Document Manager Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Document Manager Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
An MCP (Model Context Protocol) server for managing product documentation as markdown files. Use it from Cursor, Claude Desktop, or any MCP client to create, read, update, delete, and search documentation.
All files are stored as markdown under a configurable project root, in these categories:
| Type | Folder | Use for |
|---|---|---|
feature-specs | docs/feature-specs/ | Feature specifications |
jtbd | docs/jtbd/ | Jobs to be done |
user-stories | docs/user-stories/ | User stories |
api | docs/api/ | API documentation |
A special file `docs/product-vision-and-strategy.md` holds the product vision and strategy. Use the `product_vision_and_strategy` tool to view it and create it (with a default template) if it doesn’t exist.
When you run several Document Manager MCPs (e.g. one per project), set a project name so you can tell them apart in Cursor:
DOCS_PROJECT_NAME — short label for this project (e.g. my-app, backend-api).Example with two projects:
{
"mcpServers": {
"document-manager-my-app": {
"command": "npx",
"args": ["document-manager-mcp"],
"env": {
"DOCS_PROJECT_ROOT": "/path/to/my-app",
"DOCS_PROJECT_NAME": "my-app"
}
},
"document-manager-backend": {
"command": "npx",
"args": ["document-manager-mcp"],
"env": {
"DOCS_PROJECT_ROOT": "/path/to/backend",
"DOCS_PROJECT_NAME": "backend-api"
}
}
}
}You’ll see two MCPs: document-manager (my-app) and document-manager (backend-api).
Set the project root so the MCP knows where to read/write files:
DOCS_PROJECT_ROOT (absolute or relative path).Example: if DOCS_PROJECT_ROOT=/Users/you/my-product, then:
/Users/you/my-product/docs/feature-specs//Users/you/my-product/docs/api/, etc.| Tool | Description |
|---|---|
list_docs | List all docs, optionally filtered by type. |
read_doc | Read a doc by docType and slug (filename). |
write_doc | Create or overwrite a doc (markdown content). |
create_doc | Create a new doc; fails if it already exists. |
delete_doc | Delete a doc by type and slug. |
search_docs | Search by text. With DOCS_EMBEDDING_PROVIDER=local, uses semantic search (by meaning); otherwise keyword search. Optional type filter, mode, limit. |
product_vision_and_strategy | View the product vision and strategy doc; creates docs/product-vision-and-strategy.md with a default template if it doesn’t exist. |
Docs are exposed as resources with URIs:
doc://{docType}/{slug}doc://feature-specs/auth-spec.md, doc://api/users-endpoint.mddoc://product-vision-and-strategy (single resource; create the file with the product_vision_and_strategy tool if needed).Clients can list and read these resources like files (e.g. in Cursor’s MCP resource UI).
No install needed. Use npx so the package is run on demand:
npx document-manager-mcpWith environment variables:
DOCS_PROJECT_ROOT=/path/to/your/project DOCS_PROJECT_NAME=my-project npx document-manager-mcpIn Cursor (or another MCP client), configure the server to run via npx:
{
"mcpServers": {
"document-manager": {
"command": "npx",
"args": ["document-manager-mcp"],
"env": {
"DOCS_PROJECT_ROOT": "/ABSOLUTE/PATH/TO/YOUR/PROJECT",
"DOCS_PROJECT_NAME": "your-project"
}
}
}
}Replace /ABSOLUTE/PATH/TO/YOUR/PROJECT with the folder that should contain the docs/ tree. DOCS_PROJECT_NAME is optional; use it when you run multiple Document Manager MCPs so you can tell them apart.
To search by meaning (e.g. “login” matching “authentication”, “sign-in”) instead of exact text only, use a local embedding model. No API key required.
Set in your MCP server env:
Xenova/all-MiniLM-L6-v2 (downloaded on first use, then cached).Xenova/all-mpnet-base-v2 for higher quality, larger download).Example:
{
"mcpServers": {
"document-manager": {
"command": "npx",
"args": ["document-manager-mcp"],
"env": {
"DOCS_PROJECT_ROOT": "/path/to/your/project",
"DOCS_PROJECT_NAME": "my-project",
"DOCS_EMBEDDING_PROVIDER": "local"
}
}
}
}The first semantic search will build an index under .document-manager/embedding-index.json; later searches reuse it until docs change. You can pass mode: "keyword" to search_docs to force exact-text search, or mode: "semantic" when local embeddings are enabled.
In Cursor: Settings → MCP (or edit your MCP config file). Add a server entry using npx and set the project root via env:
{
"mcpServers": {
"document-manager": {
"command": "npx",
"args": ["document-manager-mcp"],
"env": {
"DOCS_PROJECT_ROOT": "/ABSOLUTE/PATH/TO/YOUR/PROJECT",
"DOCS_PROJECT_NAME": "your-project"
}
}
}
}Replace /ABSOLUTE/PATH/TO/YOUR/PROJECT with the folder that should contain the docs/ tree (feature-specs, jtbd, user-stories, api). Use DOCS_PROJECT_NAME as a short label when you have multiple Document Manager MCPs (optional).
If you develop or fork this repo and want to run the built server without npx:
git clone https://github.com/rfbatista/document-manager-mcp.git
cd document-manager-mcp
npm install
npm run buildThen in your MCP config use "command": "node" and "args": ["/ABSOLUTE/PATH/TO/document-manager-mcp/build/index.js"].
Add the server to claude_desktop_config.json and run it with npx:
{
"mcpServers": {
"document-manager": {
"command": "npx",
"args": ["document-manager-mcp"],
"env": {
"DOCS_PROJECT_ROOT": "/ABSOLUTE/PATH/TO/YOUR/PROJECT",
"DOCS_PROJECT_NAME": "your-project"
}
}
}
}npm install
npm run build # build once
npm run start # run built server (stdio)Use stderr for logs; stdout is used for MCP JSON-RPC.
MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.