← MCP Security Catalog

Morphik MCP 1.0.13

npm · @morphik/mcp · latest release

Verified with no proven findings
Security result
17
Observed tools
37
Version rating
100
Change risk

Independent inventory

Observed 2026-08-17T11:47:26.415Z using mcpSecurity-inventory. Protocol 2025-06-18.

ToolCategoryRisk
check-ingestion-statusCheck processing status for a document that is being ingested or processed.
Input schema
{
  "type": "object",
  "properties": {
    "documentId": {
      "type": "string"
    }
  },
  "required": [
    "documentId"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
delete-documentDelete a document and all of its derived data.
Input schema
{
  "type": "object",
  "properties": {
    "documentId": {
      "type": "string"
    }
  },
  "required": [
    "documentId"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
get-documentLookup metadata for a document by ID.
Input schema
{
  "type": "object",
  "properties": {
    "documentId": {
      "type": "string"
    }
  },
  "required": [
    "documentId"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
get-file-infoGet detailed information about a file or directory, including size, creation time, and permissions. Use this to check if a file exists and learn more about it before ingesting.
Input schema
{
  "type": "object",
  "properties": {
    "path": {
      "type": "string",
      "description": "Path to the file or directory"
    }
  },
  "required": [
    "path"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
get-pages-in-rangeRetrieve an inclusive page range (max 10 pages) from a document. Ideal for reading context around earlier chunk hits.
Input schema
{
  "type": "object",
  "properties": {
    "documentId": {
      "type": "string",
      "description": "Document ID to extract pages from"
    },
    "startPage": {
      "type": "number",
      "description": "First page in the range (1-indexed)"
    },
    "endPage": {
      "type": "number",
      "description": "Last page in the range (1-indexed, must be >= startPage)"
    },
    "folderName": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "array",
          "items": {
            "type": "string"
          }
        }
      ]
    },
    "endUserId": {
      "type": "string"
    }
  },
  "required": [
    "documentId",
    "startPage",
    "endPage"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
ingest-file-from-base64Add a file to Morphik's knowledge base by providing base64-encoded file content. This is useful in HTTP/HTTPS transport mode where clients may not have direct file system access. The tool decodes the base64 data and uploads it to Morphik.
Input schema
{
  "type": "object",
  "properties": {
    "filename": {
      "type": "string",
      "description": "The filename including extension (e.g., 'document.pdf', 'image.png')"
    },
    "base64Content": {
      "type": "string",
      "description": "Base64-encoded file content"
    },
    "metadata": {
      "type": "object",
      "additionalProperties": {},
      "description": "Optional metadata to associate with the file"
    },
    "rules": {
      "type": "array",
      "description": "Optional processing rules"
    },
    "folderName": {
      "type": "string",
      "description": "Optional folder to organize the document"
    },
    "endUserId": {
      "type": "string",
      "description": "Optional end user ID for scoping"
    },
    "useColpali": {
      "type": "boolean",
      "description": "Whether to use the colpali embedding model"
    }
  },
  "required": [
    "filename",
    "base64Content"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
ingest-file-from-pathAdd a file to Morphik's knowledge base by providing its path on the server's file system. This tool handles reading the file and uploading it to Morphik, making it searchable. Supports various file types including PDFs, Word documents, images, and more.
Input schema
{
  "type": "object",
  "properties": {
    "path": {
      "type": "string",
      "description": "Path to the file on the server's file system"
    },
    "metadata": {
      "type": "object",
      "additionalProperties": {},
      "description": "Optional metadata to associate with the file"
    },
    "rules": {
      "type": "array",
      "description": "Optional processing rules"
    },
    "folderName": {
      "type": "string",
      "description": "Optional folder to organize the document"
    },
    "endUserId": {
      "type": "string",
      "description": "Optional end user ID for scoping"
    },
    "useColpali": {
      "type": "boolean",
      "description": "Whether to use the colpali embedding model"
