# io.usefulapi/docraptor (remote · docraptor.usefulapi.io)

Turn HTML or a live URL into polished PDF and Excel files — hosted downloads, async jobs, history.

- Trust score: 18/100 (low)
- Change this week: −50
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- remote · `docraptor.usefulapi.io`: 18/100 (this document), [markdown](https://verifymcp.io/servers/io-usefulapi-docraptor/docraptor.md), [page](https://verifymcp.io/servers/io-usefulapi-docraptor/docraptor)

## Channel facts

- Endpoint: `https://docraptor.usefulapi.io/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `1.0.1`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Endpoint Security**: 46/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - Authorisation not fully verified: no authorisation is required to connect, but we couldn't read the tool list to see what that exposes.
  - HTTPS not yet verified: we couldn't determine whether a plaintext access path exists.
  - HSTS check failed: the Strict-Transport-Security header is absent.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 0/100
  - Transport check failed: declared streamable-http, but the endpoint returned HTTP 429.
- **Schema Quality & AI Usability**: 0/100
  - Schema not yet verified: we couldn't read the endpoint's schema.
- **Stability & Change Management**: 0/100
  - Stability not yet verified: not enough scan history yet (needs a 30-day window).
- **Tool Coverage**: 0/100
  - Tool coverage not yet verified: we couldn't read the endpoint's tools.
- **Capabilities**: 0/100
  - Capabilities not yet verified: we couldn't read the endpoint's capabilities.

**Unverified: 4 categories.** Categories scored 0 because we could not verify them: authentication we do not have, an unreachable endpoint, or not enough scan history. We only credit what we can confirm.

## Install

### Claude

```bash
claude mcp add --transport http io-usefulapi-docraptor https://docraptor.usefulapi.io/mcp
```

### Codex

```toml
[mcp_servers.io-usefulapi-docraptor]
url = "https://docraptor.usefulapi.io/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "io-usefulapi-docraptor": {
      "type": "remote",
      "url": "https://docraptor.usefulapi.io/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add io-usefulapi-docraptor --url https://docraptor.usefulapi.io/mcp --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  io-usefulapi-docraptor:
    url: "https://docraptor.usefulapi.io/mcp"
```

