Back to Browse

Docspace MCP Server

Developer ToolsLow Risk8.5MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

A room-based collaborative platform

About

A room-based collaborative platform

Remote endpoints: sse: https://mcp.onlyoffice.com/sse streamable-http: https://mcp.onlyoffice.com/mcp

Security Report

8.5
Low Risk8.5Low Risk

Valid MCP server (2 strong, 1 medium validity signals). 2 known CVEs in dependencies (0 critical, 1 high severity) Package registry verified. Imported from the Official MCP Registry.

7 files analyzed · 3 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

What You'll Need

Set these up before or after installing:

The base URL of the DocSpace instance for API requests.Optional

Environment variable: DOCSPACE_BASE_URL

The API key for accessing the API.Required

Environment variable: DOCSPACE_API_KEY

The transport protocol to use for communication with the MCP server.Optional

Environment variable: DOCSPACE_TRANSPORT

The flag that indicates whether the MCP server should use meta tools.Optional

Environment variable: DOCSPACE_DYNAMIC

The list of toolsets to enable for the MCP server.Optional

Environment variable: DOCSPACE_TOOLSETS

The list of tools to enable for the MCP server.Optional

Environment variable: DOCSPACE_ENABLED_TOOLS

The list of tools to disable for the MCP server.Optional

Environment variable: DOCSPACE_DISABLED_TOOLS

The user agent to include in the User-Agent header for API requests.Optional

Environment variable: DOCSPACE_USER_AGENT

The raw value to include in the Authorization header for API requests.Required

Environment variable: DOCSPACE_AUTHORIZATION

The Personal Access Token (PAT) for accessing the API.Required

Environment variable: DOCSPACE_AUTH_TOKEN

The username for accessing the API using basic authentication.Optional

Environment variable: DOCSPACE_USERNAME

The password for accessing the API using basic authentication.Required

Environment variable: DOCSPACE_PASSWORD

The time-to-live (TTL) for HTTP sessions in milliseconds.Optional

Environment variable: DOCSPACE_SESSION_TTL

The interval for checking HTTP sessions for expiration in milliseconds.Optional

Environment variable: DOCSPACE_SESSION_INTERVAL

The base URL of the DocSpace OAuth service for OAuth requests.Optional

Environment variable: DOCSPACE_OAUTH_BASE_URL

The client ID of the OAuth application.Optional

Environment variable: DOCSPACE_OAUTH_CLIENT_ID

The client secret of the OAuth application.Required

Environment variable: DOCSPACE_OAUTH_CLIENT_SECRET

The algorithm to use for signing OAuth access tokens.Optional

Environment variable: DOCSPACE_OAUTH_AUTH_TOKEN_ALGORITHM

The time-to-live (TTL) for OAuth access tokens in milliseconds.Optional

Environment variable: DOCSPACE_OAUTH_AUTH_TOKEN_TTL

The secret key to use for signing OAuth access tokens.Required

Environment variable: DOCSPACE_OAUTH_AUTH_TOKEN_SECRET_KEY

The algorithm to use for signing OAuth state tokens.Optional

Environment variable: DOCSPACE_OAUTH_STATE_TOKEN_ALGORITHM

The time-to-live (TTL) for OAuth state tokens in milliseconds.Optional

Environment variable: DOCSPACE_OAUTH_STATE_TOKEN_TTL

The secret key to use for signing OAuth state tokens.Required

Environment variable: DOCSPACE_OAUTH_STATE_TOKEN_SECRET_KEY

The base URL of the server.Optional

Environment variable: DOCSPACE_SERVER_BASE_URL

The host to bind the server to.Optional

Environment variable: DOCSPACE_HOST

The port to bind the server to.Optional

Environment variable: DOCSPACE_PORT

The number of proxy servers between the server and the client.Optional

Environment variable: DOCSPACE_SERVER_PROXY_HOPS

The list of allowed origins to include in the Access-Control-Allow-Origin header for CORS requests to MCP endpoints.Optional

Environment variable: DOCSPACE_SERVER_CORS_MCP_ORIGIN

The maximum age in milliseconds to include in the Access-Control-Max-Age header for CORS requests to MCP endpoints.Optional

Environment variable: DOCSPACE_SERVER_CORS_MCP_MAX_AGE

The list of allowed origins to include in the Access-Control-Allow-Origin header for CORS requests to OAuth endpoints.Optional

