bookstack-mcp-server

Item: bookstack-mcp-server
Rating: 74
Author: M8ven

MCP server providing comprehensive access to BookStack knowledge management system

→ pnocera/bookstack-mcp-server· npm: bookstack-mcp-server· listed on npm

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

npm Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 1 credential: BOOKSTACK_API_TOKEN

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

🔐 secretBOOKSTACK_API_TOKEN— export ="token_id:token_secret" # OUTBOUND: the credential this server spends

configBOOKSTACK_BASE_URL— export ="https://your-bookstack.com/api"

configBOOKSTACK_TIMEOUT— 30000 BookStack request timeout in milliseconds.

configBOOKSTACK_UPLOAD_ROOT

configLOG_FORMAT— pretty One of json, pretty.

configLOG_LEVEL— info One of error, warn, info, debug.

configMCP_TRANSPORT— Stdio Mode: Standard input/output for local integration (e.g., with Claude Desktop). Set =stdio to enable.

configRATE_LIMIT_BURST_LIMIT— 10 Outbound burst allowance toward BookStack.

configRATE_LIMIT_REQUESTS_PER_MINUTE— 60 Outbound rate limit toward BookStack.

configSERVER_NAME— bookstack-mcp-server Server name reported over MCP and by GET /.

configSERVER_PORT— 3000 Port the HTTP transport listens on. Ignored in stdio mode.

configSERVER_VERSION

configVALIDATION_ENABLED— true Input validation. Set to false to disable.

configVALIDATION_STRICT_MODE— true Reject invalid tool params at the boundary. Set to false to log a warning and forward them to BookStack instead.

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 1 concrete improvement we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/bookstack-mcp-server-yko79b)](https://m8ven.ai/mcp/bookstack-mcp-server-yko79b)

commit: 6afe2580f715562ac141e9f67b7cc856fb8db617

code hash: 73bc1e7268a53d95ae436e9094d39a12a6c8c308050517b1511f78b41603280c

verified: 7/29/2026, 9:22:53 AM

view raw JSON →