Skip to main content

docling-rs-mcp

A Model Context Protocol server that converts documents to Markdown for AI agents — PDF with layout analysis, table structure and OCR, DOCX, PPTX, XLSX, HTML, EPUB, e-mail, scans and 40-odd other formats. It is docling.rs, a Rust port of IBM's docling, and it serves MarkItDown's convert_to_markdown(uri) tool under the same name and contract: a markitdown-mcp setup switches by changing the command.

uvx docling-rs-mcp --root ~/Documents

Claude Desktop (claude_desktop_config.json):

{
  "mcpServers": {
    "docling": { "command": "uvx", "args": ["docling-rs-mcp", "--root", "/Users/me/Documents"] }
  }
}

Claude Code: claude mcp add docling -- uvx docling-rs-mcp --root ~/Documents.

Tools

Tool Returns
convert_to_markdown(uri) Markdown of the document behind an http:/https:/file:/data: URI or a path
convert(uri, to?, images?, options?) md, json (docling's DoclingDocument), html, text, latex, chunks, vtt or pandoc, with docling.rs's conversion options — {"pages": "1-5"}, {"ocr_lang": "ch"}, {"password": "…"}, …
list_input_formats() the extensions the server converts

PDF models

Office, HTML, Markdown and e-mail need no models. PDFs and images use ONNX models for layout, tables and OCR (~720 MB). Fetch them once:

uvx docling-rs-mcp --download-models

They land in the docling.rs cache ($DOCLING_RS_CACHE_DIR, else ~/.cache/docling.rs) and the server finds them from then on; --download-models=all adds the code/formula enrichment models (~740 MB more). Until then PDFs convert from their text layer, as MarkItDown's do.

Intel macs: PyPI's macOS wheel of docling-rs is Apple Silicon only, so on x86_64 uv builds it from source on first use — install a Rust toolchain (rustup) and run the --download-models line in a terminal once; the build is cached, and an MCP client then starts the server without waiting for it.

What a call may reach

Local paths and file: URIs are confined to --root (repeatable; the working directory by default, except in /, where it is required). http(s) URLs are fetched only with --allow-url-fetch, and private or loopback addresses stay blocked. --http serves Streamable HTTP on 127.0.0.1:3001 instead of stdio. --help lists every flag; the security model is in docs/SECURITY.md.

The same server ships in the docling-rs binary (docling-rs mcp) and the ghcr.io/docling-project/docling-rs image, models included; with the docling-rs Python package installed it is also python -m docling_rs.mcp. On NVIDIA GPUs, uv run --with docling-rs-cuda python -m docling_rs.mcp.

MIT licensed.

Metadata

Release files for docling-rs-mcp 2.67.1

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for docling-rs-mcp 2.67.1
File Size Uploaded Provenance Actions
docling_rs_mcp-2.67.1.tar.gz 3.8 kB With provenance Details for docling_rs_mcp-2.67.1.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for docling-rs-mcp 2.67.1
File Interpreter ABI Platform Actions
docling_rs_mcp-2.67.1-py3-none-any.whl Python 3 none any Details for docling_rs_mcp-2.67.1-py3-none-any.whl

Total release size: 7.3 kB

Release files / docling_rs_mcp-2.67.1.tar.gz

Download URL docling_rs_mcp-2.67.1.tar.gz
Size 3.8 kB
Tags Source
SHA-256 checksum
How to use checksums
6eaf27c1da8932a9f00fcd62d531c804cccf29353cc085ff5cb58cdb2be6be66
BLAKE2b-256 checksum
How to use checksums
3ffbaf38ab4ec371d7627706d4e8e801ff280919cd2feccb5328fc3ec321bcbc
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.16

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Nov 6, 2026.

Transparency log

Release files / docling_rs_mcp-2.67.1-py3-none-any.whl

Download URL docling_rs_mcp-2.67.1-py3-none-any.whl
Size 3.5 kB
Tags Python 3
SHA-256 checksum
How to use checksums
2451922dd6c1ab87639c2e2a3a3a6634173aaa111ed067fad5faaf1ff9837800
BLAKE2b-256 checksum
How to use checksums
dea72d9c3263f7cf69c32792fc5e6146190f4247c4e4ce14c212330c7e70c486
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.16

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Nov 6, 2026.

Transparency log

Security for docling-rs-mcp 2.67.1

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Full provenance

Both files in this release have been uploaded with provenance metadata.

Select from 2 files

Attestation for docling_rs_mcp-2.67.1.tar.gz

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Nov 6, 2026.

Transparency log

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Release history Release notifications | RSS feed

This release

2.67.1 This release

2 release files Full provenance

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page