### Other

```json
{
  "mcpServers": {
    "io-usefulapi-docraptor": {
      "type": "http",
      "url": "https://docraptor.usefulapi.io/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-03 (score 18, −41)

- [security regression] Endpoint reachability: reachable → not serving MCP
- [security regression] Stability: 0.23 → unverified
- [security regression] Transport: pass → fail
- [security] Authorization: Authorisation not fully verified: no authorisation is required to connect, but we couldn't read the tool list to see what that exposes.
- [functional regression] Tool coverage: 100 → unverified
- [functional regression] Capabilities: fail → unverified

### 2026-08-02 (score 59, +41)

- [security improvement] Transport: fail → pass
- [security] Authorization: Authorisation not fully verified: this server exposes a tool marked destructive (docraptor_create_document) and its handshake is open, but we could not confirm whether a tool call is gated, so we do not assert it is callable unauthenticated.
- [functional regression] MCP protocol: unverified → fail
- [functional improvement] Endpoint reachability: not serving MCP → reachable
- [functional improvement] Tool coverage: unverified → 100
- [functional improvement] Stability: unverified → 0.23

### 2026-08-01 (score 18, −53)

- [security regression] Endpoint reachability: reachable → not serving MCP
- [security regression] Authorization: pass → unverified
- [security regression] Stability: 0.17 → unverified
- [security regression] Transport: pass → fail
- [functional regression] Capabilities: fail → unverified
- [functional regression] Tool coverage: 100 → unverified
- [functional] First check of Schema quality: unverified

### 2026-07-31 (score 71, +4)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-30 (score 67, −2)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-28 (score 69, +1)

No change was recorded against any check on this day. Stability & Change Management went from 3 to 7. That category is still filling its 30-day observation window: 1 days of observed history at the previous scan, 2 at this one. The score rises as the window fills, whether or not the server changes.

### 2026-07-27 (score 68, +41)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-26 (score 27)

First indexed and scored.

## MCP tools (4)

### `docraptor_create_document` (~436 tokens)

Create a document (PDF/XLS/XLSX)

Generate a PDF or Excel document from HTML (document_content) or a URL (document_url). Exactly one of document_content / document_url is required. By default the document is HOSTED and the tool returns a { download_url } you can fetch — ideal for agents (no large binary in the response). Set hosted:false to get the raw document back as base64, or async:true to enqueue a job and poll docraptor_get_document_status. IMPORTANT: real documents consume account credits (billed). Set test:true to generate a FREE, watermarked document while developing. DocRaptor API: POST /docs.

Input parameters:

- `async` (boolean): If true, enqueue the job and return a status_id (poll with docraptor_get_document_status). Best for large/slow documents. Default false.
- `document_content` (string): The HTML/XML source to render. Use this OR document_url.
- `document_url` (string): A URL DocRaptor will fetch and render. Use this OR document_content.
- `hosted` (boolean): If true (default), DocRaptor hosts the file and returns a download_url. If false, the raw document is returned as base64.
- `hosted_download_limit` (integer): For hosted docs: max number of downloads before the link expires.
- `hosted_expires_at` (string): For hosted docs: ISO 8601 datetime when the hosted link expires.
- `name` (string): A name for the document (<=200 chars), shown in the DocRaptor dashboard/listing.
- `pipeline` (string): Rendering pipeline/engine version, e.g. '10'. Omit to use DocRaptor's default.
- `prince_options` (object): PDF engine (Prince) options. PDF only.
- `tag` (string): An arbitrary tag string for your own reporting/grouping.
- `test` (boolean): If true, generate a FREE watermarked test document (does not consume credits). Default false = a real, BILLED document.
- `type` (string): Output format: pdf (default), xls, or xlsx.

### `docraptor_get_document_status` (~88 tokens)

Get async document status

Check the status of an asynchronous document created with docraptor_create_document({async:true}). Returns status (queued | working | completed | failed), and when completed a download_url / download_id / number_of_pages. DocRaptor API: GET /status/{status_id}.

Input parameters:

- `status_id` (string, required): The status_id returned by docraptor_create_document when async:true.

### `docraptor_list_documents` (~99 tokens)

List documents

List metadata for documents created on this account, most recent first (paginated). Note: DocRaptor does not retain the rendered files themselves — this returns metadata such as name, type, test flag, and creation time. DocRaptor API: GET /docs.json.

Input parameters:

- `page` (integer): Pagination page number. Default 1.
- `per_page` (integer): Documents per page (max 100). Default 100.

### `docraptor_list_ip_addresses` (~74 tokens)

List DocRaptor IP addresses

List the IP addresses DocRaptor uses to fetch remote assets / document_url. Useful for allowlisting DocRaptor on a firewall or asset host. (DocRaptor notes these change over time — prefer HTTP Basic auth over IP allowlisting for securing assets.) DocRaptor API: GET /ips.json.

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/io-usefulapi-docraptor/docraptor#diagnostics

## Score history

- 2026-08-03: 18
- 2026-08-02: 59
- 2026-08-01: 18
- 2026-07-31: 71
- 2026-07-30: 67
- 2026-07-29: 69
- 2026-07-28: 69
- 2026-07-27: 68
- 2026-07-26: 27

## Links

- Remote endpoint: https://docraptor.usefulapi.io/mcp
- Repository: https://github.com/m190/usefulapi-mcp
- Changelog RSS feed: https://verifymcp.io/servers/io-usefulapi-docraptor/docraptor/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/io-usefulapi-docraptor/docraptor/changelog.json
- HTML version of this page: https://verifymcp.io/servers/io-usefulapi-docraptor/docraptor