{"$schema":"https://verifymcp.io/schemas/trust-report.json","schemaVersion":1,"license":{"name":"CC BY-NC 4.0","url":"https://creativecommons.org/licenses/by-nc/4.0/"},"generatedAt":"2026-11-05T17:29:25.486Z","url":"https://verifymcp.io/servers/germaniu-mineru-mcp/ghcr-io-germaniu-mineru-mcp","markdownUrl":"https://verifymcp.io/servers/germaniu-mineru-mcp/ghcr-io-germaniu-mineru-mcp.md","server":{"slug":"germaniu-mineru-mcp","name":"MinerU MCP","registryName":"io.github.GermaniU/mineru-mcp","description":"Parse PDF, DOCX, PPTX, XLSX and images to Markdown (tables, LaTeX) via a self-hosted MinerU API.","registryStatus":"active","deletedAt":null,"statusMessage":null,"liveness":"live","publisher":{"class":"unknown","claimed":false}},"component":{"slug":"ghcr-io-germaniu-mineru-mcp","type":"oci","identifier":"ghcr.io/germaniu/mineru-mcp","withdrawn":false,"url":"https://verifymcp.io/servers/germaniu-mineru-mcp/ghcr-io-germaniu-mineru-mcp","version":"0.1.0","transport":"stdio","scoredAt":"2026-11-05T07:16:01.805Z"},"score":{"total":45,"tier":"low","status":"scored","weekDelta":3,"history":[{"date":"2026-11-05","total":45},{"date":"2026-11-04","total":44},{"date":"2026-11-03","total":44},{"date":"2026-11-02","total":44},{"date":"2026-11-01","total":43},{"date":"2026-10-31","total":43},{"date":"2026-10-30","total":42},{"date":"2026-10-29","total":42},{"date":"2026-10-28","total":41},{"date":"2026-10-27","total":41},{"date":"2026-10-26","total":40},{"date":"2026-10-25","total":40},{"date":"2026-10-24","total":39},{"date":"2026-10-23","total":39},{"date":"2026-10-22","total":38},{"date":"2026-10-21","total":38},{"date":"2026-10-20","total":37},{"date":"2026-10-19","total":37}]},"categories":[{"name":"Supply Chain Security","score":0,"verdict":"unverified","reasons":["No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.","Known CVEs could not be checked: this artifact ships no SBOM or dependency manifest, so there is no dependency list to read.","Install-script risk not yet assessed.","Dependency health could not be checked: this artifact ships no SBOM or dependency manifest, so there is no dependency list to read."],"codes":[{"code":"supplychain.malware_inconclusive","args":{"reason":"ecosystem_unsupported"}},{"code":"cve.inconclusive","args":{"reason":"no_sbom_attached"}},{"code":"installscript.inconclusive","args":{"reason":"no_install_concept"}},{"code":"dephealth.inconclusive","args":{"reason":"no_sbom_attached"}}]},{"name":"Provenance & Transparency","score":48,"verdict":"fail","reasons":["Source repository is publicly reachable at the declared URL.","Provenance check failed: no build-provenance attestation is published.","Clear OSI-approved license (MIT).","Actively maintained (last published 16 days ago).","Publishes a security disclosure policy (SECURITY.md)."],"codes":[{"code":"provenance.repo_verified","args":{}},{"code":"provenance.none","args":{}},{"code":"license.osi","args":{"spdx":"MIT"}},{"code":"maintenance.recent","args":{"age_days":"16"}},{"code":"disclosure.present","args":{}}]},{"name":"Schema Quality & AI Usability","score":65,"verdict":"fail","reasons":["AI-judged instruction clarity (good).","Tool/resource definitions use about 501 tokens (~100/item across 5 items; 5 tools + 0 resources), lean.","Usage-examples check failed: none of the tools include examples."],"codes":[{"code":"schema.ai_quality","args":{"band":"good"}},{"code":"schema.footprint_lean","args":{"avg":"100","items":"5","tools":"5","tokens":"501","resources":"0"}},{"code":"schema.examples_absent","args":{}}]},{"name":"Stability & Change