Skip to main content

DocPull

DocPull

Active open-source project · MIT License

DocPull turns changing public web sources into cited, reproducible context for AI agents and retrieval pipelines. Use it when your application needs to know which sources it used, whether they changed, and how to rebuild the same context later.

Python 3.11+ PyPI version License: MIT

Install and sync your first source

pip install docpull
docpull init stripe-docs
docpull add https://docs.stripe.com
docpull sync
docpull query "retry policy" --max-tokens 4000
docpull diff
docpull export context-pack --target cursor

The project stores declared sources in docpull.yaml and resolved inputs in .docpull/context.lock.json. Later syncs produce a hash-based diff while preserving source URLs, content hashes, run IDs, citations, and export metadata.

docpull query retrieves deduplicated passages from locked archives with version filters, a response budget, and exact source spans. The same query is available through the Python SDK and MCP. See Query locked context for budget semantics and queries across projects.

DocPull project diff showing changed pages, local semantic categories, and zero failed URLs

No account or paid API is required for this path. Direct fetching, discovery, extraction, indexing, pack analysis, and diffs run locally.

Why use DocPull

  • Reproduce agent context. Stable IDs, hashes, manifests, and lockfiles show which source versions produced an answer or artifact.
  • Detect source drift. Sync and diff documentation, product pages, policies, feeds, repositories, packages, standards, and local documents.
  • Keep evidence inspectable. Markdown, NDJSON, SQLite, citations, and provenance sidecars remain readable without a hosted service.
  • Choose the downstream surface. Export context for agent clients, vector import, data workflows, or a versioned context-pack release.
  • Keep expensive routes explicit. Browser and cloud rendering require an explicit choice and can be blocked with a zero-dollar budget.

How it works

declared sources → local acquisition → versioned evidence → diff and validation → export

DocPull's v3 pack contract separates raw extraction, agent-ready context, and eval-grade evidence. Validate the level a downstream system requires:

docpull pack prepare packs/docs --eval-grade
docpull pack validate packs/docs --level eval
docpull ci --prepare

docpull ci checks freshness, citation coverage, pack quality, rights metadata, and other configured gates. It writes context-ci.report.json and CONTEXT_CI.md, then exits non-zero when a hard gate fails.

Supported surfaces

Surface Use it for Start here
CLI Fetch, sync, diff, validate, and export docs/cli-recipes.md
Python SDK Embed acquisition in Python applications docs/surface-contract.md
MCP server Give local agent clients source tools MCP server
TypeScript SDK Read local packs and invoke the CLI from Node or Bun sdk/js/README.md
Agent plugin Install the supported MCP workflow in an agent client plugin/README.md

Common source shapes include static and server-rendered websites, OpenAPI documents, feeds, papers, public GitHub repositories, npm and PyPI packages, standards, datasets, transcripts, Wikimedia pages, product and policy pages, and local PDF or office files. See context-pack workflows for the complete surface.

MCP server

pip install 'docpull[mcp]'
docpull mcp

Claude Code can register the same local server:

claude mcp add --transport stdio docpull -- docpull mcp

The Python stdio server is the supported MCP server.

Limits and security boundary

DocPull is an evidence-acquisition engine, not a hosted competitive-intelligence product. It owns fetching, explicit rendering adapters, versioning, citations, hashing, validation, replay, and export. Downstream products own scheduling, human review, approved claims, legal conclusions, accounts, and notifications.

The default path does not handle complex interactive browser workflows, CAPTCHAs, stealth scraping, or private dashboards. JavaScript rendering is explicit. Authenticated sources require environment-variable references; DocPull does not persist credential values in project artifacts.

Security defaults include HTTPS-only fetching, robots.txt compliance, SSRF and DNS rebinding protections, redirect guards, XXE protection, and path-traversal checks. Read the web-source boundary, security posture, and evidence-engine decision before extending acquisition behavior.

Documentation and evidence

Raintree open-source system

DocPull owns evidence acquisition and reproducible agent context. It can be used independently; the sibling projects do not imply a required integration or shared release cycle.

Project Responsibility
Raintree Standards Defines governed requirements and evidence.
Trellis Enforces shared JavaScript and TypeScript code policy.
HIG Doctor Audits interface source and provides HIG guidance.
PolicyStrata Tests cross-layer policy behavior.

See the Raintree open-source portfolio for current lifecycle and distribution links.

Raintree also builds BetterOff, which keeps a household's spending, investments, assets, debts, and net worth in one current record.

Project policies

Contributing · Code of Conduct · Security · Metrics and evidence limits · Source repository · MIT License

Metadata

Release files for docpull 6.10.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for docpull 6.10.0
File Size Uploaded Provenance Actions
docpull-6.10.0.tar.gz 731.0 kB With provenance Details for docpull-6.10.0.tar.gz

Built distribution (wheel)

Table of built distributions (wheels) for docpull 6.10.0
File Interpreter ABI Platform Actions
docpull-6.10.0-py3-none-any.whl Python 3 none any Details for docpull-6.10.0-py3-none-any.whl

Total release size: 1.4 MB

Release files / docpull-6.10.0.tar.gz

Download URL docpull-6.10.0.tar.gz
Size 731.0 kB
Tags Source
SHA-256 checksum
How to use checksums
90d460bda88f64c251a279204bb3642383c05ac351c5589feaeaa8559e8d6f6d
BLAKE2b-256 checksum
How to use checksums
7bb8305a4481a2d1d2235a4377ed40abda0554df7ba022334098806e01916a65
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/6.1.0 CPython/3.13.13

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Nov 13, 2026.

Transparency log

Release files / docpull-6.10.0-py3-none-any.whl

Download URL docpull-6.10.0-py3-none-any.whl
Size 625.7 kB
Tags Python 3
SHA-256 checksum
How to use checksums
6649fdc73648470464ddaffc003fc2e6cd4ffa7291f5e1a54ff980315e4cd587
BLAKE2b-256 checksum
How to use checksums
e1dd0d87893ef061b99e7020a6beea846f1dd649e6229b154b96ab1ad62b4aaf
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/6.1.0 CPython/3.13.13

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Nov 13, 2026.

Transparency log

Security for docpull 6.10.0

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Full provenance

Both files in this release have been uploaded with provenance metadata.

Select from 2 files

Attestation for docpull-6.10.0.tar.gz

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Nov 13, 2026.

Transparency log

A note on package security

PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.

To learn more about protecting yourself from malicious actors, visit our package security documentation.

Release history Release notifications | RSS feed

This release

6.10.0 This release

2 release files Full provenance

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page