    }
  },
  "required": [
    "path"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
ingest-files-from-pathsAdd multiple files to Morphik's knowledge base simultaneously by providing their paths on the server's file system. This batch operation is more efficient than ingesting files one by one.
Input schema
{
  "type": "object",
  "properties": {
    "paths": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Array of file paths to ingest"
    },
    "metadata": {
      "anyOf": [
        {
          "type": "object",
          "additionalProperties": {}
        },
        {
          "type": "array",
          "items": {
            "type": "object",
            "additionalProperties": {}
          }
        }
      ],
      "description": "Single metadata object for all files or an array of metadata objects, one per file"
    },
    "rules": {
      "anyOf": [
        {
          "type": "array"
        },
        {
          "type": "array",
          "items": {
            "type": "array"
          }
        }
      ],
      "description": "Single list of rules for all files or an array of rule lists, one per file"
    },
    "folderName": {
      "type": "string",
      "description": "Optional folder to organize the documents"
    },
    "endUserId": {
      "type": "string",
      "description": "Optional end user ID for scoping"
    },
    "useColpali": {
      "type": "boolean",
      "description": "Whether to use the colpali embedding model"
    }
  },
  "required": [
    "paths"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
ingest-textAdd raw text into Morphik so it becomes searchable and available for retrieval.
Input schema
{
  "type": "object",
  "properties": {
    "content": {
      "type": "string"
    },
    "filename": {
      "type": "string"
    },
    "metadata": {
      "type": "object",
      "additionalProperties": {}
    },
    "rules": {
      "type": "array",
      "items": {
        "type": "object",
        "additionalProperties": {}
      }
    },
    "useColpali": {
      "type": "boolean"
    },
    "folderName": {
      "type": "string"
    },
    "endUserId": {
      "type": "string"
    }
  },
  "required": [
    "content"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
list-allowed-directoriesGet a list of directories the MCP server is allowed to access for file operations. Use this to understand where you can browse and select files for ingestion into Morphik.
Input schema
{
  "$schema": "http://json-schema.org/draft-07/schema#",
  "type": "object",
  "properties": {}
}
——
list-directoryList files and subdirectories in a specified directory. Results are marked as either [FILE] or [DIR]. Use this to browse file systems to find files you want to ingest into Morphik.
Input schema
{
  "type": "object",
  "properties": {
    "path": {
      "type": "string",
      "description": "The directory path to list files from"
    }
  },
  "required": [
    "path"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
list-documentsList documents with optional metadata filters. Supports high limits, folder scoping, and returning total counts.
Input schema
{
  "type": "object",
  "properties": {
    "skip": {
      "type": "number",
      "minimum": 0
    },
    "limit": {
      "type": "number",
      "minimum": 0,
      "maximum": 10000
    },
    "filters": {
      "type": "object",
      "additionalProperties": {}
    },
    "folderName": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "array",
          "items": {
            "type": "string"
          }
        }
      ]
    },
    "endUserId": {
      "type": "string"
    },
    "getCount": {
      "type": "boolean",
      "description": "If true, return the total count instead of document details."
    },
    "fields": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Optional subset of document fields to return."
    },
    "sortBy": {
      "type": "string",
      "enum": [
        "created_at",
        "updated_at",
        "filename",
        "external_id"
      ]
    },
    "sortDirection": {
      "type": "string",
      "enum": [
        "asc",
        "desc"
      ]
    }
  },
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
morphik-filtersShow, set, or clear typed metadata filters that automatically apply to retrieval and list commands.
Input schema
{
  "type": "object",
  "properties": {
    "action": {
      "type": "string",
      "enum": [
        "show",
        "set",
        "clear",
        "reset"
      ]
    },
    "expression": {
      "type": "object",
      "additionalProperties": {}
    },
    "expressionJson": {
      "type": "string"
    },
