Docspace MCP server

online · 100% uptime

by ONLYOFFICE·io.github.ONLYOFFICE/docspace·v3.3.0·31 stars

No reviews yet

A room-based collaborative platform

A99/100grade A

Write a review Run it

What users say

No reviews yet

Be the first

Safety scan

A99/100

not scanned yet

Adoption

Established

31 stars161 downloads/wk

Reviews

Write one

Nobody has reviewed Docspace yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Docspace tools

Tool list not cached yet. `describe` through the gateway fetches it live.

Not scanned yet. New listings are scanned within a day or two of arriving.

How Docspace compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score: 99/100; higher than 99% of 48,255 servers
Uptime: 100%; of our recent checks; the typical remote server answers 100%
Response time: 408 ms; faster than 36% of 30,031 servers
GitHub stars: 31; more than 92% of 28,688 servers
Downloads a week: 161; more than 72% of 12,191 servers with a package

Release history: 2 versions in the registry since 2026-03-18, latest 2026-10-09, typically one every 205 days.

Install Docspace in Claude Code, Cursor or VS Code

claude mcp add --transport http docspace https://mcp.onlyoffice.com/mcp

Add to Cursor

What the publisher says

From the Docspace repository's README, as published. We do not edit it. Read it on GitHub

ONLYOFFICE DocSpace MCP Server

[Model Context Protocol] (MCP) is a standardized protocol for managing context between large language models (LLMs) and external systems. This repository provides an MCP server for [ONLYOFFICE DocSpace].

The DocSpace MCP Server connects AI tools directly to ONLYOFFICE DocSpace. This gives AI agents, assistants, and chatbots the ability to manage rooms, collaborate on files, handle permissions, and automate document workflows - all through natural language interactions.

Features

toolsets with fine-grained enable/disable capabilities and meta tools.

Tools with granular control - Access to tools organized into logical

transports.

Multiple transport protocols - Support for stdio, SSE, and Streamable HTTP

Tokens, Basic authentication, and OAuth 2.0 with dynamic client registration. See examples.

Different authentication methods - Supports API keys, Personal Access

during session initialization using custom HTTP headers.

Request-level configuration - Configure authentication and tool selection

Server](/docs/distribution/docker-mcp.md#user-content-docker-mcp-server), MCP bundle, and Node.js application.

Various distribution formats - Available as Docker image, [Docker MCP

Use Cases

Room Management: Create, update, and archive rooms. Configure room types, manage membership, and control access levels.
Folder & File Operations: Create folders, upload documents, copy or move items in batches, rename or delete content, and check file or folder details.
Collaboration & Permissions: Invite or remove users, adjust security settings, and review current access rights for rooms and shared spaces.
Content Access: Retrieve "My documents" or "Rooms" folders, get folder contents, download files as text, and monitor ongoing file operations.
People Directory: List all people in the portal to streamline invitations and access management.

Connecting Clients to DocSpace MCP Server

You can connect to the DocSpace MCP server using any MCP clients. We have covered some popular clients, such as Claude Desktop, Cursor, Windsurf, etc., and here you can read about it.

Remote DocSpace MCP Server

The remote DocSpace MCP Server is hosted by ONLYOFFICE and provides the fastest way to start using DocSpace tools inside your AI agent. You can connect to it instantly without deploying or configuring anything on your machine.

The public instance is available at https://mcp.onlyoffice.com/mcp for clients that support modern Streamable HTTP transport and at https://mcp.onlyoffice.com/sse for clients that support only the legacy SSE transport. It is preferable to use the Streamable HTTP transport whenever possible.

See all options for connecting clients to the Remote DocSpace MCP Server here.

Local DocSpace MCP Server

If your MCP host does not support remote MCP servers, you can run the local version of the DocSpace MCP Server instead.

Most clients that implement the MCP protocol have a common configuration file in the JSON format, inside which you can add the ONLYOFFICE DocSpace MCP Local Server.

Note: The common example below is applicable for Docker image, so Docker must be installed on your system.

Step 1. Locate your config file

Find your client .json configuration file.

Step 2. Add the DocSpace MCP Server entry

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Docspace: common questions

Is Docspace MCP server safe?: Yes, by our scan: it is graded A (99/100). Read the Docspace safety report
How do I install Docspace?: It runs remotely at mcp.onlyoffice.com. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
Does Docspace need an API key?: Yes. The registry entry asks for DOCSPACE_API_KEY, DOCSPACE_AUTH_TOKEN, DOCSPACE_AUTHORIZATION, DOCSPACE_PASSWORD and 6 more.
Is Docspace maintained?: The last commit was 44 days ago (2026-09-21). The latest release is v3.3.0.
Is Docspace up?: 100% of our last 28 checks got an answer. We check remote servers about four times a day.
How does Docspace compare with other MCP servers?: safety score 99/100 (higher than 99% of 48,255 servers); uptime 100% (of our recent checks; the typical remote server answers 100%); response time 408 ms (faster than 36% of 30,031 servers). Full comparison.

