Skip to main content

Gnosis — Web Scraping → Markdown for LLMs (RAG-ready, byte-level provenance)

The auditable web scraper that turns the internet into LLM-ready knowledge.
Open-source · Self-hostable · Byte-level SHA-256 · WARC archival · MIT

PyPI Version Python Versions CI Docs License

Gnosis is an open-source web scraper and crawler that downloads websites (and documents) and converts them into clean, LLM-friendly Markdown for RAG pipelines and knowledge bases — with a YAML provenance block on every file recording where the bytes came from, when they were fetched, and how to verify them. It is the auditable web-to-Markdown converter.

Markdown is a projection; the raw bytes + WARC are the source of truth. Unlike Firecrawl, Crawl4AI, or Jina Reader, gnosis ships byte-level SHA-256 and WARC-grade evidence out of the box.

gnosis in action

Why Gnosis

Feature Gnosis Firecrawl Crawl4AI Jina Reader
Clean Markdown ✅ ✅ ✅ ✅
JS rendering ✅ opt-in ✅ ✅ ✅
Byte-level SHA-256 provenance ✅ ❌ ❌ ❌
WARC archival (replay via pywb) ✅ ❌ ❌ ❌
Built-in SSRF / private-network guard ✅ ⚠️ ❌ ❌
robots.txt + politeness ✅ ⚠️ ⚠️ ❌
Self-hostable / offline ✅ ✅ ✅ ✅
License MIT AGPL-3.0 Apache-2.0 MIT

✅ yes · ⚠️ partial · ❌ no — as of September 2026; verify each project's current capabilities and license against its own repository.

Verify it yourself

The provenance claim is the product. After a fetch:

gnosis https://docs.python.org/3/tutorial/ -o out/ --warc

# The frontmatter's bytes_sha256 is the SHA-256 of the raw response:
shasum -a 256 out/.gnosis-store/<bytes_sha256>   # matches the hash in the .md

Every markdown file is re-fetchable and re-verifiable — no sidecar bookkeeping.

Quick start

Requires Python 3.12+.

pip install gnosis-markdown

# One page → one markdown file (written to ./ by default; use -o to change it)
gnosis https://docs.python.org/3/tutorial/

# Crawl an entire section
gnosis https://docs.python.org/3/tutorial/ --all -o ./python-docs/

# Archive the raw bytes to WARC + a content-addressed store
gnosis https://docs.python.org/3/tutorial/ --warc

# Emit per-chunk citation manifests for RAG
gnosis https://docs.example.com --chunk

# Evaluate yourself against a corpus (one URL per line)
printf 'https://docs.python.org/3/\nhttps://example.com/\n' > urls.txt
gnosis-bench --urls urls.txt

# Convert a PDF/Office doc to Markdown (pip install gnosis-markdown[docs])
gnosis-doc report.pdf -o report.md

JS rendering is opt-in via a sidecar binary (default obscura); install the Obscura binary, then gnosis https://my-spa.example --render (or set render.engine in config).

Features

Provenance & audit (the moat)

  • YAML frontmatter on every file: url, fetched_at (UTC), status_code, etag, last_modified, generator, and requested_url (when redirected).
  • content_hash (SHA-256 of the markdown) and bytes_sha256 (SHA-256 of the raw response-body bytes) — hash the bytes, not the derived text.
  • WARC export (--warc) + a content-addressed store keyed on bytes_sha256.
  • llms.txt + llms-full.txt emitted on every crawl.

Fetching & access

  • Static-first async fetch (httpx); optional JS rendering via a sidecar binary.
  • robots.txt respected (with Crawl-delay politeness); fail-open on errors.
  • SSRF / private-network guard: blocks loopback/RFC1918/link-local/multicast and every redirect hop (opt out with --allow-private-network).
  • Auth: Bearer, HTTP Basic (Confluence PAT), and custom headers. Reference secrets as ${ENV_VAR} (supported in config and --header values) and keep them out of config files and shell history.

Extraction & output

  • Main-content detection + class-word boilerplate stripping.
  • Valid GFM tables (multi-para cells, pipe escaping, sticky-header dedup).
  • Metadata extraction (title/author/language/description/Open Graph).
  • Chunking (--chunk) with stable chunk ids + heading paths + offsets.
  • Resumable crawls (--all) via a content-hash checkpoint.

Chunk manifest example

gnosis https://docs.example.com --chunk writes <page>.md.chunks.json:

[
  {
    "doc_id": "https://docs.example.com",
    "content_hash": "1549512c...",
    "chunk_id": "c0",
    "heading_path": ["Title"],
    "start": 0,
    "end": 812,
    "char_count": 812
  }
]

Provenance: the contract

---
title: Quickstart
url: https://docs.example.com/quickstart
fetched_at: '2026-09-02T08:41:44Z'
content_hash: 1549512c...16fd     # SHA-256 of the markdown body
bytes_sha256: 85052df6...bcb31    # SHA-256 of the raw response bytes
status_code: 200
generator: gnosis/1.2.1
etag: '"61e917f4..."'
last_modified: Fri, 31 Jul 2026 16:07:37 GMT
---

Standard YAML, parseable by python-frontmatter, Jekyll, Hugo, Obsidian, and any downstream pipeline. Opt out with --no-frontmatter.

