{ "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-12", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run" }, "tool": { "slug": "onlyoffice-mcp", "name": "ONLYOFFICE Apps MCP Server", "vendor": "ONLYOFFICE (Ascensio System SIA)", "vendorUrl": "https://www.onlyoffice.com", "kind": "mcp", "category": "file-storage", "summary": "ONLYOFFICE's official MCP server for ONLYOFFICE Apps, formerly DocSpace, its room-based cloud for documents. Agents manage rooms, folders, files and members through 23 tools, at a hosted endpoint with OAuth or as a self-run package.", "url": "https://www.anchorterminal.com/tools/onlyoffice-mcp", "markdownUrl": "https://www.anchorterminal.com/tools/onlyoffice-mcp.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/onlyoffice-mcp.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/onlyoffice-mcp.json", "repo": "https://github.com/ONLYOFFICE/docspace-mcp", "license": "MIT (changed from Apache-2.0 in 3.2.0). ONLYOFFICE Apps cloud under ONLYOFFICE's legal terms.", "transports": [ "stdio", "streamable-http", "sse" ], "remoteUrl": "https://mcp.onlyoffice.com/mcp", "packages": [ { "registry": "npm", "name": "@onlyoffice/docspace-mcp" }, { "registry": "oci", "name": "onlyoffice/docspace-mcp" } ], "auth": "mixed", "authNotes": "OAuth 2.0 with PKCE (S256) and dynamic client registration on the hosted server, which proxies to the ONLYOFFICE Apps authorisation server, strips scope parameters and so requests all scopes. Also API keys from Developer Tools, personal access tokens, Basic authentication and a raw `Authorization` header, sent as headers or, for username and password, in the connection URL.", "pricing": "byo-plan", "pricingNotes": "The MCP server is free and MIT-licensed. It acts on an ONLYOFFICE Apps (DocSpace) account. Startup is free with no credit card, up to 3 admins, 12 rooms and 2 GB. Business is $20 per admin per month on a limited-time offer, normally $30. Enterprise is quoted (https://www.onlyoffice.com/docspace-prices).", "priceSummary": "Your plan", "where": "both", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the repository, the docs or the pricing page, checked 12 October 2026. Plans are bought through the ONLYOFFICE account.", "endpoints": [] }, "toolCount": 23, "popularity": { "githubStars": null, "npmWeekly": 410, "pypiWeekly": null, "asOf": "2026-10-12" }, "docsUrl": "https://api.onlyoffice.com/docspace/mcp-server/getting-started/", "llmsTxt": "https://api.onlyoffice.com/docspace/mcp-server/llms.txt", "registryName": "io.github.ONLYOFFICE/docspace", "capabilities": [ "storage.drive", "storage.share", "work.docs" ], "tags": [ "official", "hosted", "local", "open-source", "oauth", "mcp-registry", "typescript", "security-txt", "free-tier", "no-card" ], "lastRelease": "2026-10-09", "graded": true, "anchor": { "graded": true, "score": 52.8, "grade": "D", "agentReady": false, "rank": 735, "ranked": true, "rankOf": 965, "categoryRank": 14, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 80, "maintenance": 60, "payments": 30, "reliability": 25, "schema": 73, "security": 46, "transparency": 67 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 25, "points": 5, "reason": "Hosted lines, for the public server at mcp.onlyoffice.com. No status page found. status.onlyoffice.com serves the ONLYOFFICE Apps web app and the site links none (0). No incident history to read (5). The self-hosted server's default limit, 1,000 requests a second per client on MCP endpoints, is documented, but the hosted instance's limits aren't (5 of 15). The server exposes RateLimit and Retry-After headers through CORS, with no retry guidance for agents found (5 of 15). No SLA found on any plan (0). Version 3.3.0 and the hosted endpoint are generally available (10)." }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 73, "points": 11.86, "reason": "Every tool has a JSON Schema input generated from zod, and most reads have an output schema (25). llms.txt at api.onlyoffice.com with an MCP Server section, and Markdown docs in the repository (10). Descriptions are one line, such as 'Delete a file.', with no when-to-use or when-not-to-use (5 of 20). Room types and filter fields are enums and `count` is bounded 1 to 50, but the batch copy and move IDs are typed unknown to work round a Windsurf parsing bug (10 of 15). Example prompts, client configurations and troubleshooting pages per client, no documented tool error responses (8 of 15). Keep a