Environment variable: DOCSPACE_SERVER_CORS_OAUTH_ORIGIN

The maximum age in milliseconds to include in the Access-Control-Max-Age header for CORS requests to OAuth endpoints.Optional

Environment variable: DOCSPACE_SERVER_CORS_OAUTH_MAX_AGE

The maximum number of requests allowed per window for the MCP endpoints.Optional

Environment variable: DOCSPACE_SERVER_RATE_LIMITS_MCP_CAPACITY

The time window in milliseconds for the rate limit for the MCP endpoints.Optional

Environment variable: DOCSPACE_SERVER_RATE_LIMITS_MCP_WINDOW

The maximum number of requests allowed per window for the OAuth server metadata endpoint.Optional

Environment variable: DOCSPACE_SERVER_RATE_LIMITS_OAUTH_SERVER_METADATA_CAPACITY

The time window in milliseconds for the rate limit for the OAuth server metadata endpoint.Optional

Environment variable: DOCSPACE_SERVER_RATE_LIMITS_OAUTH_SERVER_METADATA_WINDOW

The maximum number of requests allowed per window for the OAuth resource metadata endpoint.Optional

Environment variable: DOCSPACE_SERVER_RATE_LIMITS_OAUTH_RESOURCE_METADATA_CAPACITY

The time window in milliseconds for the rate limit for the OAuth resource metadata endpoint.Optional

Environment variable: DOCSPACE_SERVER_RATE_LIMITS_OAUTH_RESOURCE_METADATA_WINDOW

The maximum number of requests allowed per window for the OAuth authorization endpoint.Optional

Environment variable: DOCSPACE_SERVER_RATE_LIMITS_OAUTH_AUTHORIZE_CAPACITY

The time window in milliseconds for the rate limit for the OAuth authorization endpoint.Optional

Environment variable: DOCSPACE_SERVER_RATE_LIMITS_OAUTH_AUTHORIZE_WINDOW

The maximum number of requests allowed per window for the OAuth callback endpoint.Optional

Environment variable: DOCSPACE_SERVER_RATE_LIMITS_OAUTH_CALLBACK_CAPACITY

The time window in milliseconds for the rate limit for the OAuth callback endpoint.Optional

Environment variable: DOCSPACE_SERVER_RATE_LIMITS_OAUTH_CALLBACK_WINDOW

The maximum number of requests allowed per window for the OAuth introspection endpoint.Optional

Environment variable: DOCSPACE_SERVER_RATE_LIMITS_OAUTH_INTROSPECT_CAPACITY

The time window in milliseconds for the rate limit for the OAuth introspection endpoint.Optional

Environment variable: DOCSPACE_SERVER_RATE_LIMITS_OAUTH_INTROSPECT_WINDOW

The maximum number of requests allowed per window for the OAuth client registration endpoint.Optional

Environment variable: DOCSPACE_SERVER_RATE_LIMITS_OAUTH_REGISTER_CAPACITY

The time window in milliseconds for the rate limit for the OAuth client registration endpoint.Optional

Environment variable: DOCSPACE_SERVER_RATE_LIMITS_OAUTH_REGISTER_WINDOW

The maximum number of requests allowed per window for the OAuth token revocation endpoint.Optional

Environment variable: DOCSPACE_SERVER_RATE_LIMITS_OAUTH_REVOKE_CAPACITY

The time window in milliseconds for the rate limit for the OAuth token revocation endpoint.Optional

Environment variable: DOCSPACE_SERVER_RATE_LIMITS_OAUTH_REVOKE_WINDOW

The maximum number of requests allowed per window for the OAuth token endpoint.Optional

Environment variable: DOCSPACE_SERVER_RATE_LIMITS_OAUTH_TOKEN_CAPACITY

The time window in milliseconds for the rate limit for the OAuth token endpoint.Optional

Environment variable: DOCSPACE_SERVER_RATE_LIMITS_OAUTH_TOKEN_WINDOW

The flag that indicates whether the server should accept configuration via query parameters in incoming requests.Optional

Environment variable: DOCSPACE_REQUEST_QUERY

The flag that indicates whether the server should check for the Authorization header in incoming requests.Optional

Environment variable: DOCSPACE_REQUEST_AUTHORIZATION_HEADER

The prefix to use with custom configuration headers.Optional

Environment variable: DOCSPACE_REQUEST_HEADER_PREFIX

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

ONLYOFFICE DocSpace MCP Server

Model Context Protocol (MCP) is a standardized protocol for managing context between large language models (LLMs) and external systems. This repository provides an MCP server for ONLYOFFICE DocSpace.

