MCP Scanner

Docsy

https://docsy.remcp.site/mcp · scanned 2026-10-17

None of its 5 tools were flagged. They read like lookups and searches.

• resolve-library-id15 · Low

  Sends data out

  Resolve a package or product name to a Docsy library ID. Call before query-docs unless an exact /org/project or /org/project/version ID is already known. The query is used only to rank likely libraries; do not include credentials, PII, proprietary code, or other confidential data.

  • Server annotation openWorldHint → sends data out
• fetch0 · Low

  Fetch one search result by stable ID.

• list-library-versions0 · Low

  List indexed versions plus a bounded catalog of available stable GitHub releases for trusted Docsy libraries.

• query-docs0 · Low

  Retrieve current, version-aware documentation and code examples from one Docsy library. Resolve the library ID first unless an exact ID is already known. Keep each query to one concept and do not call this tool more than 3 times for one user question.

• search0 · Low

  Search all public indexed documentation and return stable IDs and absolute URLs.

Badge for your README

MarkdownCopy

[![Scanned by Vulnify](https://api.vulnify.io/public/mcp-scanner/servers/docsy-remcp-site-mcp.svg)](https://www.vulnify.io/scanner/docsy-remcp-site-mcp?utm_source=badge&utm_medium=readme&utm_campaign=scanner-badge)

Automated heuristic result, scanned on 2026-10-17. It is based only on the tool names, descriptions, schemas and annotations this server publishes; no tool was called. It is not a security audit or certification, and not an endorsement of or accusation against the server or its operator. A high score is not a vulnerability finding, and a low score does not mean the server is safe. Vulnify is not affiliated with this server or its operator; names and marks belong to their owners. Server owner? Write to security@vulnify.io from an address at the server's domain to remove or correct this page, or scan it again to update it. We reply within 5 business days.

To exclude your server (and its subdomains) from the scanner and remove its public page, write to security@vulnify.io from an address at its domain. We process requests within 5 business days: the page stops being shown and its stored result is deleted. To fix an error instead, tell us what's wrong or scan the server again.