Changelog with semver and dated releases (15)." }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 80, "points": 13, "reason": "23 tools (15), plus toolsets, per-connection enabled and disabled tool lists and a meta-tool mode that exposes five tools and loads schemas on demand (+10, 25). Folder reads take `fields`, `count` up to 50, `startIndex`, filters, search and sort (20). Errors come back as tool results with the API's message, and troubleshooting pages cover connection errors, but tool error codes aren't documented (10 of 20). Every tool carries readOnlyHint, destructiveHint and, since 3.3.0, openWorldHint. No idempotency keys, and copy and move are marked non-destructive (15 of 20). One URL with OAuth, sensible defaults such as `count` 30 and room type 6, but `fields` is required on reads and there is one package, in TypeScript (10 of 15)." }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 46, "points": 8.05, "reason": "OAuth 2.0 with PKCE S256, revocation and dynamic client registration on the hosted server, but it strips scope parameters so every connection asks for all scopes, plus API keys and personal access tokens (22). The installation guide lists a username and password in the connection URL as an option, so 10 off (12 of 30). An operator can restrict a connection to read-only tools by toolset or tool list, and tools are annotated, but there's no confirmation step for destructive calls (12 of 20). download_file_as_text and folder listings return content any room member can write, and we found no prompt-injection guidance (0 of 15). Login and action tracking on Business and Enterprise plans, no per-call MCP log documented (10 of 15). Valid PGP-signed security.txt and a public HackerOne bug bounty. The security page says ONLYOFFICE isn't ISO-certified as a standalone product, and no SOC 2 was found (12 of 20)." }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 30, "points": 3.75, "reason": "No machine payment protocol (0). Plan pricing published without a login, $20 per admin per month on Business, normally $30, Enterprise by quote (10). Free Startup plan, and the sign-up page says no credit card is required (20). A person signs up in a browser and creates an API key or authorises OAuth (0)." }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 60, "points": 5.25, "reason": "Version 3.3.0 on 9 October 2026 (30). One release in the last 90 days, the one before was 3.2.0 on 18 March (0). GitHub issues and pull requests couldn't be read (the site answered 403), so responsiveness rests on a support address on the npm package and the community forum (5 of 25). Registered as io.github.ONLYOFFICE/docspace in the official MCP registry, 3.3.0 marked latest on 9 October (15). CI runs type checks, lint and tests on push, with an audit workflow, and 3.3.0 updated the MCP SDK to 1.31.0 (10)." }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 67, "points": 5.86, "note": "editorial 59, provenance 75", "reason": "MIT-licensed source on GitHub (30). The privacy policy (revision 2 July 2025) says data is kept as long as necessary, with no retention periods, says nothing about the hosted MCP server's handling of tokens, and names Ascensio System Limited once beside Ascensio System SIA (12 of 30). No deprecation policy for the server. The changelog keeps renamed options and keys working (5 of 20). The privacy policy names AWS for file storage, with the region set by the portal admin, and Google Analytics. No full subprocessor list checked (12 of 20)." } ], "assessment": { "date": "2026-10-12", "basis": "public evidence", "confidence": "medium", "notes": { "ergonomics": "23 tools (15), plus toolsets, per-connection enabled and disabled tool lists and a meta-tool mode that exposes five tools and loads schemas on demand (+10, 25). Folder reads take `fields`, `count` up to 50, `startIndex`, filters, search and sort (20). Errors come back as tool results with the API's message, and troubleshooting pages cover connection errors, but tool error codes aren't documented (10 of 20). Every tool carries readOnlyHint, destructiveHint and, since 3.3.0, openWorldHint. No idempotency keys, and copy and move are marked non-destructive (15 of 20). One URL with OAuth, sensible defaults such as `count` 30 and room type 6, but `fields` is required on reads and there is one package, in TypeScript (10 of 15).", "maintenance": "Version 3.3.0 on 9 October 2026 (30). One release in the