Run it through the gateway

With the gateway added, ask your agent for it by name:

agent prompt

call io.github.ONLYOFFICE/docspace → <tool>

Free per call. Metered, capped by your key, logged for reliability.

Add the gateway (gw.mcp.market)

Rating: —
Safety grade: A · 99/100
Stars: 31
Downloads/wk: 161
Price: Free
Licence: MIT
Transport: Remote · mixed
Uptime: 100% · 28/28 checks
Version: 3.3.0
Category: Everything else
Last release: 2026-09-21

Credentials it needs

DOCSPACE_API_KEYsecretThe API key for accessing the API.
DOCSPACE_BASE_URLThe base URL of the ONLYOFFICE Apps instance for API requests.
DOCSPACE_FILE_OPERATION_INTERVALThe interval for polling the status of in-progress file operations in milliseconds.
DOCSPACE_FILE_OPERATION_TIMEOUTThe maximum time to wait for a file operation to complete in milliseconds.
DOCSPACE_API_KEYsecretThe API key for accessing the API.
DOCSPACE_AUTH_TOKENsecretThe Personal Access Token (PAT) for accessing the API.
DOCSPACE_AUTHORIZATIONsecretThe raw value to include in the Authorization header for API requests.
DOCSPACE_BASE_URLThe base URL of the ONLYOFFICE Apps instance for API requests.
DOCSPACE_DISABLED_TOOLSThe list of tools to disable for the MCP server.
DOCSPACE_DYNAMICThe flag that indicates whether the MCP server should use meta tools.
DOCSPACE_ENABLED_TOOLSThe list of tools to enable for the MCP server.
DOCSPACE_FILE_OPERATION_INTERVALThe interval for polling the status of in-progress file operations in milliseconds.
DOCSPACE_FILE_OPERATION_TIMEOUTThe maximum time to wait for a file operation to complete in milliseconds.
DOCSPACE_PASSWORDsecretThe password for accessing the API using basic authentication.
DOCSPACE_TOOLSETSThe list of toolsets to enable for the MCP server.
DOCSPACE_TRANSPORTThe transport protocol to use for communication with the MCP server.
DOCSPACE_USER_AGENTThe user agent to include in the User-Agent header for API requests.
DOCSPACE_USERNAMEThe username for accessing the API using basic authentication.
DOCSPACE_API_KEYsecretThe API key for accessing the API.
DOCSPACE_AUTH_TOKENsecretThe Personal Access Token (PAT) for accessing the API.
DOCSPACE_AUTHORIZATIONsecretThe raw value to include in the Authorization header for API requests.
DOCSPACE_BASE_URLThe base URL of the ONLYOFFICE Apps instance for API requests.
DOCSPACE_DISABLED_TOOLSThe list of tools to disable for the MCP server.
DOCSPACE_DYNAMICThe flag that indicates whether the MCP server should use meta tools.
DOCSPACE_ENABLED_TOOLSThe list of tools to enable for the MCP server.
DOCSPACE_FILE_OPERATION_INTERVALThe interval for polling the status of in-progress file operations in milliseconds.
DOCSPACE_FILE_OPERATION_TIMEOUTThe maximum time to wait for a file operation to complete in milliseconds.
DOCSPACE_HOSTThe host to bind the server to.
DOCSPACE_OAUTH_AUTH_TOKEN_ALGORITHMThe algorithm to use for signing OAuth access tokens.
DOCSPACE_OAUTH_AUTH_TOKEN_SECRET_KEYsecretThe secret key to use for signing OAuth access tokens.
DOCSPACE_OAUTH_AUTH_TOKEN_TTLThe time-to-live (TTL) for OAuth access tokens in milliseconds.
DOCSPACE_OAUTH_BASE_URLThe base URL of the ONLYOFFICE Apps OAuth service for OAuth requests.
DOCSPACE_OAUTH_CLIENT_IDThe client ID of the OAuth application.
DOCSPACE_OAUTH_CLIENT_SECRETsecretThe client secret of the OAuth application.
DOCSPACE_OAUTH_STATE_TOKEN_ALGORITHMThe algorithm to use for signing OAuth state tokens.
DOCSPACE_OAUTH_STATE_TOKEN_SECRET_KEYsecretThe secret key to use for signing OAuth state tokens.
DOCSPACE_OAUTH_STATE_TOKEN_TTLThe time-to-live (TTL) for OAuth state tokens in milliseconds.
DOCSPACE_PASSWORDsecretThe password for accessing the API using basic authentication.
DOCSPACE_PORTThe port to bind the server to.
DOCSPACE_PROXY_HOPSThe number of proxy servers between the server and the client.
DOCSPACE_REQUEST_AUTHORIZATION_HEADERThe flag that indicates whether the server should check for the Authorization header in incoming requests.
DOCSPACE_REQUEST_HEADER_PREFIXThe prefix to use with custom configuration headers.
DOCSPACE_REQUEST_QUERYThe flag that indicates whether the server should accept configuration via query parameters in incoming requests.
