# `io.usefulapi/docparser` on anlyon.dev

> Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX].
> No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour.

- Page: https://anlyon.dev/servers/io.usefulapi/docparser
- JSON: https://anlyon.dev/api/v1/servers/io.usefulapi/docparser
- Version: 1.3.3 (active)
- Publisher: io.usefulapi (domain proven to the MCP Registry)
- Runs: remote (streamable-http)
- Sign-in to list tools: none
- Repository: https://github.com/m190/usefulapi-mcp
- Metadata from the official MCP Registry, synced 2026-10-21T19:23:16.065Z

Title and description, as the publisher wrote them:

```untrusted-server-text
Docparser MCP by usefulapi
Run Docparser parsers: import documents by URL or upload, check status, read parsed results.
```

Scanned 2026-10-21T19:39:03.654Z over streamable-http.

**9 tools: 1 can delete or cancel things, 2 change things and 6 only read.**

| Group | Class | Tools | Claude Code |
| --- | --- | --- | --- |
| Deletes or cancels | destructive | 1 | deny |
| Can't be undone | irreversible | 0 | ask |
| Changes things | write | 2 | ask |
| Only reads | read | 6 | allow |

## Findings

- **warn** Mentions of other tools or servers in `docparser_list_parsers` ([tool-shadowing](https://anlyon.dev/methodology#tool-shadowing))

```untrusted-server-text
The description contains "every other tool", wording about other tools or servers.

description: "...Start here: the parser id is needed by every other tool. GET /v1/parsers."
```


## Deletes or cancels (1)

Removes, cancels or revokes something. Claude Code: deny.

### `docparser_reparse_documents`

- The description's first verb is "write": a word for a change.
- The server marks it destructive (destructiveHint: true).

Description, as the server wrote it:

```untrusted-server-text
WRITE: run the parser again over already imported documents (for example after changing parsing rules). Replaces their parsed data. Re-parsing documents already in the account does not use additional credits. 1-50 document ids per call. POST /v1/document/reparse/{parser_id}.
```

## Changes things (2)

Creates or changes something that can be changed back. Claude Code: ask.

### `docparser_fetch_document_from_url`

- The name "docparser_fetch_document_from_url" says "fetch": a word for reading.
- The description's first verb is "write": a word for a change.

Description, as the server wrote it:

```untrusted-server-text
WRITE: ask Docparser to download a document from a publicly reachable URL and parse it with the given parser. Uses page credits of the account's plan (documents queue when credits run out). Docparser may buy extra credits by itself only if the account owner turned on automatic credit replenishment, or the account is on an annual plan that renews early when credits run out - check the Docparser billing settings first. This server never buys credits or changes the plan. Returns the new document_id: poll docparser_get_document_status, then read docparser_get_document_results. POST /v2/document/fetch/{parser_id}.
```

### `docparser_upload_document`

- The name "docparser_upload_document" says "upload": a word for a change.

Description, as the server wrote it:

```untrusted-server-text
WRITE: upload one small file as base64 content to a parser and parse it. Uses page credits of the account's plan. Docparser may buy extra credits by itself only if the account owner turned on automatic credit replenishment, or the account is on an annual plan that renews early when credits run out - check the Docparser billing settings first. This server never buys credits or changes the plan. Prefer docparser_fetch_document_from_url for large files. Returns the new document id and the remaining quota. POST /v1/document/upload/{parser_id}.
```

## Only reads (6)

Looks things up and changes nothing. Claude Code: allow.

### `docparser_get_document_results`

- The name "docparser_get_document_results" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
The parsed data of one document (the fields and tables the parser extracted, plus file name, page count and upload/processing times). Docparser allows 60 of these calls per minute. GET /v1/results/{parser_id}/{document_id}.
```

### `docparser_get_document_status`

- The name "docparser_get_document_status" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Processing status of one document: importing/processing flags, page count, timestamps (uploaded, imported, processed), webhook dispatch and failed jobs. Poll this after a fetch/upload: the document is done when importing_in_progress and processing_in_progress are false, processed_at is set and failed_jobs is empty (a non-empty failed_jobs means it failed); then read the results. GET /v2/document/status/{parser_id}/{document_id}.
```

### `docparser_list_document_results`

- The name "docparser_list_document_results" says "list": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Parsed data of several documents of one parser: the last uploaded ones (default), or those uploaded/processed after a date. Returns up to 100 documents per call; page with offset (next_offset is null on the last page). Docparser allows 30 of these calls per minute. GET /v1/results/{parser_id}.
```

### `docparser_list_parser_models`

- The name "docparser_list_parser_models" says "list": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
List the model layouts of one parser (id and label). GET /v1/parser/models/{parser_id}.
```

### `docparser_list_parsers`

- The name "docparser_list_parsers" says "list": a word for reading.
- Findings: warn tool-shadowing

Description, as the server wrote it:

```untrusted-server-text
List all Document Parsers on the account (id and label). Start here: the parser id is needed by every other tool. GET /v1/parsers.
```

### `docparser_ping`

- The name "docparser_ping" says "ping": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Check that the connected Docparser API key works. Returns {msg: "pong"} when it does. GET /v1/ping.
```

## Claude Code permissions

For `.claude/settings.json`, assuming the server is installed as `docparser`:

```json
{
  "permissions": {
    "allow": [
      "mcp__docparser__docparser_ping",
      "mcp__docparser__docparser_list_parsers",
      "mcp__docparser__docparser_list_parser_models",
      "mcp__docparser__docparser_get_document_status",
      "mcp__docparser__docparser_get_document_results",
      "mcp__docparser__docparser_list_document_results"
    ],
    "ask": [
      "mcp__docparser__docparser_fetch_document_from_url",
      "mcp__docparser__docparser_upload_document"
    ],
    "deny": [
      "mcp__docparser__docparser_reparse_documents"
    ]
  }
}
```