last 90 days, the one before was 3.2.0 on 18 March (0). GitHub issues and pull requests couldn't be read (the site answered 403), so responsiveness rests on a support address on the npm package and the community forum (5 of 25). Registered as io.github.ONLYOFFICE/docspace in the official MCP registry, 3.3.0 marked latest on 9 October (15). CI runs type checks, lint and tests on push, with an audit workflow, and 3.3.0 updated the MCP SDK to 1.31.0 (10).", "payments": "No machine payment protocol (0). Plan pricing published without a login, $20 per admin per month on Business, normally $30, Enterprise by quote (10). Free Startup plan, and the sign-up page says no credit card is required (20). A person signs up in a browser and creates an API key or authorises OAuth (0).", "reliability": "Hosted lines, for the public server at mcp.onlyoffice.com. No status page found. status.onlyoffice.com serves the ONLYOFFICE Apps web app and the site links none (0). No incident history to read (5). The self-hosted server's default limit, 1,000 requests a second per client on MCP endpoints, is documented, but the hosted instance's limits aren't (5 of 15). The server exposes RateLimit and Retry-After headers through CORS, with no retry guidance for agents found (5 of 15). No SLA found on any plan (0). Version 3.3.0 and the hosted endpoint are generally available (10).", "schema": "Every tool has a JSON Schema input generated from zod, and most reads have an output schema (25). llms.txt at api.onlyoffice.com with an MCP Server section, and Markdown docs in the repository (10). Descriptions are one line, such as 'Delete a file.', with no when-to-use or when-not-to-use (5 of 20). Room types and filter fields are enums and `count` is bounded 1 to 50, but the batch copy and move IDs are typed unknown to work round a Windsurf parsing bug (10 of 15). Example prompts, client configurations and troubleshooting pages per client, no documented tool error responses (8 of 15). Keep a Changelog with semver and dated releases (15).", "security": "OAuth 2.0 with PKCE S256, revocation and dynamic client registration on the hosted server, but it strips scope parameters so every connection asks for all scopes, plus API keys and personal access tokens (22). The installation guide lists a username and password in the connection URL as an option, so 10 off (12 of 30). An operator can restrict a connection to read-only tools by toolset or tool list, and tools are annotated, but there's no confirmation step for destructive calls (12 of 20). download_file_as_text and folder listings return content any room member can write, and we found no prompt-injection guidance (0 of 15). Login and action tracking on Business and Enterprise plans, no per-call MCP log documented (10 of 15). Valid PGP-signed security.txt and a public HackerOne bug bounty. The security page says ONLYOFFICE isn't ISO-certified as a standalone product, and no SOC 2 was found (12 of 20).", "transparency": "MIT-licensed source on GitHub (30). The privacy policy (revision 2 July 2025) says data is kept as long as necessary, with no retention periods, says nothing about the hosted MCP server's handling of tokens, and names Ascensio System Limited once beside Ascensio System SIA (12 of 30). No deprecation policy for the server. The changelog keeps renamed options and keys working (5 of 20). The privacy policy names AWS for file storage, with the region set by the portal admin, and Google Analytics. No full subprocessor list checked (12 of 20)." }, "sources": [ { "what": "Repository at v3.3.0, README, CHANGELOG, tool definitions, schemas and docs", "url": "https://github.com/ONLYOFFICE/docspace-mcp", "seen": "2026-10-12" }, { "what": "Tool reference, toolsets and meta tools", "url": "https://github.com/ONLYOFFICE/docspace-mcp/blob/main/docs/reference/tools.md", "seen": "2026-10-12" }, { "what": "Installation guide, hosted endpoints and authentication methods", "url": "https://github.com/ONLYOFFICE/docspace-mcp/blob/main/docs/getting-started/installation.md", "seen": "2026-10-12" }, { "what": "Authentication proxy, dynamic registration and scope handling", "url": "https://github.com/ONLYOFFICE/docspace-mcp/blob/main/docs/getting-started/auth.md", "seen": "2026-10-12" }, { "what": "Hosted server OAuth metadata and 401 response", "url": "https://mcp.onlyoffice.com/.well-known/oauth-authorization-server", "seen": "2026-10-12" }, { "what": "Official MCP registry