ArXiv MCP Server
Enables searching and accessing arXiv papers, including filtering by date and category, downloading and reading paper content, and maintaining a local library of downloaded papers.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@ArXiv MCP ServerSearch arXiv for recent papers on diffusion models published in 2024"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
ArXiv MCP Server
π Enable AI assistants to search and access arXiv papers through a simple MCP interface.
The ArXiv MCP Server provides a bridge between AI assistants and arXiv's research repository through the Model Context Protocol (MCP). It allows AI models to search for papers and access their content in a programmatic way.
π€ Contribute β’ π Report Bug
β¨ Core Features
π Paper Search: Query arXiv papers with filters for date ranges and categories
π Paper Access: Download and read paper content
π Paper Listing: View all downloaded papers
ποΈ Local Storage: Papers are saved locally for faster access
π Prompts: A set of research prompts for paper analysis
Related MCP server: arXiv MCP Server
π Security
Prompt Injection Risk
Paper content retrieved from arXiv is untrusted external input.
When an AI assistant downloads or reads a paper through this server, the paper's text is passed directly into the model's context. A maliciously crafted paper could embed adversarial instructions designed to hijack the AI's behavior β for example, instructing it to exfiltrate data, invoke other tools with unintended arguments, or override system-level instructions. This is a known class of attack described by OWASP as LLM01: Prompt Injection and by the OWASP Agentic AI framework as AG01: Prompt Injection in LLM-Integrated Systems.
Recommended Mitigations
Use read-only MCP configurations β where possible, configure the MCP client so that the arxiv-mcp-server cannot trigger write operations or invoke other tools on your behalf.
Review paper content before acting on AI summaries β if an AI summary asks you to run commands or visit external URLs that were not part of your original request, treat that as a red flag.
Be cautious in multi-tool setups β agentic pipelines that combine this server with filesystem, shell, or browser tools are higher risk; a prompt injection in a paper could chain tool calls unexpectedly.
Treat AI-generated summaries as data, not instructions β always apply human judgment before executing any action the AI recommends after reading a paper.
References
π Quick Start
Installing via Smithery
To install ArXiv Server for Claude Desktop automatically via Smithery:
npx -y @smithery/cli install arxiv-mcp-server --client claudeInstalling via Claude Desktop (.mcpb)
The .mcpb bundle is the one-click install path for Claude Desktop on macOS. It bundles the server code and Python package dependencies, so users do not need uv, pip, or manual MCP JSON configuration. Python 3.11+ must still be available on the user's machine.
Download the artifact matching your Mac from the latest release:
Apple Silicon:
arxiv-mcp-server-darwin-arm64-<version>.mcpbIntel:
arxiv-mcp-server-darwin-x86_64-<version>.mcpb
In Claude Desktop open Settings β Extensions (or drag-and-drop the file onto the Claude Desktop window).
Click Install and, when prompted, set your preferred paper storage directory (defaults to
~/.goover-arxiv-mcp/papers).
Claude Desktop launches the bundled server over stdio β no configuration file edits needed.
Installing Manually
Important β use
uv tool install, not npm/pnpm oruv pip installThis project publishes the supported server as a Python package on PyPI. Do not install
arxiv-mcp-serverwithnpm install,pnpm add, ornpx arxiv-mcp-server: the npm package with this name is an unrelated third-party package and has its own Python-detection wrapper.Running
uv pip install arxiv-mcp-serverinstalls the package into the current virtual environment but does not place thearxiv-mcp-serverexecutable on yourPATH. You must useuv tool installso that uv creates an isolated environment and exposes the executable globally:
uv tool install arxiv-mcp-serverAfter this, the arxiv-mcp-server command will be available on your PATH.
PDF fallback (older papers): Most arXiv papers have an HTML version which the base install handles automatically. For older papers that only have a PDF, the server needs the
[pdf]extra (pymupdf4llm). Install it with:uv tool install 'arxiv-mcp-server[pdf]'
You can verify it with:
arxiv-mcp-server --helpIf you previously ran uv pip install arxiv-mcp-server and the command is
missing, uninstall it and re-install with uv tool install as shown above.
