Is Rapidocr Mcp safe to install?

SaferSkills independently audited Rapidocr Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

README.md · 1 file

README.md2.5 KB · Markdown

RapidOCR MCP Server

High-performance OCR MCP Server.

Features

Multi-mode: MCP stdio, FastAPI HTTP, streamable-http
Multi-input: Path, Base64, URL, File upload
Batch OCR: Process multiple images in one request
Output formats: Plain, JSON, Markdown, Structured
Image preprocessing: Auto-enhance, rotate, binarize
Security: Path whitelist, API key, CORS, audit logging
Monitoring: Prometheus metrics, OpenTelemetry tracing
Production-ready: Docker, CI/CD, tests

Quick Start

Global Installation

# Install globally with uvx (recommended)
uvx rapidocr-mcp

# Or install globally with pip
pip install rapidocr-mcp

Local Development

# Install dependencies
uv sync

# Run MCP server (stdio mode)
uv run rapidocr-mcp

# Run FastAPI server
uv run rapidocr-mcp --mode fastapi --port 8080

Configuration

Set environment variables with RAPIDOCR_ prefix:

export RAPIDOCR_LANG=ch
export RAPIDOCR_LOG_LEVEL=INFO
export RAPIDOCR_API_KEY=your-key

MCP Configuration

Available Tools

Tool	Description
`ocr_by_path`	OCR for local image file by path
`ocr_by_content`	OCR for Base64 encoded image
`ocr_by_url`	OCR for image from HTTP/HTTPS URL
`ocr_batch`	Batch OCR for multiple images

Claude Desktop

Add to your Claude Desktop config file:

macOS: ~/Library/Application Support/Claude/claude_desktop_config.json Windows: %APPDATA%\Claude\claude_desktop_config.json

{
  "mcpServers": {
    "rapidocr": {
      "command": "uvx",
      "args": ["rapidocr-mcp"]
    }
  }
}

Or with local installation:

{
  "mcpServers": {
    "rapidocr": {
      "command": "uv",
      "args": ["--directory", "/path/to/rapidocr-mcp", "run", "rapidocr-mcp"]
    }
  }
}

Other MCP Clients

For other MCP clients that support stdio mode, configure the command as:

uvx rapidocr-mcp
# or
rapidocr-mcp

Docker

docker-compose -f docker/docker-compose.yml up

API Endpoints

GET /health - Health check
POST /ocr/path - OCR by file path
POST /ocr/base64 - OCR by base64
POST /ocr/url - OCR by URL
POST /ocr/upload - OCR by file upload
GET /metrics - Prometheus metrics

Sponsoring

If you find this project helpful, consider buying me a coffee!

License

MIT

Rapidocr Mcp— agent skill

Is Rapidocr Mcp safe to install?

RapidOCR MCP Server

Features

Quick Start

Global Installation

Local Development

Configuration

MCP Configuration

Available Tools

Claude Desktop

Other MCP Clients

Docker

API Endpoints

Sponsoring

License

Audit the pieces. Scan the whole. Decide.