DOCSPACE_SERVER_ALLOWED_HOSTNAMESThe list of allowed hostnames.
DOCSPACE_SERVER_BASE_URLThe base URL of the server.
DOCSPACE_SERVER_CORS_MCP_MAX_AGEThe maximum age in milliseconds to include in the Access-Control-Max-Age header for CORS requests to MCP endpoints.
DOCSPACE_SERVER_CORS_MCP_ORIGINThe list of allowed origins to include in the Access-Control-Allow-Origin header for CORS requests to MCP endpoints.
DOCSPACE_SERVER_CORS_OAUTH_MAX_AGEThe maximum age in milliseconds to include in the Access-Control-Max-Age header for CORS requests to OAuth endpoints.
DOCSPACE_SERVER_CORS_OAUTH_ORIGINThe list of allowed origins to include in the Access-Control-Allow-Origin header for CORS requests to OAuth endpoints.
DOCSPACE_SERVER_RATE_LIMITS_MCP_CAPACITYThe maximum number of requests allowed per window for the MCP endpoints.
DOCSPACE_SERVER_RATE_LIMITS_MCP_WINDOWThe time window in milliseconds for the rate limit for the MCP endpoints.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_AUTHORIZE_CAPACITYThe maximum number of requests allowed per window for the OAuth authorization endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_AUTHORIZE_WINDOWThe time window in milliseconds for the rate limit for the OAuth authorization endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_CALLBACK_CAPACITYThe maximum number of requests allowed per window for the OAuth callback endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_CALLBACK_WINDOWThe time window in milliseconds for the rate limit for the OAuth callback endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_INTROSPECT_CAPACITYThe maximum number of requests allowed per window for the OAuth introspection endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_INTROSPECT_WINDOWThe time window in milliseconds for the rate limit for the OAuth introspection endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_REGISTER_CAPACITYThe maximum number of requests allowed per window for the OAuth client registration endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_REGISTER_WINDOWThe time window in milliseconds for the rate limit for the OAuth client registration endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_RESOURCE_METADATA_CAPACITYThe maximum number of requests allowed per window for the OAuth resource metadata endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_RESOURCE_METADATA_WINDOWThe time window in milliseconds for the rate limit for the OAuth resource metadata endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_REVOKE_CAPACITYThe maximum number of requests allowed per window for the OAuth token revocation endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_REVOKE_WINDOWThe time window in milliseconds for the rate limit for the OAuth token revocation endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_SERVER_METADATA_CAPACITYThe maximum number of requests allowed per window for the OAuth server metadata endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_SERVER_METADATA_WINDOWThe time window in milliseconds for the rate limit for the OAuth server metadata endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_TOKEN_CAPACITYThe maximum number of requests allowed per window for the OAuth token endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_TOKEN_WINDOWThe time window in milliseconds for the rate limit for the OAuth token endpoint.
DOCSPACE_SESSION_INTERVALThe interval for checking HTTP sessions for expiration in milliseconds.
DOCSPACE_SESSION_TTLThe time-to-live (TTL) for HTTP sessions in milliseconds.
DOCSPACE_TOOLSETSThe list of toolsets to enable for the MCP server.
DOCSPACE_TRANSPORTThe transport protocol to use for communication with the MCP server.
DOCSPACE_USER_AGENTThe user agent to include in the User-Agent header for API requests.
DOCSPACE_USERNAMEThe username for accessing the API using basic authentication.
DOCSPACE_API_KEYsecretThe API key for accessing the API.
DOCSPACE_AUTH_TOKENsecretThe Personal Access Token (PAT) for accessing the API.
DOCSPACE_AUTHORIZATIONsecretThe raw value to include in the Authorization header for API requests.
DOCSPACE_BASE_URLThe base URL of the ONLYOFFICE Apps instance for API requests.
