Is Overleaf Web free?

Yes, Overleaf Web is free to use.

How do I install Overleaf Web?

Overleaf Web is a local plugin. Install it using npm package: overleaf-web-mcp and add the generated configuration snippet to your AI app's MCP config file. Then restart your AI app.

Is Overleaf Web safe to use?

Overleaf Web was flagged by MCP Marketplace's security scan, scoring 4.6/10 (high risk). It has 4 high or critical findings to review. Review the security report on this page carefully before installing it.

What credentials does Overleaf Web need?

Overleaf Web requires the following credentials or environment variables: OVERLEAF_BASE_URL, OVERLEAF_COOKIE_JAR_FILE, OVERLEAF_ALLOWED_PROJECTS, OVERLEAF_LOCAL_READ_ROOTS, OVERLEAF_LOCAL_WRITE_ROOTS, OVERLEAF_ALLOWED_EFFECTS. You can find setup instructions on the server detail page.

What AI apps work with Overleaf Web?

Overleaf Web uses the Model Context Protocol (MCP) and works with any MCP-compatible AI app, including Claude, ChatGPT / Codex, Gemini, Copilot, Cursor, and more.

Back to Browse

Overleaf Web MCP Server

by mhmdaskari

Developer ToolsUse Caution4.6Local

Free

Read, edit, compile, and review Overleaf projects through your own signed-in web session.

About

Read, edit, compile, and review Overleaf projects through your own signed-in web session.

Security Report

4.6

Use Caution4.6High Risk

Overleaf Web MCP authenticates with the user's own saved browser session and performs the Overleaf operations its purpose requires, including network calls to Overleaf, local file reads and writes for uploads and downloads, and an optional proxy. The main concern is that local read and write access is unrestricted by default unless the operator sets OVERLEAF_LOCAL_READ_ROOTS and OVERLEAF_LOCAL_WRITE_ROOTS, and the session cookie jar is a high-value credential file on disk. Only part of the codebase (the tool registration and the Overleaf API modules) was provided, so the review is partial. Supply chain analysis found 7 known vulnerabilities in dependencies (0 critical, 4 high severity). Package verification found 1 issue.

11 files analyzed · 13 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

network_websocket

Check that this permission is expected for this type of plugin.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

env_vars

Check that this permission is expected for this type of plugin.

process_spawn

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

Overleaf origin to use, for a self-hosted instance. Use the same value for login and serve.Optional

Environment variable: OVERLEAF_BASE_URL

Where the saved session is read from, if not the platform configuration directory.Optional

Environment variable: OVERLEAF_COOKIE_JAR_FILE

Comma-separated project ids the server may touch. Unset allows every project.Optional

Environment variable: OVERLEAF_ALLOWED_PROJECTS

Absolute folders local reads must stay inside, separated by : (; on Windows). Unset allows any.Optional

Environment variable: OVERLEAF_LOCAL_READ_ROOTS

Absolute folders local writes must stay inside, separated by : (; on Windows). Unset allows any.Optional

Environment variable: OVERLEAF_LOCAL_WRITE_ROOTS

Comma-separated kinds of change operations may make, such as overleaf-read. Unset allows all.Optional

Environment variable: OVERLEAF_ALLOWED_EFFECTS

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-mhmdaskari-overleaf-web-mcp": {
      "env": {
        "OVERLEAF_BASE_URL": "your-overleaf-base-url-here",
        "OVERLEAF_ALLOWED_EFFECTS": "your-overleaf-allowed-effects-here",
        "OVERLEAF_COOKIE_JAR_FILE": "your-overleaf-cookie-jar-file-here",
        "OVERLEAF_ALLOWED_PROJECTS": "your-overleaf-allowed-projects-here",
        "OVERLEAF_LOCAL_READ_ROOTS": "your-overleaf-local-read-roots-here",
        "OVERLEAF_LOCAL_WRITE_ROOTS": "your-overleaf-local-write-roots-here"
      },
      "args": [
        "-y",
        "overleaf-web-mcp"
      ],
      "command": "npx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!

4.8

Local

MCP Marketplace

Free

by mcp-marketplace · Developer Tools

Search and install MCP servers from inside your AI client.

Overleaf Web MCP Server

About

Security Report

Findings (13)Action required

Permissions Required

What You'll Need

How to Install

Reviews

No reviews yet

More Developer Tools MCP Servers

Rea

Paperclip

Fetch

Git

Toleno

MCP Marketplace