Paperless MCP

io.github.pvliesdonk由 GitHub 账号 pvliesdonk 发布v3.0.0更新于 Oct 24, 2026

Paperless-NGX over MCP: search, read, upload and tag documents; manage correspondents and types.

已验证STDIO仅桌面效率与工作流文件与存储

概览

AI 生成的概览

将助手连接到 Paperless-NGX 实例,用于搜索、读取、上传和标记文档,并管理通信方、文档类型和自定义字段。

可以做什么
搜索和读取文档:全文与筛选查询、OCR 文本、元数据、缩略图和受限预览,以及每份文档的审计历史和备注,以及保存视图、存储路径、分享链接、统计信息、可等待的后台任务,以及 Paperless-NGX 上游版本检查,以及上传文件并修改文档字段,包括批量编辑,以及管理标签、通信方、文档类型和自定义字段,支持完整增删改查与批量编辑,以及通过 HTTP 链接传输文档文件和 OCR Markdown,使文件内容不进入模型上下文。
适用场景
适合在 Paperless-NGX 中存放文档、并希望助手查找发票等记录、概括 OCR 内容、添加标签和通信方,或上传并索引新文件而无需离开对话的场景。
运行要求
以本地 stdio 进程运行(PyPI 包可用 uvx 启动,或使用 Docker 镜像以 streamable HTTP 运行)。需要 PAPERLESS_MCP_PAPERLESS_URL(Paperless-NGX REST API 基础地址)和 PAPERLESS_MCP_API_TOKEN(Paperless 服务账号令牌),缺少任一项服务器将拒绝启动。文件传输工具需要 PAPERLESS_MCP_BASE_URL。HTTP 部署可选 OIDC 或 bearer 认证。
安装前请注意
API 令牌可访问该 Paperless 账号的文档,建议使用专用服务账号并限制权限。服务器可上传、修改和批量编辑文档及分类数据,且存在可删除的增删改查操作;如需只读使用,可用 PAPERLESS_MCP_TOOLS_DENY 隐藏写入工具。OIDC 部署涉及 PAPERLESS_MCP_OIDC_CLIENT_SECRET 和 PAPERLESS_MCP_OIDC_JWT_SIGNING_KEY 等密钥;未认证的健康检查路由在设为 full 时可能暴露细节。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Paperless MCP,将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Desktop only,通过 STDIO。 STDIO 服务会启动本地进程,因此需要 SourceWeft 桌面宿主。

其他 MCP 客户端

参照 仓库 中的启动说明。

README

Paperless MCP

[CI] [Quality Gate Status] [Coverage] [Reliability Rating] [Security Rating] [PyPI] [Python] [License] [Docker] [Docs] [llms.txt] [Template]

Paperless-NGX over MCP: search, read, upload and tag documents; manage correspondents and types.

Documentation | Config wizard | PyPI | Docker

This server gives an MCP client (Claude Desktop, Claude Code, claude.ai or any other) the API of an existing Paperless-NGX instance: one tool per Paperless operation, with the instance's own permissions. It adds no document store and no workflow of its own; what a task does with the tools is up to the model.

  • Documents: full-text and filtered search, metadata, notes, history, thumbnails, and the OCR text in bounded sections.
  • Organising: create, change, delete and bulk-edit tags, correspondents, document types and custom fields, and bulk operations on documents.
  • Files: upload documents for Paperless to consume and wait on the task; over HTTP, one-time transfer links move whole files outside the model's context.
  • The instance: statistics, saved views, storage paths, share links, background tasks and the installed and newest Paperless versions.

With the server connected, a client can handle requests such as:

  • "Find last quarter's invoices from ACME." The model searches with a correspondent filter, then reads each match's text.
  • "Tag these three documents as 'reviewed' and move them to the Accounting correspondent." One bulk edit.
  • "Upload this PDF and wait until OCR finishes." An upload, then a wait on its consume task, so the answer comes once the document is indexed.
  • "What changed on document 4213 in the last week?" The document's audit log.

Does it fit?

What the server can reach, what it changes and who gets in is set out in the security model; the block below says who it serves and where it stops.

  • For: people who already keep their documents in Paperless-NGX and want an MCP client to search, read, file and organise them.
  • Reaches: one Paperless-NGX instance over its REST API, with one API token; the security model lists what that token lets the tools read and change.
  • Limits: the tools can do only what the token's Paperless user may do. They don't administer Paperless (users, mail rules, workflows), and the text they read is Paperless's own OCR.

Quick start

Pick the client you use. Each line installs the released version; the Get started tutorials carry on from there.

