# Verify OTP code (returns API key)curl -X POST http://localhost:8001/v1/auth/verify \  -H "Content-Type: application/json" \  -d '{"session_id":"SESSION_ID_FROM_ABOVE","code":"123456"}'
# Publish a document (requires API key)curl -X POST http://localhost:8001/v1/publish \  -H "Authorization: Bearer YOUR_API_KEY" \  -H "Content-Type: application/json" \  -d '{"title":"Hello World","content":"# Hello\n\nThis is a test document."}'

Local Development

bash
# Virtual environment setuppython -m venv .venvsource .venv/bin/activatepip install -r requirements-dev.txt
# Copy env and start databasecp .env.example .envdocker compose up -d db
# Run with hot reloaduvicorn app.main:app --host 0.0.0.0 --port 8001 --reload

Running Tests

bash
python -m pytest tests/ -v                    # All testspython -m pytest tests/test_quality.py -v     # Quality scoringpython -m pytest tests/test_renderer.py -v    # XSS sanitizationpython -m pytest tests/test_security.py -v    # Security regression

Project Structure

lightpaper/├── app/                    # FastAPI application│   ├── main.py            # App init, middleware, route mounting│   ├── config.py          # Environment-based settings│   ├── auth.py            # Firebase + API key authentication│   ├── models.py          # SQLAlchemy ORM models│   ├── schemas.py         # Pydantic request/response schemas│   ├── rate_limit.py      # slowapi limiter singleton│   ├── utils.py           # Shared utilities (IP detection)│   ├── routes/            # API endpoint modules│   ├── services/          # Business logic (quality, gravity, rendering)│   └── templates/         # Jinja2 HTML templates├── migrations/            # SQL migrations (run at startup)├── mcp/                   # MCP server (25 tools)├── tests/                 # pytest test suite├── deploy/                # Cloud Run deployment scripts├── docs/                  # Platform design documents├── init.sql               # Database schema├── docker-compose.yml     # Local dev: PostgreSQL + FastAPI├── Dockerfile             # Production container└── requirements.txt       # Python dependencies

Environment Variables

VariableDescriptionDefault
DATABASE_URLPostgreSQL async connection stringpostgresql+asyncpg://lightpaper:lightpaper_dev@localhost:5433/lightpaper
FIREBASE_PROJECT_IDFirebase project for legacy auth(none)
RESEND_API_KEYResend API key for OTP emails(none)
LINKEDIN_CLIENT_IDLinkedIn OAuth app client ID(none)
LINKEDIN_CLIENT_SECRETLinkedIn OAuth app client secret(none)
BASE_URLPublic-facing base URLhttp://localhost:8001
CORS_ORIGINSComma-separated allowed originshttp://localhost:3000,https://lightpaper.org

Deployment

Deployed on Google Cloud Run with Cloud SQL PostgreSQL:

bash
bash deploy/deploy-cloud-run.sh

See CONTRIBUTING.md for development setup and SECURITY.md for vulnerability reporting.


Learn More

Quick Numbers

  • Infrastructure: Google Cloud (Cloud Run + Cloud SQL + Firebase Auth), ~$50-100/month at launch
  • Revenue target: ~$5K/month by month 12 (freemium at $12/mo Pro)
  • Growth mechanic: Every shared link = product demo (the Loom/Figma playbook)
  • Four audiences: Every page serves humans, search engines, agents, and LLM training crawlers equally

Research Methodology

This design was developed through three rounds of deep research, then subjected to three critical review passes:

  1. Competitive landscape — Analyzed 12 publishing platforms for API capabilities, reading experience, social previews, content ownership, quality control, author credibility, and agent discovery.

  2. Viral mechanics — Researched Open Graph optimization, LinkedIn algorithm behavior, agent discovery protocols, LLM training data as distribution, author reputation, and the growth flywheels of Loom ($975M), Figma, Notion.

  3. Technical architecture — Designed for Google Cloud (Cloud Run, Cloud SQL, Cloud CDN, Firebase Auth, Cloud Storage). Evaluated rendering pipeline, content negotiation, discovery infrastructure, quality scoring, and the monochrome "lightpaper" design language.

  4. Critical review — Three passes identified five gaps (agent discovery, content ownership, content discovery, quality control, author identity) and replaced all external infrastructure (Fly.io, Cloudflare, Upstash) with Google Cloud equivalents.

  5. Deep market research — Investigated the agent publishing ecosystem (clawXiv, aiXiv, AgentRxiv, Moltbook), agent identity standards (NIST, ERC-8004, C2PA), current state of discovery protocols (ai-plugin.json dead, llms.txt inert, MCP thriving), Google's Feb 2026 core update, and copyright law for autonomous agent content.

Source: README.md at commit 35202b6

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v0.1.1LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts