
Company News
AWS Security Hub Adds Socket for Supply Chain Security
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.
stdio MCP server with two read-only tools for agentic RAG over markdown documentation:
Typical flow: call index_md to discover headings and structure, then read_md_with_images on the sections you need.
Published package: md-vision on npm
In your agent config (.agents/mcp.json or similar), point your MCP host at the server. Example:
{
"mcpServers": {
"md-vision": {
"command": "npx",
"args": [
"md-vision",
"--allow-path",
"/absolute/path/to/docs",
"--allow-domain",
"none"
]
}
}
}
With remote markdown (allow all HTTP(S) hosts, or list specific domains):
{
"mcpServers": {
"md-vision": {
"command": "npx",
"args": [
"md-vision",
"--allow-path",
"/absolute/path/to/docs",
"--allow-domain",
"all"
]
}
}
}
{
"mcpServers": {
"md-vision": {
"command": "npx",
"args": [
"md-vision",
"--allow-path",
"/absolute/path/to/docs",
"--allow-domain",
"raw.githubusercontent.com"
]
}
}
}
The server exits on startup if --allow-path or --allow-domain is omitted.
Restart the MCP host after changing configuration.
| Flag | Required | Effect |
|---|---|---|
--allow-path <dir> | Yes (at least one) | Local files must resolve under one of the allowed directories (repeatable). |
--allow-domain <host> | Yes (at least one) | Controls HTTP(S) access. Use all to allow any host, none to disable URLs (local files only), or list specific hosts (repeatable; suffix match supported, e.g. example.com allows docs.example.com). |
Equivalent forms: --allow-path=/path, --allow-domain=host.example, --allow-domain=all, --allow-domain=none.
Do not pass a bare * as a separate shell argument — the shell expands it to filenames in the current directory. Use all or --allow-domain=all instead.
Read a markdown file and inline referenced images as MCP image content.
| Parameter | Type | Description |
|---|---|---|
uri | string | Local path or http(s):// URL |
section | string, optional | Exact heading to read, e.g. ## Introduction (used when matched; otherwise falls back to line_range) |
line_range | [start, end], optional | Inclusive 1-based document line range (used when section is omitted or not found) |
max_images | integer, optional | Max images to inline (default 10, max 50) |
Returns: MCP content array — alternating text and image blocks (PNG, base64) in document order; frontmatter preserved in the leading text. Before each inlined image, a short text block carries the resolved image URL (omitted for data: URIs and other long references). Images beyond max_images stay as markdown image syntax in text.
URI forms: local filesystem paths and http(s):// URLs. Local paths must fall under a configured --allow-path directory. Relative image paths resolve against the markdown file location or document URL. Images may use markdown  syntax or HTML <img src="..."> tags.
Index headings for navigation before targeted reads.
| Parameter | Type | Description |
|---|---|---|
uri | string | Markdown file, http(s):// URL, or local folder |
Returns: Markdown string. For each file:
tsv code block with columns: heading, line_start, n_images, char_count.Each file is wrapped in:
<file path="..." lines=X chars=Y>
...
</file>
Folder uri values are scanned recursively for *.md / *.markdown in stable sorted order. Headings inside fenced code blocks are not indexed.
stdio MCP servers run as subprocesses of the agent runtime that invokes them. There are two deployment patterns commonly used:
--allow-path to the documentation tree you intend to expose.See benchmark/ for the MMLongBench-Doc A/B harness comparing
filesystem-only agentic RAG against the same agent with md-vision MCP tools.
md-vision can also be used as a library when you want to index markdown outside an MCP host — for example in an offline preprocessing pipeline for agentic RAG.
Install the package:
npm install md-vision
Use indexMarkdownText when you already have markdown content in memory.
import { indexMarkdownText } from "md-vision";
const markdown = `# Guide
Intro text.
## Setup

`;
const index = indexMarkdownText(markdown);
console.log(index.rows);
Example result:
[
{
heading: "# Guide",
lineStart: 1,
imageCount: 1,
charCount: 42
},
{
heading: "## Setup",
lineStart: 5,
imageCount: 1,
charCount: 24
}
]
Use indexMarkdownFile to load and index a local markdown file.
import { indexMarkdownFile } from "md-vision";
const index = await indexMarkdownFile("./docs/guide.md");
await saveToVectorStoreMetadata({
path: index.path,
frontmatter: index.frontmatter,
headings: index.rows,
});
Use indexMarkdownFolder to recursively index *.md and *.markdown files in stable sorted order.
import { indexMarkdownFolder } from "md-vision";
const files = await indexMarkdownFolder("./docs");
for (const file of files) {
console.log(file.path, file.rows);
}
Each indexed file returns structured data:
type MarkdownFileIndex = {
path?: string;
frontmatter: string;
lineCount: number;
charCount: number;
rows: HeadingIndexRow[];
};
type HeadingIndexRow = {
heading: string;
lineStart: number;
imageCount: number;
charCount: number;
};
Headings inside fenced code blocks are ignored because indexing uses the markdown AST rather than regex matching.
FAQs
stdio MCP server to read and index markdown with images
We found that md-vision demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.