
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
local-dev-docs-reader-mcp
Advanced tools
MCP Server for intelligently and token-consciously reading .md files on local filesystem.
A Model Context Protocol (MCP) server that provides tools for reading and navigating markdown-based documentation repositories.
#, ##, and ### headers, default: 3)claude mcp add docs-reader -- npx local-dev-docs-reader-mcp@latest -d <documentation_directory>
claude mcp add docs-reader -- cmd /c -- npx local-dev-docs-reader-mcp@latest -d <documentation_directory>
Use the --docs-path or -d flag to specify your documentation directory or directories. You can provide
# Single directory
npm start -- -d /path/to/your/docs
# Multiple directories
npm start -- -d /path/to/docs1 -d /path/to/docs2 -d /path/to/docs3
Use --max-toc-depth to limit the header levels shown in table of contents (default: 3, shows #, ##, ###).
npm start -- --max-toc-depth 2 # Only show # and ## headers
Use --max-headers to limit the total number of headers returned (default: 25).
npm start -- --max-headers 50 # Return up to 50 headers
This is how the agent should typically use this MCP server.
list_documentation_files to see which .md files are available for readingtable_of_contents for the file it wants to readsection_table_of_contents for the file and section using dot-separated section IDs (e.g., "2.1").read_sectionsLists all available documentation files with metadata including file size, modification time, and front matter information. No parameters required.
Provides a structured table of contents for a markdown file, showing section hierarchy with IDs.
Parameters:
filename (required) - The documentation file to analyzeResponse Format:
The tool returns XML-like text content wrapped in structured tags. The response contains both the table of contents and usage instructions.
Example Response:
<TableOfContents>
1 Getting Started
1.1 Installation
1.2 Configuration
1.3 Basic Usage
2 Advanced Topics
2.1 Customization
2.2 Performance
2.2.1 Caching
2.2.2 Optimization
3 API Reference
3.1 Endpoints
3.2 Authentication
</TableOfContents>
<Instructions>
The number before each section title is the section ID (e.g., "1.1.1"). Use these section IDs with the read_sections tool to read specific sections. When you see sections marked with {hiddenSubsections: N}, it indicates that N child sections are not shown due to filtering limits.
</Instructions>
Response Structure:
Section Format:
ID Title {hiddenSubsections: N} (optional)--max-toc-depth or --max-headers limitsSection Level Calculation:
Section level is determined by the section ID format: (number of dots in ID) + 1
Filtering Parameters:
The --max-toc-depth and --max-headers command line parameters control what is shown:
--max-toc-depth: Limits header levels shown (default: 3, shows #, ##, ###)--max-headers: Limits total number of headers returned (default: 25)Similar to table_of_contents tool, but instead of starting from document root, starts from a section.
Typically for a large document - to save tokens - table_of_content will not show all sections (all headers). Instead, the agent can choose to go deeper under one or more sections asking the table of contents (the subheaders) under a section that was in the results of a table_of_contents or another section_table_of_contents call.
Parameters:
filename (required) - The documentation file to analyzesection_ids (required) - Non-empty array of section identifiers to get subsections forResponse Format:
Same as for table_of_contents.
The --max-toc-depth and --max-headers command line parameters control what is shown in the table of contents.
Reads specific sections from a markdown file by their IDs.
Parameters:
filename (required) - The documentation file to read fromsection_ids (required) - Array of section identifiers to read (use dot-separated format like "1.2.3" for nested sections)Example:
{
"filename": "guide.md",
"section_ids": ["1", "2.1", "3.4.1"]
}
Searches for text patterns using regular expressions in documentation files, returning headers and section IDs where the search pattern is found. Supports full regular expression syntax with multiline matching (the "s" flag is enabled automatically for dotAll behavior).
Parameters:
query (required) - The regular expression pattern to search for (case-insensitive). The pattern automatically includes the "i" and "s" flags for case-insensitive and multiline matchingfilename (optional) - Specific file to search in. If not provided, searches all available documentation filesMarkdown files can include optional YAML front matter metadata for better file discovery. The MCP server automatically parses and displays this metadata in the list_documentation_files tool results.
title (string) - Document title, displayed in file listingsdescription (string) - Brief description of the document's contentkeywords (string or array) - Keywords for searchability and categorizationAdd YAML front matter at the top of your markdown file, enclosed in --- delimiters:
---
title: "User Guide"
description: "Comprehensive guide for getting started with the application"
keywords: ["tutorial", "setup", "configuration", "getting started"]
---
FAQs
MCP Server for intelligently and token-consciously reading .md files on local filesystem.
We found that local-dev-docs-reader-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.