Feature
MCP server
A built-in Model Context Protocol server, so AI tools like Claude Code can search and fetch your docs directly.
- A Model Context Protocol JSON-RPC endpoint ships with the site, exposing search and fetch-page tools that AI coding assistants can call directly.
- Access is gated behind a bearer token, compared using a constant-time check so the token can't be leaked through response-timing differences.
- Requested page paths are validated segment-by-segment to block path traversal, so a malicious request can't be used to read files outside the docs.
- In public mode the endpoint works out of the box; in private (password-protected) mode it stays off unless it is explicitly turned on and a token is set.