docling-rs-mcp
A Model Context Protocol server that
converts documents to Markdown for AI agents — PDF with layout analysis,
table structure and OCR, DOCX, PPTX, XLSX, HTML, EPUB, e-mail, scans and
40-odd other formats. It is docling.rs,
a Rust port of IBM's docling,
and it serves MarkItDown's convert_to_markdown(uri) tool under the same
name and contract: a markitdown-mcp setup switches by changing the command.
uvx docling-rs-mcp --root ~/Documents
Claude Desktop (claude_desktop_config.json):
{
"mcpServers": {
"docling": { "command": "uvx", "args": ["docling-rs-mcp", "--root", "/Users/me/Documents"] }
}
}
Claude Code: claude mcp add docling -- uvx docling-rs-mcp --root ~/Documents.
Tools
| Tool | Returns |
|---|---|
convert_to_markdown(uri) |
Markdown of the document behind an http:/https:/file:/data: URI or a path |
convert(uri, to?, images?, options?) |
md, json (docling's DoclingDocument), html, text, latex, chunks, vtt or pandoc, with docling.rs's conversion options — {"pages": "1-5"}, {"ocr_lang": "ch"}, {"password": "…"}, … |
list_input_formats() |
the extensions the server converts |
PDF models
Office, HTML, Markdown and e-mail need no models. PDFs and images use ONNX models for layout, tables and OCR (~720 MB). Fetch them once:
uvx docling-rs-mcp --download-models
They land in the docling.rs cache ($DOCLING_RS_CACHE_DIR, else
~/.cache/docling.rs) and the server finds them from then on;
--download-models=all adds the code/formula enrichment models (~740 MB
more). Until then PDFs convert from their text layer, as MarkItDown's do.
Intel macs: PyPI's macOS wheel of docling-rs is Apple Silicon only, so
on x86_64 uv builds it from source on first use — install a Rust toolchain
(rustup) and run the --download-models line in a terminal once; the build
is cached, and an MCP client then starts the server without waiting for it.
What a call may reach
Local paths and file: URIs are confined to --root (repeatable; the
working directory by default, except in /, where it is required).
http(s) URLs are fetched only with
--allow-url-fetch, and private or loopback addresses stay blocked.
--http serves Streamable HTTP on 127.0.0.1:3001 instead of stdio.
--help lists every flag; the security model is in
docs/SECURITY.md.
The same server ships in the docling-rs binary (docling-rs mcp) and the
ghcr.io/docling-project/docling-rs image, models included; with the
docling-rs Python package installed it is also python -m docling_rs.mcp.
On NVIDIA GPUs, uv run --with docling-rs-cuda python -m docling_rs.mcp.
MIT licensed.
1 maintainer
Metadata
1 maintainer
Release files for docling-rs-mcp 2.51.1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | Provenance | |
|---|---|---|---|---|
| docling_rs_mcp-2.51.1.tar.gz | 3.8 kB | With provenance | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| docling_rs_mcp-2.51.1-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 7.3 kB
Release files / docling_rs_mcp-2.51.1.tar.gz
| Download URL | docling_rs_mcp-2.51.1.tar.gz |
|---|---|
| Size | 3.8 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
0f582ad46e563d2250b9241d9d4c01a7c7d9511376d820dee179de6c5b6f0ade
|
|
BLAKE2b-256 checksum How to use checksums |
f3161cb362ee0a6088c7f35c130fd30466c5b824c294193647867137862a2ea0
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 24, 2026.
Transparency logRelease files / docling_rs_mcp-2.51.1-py3-none-any.whl
| Download URL | docling_rs_mcp-2.51.1-py3-none-any.whl |
|---|---|
| Size | 3.5 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
221b962ee8c5d134545e24665690d022d8190d51e0d08f227b56f663be862a18
|
|
BLAKE2b-256 checksum How to use checksums |
5c9ab94dfeab859814b69a3c685040ee687f1d488fc42bd15830a0fcc786ebca
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.16
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 24, 2026.
Transparency logSecurity for docling-rs-mcp 2.51.1
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
Full provenance
All 2 files in this release have been uploaded with provenance metadata.
Attestation for docling_rs_mcp-2.51.1.tar.gz
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 24, 2026.
Transparency logA note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.