Claude Desktop. Download the .mcpb bundle from the releases page and open it with Claude Desktop (or Settings › Extensions › Advanced settings › Install Extension…). Claude Desktop asks for the required settings itself. Tutorial.

Claude Code. Two commands inside Claude Code; the second asks for a scope. Tutorial.

text
/plugin marketplace add pvliesdonk/claude-plugins/plugin install paperless-mcp@pvliesdonk

A client that runs a command (stdio). To register it in Claude Code, see the Claude Code tutorial.

bash
uv tool install "pvliesdonk-paperless-mcp"paperless-mcp serve

A server for remote clients (streamable HTTP). A remote server connects the clients.

bash
docker run --rm -p 8000:8000 --env-file .env ghcr.io/pvliesdonk/paperless-mcp:latest

A compose.yml ships at the repository root and runs as-is: copy .env.example to .env, then docker compose up -d. Deploy covers authentication, OIDC, a reverse proxy and system packages (.deb/.rpm on the releases page). The server answers /health and /health/ready outside the MCP mount, and its get_server_info tool reports the running version.

  • uv tool install "pvliesdonk-paperless-mcp[debug]" adds debugpy, for attaching a debugger to a running server.

Configuration

Everything is configured through environment variables with the PAPERLESS_MCP_ prefix. The ones most installs set:

VariableDefaultRequiredDescription
PAPERLESS_MCP_PAPERLESS_URL(none)YesBase URL of the Paperless-NGX REST API, without a trailing slash.
PAPERLESS_MCP_API_TOKEN(none)YesPaperless service-account token used for outbound API requests.
PAPERLESS_MCP_PAPERLESS_PUBLIC_URL(none)NoPublic Paperless UI URL for user-visible links; defaults to PAPERLESS_URL.

Every variable the server reads, the shared ones included, is in the configuration reference; .env.example lists the same surface in copy-paste form, and the config wizard writes one for your deployment.

Documentation

  • Security model: what the server can reach, what it changes and who gets in.
  • Get started: a first success with your client.
  • Deploy: Docker, authentication, OIDC, reverse proxy.
  • Use: the features, for real tasks.
  • Reference: configuration, tools, resources, prompts, command line.
  • Upgrade: release channels, and what an upgrade changes for your clients and your data.
  • Contribute: local development, secrets, where a fix belongs; CONTRIBUTING.md and SECURITY.md at the root.

Design decisions

  • Read-only deployments use tool visibility, not a domain switch. Set PAPERLESS_MCP_TOOLS_DENY (or PAPERLESS_MCP_TOOLS_ALLOW) to hide the mutating tools, including create_upload_link when transfers are enabled. The template applies visibility last in make_server, so hidden tools leave tools/list and are rejected on tools/call. Clients cannot invoke a write that will be refused, and the rule lives in one place for every server built on this template.
  • HTTP layer retries idempotent reads only. PAPERLESS_MCP_HTTP_RETRIES applies to GETs on 5xx/network errors; writes never retry automatically, to avoid double-applying bulk edits or uploads.
  • Tool icons come from Lucide. Every tool carries a Lucide icon hint so MCP clients that render icons (Claude Desktop) get a coherent visual surface. See src/paperless_mcp/tools/_icons.py.
  • Paperless API compatibility: requests prefer payload version 10, with automatic version 9 fallback for Paperless 2.x after an explicit version rejection. Tasks include structured results and timing data while retaining the legacy fields. Saved-view visibility flags can now be null; Python consumers must handle that value. See task tools.
  • Models accept unknown upstream fields. Pydantic models use lenient validation for list-endpoint responses so newer Paperless-NGX versions do not break the client (the Document.some_future_paperless_field test pins this behaviour).
  • No prompts ship in v1. prompts.py is intentionally empty; prompts land as concrete user-workflow patterns emerge in practice.

Links

来源:README.md,提交 c3551f3

工具

0
SourceWeft 尚未在沙箱中启动过该软件包,因此其工具未知。

版本历史

3
  1. v3.0.0最新Sep 21, 2026
  2. v2.1.0Sep 19, 2026
  3. v2.0.0Sep 17, 2026

评分

已满足适用检查项的 50%

该评分衡量此收录条目的完整程度,依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价,也不表示服务器安全或当前可用:可连通性是带日期的检查结果,评分也不包含安装量或用户评价。

  • 近 30 天内可连通25 分

    请保持端点能够响应 MCP 握手;SourceWeft 每 30 天探测一次。

  • 已声明认证方式10 分

    请在注册中心条目中声明凭据请求头,或保持端点能够响应探测,以便判定其认证方式。

  • 已列出工具15 分

    请让服务器在无凭据时响应 tools/list,或发布可在沙箱中无凭据启动的软件包。

  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分