Management","score":57,"verdict":"partial","reasons":["Stability observed for 17 of 30 days with no destabilising changes; credit accrues until the full window elapses."],"codes":[{"code":"stability.building_history","args":{"days":"17"}}]},{"name":"Tool Coverage","score":71,"verdict":"fail","reasons":["100% of tools have a non-trivial description (not blank, and not just the tool's name).","0% of tool parameters carry a description.","Structured output schemas are declared (100% of tools); any adoption earns full credit."],"codes":[{"code":"toolquality.descriptions","args":{"pct":"100"}},{"code":"toolquality.param_docs","args":{"pct":"0"}},{"code":"toolquality.output_present","args":{"pct":"100"}}]},{"name":"Tool Safety","score":100,"verdict":"pass","reasons":["No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.","We read all 5 captured tool definition(s), and no name or description among them implies an irreversible operation.","An AI judge read all 5 captured unit(s) of tool text and found none that tries to manipulate the model reading it."],"codes":[{"code":"toolsafety.injection_clean","args":{}},{"code":"toolsafety.destructive_none","args":{"tools":"5"}},{"code":"toolsafety.manipulation_clean","args":{"units":"5","judged":"5"}}]},{"name":"Capabilities","score":100,"verdict":"pass","reasons":["Implements a current MCP spec version (2026-07-28)."],"codes":[{"code":"protocol.current","args":{"version":"2026-07-28"}}]}],"inconclusive":["No malware scan is available for this kind of package: the supply-chain vendors we use do not cover it. This is a permanent gap in our coverage, not a finding about the package.","Known CVEs could not be checked: this artifact ships no SBOM or dependency manifest, so there is no dependency list to read.","Install-script risk not yet assessed.","Dependency health could not be checked: this artifact ships no SBOM or dependency manifest, so there is no dependency list to read."],"malware":[],"components":[{"slug":"ghcr-io-germaniu-mineru-mcp","type":"oci","identifier":"ghcr.io/germaniu/mineru-mcp","withdrawn":false,"score":45,"current":true,"url":"https://verifymcp.io/servers/germaniu-mineru-mcp/ghcr-io-germaniu-mineru-mcp","markdownUrl":"https://verifymcp.io/servers/germaniu-mineru-mcp/ghcr-io-germaniu-mineru-mcp.md"}],"facts":[{"label":"Registry","value":"oci"},{"label":"Package","value":"ghcr.io/germaniu/mineru-mcp"},{"label":"Version","value":"0.1.0"},{"label":"Transport","value":"stdio"}],"install":{"available":true,"bundleSha256":null},"tools":[{"name":"parse_document","title":"Parse Document","description":"Parsea un documento (PDF, DOCX, PPTX, XLSX, imagen) con MinerU y devuelve su contenido como Markdown estructurado (texto, tablas, fórmulas, títulos). Enviar el archivo con file_path (si ya vive en Pop!_OS) o file_base64+file_name (contenido, para callers remotos). backend=pipeline es rápido y sin GPU; hybrid-engine/vlm-engine usan ~4GB VRAM (GPU Broker para llama-server automáticamente, lo re-arranca al terminar) y dan mejor calidad — hybrid-engine + effort=high + image_analysis=true convierte figuras a diagramas Mermaid. Tiempo: 30-120s. Docs >50 páginas: preferir