Skip to main content
Glama
alejoseed

docs-index

by alejoseed
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Python
Remote

docs-index: a self-hosted, zero-ingress docs-retrieval MCP service

Self-hosted example of MCP retrieval service. With a provided AWS account everything ends up running in that same place, no queries no internet access. Entirely self-contained and all of the infrastructure is owned by the customer. no public ingress: no load balancer, no public IPs, a security group with zero ingress rules. TLS terminates at Cloudflare's edge; a Cloudflare Tunnel dials out from the VPC; Cloudflare Access gates every request with a service token.

demo

Try it

claude mcp add --transport http docs-index https://<hostname>/mcp \
  --header "CF-Access-Client-Id: <client-id>" \
  --header "CF-Access-Client-Secret: <client-secret>"

Then ask Claude Code:

  • "Using docs-index, how do I add a custom domain to my Mintlify site?" → cited answer with a deep link into mintlify.com/docs.

  • "Using docs-index, how do I rotate the Access service token?" → the internal runbook, cited to https://wiki.internal/… — a page that exists nowhere on the public internet. This is the private-corpus story: the same index serves docs an enterprise would never upload to a shared service (corpus/*.md, same format, baked into the same image).

  • "Using docs-index, how do I configure Terragrunt remote_state?" → No indexed documentation for that query. Indexed products: anthropic, fastmcp, internal, mintlify, resend. Matching is lexical (FTS5 + BM25), so the refusal fires when the query's terminology is absent from the corpus.

Related MCP server: LiveGraphRAG MCP Server

Deploy your own

uv venv && uv pip install -e .
docs-index up

up runs the whole thing: checks prerequisites, prompts for a Cloudflare API token and a hostname, discovers the account, zone and Zero Trust team from the API, creates the registry, builds and pushes the image, applies the stack, then verifies that an authenticated request answers and an anonymous one is refused.

Needs tofu (or terraform), aws, and docker, an AWS account, and a Cloudflare zone with Zero Trust enabled. Token scopes are listed in terraform.tfvars.example.

Scope boundary

This is just the retrieval layer of a docs platform and it is by no means a complete docs platform. I am aiming to show how I would package it for a customer.

This server cannot be deployed

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Maintenance

ActivitySlowing
ResponsivenessNo issues

Resources

Related MCP Connectors

Related MCP Servers

  • MCPDocSearch

    MCP-Mirror
    A
    license
    Not graded
    quality
    Not graded
    maintenance
    Crawls documentation websites and provides semantic search capabilities over the content through vector embeddings, enabling natural language queries of technical documentation.
    2
    MIT

  • grounded-rag-mcp

    chetan1521
    A
    license
    A
    quality
    B
    maintenance
    Enables LLM hosts to perform grounded, cited retrieval and answer generation over your own documents using hybrid BM25 and dense search, with explicit refusal when answers are not supported by the sources.
    5
    1 npm
    MIT

  • agent-kb

    mothieras
    A
    license
    Not graded
    quality
    B
    maintenance
    Enables Agents to retrieve structured evidence with spans, versions, and content hashes from a self-hosted knowledge base, and optionally delegate single-shot questions. Exposes read-only search, evidence lookup, and answer tools over Streamable HTTP with Bearer authentication.
    MIT