For development:
# Clone and set up development environment
git clone https://github.com/blazickjp/arxiv-mcp-server.git
cd arxiv-mcp-server
# Create and activate virtual environment
uv venv
source .venv/bin/activate
# Install with test dependencies (development only β no global executable)
uv pip install -e ".[test]"π€ Codex Plugin Integration
This repository now includes a Codex plugin manifest at .codex-plugin/plugin.json
and a portable MCP config at .mcp.json so Codex-oriented tooling can discover
the server without inventing its own install recipe.
The Codex integration uses the same stdio launch path documented elsewhere in this README:
{
"mcpServers": {
"arxiv": {
"command": "uvx",
"args": ["arxiv-mcp-server"]
}
}
}If your Codex client supports plugin manifests, point it at
./.codex-plugin/plugin.json. If it only supports raw MCP configuration, use
./.mcp.json directly.
π MCP Integration
Add this configuration to your MCP client config file:
{
"mcpServers": {
"arxiv-mcp-server": {
"command": "uv",
"args": [
"tool",
"run",
"arxiv-mcp-server",
"--storage-path", "/path/to/paper/storage"
]
}
}
}For Development:
{
"mcpServers": {
"arxiv-mcp-server": {
"command": "uv",
"args": [
"--directory",
"path/to/cloned/arxiv-mcp-server",
"run",
"arxiv-mcp-server",
"--storage-path", "/path/to/paper/storage"
]
}
}
}HTTP Transport
For server deployments where stdio is not practical, run the server with Streamable HTTP:
TRANSPORT=http HOST=127.0.0.1 PORT=8080 arxiv-mcp-server --storage-path /path/to/papersThen configure an MCP client that supports Streamable HTTP:
{
"mcpServers": {
"arxiv-mcp-server": {
"type": "http",
"url": "http://127.0.0.1:8080/mcp"
}
}
}The default HTTP bind host is 127.0.0.1. Streamable HTTP enables MCP DNS rebinding protection by default and allows loopback hosts for the configured port. If exposing the server through a reverse proxy, keep it bound to localhost unless you have added authentication and network controls upstream; set ALLOWED_HOSTS and ALLOWED_ORIGINS to the external host/origin values your proxy forwards.
π Security Note
arXiv papers are user-generated, untrusted content. Paper text returned by this server may contain prompt injection attempts β crafted text designed to manipulate an AI assistant's behavior. Treat all paper content as untrusted input.
In production environments, apply appropriate sandboxing and avoid feeding raw paper content into agentic pipelines that have access to sensitive tools or data without review. See SECURITY.md for the full security policy.
π‘ Available Tools
Core Workflow
The typical workflow for deep paper research is:
search_papers β download_paper β read_paperlist_papers shows what you have locally. semantic_search searches across your local collection.
1. Paper Search
Search arXiv with optional category, date, and boolean filters. Enforces arXiv's 3-second rate limit automatically. If rate limited, wait 60 seconds before retrying.
result = await call_tool("search_papers", {
"query": "\"KAN\" OR \"Kolmogorov-Arnold Networks\"",
"max_results": 10,
"date_from": "2024-01-01",
"categories": ["cs.LG", "cs.AI"],
"sort_by": "date" # or "relevance" (default)
})Supported categories include cs.AI, cs.LG, cs.CL, cs.CV, cs.NE, stat.ML, math.OC, quant-ph, eess.SP, and more. See tool description for the full list.
2. Paper Download
Download a paper by its arXiv ID. Tries HTML first, falls back to PDF. Stores the paper locally for read_paper and semantic_search. The response includes content_length, returned_chars, next_start, and is_truncated so clients can safely page through very large papers without mistaking client-side output caps for failed downloads.
result = await call_tool("download_paper", {
"paper_id": "2401.12345"
})
# For very large papers, request bounded chunks:
result = await call_tool("download_paper", {
"paper_id": "2401.12345",
"start": 0,
"max_chars": 50000
})For older papers that only have a PDF, install the
[pdf]extra:uv tool install 'arxiv-mcp-server[pdf]'
3. List Papers
List all papers downloaded locally. Returns arXiv IDs only β use read_paper to access content.
result = await call_tool("list_papers", {})4. Read Paper
Read the full text of a locally downloaded paper in markdown. Requires download_paper to be called first. Use start and max_chars with the returned next_start value to page through large papers.