submit_parse_task.","inputs":[{"name":"backend","type":"string","required":false,"description":null},{"name":"effort","type":"string","required":false,"description":null},{"name":"end_page","type":null,"required":false,"description":null},{"name":"file_base64","type":null,"required":false,"description":null},{"name":"file_name","type":null,"required":false,"description":null},{"name":"file_path","type":null,"required":false,"description":null},{"name":"formula_enable","type":"boolean","required":false,"description":null},{"name":"image_analysis","type":"boolean","required":false,"description":null},{"name":"lang","type":"string","required":false,"description":null},{"name":"parse_method","type":"string","required":false,"description":null},{"name":"start_page","type":null,"required":false,"description":null},{"name":"table_enable","type":"boolean","required":false,"description":null}],"outputs":[{"name":"result","type":"string","required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":240},{"name":"submit_parse_task","title":"Submit Parse Task","description":"Envía un documento a MinerU para parseo ASÍNCRONO y devuelve un task_id. Usar para documentos grandes (>50 páginas). Mismos params de entrada que parse_document (file_path o file_base64+file_name). Luego get_task_status y get_task_result.","inputs":[{"name":"backend","type":"string","required":false,"description":null},{"name":"effort","type":"string","required":false,"description":null},{"name":"end_page","type":null,"required":false,"description":null},{"name":"file_base64","type":null,"required":false,"description":null},{"name":"file_name","type":null,"required":false,"description":null},{"name":"file_path","type":null,"required":false,"description":null},{"name":"formula_enable","type":"boolean","required":false,"description":null},{"name":"image_analysis","type":"boolean","required":false,"description":null},{"name":"lang","type":"string","required":false,"description":null},{"name":"parse_method","type":"string","required":false,"description":null},{"name":"start_page","type":null,"required":false,"description":null},{"name":"table_enable","type":"boolean","required":false,"description":null}],"outputs":[{"name":"result","type":"string","required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":151},{"name":"get_task_status","title":"Get Task Status","description":"Consulta el estado de una tarea asíncrona de MinerU (pending/processing/completed/failed).","inputs":[{"name":"task_id","type":"string","required":true,"description":null}],"outputs":[{"name":"result","type":"string","required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":39},{"name":"get_task_result","title":"Get Task Result","description":"Obtiene el Markdown de una tarea asíncrona COMPLETADA (llamar después de que get_task_status devuelva 'completed').","inputs":[{"name":"task_id","type":"string","required":true,"description":null}],"outputs":[{"name":"result","type":"string","required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":45},{"name":"mineru_health","title":"Mineru Health","description":"Verifica que MinerU esté disponible: versión, tareas en cola, workers activos.","inputs":[],"outputs":[{"name":"result","type":"string","required":true,"description":null}],"hasOutputSchema":true,"hasExamples":false,"tokenEstimate":26}],"toolsTruncatedAtCapture":false,"diagnostics":{"capturedAt":"2026-11-05T07:16:01.000Z","track":"package","endpoint":null,"declaredUrl":null,"truncated":false,"tls":null,"dnssec":null,"auth":null,"httpsRedirect":null,"transports":[],"provenance":{"outcome":"none","label":"No attestation","reason":"no_attestation","reasonLabel":"No attestation published","discovery":null,"discoveryLabel":null,"sourceRepo":null,"attestationSkipped":null,"attestationSkippedLabel":null},"installScripts":[],"installScriptsTotal":null,"vulnerabilities":[],"vulnerabilitiesTotal":null,"dependencies":null},"mismatches":[],"changelog":{"trackingSince":"2026-10-19","recent":[{"id":"chg_01a1aa90-8b11-7689-9b23-532c2ed929e7","kind":"score.total_changed","summary":"Trust