DOCSPACE_DISABLED_TOOLSThe list of tools to disable for the MCP server.
DOCSPACE_DYNAMICThe flag that indicates whether the MCP server should use meta tools.
DOCSPACE_ENABLED_TOOLSThe list of tools to enable for the MCP server.
DOCSPACE_FILE_OPERATION_INTERVALThe interval for polling the status of in-progress file operations in milliseconds.
DOCSPACE_FILE_OPERATION_TIMEOUTThe maximum time to wait for a file operation to complete in milliseconds.
DOCSPACE_HOSTThe host to bind the server to.
DOCSPACE_OAUTH_AUTH_TOKEN_ALGORITHMThe algorithm to use for signing OAuth access tokens.
DOCSPACE_OAUTH_AUTH_TOKEN_SECRET_KEYsecretThe secret key to use for signing OAuth access tokens.
DOCSPACE_OAUTH_AUTH_TOKEN_TTLThe time-to-live (TTL) for OAuth access tokens in milliseconds.
DOCSPACE_OAUTH_BASE_URLThe base URL of the ONLYOFFICE Apps OAuth service for OAuth requests.
DOCSPACE_OAUTH_CLIENT_IDThe client ID of the OAuth application.
DOCSPACE_OAUTH_CLIENT_SECRETsecretThe client secret of the OAuth application.
DOCSPACE_OAUTH_STATE_TOKEN_ALGORITHMThe algorithm to use for signing OAuth state tokens.
DOCSPACE_OAUTH_STATE_TOKEN_SECRET_KEYsecretThe secret key to use for signing OAuth state tokens.
DOCSPACE_OAUTH_STATE_TOKEN_TTLThe time-to-live (TTL) for OAuth state tokens in milliseconds.
DOCSPACE_PASSWORDsecretThe password for accessing the API using basic authentication.
DOCSPACE_PORTThe port to bind the server to.
DOCSPACE_PROXY_HOPSThe number of proxy servers between the server and the client.
DOCSPACE_REQUEST_AUTHORIZATION_HEADERThe flag that indicates whether the server should check for the Authorization header in incoming requests.
DOCSPACE_REQUEST_HEADER_PREFIXThe prefix to use with custom configuration headers.
DOCSPACE_REQUEST_QUERYThe flag that indicates whether the server should accept configuration via query parameters in incoming requests.
DOCSPACE_SERVER_ALLOWED_HOSTNAMESThe list of allowed hostnames.
DOCSPACE_SERVER_BASE_URLThe base URL of the server.
DOCSPACE_SERVER_CORS_MCP_MAX_AGEThe maximum age in milliseconds to include in the Access-Control-Max-Age header for CORS requests to MCP endpoints.
DOCSPACE_SERVER_CORS_MCP_ORIGINThe list of allowed origins to include in the Access-Control-Allow-Origin header for CORS requests to MCP endpoints.
DOCSPACE_SERVER_CORS_OAUTH_MAX_AGEThe maximum age in milliseconds to include in the Access-Control-Max-Age header for CORS requests to OAuth endpoints.
DOCSPACE_SERVER_CORS_OAUTH_ORIGINThe list of allowed origins to include in the Access-Control-Allow-Origin header for CORS requests to OAuth endpoints.
DOCSPACE_SERVER_RATE_LIMITS_MCP_CAPACITYThe maximum number of requests allowed per window for the MCP endpoints.
DOCSPACE_SERVER_RATE_LIMITS_MCP_WINDOWThe time window in milliseconds for the rate limit for the MCP endpoints.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_AUTHORIZE_CAPACITYThe maximum number of requests allowed per window for the OAuth authorization endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_AUTHORIZE_WINDOWThe time window in milliseconds for the rate limit for the OAuth authorization endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_CALLBACK_CAPACITYThe maximum number of requests allowed per window for the OAuth callback endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_CALLBACK_WINDOWThe time window in milliseconds for the rate limit for the OAuth callback endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_INTROSPECT_CAPACITYThe maximum number of requests allowed per window for the OAuth introspection endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_INTROSPECT_WINDOWThe time window in milliseconds for the rate limit for the OAuth introspection endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_REGISTER_CAPACITYThe maximum number of requests allowed per window for the OAuth client registration endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_REGISTER_WINDOWThe time window in milliseconds for the rate limit for the OAuth client registration endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_RESOURCE_METADATA_CAPACITYThe maximum number of requests allowed per window for