iA Document Management MCP Server

MCP (Model Context Protocol) server for interacting with WingArc's iA Document Management System.

Features

This MCP server provides three main tools for interacting with iA Document Management:

1. ia_login - Authenticate with the iA Document Management System

2. ia_search_documents - Search for documents using free word search

3. ia_logout - Logout from the system

Installation

Configuration

Set the base URL for your iA Document Management System:

Or provide it as a parameter when calling the tools.

Usage with Claude Desktop

Add the following to your Claude Desktop configuration file:

MacOS: ~/Library/Application Support/Claude/claude_desktop_config.json Windows: %APPDATA%/Claude/claude_desktop_config.json

Tools

ia_login

Authenticate with the iA Document Management System.

Parameters:

• user (required): Username

• password (required): Password

• domain (optional): Domain name (defaults to "local")

• baseUrl (optional): Base URL of the system

Returns:

• sessionCookie: Session cookie (JSESSIONID) to use for subsequent requests

• xsrfCookie: XSRF token cookie for CSRF protection

• xsrfToken: XSRF token value (also available in response header)

• userId: Authenticated user ID

ia_search_documents

Search for documents using free word search.

Parameters:

• searchWord (optional): Free word search term

• folderIds (required): Array of folder IDs to search (format: [{id: "123", federationId: "optional"}])

• operator (optional): "AND" or "OR" (defaults to "AND")

• recursive (optional): Include subfolders (defaults to true)

• properties (optional): System properties to retrieve (e.g., ["name", "createDate", "updateDate"])

• sessionCookie (required): Session cookie from ia_login

• xsrfToken (recommended): XSRF token from ia_login for CSRF protection

• baseUrl (optional): Base URL of the system

Returns:

• results: Array of matching documents

• resultCount: Number of documents found

ia_logout

Logout from the iA Document Management System.

Parameters:

• sessionCookie (required): Session cookie from ia_login

• xsrfToken (required): XSRF token from ia_login for CSRF protection

• baseUrl (optional): Base URL of the system

Returns:

• success: Boolean indicating logout success

• userId: User ID that was logged out (when successful)

Note: Logout now works correctly with proper CSRF headers (X-Requested-With and X-XSRF-TOKEN).

Example Workflow

1. Login:

2. Search Documents:

3. Logout:

Security Notes

CSRF Protection

The iA Document Management System uses XSRF (Cross-Site Request Forgery) tokens for security:

• Login response includes an X-Xsrf-Token header and XSRF-TOKEN cookie

• Subsequent requests must include:

  • X-Requested-With: XMLHttpRequest header (required for all non-GET requests)

  • X-XSRF-TOKEN header with the token value

• The MCP server automatically handles these CSRF headers when xsrfToken is provided

• Important: Using an incorrect CSRF token will invalidate it, requiring a new login

Session Management

• Sessions are maintained via JSESSIONID cookie

• Sessions automatically expire after a period of inactivity

• Logout works correctly when proper CSRF headers are included

• Always store session credentials securely and never commit them to version control

API Documentation

• Login API

• Document Search API

• Logout API

• CSRF Token Implementation

License

MIT