/ 100

1 month ago

smithery

Docfork

Item: Docfork
Rating: 77
Author: M8ven

Search and retrieve documentation from GitHub repositories and the web to find technical answers quickly. Transform complex web pages into clean markdown for efficient reading and analysis. Simplify library research by using specific repository identifiers for targeted documentation access.

→ docfork/docfork· 6.4K installs· listed on smithery

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Smithery Official GitHub

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 2 credentials: CLIENT_IP_ENCRYPTION_KEY, DOCFORK_API_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// known CVEs in dependencies1 medium1 low

Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.

mediumturbo@2.8.7GHSA-hcf7-66rw-9f5r

Trubo: Login callback CSRF/session fixation

lowturbo@2.8.7GHSA-3qcw-2rhx-2726

Turbo: Unexpected local code execution during Yarn Berry detection

Depend on this server? Get alerted when its CVEs change.Watch this server free →

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configBUILDKITE

🔐 secretCLIENT_IP_ENCRYPTION_KEY

configDGREP_TELEMETRY

configDOCFORK_ALLOWED_ORIGINS

configDOCFORK_ANALYTICS_DEBUG

🔐 secretDOCFORK_API_KEY— "": "YOUR_TEAM_API_KEY"

configDOCFORK_CABINET

configDOCFORK_TELEMETRY

configDOCFORK_TRUST_PROXY

configDO_NOT_TRACK

configGITHUB_ACTIONS

configGITLAB_CI

configJENKINS_URL

configMCP_TRANSPORT

configTEAMCITY_VERSION

configTRAVIS

configTRUST_PROXY

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/docfork-docfork-d2dwy6)](https://m8ven.ai/mcp/docfork-docfork-d2dwy6)

commit: 5349f5c69ad1d8b2df1b2a34f74cf291af2c7197

code hash: 387efaf968b5f8057acda36307bb0843eb995dc98b952479d2be863d9cf38590

verified: 6/9/2026, 10:25:09 AM

view raw JSON →