    "rules": {
      "type": "array",
      "items": {
        "type": "object",
        "properties": {
          "key": {
            "type": "string"
          },
          "operator": {
            "type": "string",
            "enum": [
              "eq",
              "regex",
              "number_range",
              "date_range"
            ]
          },
          "value": {},
          "min": {
            "type": "number"
          },
          "max": {
            "type": "number"
          },
          "from": {
            "type": "string"
          },
          "to": {
            "type": "string"
          }
        },
        "required": [
          "key"
        ],
        "additionalProperties": false
      }
    },
    "logic": {
      "type": "string",
      "enum": [
        "and",
        "or"
      ]
    }
  },
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
retrieve-chunksRetrieve the most relevant text or image pages for a given query. Always call this before answering knowledge-based questions.
Input schema
{
  "type": "object",
  "properties": {
    "query": {
      "type": "string"
    },
    "filters": {
      "type": "object",
      "additionalProperties": {}
    },
    "k": {
      "type": "number"
    },
    "minScore": {
      "type": "number"
    },
    "useReranking": {
      "type": "boolean"
    },
    "useColpali": {
      "type": "boolean"
    },
    "padding": {
      "type": "number"
    },
    "graphName": {
      "type": "string"
    },
    "hopDepth": {
      "type": "number"
    },
    "includePaths": {
      "type": "boolean"
    },
    "folderName": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "array",
          "items": {
            "type": "string"
          }
        }
      ]
    },
    "endUserId": {
      "type": "string"
    }
  },
  "required": [
    "query"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
retrieve-docsReturn complete documents that best match a query when you need broader context than individual chunks.
Input schema
{
  "type": "object",
  "properties": {
    "query": {
      "type": "string"
    },
    "filters": {
      "type": "object",
      "additionalProperties": {}
    },
    "k": {
      "type": "number"
    },
    "minScore": {
      "type": "number"
    },
    "useReranking": {
      "type": "boolean"
    },
    "useColpali": {
      "type": "boolean"
    },
    "folderName": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "array",
          "items": {
            "type": "string"
          }
        }
      ]
    },
    "endUserId": {
      "type": "string"
    }
  },
  "required": [
    "query"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
search-documentsSearch for documents by filename or title using full-text search. Use this to discover documents before retrieving their content.
Input schema
{
  "type": "object",
  "properties": {
    "query": {
      "type": "string"
    },
    "limit": {
      "type": "number",
      "minimum": 1,
      "maximum": 100
    },
    "folderName": {
      "anyOf": [
        {
          "type": "string"
        },
        {
          "type": "array",
          "items": {
            "type": "string"
          }
        }
      ]
    },
    "endUserId": {
      "type": "string"
    }
  },
  "required": [
    "query"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——
search-filesSearch for files matching a pattern in a directory and its subdirectories. This is useful for finding files when you don't know their exact location or want to find all files of a certain type.
Input schema
{
  "type": "object",
  "properties": {
    "path": {
      "type": "string",
      "description": "The root directory to search in"
    },
    "pattern": {
      "type": "string",
      "description": "The search pattern (case-insensitive)"
    },
    "excludePatterns": {
      "type": "array",
      "items": {
        "type": "string"
      },
      "description": "Patterns to exclude from search results"
    }
  },
  "required": [
    "path",
    "pattern"
  ],
  "additionalProperties": false,
  "$schema": "http://json-schema.org/draft-07/schema#"
}
——

Resources 0

Resource templates 0

Prompts 0

Changes from previous version

Compared with initial baseline using full_baseline.

RiskChangeSubject
No material changes recorded.

Confirmed vulnerabilities

SeverityFindingAdvisory
No confirmed vulnerability is published for this version.

Provenance

Artifact SHA-256: f8f202beac79c184162d5435f07c29b07cef3733210095501cdc03ad33b4ceac

Scanner: mcp-proof-engine 0.1.0.

Let’s talk about MCP security.

Share your details and our security team will contact you.