result = await call_tool("read_paper", {
"paper_id": "2401.12345"
})
result = await call_tool("read_paper", {
"paper_id": "2401.12345",
"start": 50000,
"max_chars": 50000
})π Research Prompts
The server offers specialized prompts to help analyze academic papers:
Paper Analysis Prompt
A comprehensive workflow for analyzing academic papers that only requires a paper ID:
result = await call_prompt("deep-paper-analysis", {
"paper_id": "2401.12345"
})This prompt includes:
Detailed instructions for using available tools (list_papers, download_paper, read_paper, search_papers)
A systematic workflow for paper analysis
Comprehensive analysis structure covering:
Executive summary
Research context
Methodology analysis
Results evaluation
Practical and theoretical implications
Future research directions
Broader impacts
Pro Prompt Pack
summarize_paper: concise structured summary for one paper.compare_papers: side-by-side technical comparison across paper IDs.literature_review: thematic synthesis across a topic and optional paper set.
βοΈ Configuration
Configure through command-line options and environment variables:
Setting | Purpose | Default |
| Paper storage location |
|
| Maximum search results |
|
| API timeout in seconds |
|
| Transport type: |
|
| Host to bind to in HTTP mode |
|
| Port to listen on in HTTP mode |
|
| Comma-separated extra allowed Host header values for Streamable HTTP DNS rebinding protection | empty |
| Comma-separated extra allowed Origin header values for Streamable HTTP DNS rebinding protection | empty |
π§ͺ Testing
Run the test suite:
python -m pytestπ§ͺ Experimental Features
These features are not yet fully tested and may behave unexpectedly. Use with caution.
The following tools require additional dependencies and are under active development:
uv pip install -e ".[pro]"Semantic Search
Semantic similarity search over your locally downloaded papers only. Returns empty results if no papers have been downloaded yet. Requires [pro] dependencies.
result = await call_tool("semantic_search", {
"query": "test-time adaptation in multimodal transformers",
"max_results": 5
})
# or find papers similar to a known paper:
result = await call_tool("semantic_search", {
"paper_id": "2404.19756",
"max_results": 5
})Citation Graph
Fetch references and citing papers via Semantic Scholar. Works on any arXiv ID β no local download required.
result = await call_tool("citation_graph", {
"paper_id": "2401.12345"
})Research Alerts
Save topic watches and poll for newly published papers since the last check. Uses the same query syntax as search_papers.
# Register a watch (idempotent β calling again updates the existing watch)
await call_tool("watch_topic", {
"topic": "\"multi-agent reinforcement learning\"",
"categories": ["cs.AI", "cs.LG"],
"max_results": 10
})
# Check all watches β returns only papers published since last check
result = await call_tool("check_alerts", {})
# Check a single watch
result = await call_tool("check_alerts", {"topic": "\"multi-agent reinforcement learning\""})Advanced Prompts
summarize_paper, compare_papers, and literature_review for deeper research workflows. Requires [pro] dependencies.
π License
Released under the Apache License 2.0. See the LICENSE file for details.
Made with β€οΈ by the Pearl Labs Team
Available Tools
10 toolscheck_alertsARead-only
Check all saved topic watches for newly published papers since the last check. Omitting the topic parameter runs ALL saved watches and returns new papers for each. Passing a topic string checks only that specific watch. Updates each watch's last_checked timestamp after running, so subsequent calls only return newer papers. Use watch_topic to register topics before calling this. Returns a summary with new paper counts and full paper metadata per topic.
| Name | Required | Description | Default |
|---|---|---|---|
| topic | No | Optional: check only this specific watched topic (must match the topic string used in watch_topic exactly). Omit to check all saved watches. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Discloses the timestamp update side effect, the incremental nature of results ('subsequent calls only return newer papers'), and the return structure. Annotations indicate readOnlyHint, and the description does not contradict this; it clarifies the side effect is metadata-only. This goes beyond surface-level description.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Four concise sentences, each adds critical information. No redundancy, front-loaded with the main purpose, then covers parameters, side effects, prerequisites, and output. Efficient and structured.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a read-only tool with one optional parameter and no output schema, the description covers prerequisites (watch_topic), behavior (timestamp update), and return value (summary + metadata). The context is complete for an agent to use it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Only one parameter, fully described in schema. The description adds value by explaining the exact matching requirement ('must match the topic string used in watch_topic exactly') and the behavioral difference between omitting vs. providing it. Coverage is 100%, so the description enriches but doesn't need to compensate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses specific language: 'Check all saved topic watches for newly published papers' with clear scope. It distinguishes itself from siblings by focusing on saved watches rather than general search or retrieval. The optional topic parameter is explained with behavior.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides clear when-to-use guidance: 'Omit to run all watches, pass a topic to check only that watch.' Also explicitly directs users to call watch_topic first. It lacks an explicit alternative tool comparison but the contextually relevant usage is well covered.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
citation_graphARead-only
Return papers citing an arXiv paper and papers that it references using Semantic Scholar's citation graph.
