Skip to content
anlyon.devby Anlyon

Documarium

com.documarium/documariumdocumarium.comstreamable-httpv1.0.0Scanned

Run your docs site from Claude. Write for free. Pay when you publish.

12 tools: 6 can delete or cancel things, 2 change things and 4 only read.

Tools: 6 delete, 0 irreversible, 2 write, 4 read.
  • Reads private data · 0
  • Reads text others write · 0
  • Can send data out · 1
  • No findings

Anlyon alternative

8 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →
Compare with similar serversMarkdownJSONReport this listing

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

12 tools

Deletes or cancels 6Claude Code: deny
  • apply_editKeep a staged set of changes, saved as a numbered version of the site.No findings

    Why it is in this group

    • The name "apply_edit" says "apply": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Keep a staged set of changes, saved as a numbered version of the site.

    Annotations the server declares

    • title: Keep a change
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: false
  • claim_draftKeep a preview as a site of your own and choose the name for its web address.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Keep a preview as a site of your own and choose the name for its web address. Leave the name out and you will be offered some that are free. Keeping a preview confirms the content is yours, or that you have permission to publish it; this is recorded.

    Annotations the server declares

    • title: Keep this site
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: false
  • propose_editStage a set of changes — new pages, edits, deletions and moves together — and get a link to preview them before anything is kept.No findings

    Why it is in this group

    • The name "propose_edit" says "edit": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Stage a set of changes — new pages, edits, deletions and moves together — and get a link to preview them before anything is kept.

    Annotations the server declares

    • title: Propose a change
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: false
  • publishPut the current version of a site out for people to read.Can send data outNo findings

    Why it is in this group

    • The name "publish" says "publish": a word for a change that another call does not undo.
    • The server marks it destructive (destructiveHint: true).

    What it can reach

    • outboundThe name "publish" says "publish": it sends or publishes something to other people.
    Description, as the server wrote it
    Put the current version of a site out for people to read.

    Annotations the server declares

    • title: Publish
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: false
  • rollbackPut a site, or one page of it, back to how it was at an earlier point.No findings

    Why it is in this group

    • The description's first verb is "put": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Put a site, or one page of it, back to how it was at an earlier point.

    Annotations the server declares

    • title: Go back
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: false
  • set_brandingChange how a site looks: its theme, main colour, typeface, header links, logo and icon.No findings

    Why it is in this group

    • The name "set_branding" says "set": a word for a change.
    • The server marks it destructive (destructiveHint: true).
    Description, as the server wrote it
    Change how a site looks: its theme, main colour, typeface, header links, logo and icon. Only the site's owner can do this. Give only the things to change. A logo or icon is taken from an address you give; say images_are_ours: true only when the owner has told you the pictures are theirs to use — otherwise they are kept but not shown until the owner confirms them on the site's preview. On a preview nobody has kept yet, give its draft_id to set its name or its logo. Give languages to change the language the site's own words — Previous, Next, Search — are in.

    Annotations the server declares

    • title: Change how a site looks
    • readOnlyHint: false
    • destructiveHint: true
    • idempotentHint: false
    • openWorldHint: false
Changes things 2Claude Code: ask
  • create_previewTurns markdown pages into a live preview site and returns a link to it.No findings

    Why it is in this group

    • The name "create_preview" says "create": a word for a change.
    Description, as the server wrote it
    Turns markdown pages into a live preview site and returns a link to it. It takes the content already converted to markdown, one entry per page, and a record of where the content came from, exactly as it happened: a code repository, a documentation site's address, a product landing page's address, writing supplied directly in this conversation, or a file attached to this conversation, with the address when there is one. It also takes the product's name and, when the source shows one, the address of its logo. Which pages come over from a source with many pages is the person's choice, made after they see what was found and before it is converted: everything, one part, or a new structure. When they have already named the pages, that choice is made. The preview is temporary and belongs to no one until somebody keeps it. Pages arrive finished and carry no notes, placeholders, open questions or marks; a page with a note to its author, such as [GAP], [?] or TODO, is refused. Where the source is silent, a page carries the best answer and what was assumed is said in the conversation. On a legal page, the business's legal name, its address, the country whose law applies and who else handles its customers' data come only from the person or their source; a page missing one of them still reads complete without it, and what was assumed is said in the conversation. The page list is short: every page should be one a reader would open on its own; contact details and short notes belong inside another page. Every page, title and heading is in the site's language, passed as languages, like ["de"]. A translated copy is every page again, translated, at the same address under /<code>/ (/es/guides/setup), with its code listed after the site's own. The result says what to check, page by page, before the link is shared.

    Annotations the server declares

    • title: Create a preview site
    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • historySee the history of a site, and compare any two points in it.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    See the history of a site, and compare any two points in it.

    Annotations the server declares

    • title: See what changed
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Only reads 4Show 4 read-only tools
  • find_referencesFind every passage that states a fact, including passages that say it a different way.No findings

    Why it is in this group

    • The name "find_references" says "find": a word for reading.
    Description, as the server wrote it
    Find every passage that states a fact, including passages that say it a different way.

    Annotations the server declares

    • title: Find every mention
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • list_pagesList every page in a site, with its title, its address and when it last changed.No findings

    Why it is in this group

    • The name "list_pages" says "list": a word for reading.
    Description, as the server wrote it
    List every page in a site, with its title, its address and when it last changed.

    Annotations the server declares

    • title: List pages
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • read_pageRead one page of a site, including anything set at the top of it.No findings

    Why it is in this group

    • The name "read_page" says "read": a word for reading.
    Description, as the server wrote it
    Read one page of a site, including anything set at the top of it.

    Annotations the server declares

    • title: Read a page
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • site_statusCheck whether a site is published, when it last went out, what it is on, and which changes are waiting to be kept.No findings

    Why it is in this group

    • The name "site_status" says "status": a word for reading.
    Description, as the server wrote it
    Check whether a site is published, when it last went out, what it is on, and which changes are waiting to be kept.

    Annotations the server declares

    • title: Check a site
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

No private-data, untrusted-input, outbound path in this server alone: no tool is tagged private-data or untrusted-input.

Reads private data0
Reads files, mail, messages, databases, secrets, calendars or repositories.
Reads text others write0
Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
Can send data out1
Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

No check matched anything in these tool definitions. That is not a safety guarantee.

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http documarium https://mcp.documarium.com
claude mcp add --transport http documarium https://mcp.documarium.com

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__documarium__list_pages",
      "mcp__documarium__read_page",
      "mcp__documarium__find_references",
      "mcp__documarium__site_status"
    ],
    "ask": [
      "mcp__documarium__history",
      "mcp__documarium__create_preview"
    ],
    "deny": [
      "mcp__documarium__propose_edit",
      "mcp__documarium__apply_edit",
      "mcp__documarium__publish",
      "mcp__documarium__rollback",
      "mcp__documarium__claim_draft",
      "mcp__documarium__set_branding"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as documarium. Review it before you use it.

Capability tags behind 1 rule
  • mcp__documarium__publish outbound

Pin

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/com.documarium/documarium/verify?hash=43d083faf89a952a1f0e954e6d3ed8b5d62b385a8fc05058f1bf7590460eb31f" | jq -e '.changed == false'

Pinned hash 43d083faf89a, from Nov 3, 2026, 18:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/com.documarium/documarium/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

anlyon.dev badge for com.documarium/documarium
[![anlyon.dev](https://anlyon.dev/badge/com.documarium/documarium.svg)](https://anlyon.dev/servers/com.documarium/documarium)

Source: MCP Registry. Synced Nov 3, 2026, 18:17 UTC.