score (44 → 45)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-05","url":"https://verifymcp.io/servers/germaniu-mineru-mcp/ghcr-io-germaniu-mineru-mcp#chg-chg_01a1aa90-8b11-7689-9b23-532c2ed929e7"},{"id":"chg_01a19b1d-8efa-7a95-8418-24904dc64625","kind":"score.total_changed","summary":"Trust score (43 → 44)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-11-02","url":"https://verifymcp.io/servers/germaniu-mineru-mcp/ghcr-io-germaniu-mineru-mcp#chg-chg_01a19b1d-8efa-7a95-8418-24904dc64625"},{"id":"chg_01a190d0-33e5-70ff-830b-743464a4ae12","kind":"score.total_changed","summary":"Trust score (42 → 43)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-31","url":"https://verifymcp.io/servers/germaniu-mineru-mcp/ghcr-io-germaniu-mineru-mcp#chg-chg_01a190d0-33e5-70ff-830b-743464a4ae12"},{"id":"chg_01a18686-6470-757a-aa3d-5a3e68a3d49b","kind":"score.total_changed","summary":"Trust score (41 → 42)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-29","url":"https://verifymcp.io/servers/germaniu-mineru-mcp/ghcr-io-germaniu-mineru-mcp#chg-chg_01a18686-6470-757a-aa3d-5a3e68a3d49b"},{"id":"chg_01a17c37-d15b-7d29-8e04-c0eb3cb594c1","kind":"score.total_changed","summary":"Trust score (40 → 41)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-27","url":"https://verifymcp.io/servers/germaniu-mineru-mcp/ghcr-io-germaniu-mineru-mcp#chg-chg_01a17c37-d15b-7d29-8e04-c0eb3cb594c1"},{"id":"chg_01a171eb-1606-7432-a28f-57367b769f48","kind":"score.total_changed","summary":"Trust score (39 → 40)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-25","url":"https://verifymcp.io/servers/germaniu-mineru-mcp/ghcr-io-germaniu-mineru-mcp#chg-chg_01a171eb-1606-7432-a28f-57367b769f48"},{"id":"chg_01a1679e-6c87-73d4-a61b-a9b6b4be8fcc","kind":"score.total_changed","summary":"Trust score (38 → 39)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-23","url":"https://verifymcp.io/servers/germaniu-mineru-mcp/ghcr-io-germaniu-mineru-mcp#chg-chg_01a1679e-6c87-73d4-a61b-a9b6b4be8fcc"},{"id":"chg_01a15d4f-f3b8-73ea-bd3c-fd1459b121cc","kind":"score.total_changed","summary":"Trust score (37 → 38)","materiality":"functional","direction":"improvement","scoreDelta":1,"occurredOn":"2026-10-21","url":"https://verifymcp.io/servers/germaniu-mineru-mcp/ghcr-io-germaniu-mineru-mcp#chg-chg_01a15d4f-f3b8-73ea-bd3c-fd1459b121cc"},{"id":"chg_01a15350-5763-75b7-9d92-af664d632458","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-19","url":"https://verifymcp.io/servers/germaniu-mineru-mcp/ghcr-io-germaniu-mineru-mcp#chg-chg_01a15350-5763-75b7-9d92-af664d632458"},{"id":"chg_01a1533b-b632-75ab-b1f8-a2d99ff289f3","kind":"score.first_scored","summary":"First indexed and scored","materiality":"functional","direction":"neutral","scoreDelta":null,"occurredOn":"2026-10-19","url":"https://verifymcp.io/servers/germaniu-mineru-mcp/ghcr-io-germaniu-mineru-mcp#chg-chg_01a1533b-b632-75ab-b1f8-a2d99ff289f3"}],"truncated":false,"feedUrl":"https://verifymcp.io/servers/germaniu-mineru-mcp/ghcr-io-germaniu-mineru-mcp/changelog.json"},"links":{"html":"https://verifymcp.io/servers/germaniu-mineru-mcp/ghcr-io-germaniu-mineru-mcp","markdown":"https://verifymcp.io/servers/germaniu-mineru-mcp/ghcr-io-germaniu-mineru-mcp.md","changelogJson":"https://verifymcp.io/servers/germaniu-mineru-mcp/ghcr-io-germaniu-mineru-mcp/changelog.json","changelogRss":"https://verifymcp.io/servers/germaniu-mineru-mcp/ghcr-io-germaniu-mineru-mcp.xml","external":[{"label":"GitHub Container Registry","href":"https://ghcr.io/germaniu/mineru-mcp"},{"label":"Repository","href":"https://github.com/GermaniU/mineru-mcp"}]}}