| Name | Required | Description | Default |
|---|---|---|---|
| paper_id | Yes | arXiv ID (for example: 2401.12345). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint and openWorldHint, so the bar is lower. The description adds value by specifying that it returns both citing and referenced papers, which is not in the annotations. It doesn't mention pagination or output format, but with annotations covering safety, this is adequate.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, direct sentence with no filler. Every word contributes to conveying the tool's function, making it highly concise and front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's simplicity (one parameter, read-only, open-world), the description is sufficient. It could specify the return format (e.g., list of paper objects), but that is not critical given the context. A 4 reflects minor additional detail that could be helpful.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% with a clear description for paper_id, so the schema already documents the parameter. The tool description does not add any extra meaning beyond what the schema provides, so a baseline of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Return') and a clear resource ('papers citing an arXiv paper and papers that it references'), explicitly distinguishing this tool from siblings like search_papers (search) or read_paper (content access). It unambiguously states the tool's scope.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description clearly indicates when to use the tool: when citation or reference information is needed. It does not explicitly contrast with alternatives or say when not to use it, but the purpose is self-evident given the sibling context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
download_paperA
Download a paper from arXiv and return its text content. Tries the HTML version first for clean extraction; falls back to PDF conversion if HTML is unavailable. Stores the paper locally and supports start/max_chars pagination for very large papers.
| Name | Required | Description | Default |
|---|---|---|---|
| start | No | Zero-based character offset for returning large papers in chunks | |
| paper_id | Yes | The arXiv ID of the paper to download (e.g. '2103.12345') | |
| max_chars | No | Maximum raw paper characters to return from start; omit for full content |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate readOnlyHint=false and openWorldHint=true, but the description adds specific behavioral details: it stores the paper locally (a side effect), tries HTML first then falls back to PDF, and supports start/max_chars pagination. This goes beyond the annotations to clarify the tool's non-read-only nature and practical behavior.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences, front-loaded with the main purpose, and each sentence earns its place by covering core behavior, fallback strategy, storage side effect, and pagination. No redundant or filler content.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with no output schema, the description adequately states the return type ('text content'), explains side effects (local storage), and covers pagination for large papers. It lacks details on error behavior, rate limits, or output format nuances, but the openWorldHint annotation mitigates this, making the description reasonably complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents all three parameters. The description adds minimal value by mentioning 'start/max_chars pagination,' but this concept is largely already stated in the schema (e.g., 'Zero-based character offset' and 'Maximum raw paper characters'). It provides no new details about paper_id beyond what's in the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb+resource: 'Download a paper from arXiv and return its text content.' It clearly distinguishes from siblings like read_paper by mentioning it stores the paper locally and uses HTML/PDF fallback extraction, making the tool's unique purpose evident.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear context on when to use this tool (for downloading and obtaining text content with pagination) but does not explicitly compare it to alternatives like read_paper. It implies usage for full paper retrieval and handling large papers, which is a clear situational context, yet lacks explicit 'when not to use' guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_abstractARead-only
Fetch the abstract and metadata of an arXiv paper by ID, WITHOUT downloading the full paper. Use this before download_paper to assess relevance and save tokens. Returns: title, authors, abstract, categories, published date, and PDF URL. Workflow tip: search_papers -> get_abstract (check relevance) -> download_paper (if needed) -> read_paper.