CLI reference

gnosis URL [OPTIONS]
Flag Description
-a, --all Crawl all child pages under the URL path
-n, --dry-run Discover and count pages only (requires --all)
-o, --output DIR Output directory (default ./)
-c, --config FILE YAML configuration file
-f, --overwrite Overwrite existing files
-q, --quiet / -v, --verbose Suppress / show diagnostics
--no-frontmatter Write bare markdown (no provenance)
--frontmatter KEY: VALUE Extra constant frontmatter field (repeatable)
--header NAME: VALUE Extra request header (repeatable)
--bearer-token-env VAR Bearer token from environment variable
--basic-user USER HTTP Basic username (requires --basic-token-env)
--basic-token-env VAR HTTP Basic password/token from environment variable
--allow-private-network Bypass the SSRF guard (opt-in)
--warc Archive raw bytes to WARC + content-addressed store
--render Render pages with the configured JS renderer
--chunk Write per-chunk citation manifests (.chunks.json)
--sitemap Treat URL as a sitemap.xml and list its page URLs
--qmd-index Index output into QMD (requires [qmd] extra)

Also available: gnosis-bench (reproducible scorecard) and gnosis-doc (document → Markdown).

Installation

pip install gnosis-markdown          # core
pip install gnosis-markdown[qmd]     # optional QMD vector-DB indexing
pip install gnosis-markdown[docs]    # optional document conversion (MarkItDown)

Requires Python 3.12+. See gnosis/config/default.yaml for the full configuration reference.

Development

git clone https://github.com/SHCV-it/gnosis.git
cd gnosis
pip install -e '.[test]'
python -m pytest tests/ -q          # offline suite (localhost fixtures)

Contributing

Contributions are welcome — open an issue first to discuss. Report security issues privately (see SECURITY). See ROADMAP.md for the project plan.

License

MIT — see LICENSE.

Authors: Steffen Hoehne & Ali Zahid Raja, SHCV.IT

Metadata

Release files for gnosis-markdown 1.4.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for gnosis-markdown 1.4.0
File Size Uploaded
gnosis_markdown-1.4.0.tar.gz 69.5 kB Details

Built distribution (wheel)

Table of built distributions (wheels) for gnosis-markdown 1.4.0
File Interpreter ABI Platform
gnosis_markdown-1.4.0-py3-none-any.whl Python 3 none any Details

Total release size: 125.8 kB

Release files / gnosis_markdown-1.4.0.tar.gz

Download URL gnosis_markdown-1.4.0.tar.gz
Size 69.5 kB
Tags Source
SHA-256 checksum
How to use checksums
858965ae637d7ed52c2bccff9708f2a139ececd3457a8fd3e1b2c4e76f861f5e
BLAKE2b-256 checksum
How to use checksums
14c3d8f78cf0d368cdca32bef08ea62089c1d471335c9f06f9ba556cb223f5c8
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Sep 2, 2026.

Transparency log

Release files / gnosis_markdown-1.4.0-py3-none-any.whl

Download URL gnosis_markdown-1.4.0-py3-none-any.whl
Size 56.2 kB
Tags Python 3
SHA-256 checksum
How to use checksums
d391fc95e0ca3cea34d24248c7c758021d7d4f0b6ad94e4de7cac08b5a56009a
BLAKE2b-256 checksum
How to use checksums
48149344a4a0eb692e99e042a9806dde0c8d9f0c008305c881d29698f03246ee
Upload date
Uploaded using Trusted Publishing?
What is trusted publishing?
Yes
Uploaded via twine/7.0.0 CPython/3.13.14

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

PyPI Publish Attestation

PyPI verified that this artifact, at this checksum, originated from the publisher listed below.

Signed by GitHub Actions, verified by PyPI on Sep 2, 2026.

Transparency log

Release history Release notifications | RSS feed

2.4.3

2 release files

2.4.2

2 release files

2.4.1

2 release files

2.4.0

2 release files

2.3.1

2 release files

2.3.0

2 release files

2.2.0

2 release files

2.1.1

2 release files

2.1.0

2 release files

2.0.1

2 release files

2.0.0

2 release files

1.4.3

2 release files

1.4.2

2 release files

1.4.1

2 release files

This release

1.4.0 This release

2 release files

1.3.0

2 release files

1.2.1

2 release files

1.1.2

2 release files

1.1.1

2 release files

1.1.0

2 release files

Anthropic, PBC Visionary sponsor Bloomberg Visionary sponsor Hudson River Trading Visionary sponsor Meta Visionary sponsor NVIDIA Visionary sponsor Microsoft Sustainability sponsor Depot Continuous Integration AWS Cloud computing and Security Sponsor Datadog Monitoring Fastly CDN Google Download Analytics Sentry Error logging StatusPage Status page