The DocSpace MCP Server connects AI tools directly to ONLYOFFICE DocSpace. This gives AI agents, assistants, and chatbots the ability to manage rooms, collaborate on files, handle permissions, and automate document workflows - all through natural language interactions.

Features

  • Tools with granular control - Access to tools organized into logical toolsets with fine-grained enable/disable capabilities and meta tools.
  • Multiple transport protocols - Support for stdio, SSE, and Streamable HTTP transports.
  • Different authentication methods - Supports API keys, Personal Access Tokens, Basic authentication, and OAuth 2.0 with dynamic client registration. See examples.
  • Request-level configuration - Configure authentication and tool selection during session initialization using custom HTTP headers.
  • Various distribution formats - Available as Docker image, Docker MCP Server, MCP bundle, and Node.js application.

Use Cases

  • Room Management: Create, update, and archive rooms. Configure room types, manage membership, and control access levels.
  • Folder & File Operations: Create folders, upload documents, copy or move items in batches, rename or delete content, and check file or folder details.
  • Collaboration & Permissions: Invite or remove users, adjust security settings, and review current access rights for rooms and shared spaces.
  • Content Access: Retrieve "My documents" or "Rooms" folders, get folder contents, download files as text, and monitor ongoing file operations.
  • People Directory: List all people in the portal to streamline invitations and access management.

Connecting Clients to DocSpace MCP Server

You can connect to the DocSpace MCP server using any MCP clients. We have covered some popular clients, such as Claude Desktop, Cursor, Windsurf, etc., and here you can read about it.

Remote DocSpace MCP Server

The remote DocSpace MCP Server is hosted by ONLYOFFICE and provides the fastest way to start using DocSpace tools inside your AI agent. You can connect to it instantly without deploying or configuring anything on your machine.

The public instance is available at https://mcp.onlyoffice.com/mcp for clients that support modern Streamable HTTP transport and at https://mcp.onlyoffice.com/sse for clients that support only the legacy SSE transport. It is preferable to use the Streamable HTTP transport whenever possible.

See all options for connecting clients to the Remote DocSpace MCP Server here.

Local DocSpace MCP Server

If your MCP host does not support remote MCP servers, you can run the local version of the DocSpace MCP Server instead.

Most clients that implement the MCP protocol have a common configuration file in the JSON format, inside which you can add the ONLYOFFICE DocSpace MCP Local Server.

Note: The common example below is applicable for Docker image, so Docker must be installed on your system.

Step 1. Locate your config file

Find your client .json configuration file.

Step 2. Add the DocSpace MCP Server entry

Insert the following block into the mcpServers section of your .json configuration file:

{
	"mcpServers": {
		"onlyoffice-docspace": {
			"command": "docker",
			"args": [
				"run",
				"--interactive",
				"--rm",
				"--env",
				"DOCSPACE_BASE_URL",
				"--env",
				"DOCSPACE_API_KEY",
				"onlyoffice/docspace-mcp"
			],
			"env": {
				"DOCSPACE_BASE_URL": "https://your-instance.onlyoffice.com",
				"DOCSPACE_API_KEY": "your-api-key"
			}
		}
	}
}
Step 3. Set environment values
  • DOCSPACE_BASE_URL - the URL of your DocSpace instance (e.g. https://portal.onlyoffice.com).
  • DOCSPACE_API_KEY - your personal API key generated in DocSpace settings -> Developer Tools -> API keys.

All available parameters are listed here.

Step 4. Restart the client

Close and reopen your client. In most cases, the DocSpace MCP Server will start automatically, and you'll be able to issue natural language commands like:

  • Create a new project room and invite Anna with editor rights.
  • Upload this file to "My documents".

Tools

The DocSpace MCP server implements the Tools concept described in the MCP specification.

All DocSpace MCP server tools are described here.

Documentation

The documentation is available in the docs directory.

Samples

The following examples show how to use ONLYOFFICE DocSpace MCP server.

Privacy Policy

The policies are available at Legal Terms and Privacy Policy.

License

The DocSpace MCP server is distributed under the MIT license found in the LICENSE file.

Reviews

No reviews yet

Be the first to review this server!