| Name | Required | Description | Default |
|---|---|---|---|
| paper_id | Yes | The arXiv paper ID (e.g. '2401.12345' or '2404.19756') |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With readOnlyHint=true already providing the safety profile, the description adds context by emphasizing the tool does not download the full paper and returns listed metadata fields. This goes beyond annotations and helps the agent understand the tool's behavior, though it does not cover error cases or rate limits.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise and well-structured: a clear opening sentence, usage guidance, return summary, and a workflow tip. Every sentence adds value, with no wasted words or redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple one-parameter tool with good annotations, the description is complete. It explains the purpose, usage context, returned data, and workflow placement, leaving no significant gaps. The lack of an output schema is mitigated by the explicit list of returned fields.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and the single parameter paper_id is well described. The description only restates that the tool fetches by ID, adding no extra syntax or format details beyond what the schema already provides, so a baseline score of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Fetch') and identifies the resource ('abstract and metadata of an arXiv paper by ID'), clearly distinguishing it from download_paper by explicitly stating it does NOT download the full paper. It also names the metadata returned, making its purpose unmistakable.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly tells the agent when to use this tool: 'Use this before download_paper to assess relevance and save tokens.' It also provides a concrete workflow (search_papers -> get_abstract -> download_paper -> read_paper), making the usage context and alternatives very clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
list_papersARead-only
List all papers that have been downloaded and stored locally via download_paper. Returns arXiv IDs only β use read_paper to access content. Returns an empty list if no papers have been downloaded yet. Workflow: search_papers -> download_paper -> list_papers -> read_paper.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description discloses the edge case of an empty list when no papers are downloaded, and clarifies that only arXiv IDs are returned, not full text. With minimal annotations (readOnlyHint only), this adds valuable behavioral context without contradiction. It sets expectations for the response format and the need to call read_paper for content.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is very concise, using three short, information-dense sentences plus a workflow arrow. Every sentence adds value with no redundancy or fluff.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a zero-argument tool with no output schema, the description covers everything an agent needs: what is listed, the output format, edge case behavior, and the surrounding workflow context. No further details are required.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
There are zero parameters, so the schema fully documents the interface. The baseline for no parameters is 4, and the description adds no parameter-specific details because none are needed. It doesn't detract, hence a 4.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool lists downloaded papers and explicitly notes the return type (arXiv IDs only) and differentiates from related tools by directing to read_paper for content. The workflow arrow further situates the tool in the pipeline, leaving no ambiguity about its purpose.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly provides a workflow (search_papers -> download_paper -> list_papers -> read_paper) and tells the user when to use an alternative ('use read_paper to access content'). This serves as both when-to-use and when-not-to-use guidance, going beyond a simple definition.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
read_paperARead-only
Read the text content of a paper that was previously downloaded via download_paper. Returns the paper in markdown format and supports start/max_chars pagination for large papers. Will fail with a clear error if the paper has not been downloaded yet β call download_paper first. Workflow: search_papers -> download_paper -> read_paper.
| Name | Required | Description | Default |
|---|---|---|---|
| start | No | Zero-based character offset for reading large papers in chunks | |
| paper_id | Yes | The arXiv ID of the paper to read | |
| max_chars | No | Maximum raw paper characters to return from start; omit for full content |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations provide readOnlyHint=true, and the description adds substantial behavioral context: it returns markdown, supports start/max_chars pagination for large papers, and fails with a clear error if the prerequisite download is missing. This goes well beyond annotation-only information.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three sentences, each contributing: purpose, return format and pagination, and prerequisite workflow. Information is front-loaded and there is no redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool is moderately simple, but with no output schema, the description compensates by stating return format (markdown) and pagination. It lacks details on what the markdown includes (e.g., figures, references) but is otherwise complete for the workflow.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Input schema covers 100% of parameters with clear descriptions for paper_id, start, and max_chars. The description mentions pagination but adds no new meaning beyond the schema; it is a fair baseline given full schema coverage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
βRead the text content of a paperβ clearly states the verb and resource. It explicitly distinguishes from siblings like download_paper (which fetches) and get_abstract (which reads only the abstract), and specifies the markdown output and pagination support.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly says to call download_paper first and gives a workflow: search_papers -> download_paper -> read_paper. It also warns about failure if the paper is not downloaded, making the usage context crystal clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
reindexA
Rebuild the local semantic index for downloaded papers.
