# iA Document Management MCP Server
MCP (Model Context Protocol) server for interacting with WingArc's iA Document Management System.
## Features
This MCP server provides three main tools for interacting with iA Document Management:
1. **ia_login** - Authenticate with the iA Document Management System
2. **ia_search_documents** - Search for documents using free word search
3. **ia_logout** - Logout from the system
## Installation
```bash
npm install
npm run build
```
## Configuration
Set the base URL for your iA Document Management System:
```bash
export IA_BASE_URL="https://wat-cloud-div.spa-cloud.com"
```
Or provide it as a parameter when calling the tools.
## Usage with Claude Desktop
Add the following to your Claude Desktop configuration file:
**MacOS**: `~/Library/Application Support/Claude/claude_desktop_config.json`
**Windows**: `%APPDATA%/Claude/claude_desktop_config.json`
```json
{
"mcpServers": {
"ia-document-management": {
"command": "node",
"args": [
"/Users/sakiko/Applications/iA文書管理MCP/dist/index.js"
],
"env": {
"IA_BASE_URL": "https://wat-cloud-div.spa-cloud.com"
}
}
}
}
```
## Tools
### ia_login
Authenticate with the iA Document Management System.
**Parameters:**
- `user` (required): Username
- `password` (required): Password
- `domain` (optional): Domain name (defaults to "local")
- `baseUrl` (optional): Base URL of the system
**Returns:**
- `sessionCookie`: Session cookie (JSESSIONID) to use for subsequent requests
- `xsrfCookie`: XSRF token cookie for CSRF protection
- `xsrfToken`: XSRF token value (also available in response header)
- `userId`: Authenticated user ID
### ia_search_documents
Search for documents using free word search.
**Parameters:**
- `searchWord` (optional): Free word search term
- `folderIds` (required): Array of folder IDs to search (format: `[{id: "123", federationId: "optional"}]`)
- `operator` (optional): "AND" or "OR" (defaults to "AND")
- `recursive` (optional): Include subfolders (defaults to true)
- `properties` (optional): System properties to retrieve (e.g., `["name", "createDate", "updateDate"]`)
- `sessionCookie` (required): Session cookie from ia_login
- `xsrfToken` (recommended): XSRF token from ia_login for CSRF protection
- `baseUrl` (optional): Base URL of the system
**Returns:**
- `results`: Array of matching documents
- `resultCount`: Number of documents found
### ia_logout
Logout from the iA Document Management System.
**Parameters:**
- `sessionCookie` (required): Session cookie from ia_login
- `xsrfToken` (required): XSRF token from ia_login for CSRF protection
- `baseUrl` (optional): Base URL of the system
**Returns:**
- `success`: Boolean indicating logout success
- `userId`: User ID that was logged out (when successful)
**Note:** Logout now works correctly with proper CSRF headers (`X-Requested-With` and `X-XSRF-TOKEN`).
## Example Workflow
1. **Login**:
```
Please login to iA Document Management with username "myuser" and password "mypassword"
```
2. **Search Documents**:
```
Search for documents containing "invoice" in folder ID "123"
```
3. **Logout**:
```
Please logout from the system
```
## Security Notes
### CSRF Protection
The iA Document Management System uses XSRF (Cross-Site Request Forgery) tokens for security:
- Login response includes an `X-Xsrf-Token` header and `XSRF-TOKEN` cookie
- Subsequent requests must include:
- `X-Requested-With: XMLHttpRequest` header (required for all non-GET requests)
- `X-XSRF-TOKEN` header with the token value
- The MCP server automatically handles these CSRF headers when xsrfToken is provided
- **Important**: Using an incorrect CSRF token will invalidate it, requiring a new login
### Session Management
- Sessions are maintained via `JSESSIONID` cookie
- Sessions automatically expire after a period of inactivity
- Logout works correctly when proper CSRF headers are included
- Always store session credentials securely and never commit them to version control
## API Documentation
- [Login API](https://cs.wingarc.com/manual/ia/cloud/ja/1027707.html)
- [Document Search API](https://cs.wingarc.com/manual/ia/cloud/ja/4261290.html)
- [Logout API](https://cs.wingarc.com/manual/ia/cloud/ja/1387624.html)
- [CSRF Token Implementation](https://cs.wingarc.com/manual/ia/cloud/ja/1567416.html)
## License
MIT