entries", "url": "https://registry.modelcontextprotocol.io/v0/servers?search=onlyoffice", "seen": "2026-10-12" }, { "what": "npm package and weekly downloads", "url": "https://registry.npmjs.org/@onlyoffice/docspace-mcp/latest", "seen": "2026-10-12" }, { "what": "MCP server product page", "url": "https://www.onlyoffice.com/mcp-server", "seen": "2026-10-12" }, { "what": "Pricing", "url": "https://www.onlyoffice.com/docspace-prices", "seen": "2026-10-12" }, { "what": "Sign-up page, no credit card required", "url": "https://www.onlyoffice.com/docspace-registration", "seen": "2026-10-12" }, { "what": "Security page, bug bounty and ISO statement", "url": "https://www.onlyoffice.com/security", "seen": "2026-10-12" }, { "what": "security.txt", "url": "https://www.onlyoffice.com/.well-known/security.txt", "seen": "2026-10-12" }, { "what": "Privacy policy", "url": "https://www.onlyoffice.com/privacy", "seen": "2026-10-12" }, { "what": "ONLYOFFICE Docs 10.0 release post", "url": "https://www.onlyoffice.com/blog/2026/10/onlyoffice-docs-10", "seen": "2026-10-12" } ], "openQuestions": [ "unchecked: GitHub stars, open issues and reply times. github.com answered 403 to the web page and the API", "unchecked: whether status.onlyoffice.com or another page carries service status for the hosted MCP server. It rendered as the web app", "Rate limits and retention for the hosted MCP instance aren't published", "Whether ONLYOFFICE Docs 10.0 changes the Docs API or the DocSpace API for agents. The release post covers editor changes only", "Whether a custom OAuth app's narrower scopes are kept when it is used through the hosted server, since the proxy drops scope parameters" ] }, "negative": 0, "verdict": "The 23 tools carry typed schemas, read-only and destructive annotations, toolsets and an optional five-tool meta mode, and the server is in the official MCP registry. OAuth through the hosted server grants every scope, the docs offer a username and password in the connection URL, uploads take only txt and md, and no status page or SLA was found.", "bestFor": "Agents that organise rooms, folders and access in an ONLYOFFICE Apps workspace a team already uses.", "strengths": [ "23 tools in four toolsets, each annotated with readOnlyHint and destructiveHint, with per-connection lists of enabled and disabled tools", "An optional meta-tool mode exposes five tools and fetches each tool's schema on demand", "Folder reads take a `fields` list, a `count` capped at 50 and a `startIndex` for paging", "MIT licence, a Keep a Changelog file with semver, and io.github.ONLYOFFICE/docspace in the official MCP registry", "Free Startup plan with no credit card required, up to 3 admins, 12 rooms and 2 GB" ], "weaknesses": [ "The hosted server drops OAuth scope parameters, so a connection is granted every scope the app has", "The installation guide lists a username and password in the connection URL as a setup option", "upload_file accepts only txt and md, and download_file_as_text returns text only", "No status page, SLA or published rate limits for the hosted instance found", "One release in the last 90 days, 3.3.0 on 9 October 2026, after 3.2.0 on 18 March" ], "agentNotes": [ "Connect to https://mcp.onlyoffice.com/mcp with OAuth or an API key in a header, never a username and password in the URL", "Enable only the toolsets or tools a task needs, so a read-only agent can't reach delete_file, delete_folder or set_room_security", "Pass `fields` and a `count` of at most 50 on folder reads, and page with `startIndex`", "Treat text from download_file_as_text as untrusted input, since anyone with access to the room can write it", "Convert content to txt or md before upload_file, the only formats it supports" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 52.8 } ], "editorialScores": { "ergonomics": 80, "maintenance": 60, "payments": 30, "reliability": 25, "schema": 73, "security": 46, "transparency": 59 }, "provenanceScore": 75 }, "connect": { "install": "npx -y @onlyoffice/docspace-mcp", "claudeCode": "claude mcp add --transport http onlyoffice-apps https://mcp.onlyoffice.com/mcp", "config": { "mcpServers": { "onlyoffice-apps": { "args": [ "run", "--interactive", "--rm", "--env", "DOCSPACE_BASE_URL", "--env", "DOCSPACE_API_KEY", "onlyoffice/docspace-mcp" ], "command": "docker", "env": { "DOCSPACE_API_KEY": "your-api-key", "DOCSPACE_BASE_URL": "https://your-instance.onlyoffice.com" } } } } }, "letme": { "capability": "https://letme.dev/storage.drive", "tool": "https://letme.dev/onlyoffice-mcp" }, "notable": [ "ONLYOFFICE Docs 10.0, released on 10 October 2026, adds AI tools inside the editors and removes built-in AI from the open-source builds. The release post names no API or MCP change (https://www.onlyoffice.com/blog/2026/10/onlyoffice-docs-10)", "Version 3.3.0 on 9 October 2026 renames DocSpace to ONLYOFFICE Apps in the docs and adds `openWorldHint` to every tool. The package, image, registry name and `DOCSPACE_*` options keep the old name (https://github.com/ONLYOFFICE/docspace-mcp/blob/main/CHANGELOG.md)", "The hosted instance answered an unauthenticated initialize with 401 and a `resource_metadata` pointer to its OAuth protected-resource document on 12 October 2026 (https://mcp.onlyoffice.com/.well-known/oauth-protected-resource)", "Also distributed as a Docker image, a Docker MCP Toolkit server and an MCP bundle (.mcpb) on each GitHub release (https://github.com/ONLYOFFICE/docspace-mcp)" ], "area": "everyday", "details": [ { "label": "Surface graded", "value": "The hosted server at mcp.onlyoffice.com with an ONLYOFFICE Apps cloud account, read from the repository at v3.3.0, the docs and the OAuth metadata on 12 October 2026. No authenticated call was made." }, { "label": "Tools", "value": "23 in four toolsets. Files 7, folders 6, people 1, rooms 9. Meta-tool mode wraps them in 5" }, { "label": "Destructive tools", "value": "delete_file, delete_folder, update_file, set_room_security and others marked destructiveHint" }, { "label": "File formats", "value": "Upload txt and md only. Download as text" }, { "label": "Self-hosted limits", "value": "1,000 requests a second per client on MCP endpoints by default, configurable. Hosted instance limits not published" }, { "label": "Free plan", "value": "Startup. 3 admins, unlimited users and guests, 12 rooms, 2 GB, no card" }, { "label": "Audit", "value": "Login and action tracking on Business and Enterprise" } ], "unitPrices": [ { "item": "ONLYOFFICE Apps Business", "unit": "seat-month", "usd": 20, "note": "Per admin. Limited-time offer, normally $30. Users and guests free." } ], "provenance": { "legalEntity": "Ascensio System SIA", "domain": "onlyoffice.com", "domainRegistered": "", "endpointOnVendorDomain": true, "terms": "https://www.onlyoffice.com/legalterms", "privacy": "https://www.onlyoffice.com/privacy", "statusPage": "", "changelog": "https://github.com/ONLYOFFICE/docspace-mcp/blob/main/CHANGELOG.md", "securityTxt": "valid", "checked": "2026-10-12", "notes": [ "security.txt at www.onlyoffice.com/.well-known/security.txt is PGP-signed, names security@onlyoffice.com and expires on 15 April 2027.", "status.onlyoffice.com serves the ONLYOFFICE Apps web app, not a status page, and no status page is linked from the site.", "The privacy policy (revision 2 July 2025) names Ascensio System SIA, and once Ascensio System Limited.", "Domain registration date was not checked." ], "score": 75, "checks": [ { "check": "Legal entity named", "value": "Ascensio System SIA", "points": 20, "max": 20, "state": "ok" }, { "check": "Domain age", "value": "onlyoffice.com, no registry record we could read", "points": 0, "max": 15, "state": "no" }, { "check": "Endpoint on the vendor's domain", "value": "mcp.onlyoffice.com", "points": 15, "max": 15, "state": "ok" }, { "check": "Terms of service", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "Privacy policy", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "Status page", "value": "not found", "points": 0, "max": 10, "state": "no" }, { "check": "Changelog", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "security.txt", "value": "valid", "points": 10, "max": 10, "state": "ok" } ] }, "pageJsonUrl": "https://www.anchorterminal.com/tools/onlyoffice-mcp.json", "live": { "slug": "onlyoffice-mcp", "probe": { "target": "https://mcp.onlyoffice.com/mcp", "method": "mcp-initialize", "lastAt": "2026-10-12T04:37:28.867278599Z", "lastOk": true, "lastStatus": 401, "lastMs": 291, "lastNote": "asks for credentials", "authRequired": true, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 286, "p95ms24h": 307, "samples24h": 21, "samples30d": 21, "days": [ { "date": "2026-10-12", "probes": 21, "ok": 21 } ] }, "versions": [ { "registry": "mcp-registry", "name": "io.github.ONLYOFFICE/docspace", "version": "3.3.0", "seenAt": "2026-10-12T03:41:01.347399174Z" } ], "updatedAt": "2026-10-12T04:37:28.867278599Z" } } }