| Name | Required | Description | Default |
|---|---|---|---|
| clear_existing | No | If true, clear the existing index before rebuilding. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate the tool is not read-only and not destructive, so the description need not restate those. It adds useful scoping (local, downloaded papers), but it does not disclose the default behavior of clear_existing (default true) or potential side effects like deletion of the existing index before rebuild. This is a moderate addition beyond annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The entire description is a single sentence that directly states the action and scope without unnecessary words. It is concise and well-structured.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple tool with one optional parameter and no output schema, the description covers the basic function. However, it omits important context such as the default clear_existing behavior, expected use cases, and potential time cost, making it minimally adequate but lacking full completeness.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The schema fully describes the only parameter, clear_existing, including its type and default value. The description adds no further parameter-level details, so it does not compensate beyond the schema's coverage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses the specific verb 'Rebuild' and identifies the resource 'local semantic index' for 'downloaded papers', which clearly defines the tool's scope. This distinguishes it from siblings like search_papers and semantic_search, which operate on the index rather than rebuild it.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives no guidance on when to use this tool or alternatives. It does not mention prerequisites (e.g., after adding new papers) or contrast with other maintenance operations. Users are left to infer the appropriate context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
search_papersARead-only
Search for papers on arXiv with advanced filtering and query optimization.
QUERY CONSTRUCTION GUIDELINES:
Use QUOTED PHRASES for exact matches: "multi-agent systems", "neural networks", "machine learning"
Combine related concepts with OR: "AI agents" OR "software agents" OR "intelligent agents"
Use field-specific searches for precision:
ti:"exact title phrase" - search in titles only
au:"author name" - search by author
abs:"keyword" - search in abstracts only
Use ANDNOT to exclude unwanted results: "machine learning" ANDNOT "survey"
For best results, use 2-4 core concepts rather than long keyword lists
ADVANCED SEARCH PATTERNS:
Field + phrase: ti:"transformer architecture" for papers with exact title phrase
Multiple fields: au:"Smith" AND ti:"quantum" for author Smith's quantum papers
Exclusions: "deep learning" ANDNOT ("survey" OR "review") to exclude survey papers
Broad + narrow: "artificial intelligence" AND (robotics OR "computer vision")
CATEGORY FILTERING (highly recommended for relevance): Computer Science:
cs.AI: Artificial Intelligence
cs.LG: Machine Learning
cs.CL: Computation and Language (NLP)
cs.CV: Computer Vision
cs.MA: Multi-Agent Systems
cs.RO: Robotics
cs.NE: Neural and Evolutionary Computing
cs.IR: Information Retrieval
cs.HC: Human-Computer Interaction
cs.CR: Cryptography and Security
cs.DB: Databases Statistics & Math:
stat.ML: Machine Learning (Statistics)
stat.AP: Applications
math.OC: Optimization and Control
math.ST: Statistics Theory Physics & Other:
quant-ph: Quantum Physics
eess.SP: Signal Processing
eess.AS: Audio and Speech Processing
physics.data-an: Data Analysis and Statistics
EXAMPLES OF EFFECTIVE QUERIES:
ti:"reinforcement learning" with categories: ["cs.LG", "cs.AI"] - for RL papers by title
au:"Hinton" AND "deep learning" with categories: ["cs.LG"] - for Hinton's deep learning work
"multi-agent" ANDNOT "survey" with categories: ["cs.MA"] - exclude survey papers
abs:"transformer" AND ti:"attention" with categories: ["cs.CL"] - attention papers with transformer abstracts
DATE FILTERING: Use YYYY-MM-DD format for historical research:
date_to: "2015-12-31" - for foundational/classic work (pre-2016)
date_from: "2020-01-01" - for recent developments (post-2020)
Both together for specific time periods
RESULT QUALITY: Default sort is RELEVANCE (most pertinent results first). Use sort_by: "date" to get newest papers first. Choose relevance for focused topic searches; choose date for monitoring recent developments.
RATE LIMITING: arXiv enforces a 3-second minimum between requests. This server handles that automatically. If you see a rate limit error, wait 60 seconds before retrying β do not call the tool repeatedly in a loop.
TIPS FOR FOUNDATIONAL RESEARCH:
Use date_to: "2010-12-31" to find classic papers on BDI, SOAR, ACT-R
Combine with field searches: ti:"BDI" AND abs:"belief desire intention"
Try author searches: au:"Rao" AND "BDI" for Anand Rao's foundational BDI work
| Name | Required | Description | Default |
|---|---|---|---|
| query | Yes | Search query using quoted phrases for exact matches (e.g., '"machine learning" OR "deep learning"') or specific technical terms. Avoid overly broad or generic terms. | |
| date_to | No | End date for papers (YYYY-MM-DD format). Use with date_from to find historical work, e.g., '2020-12-31' for older research. | |
| sort_by | No | Sort results by 'relevance' (most relevant first, default) or 'date' (newest first). Use 'relevance' for focused searches, 'date' for recent developments. | |
| date_from | No | Start date for papers (YYYY-MM-DD format). Use to find recent work, e.g., '2023-01-01' for last 2 years. | |
| categories | No | Strongly recommended: arXiv categories to focus search (e.g., ['cs.AI', 'cs.MA'] for agent research, ['cs.LG'] for ML, ['cs.CL'] for NLP, ['cs.CV'] for vision). Greatly improves relevance. | |
| max_results | No | Maximum number of results to return (default: 10, max: 50). Use 15-20 for comprehensive searches. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Adds behavioral details beyond annotations: default sort is relevance, rate limiting is auto-handled, and on rate limit error wait 60 seconds. Aligns with readOnlyHint and openWorldHint. No contradiction, but lacks explicit statement about output format (no output schema exists).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Description is long but well-organized with clear sections (Query Construction, Advanced Patterns, Category Filtering, etc.). Each section adds value, though some examples could be trimmed without loss. Front-loads purpose effectively.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a search tool with 6 parameters and no output schema, the description is exceptionally complete: covers query optimization, category catalogs, date ranges, sort options, rate limits, and research tips. Provides all necessary context for effective usage.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema covers 100% of parameters, but description massively enriches semantics: detailed query syntax with quoted phrases, OR, ANDNOT, field-specific searches, category code expansions with meanings, date format examples, and optimal parameter usage patterns. Far exceeds schema descriptions.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description clearly states 'Search for papers on arXiv with advanced filtering and query optimization' β a specific verb+resource with explicit scope. It distinguishes from siblings like get_abstract and read_paper by emphasizing search and filtering.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Extensive guidelines cover query construction, field-specific searches, category filtering, date filters, sort selection, and rate-limiting behavior. It gives explicit advice on when to use relevance vs. date, and when to use category filters, making tool selection and invocation clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
semantic_searchARead-only
Semantic similarity search over papers you have already downloaded locally via download_paper. Supports free-text queries (e.g. 'attention mechanisms for long sequences') or finding papers similar to a given paper_id. IMPORTANT: only searches your local downloaded collection β will return empty results if no papers have been downloaded yet. Use search_papers to find papers on arXiv, then download_paper to add them to the local index before using this tool. Requires pro dependencies: uv pip install -e ".[pro]"
| Name | Required | Description | Default |
|---|---|---|---|
| query | No | Free-text semantic query. | |
| paper_id | No | Find papers semantically similar to this arXiv paper ID. | |
| max_results | No | Maximum number of results to return (default: 10). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already indicate read-only and closed-world hints, but the description adds critical context: it only searches the local downloaded collection, returns empty results if no downloads exist, and requires pro dependencies with an install command. This goes beyond the annotations and provides valuable behavioral expectations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise and well-structured: the first sentence states purpose, the second flags a critical limitation, and the third provides workflow and installation context. Every sentence earns its place with no redundancy or fluff.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a read-only search tool with no output schema and high-quality annotations, the description covers purpose, scope, limitations, prerequisites, and usage workflow. It is complete enough for an agent to select and invoke the tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so parameter descriptions already provide clear semantics. The description adds an example query and frames query vs. paper_id as alternatives, but does not significantly extend beyond the schema. It meets the baseline for a covered schema without adding substantial new meaning.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool performs semantic similarity search over papers already downloaded locally via download_paper, using specific verbs and identifying the resource. It distinguishes itself from siblings by contrasting with search_papers (arXiv-wide search) and download_paper (fetching papers).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Usage guidance is explicit: the tool only searches the local collection, returns empty if no papers are downloaded, and provides a concrete workflow (use search_papers, then download_paper). It also states the pro dependency prerequisite. This clearly explains when to use it versus alternatives.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
watch_topicA
Save or update a persistent research topic watch. When checked via check_alerts, returns only papers published since the last check β acting as a standing alert for new work on a topic. The topic string uses the same query syntax as search_papers (quoted phrases, field specifiers, boolean operators). Examples: '"diffusion models" AND ti:"video generation"', 'au:"LeCun" AND cs.LG'. Calling watch_topic with the same topic string updates the existing watch rather than creating a duplicate. Pair with check_alerts to poll for new papers.
| Name | Required | Description | Default |
|---|---|---|---|
| topic | Yes | Query string to monitor. Uses arXiv search syntax β quoted phrases for exact matches, field specifiers (ti:, au:, abs:), and boolean operators (AND, OR, ANDNOT). Example: '"reinforcement learning" AND "robotics"'. | |
| categories | No | Optional arXiv category filter (e.g. ['cs.LG', 'cs.AI']). Narrows results to specific fields. | |
| max_results | No | Maximum papers to return per alert check (default: 10). |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description adds meaningful behavioral detail beyond annotations: it is persistent, returns only new papers since last check, and updates existing watches. It also explains the query syntax compatibility with search_papers. This goes beyond the minimal readOnly/destructive hints provided.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is concise and well-structured. It front-loads the core purpose, then adds usage context, examples, and an important behavioral caveat (update vs duplicate). Every sentence contributes essential information without repetition.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given that this is a stateful tool with no output schema, the description does a good job explaining the persist-and-poll workflow, query syntax, and update behavior. It lacks explicit error conditions or return format, but the 'returns only papers published since the last check' covers the key output behavior.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema fully describes all three parameters, but the description adds value by explaining the 'same query syntax as search_papers' and giving concrete examples. It also clarifies the update semantics of the topic parameter, which is not in the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb+resource: 'Save or update a persistent research topic watch.' It clearly distinguishes from sibling tools like check_alerts (which polls) and search_papers (which performs one-off searches) by framing it as a standing alert mechanism.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explicitly explains when to use it (to create a standing alert) and pairs it with check_alerts. It also clarifies that calling with the same topic updates rather than duplicates. It does not explicitly say when not to use it versus search_papers, but the context is clear.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
10 tool updates
v1.0.0- First observed
check_alerts - First observed
citation_graph - First observed
download_paper - First observed
get_abstract - First observed
list_papers - First observed
read_paper - First observed
reindex - First observed
search_papers - First observed
semantic_search - First observed
watch_topic
TDQS
Scored across 10 tools
Each tool has a clear, distinct purpose: remote search, local paper management, reading, metadata retrieval, semantic search, index maintenance, citation analysis, and topic alerts. There is no overlap between search_papers (remote) and semantic_search (local), and the download/read/list workflow is unambiguous.
Most tools follow a verb_noun snake_case pattern (search_papers, download_paper, read_paper, get_abstract, watch_topic, check_alerts). However, semantic_search, reindex, and citation_graph deviate (compound noun or bare verb), breaking the otherwise consistent imperative style.
Ten tools is well-scoped for a research assistant server. Each tool addresses a distinct stage of the arXiv workflow (search, evaluate, download, read, manage local collection, analyze citations, monitor new papers), with no redundant or filler tools.
The core workflow is covered: search β get_abstract β download β read β semantic_search, plus citation analysis and topic alerts. Minor gaps include no tool to delete downloaded papers or remove topic watches, but these are not critical for the primary research use case.
Maintenance
Related MCP Connectors
Search GitHub, npm, PyPI, StackOverflow, ArXiv from one MCP β built for coding agents.
Discover the latest arXiv papers by category and keyword. Control how many results you get to speeβ¦
Search and download academic papers from arXiv, PubMed, bioRxiv, medRxiv, Google Scholar, Semanticβ¦
Search arXiv, fetch paper metadata, and read full-text content.
Related MCP Servers
- AlicenseBqualityDmaintenanceEnables AI assistants to search and access arXiv research papers through a simple Message Control Protocol interface, allowing for paper search, download, listing, and reading capabilities.47Apache 2.0
- AlicenseBqualityNot gradedmaintenanceEnables AI assistants to search and retrieve academic papers from arXiv through MCP tools, supporting search by various criteria, detailed paper information, category browsing, and PDF content extraction.483 npm2-
- AlicenseBqualityDmaintenanceEnables AI assistants to search and access arXiv papers through a Model Context Protocol interface, allowing for paper search, download, listing, and reading functionality.42Apache 2.0
- FlicenseBqualityDmaintenanceEnables searching arXiv papers and retrieving paper metadata through MCP tools.42-