the OAuth resource metadata endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_RESOURCE_METADATA_WINDOWThe time window in milliseconds for the rate limit for the OAuth resource metadata endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_REVOKE_CAPACITYThe maximum number of requests allowed per window for the OAuth token revocation endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_REVOKE_WINDOWThe time window in milliseconds for the rate limit for the OAuth token revocation endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_SERVER_METADATA_CAPACITYThe maximum number of requests allowed per window for the OAuth server metadata endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_SERVER_METADATA_WINDOWThe time window in milliseconds for the rate limit for the OAuth server metadata endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_TOKEN_CAPACITYThe maximum number of requests allowed per window for the OAuth token endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_TOKEN_WINDOWThe time window in milliseconds for the rate limit for the OAuth token endpoint.
DOCSPACE_SESSION_INTERVALThe interval for checking HTTP sessions for expiration in milliseconds.
DOCSPACE_SESSION_TTLThe time-to-live (TTL) for HTTP sessions in milliseconds.
DOCSPACE_TOOLSETSThe list of toolsets to enable for the MCP server.
DOCSPACE_TRANSPORTThe transport protocol to use for communication with the MCP server.
DOCSPACE_USER_AGENTThe user agent to include in the User-Agent header for API requests.
DOCSPACE_USERNAMEThe username for accessing the API using basic authentication.
DOCSPACE_API_KEYsecretThe API key for accessing the API.
DOCSPACE_AUTH_TOKENsecretThe Personal Access Token (PAT) for accessing the API.
DOCSPACE_AUTHORIZATIONsecretThe raw value to include in the Authorization header for API requests.
DOCSPACE_BASE_URLThe base URL of the ONLYOFFICE Apps instance for API requests.
DOCSPACE_DISABLED_TOOLSThe list of tools to disable for the MCP server.
DOCSPACE_DYNAMICThe flag that indicates whether the MCP server should use meta tools.
DOCSPACE_ENABLED_TOOLSThe list of tools to enable for the MCP server.
DOCSPACE_FILE_OPERATION_INTERVALThe interval for polling the status of in-progress file operations in milliseconds.
DOCSPACE_FILE_OPERATION_TIMEOUTThe maximum time to wait for a file operation to complete in milliseconds.
DOCSPACE_PASSWORDsecretThe password for accessing the API using basic authentication.
DOCSPACE_TOOLSETSThe list of toolsets to enable for the MCP server.
DOCSPACE_TRANSPORTThe transport protocol to use for communication with the MCP server.
DOCSPACE_USER_AGENTThe user agent to include in the User-Agent header for API requests.
DOCSPACE_USERNAMEThe username for accessing the API using basic authentication.
DOCSPACE_API_KEYsecretThe API key for accessing the API.
DOCSPACE_AUTH_TOKENsecretThe Personal Access Token (PAT) for accessing the API.
DOCSPACE_AUTHORIZATIONsecretThe raw value to include in the Authorization header for API requests.
DOCSPACE_BASE_URLThe base URL of the ONLYOFFICE Apps instance for API requests.
DOCSPACE_DISABLED_TOOLSThe list of tools to disable for the MCP server.
DOCSPACE_DYNAMICThe flag that indicates whether the MCP server should use meta tools.
DOCSPACE_ENABLED_TOOLSThe list of tools to enable for the MCP server.
DOCSPACE_FILE_OPERATION_INTERVALThe interval for polling the status of in-progress file operations in milliseconds.
DOCSPACE_FILE_OPERATION_TIMEOUTThe maximum time to wait for a file operation to complete in milliseconds.
DOCSPACE_HOSTThe host to bind the server to.
DOCSPACE_OAUTH_AUTH_TOKEN_ALGORITHMThe algorithm to use for signing OAuth access tokens.
DOCSPACE_OAUTH_AUTH_TOKEN_SECRET_KEYsecretThe secret key to use for signing OAuth access tokens.
DOCSPACE_OAUTH_AUTH_TOKEN_TTLThe time-to-live (TTL) for OAuth access tokens in milliseconds.
DOCSPACE_OAUTH_BASE_URLThe base URL of the ONLYOFFICE Apps OAuth service for OAuth requests.
DOCSPACE_OAUTH_CLIENT_IDThe client ID of the OAuth application.
DOCSPACE_OAUTH_CLIENT_SECRETsecretThe client secret of the OAuth application.
DOCSPACE_OAUTH_STATE_TOKEN_ALGORITHMThe algorithm to use for signing OAuth state tokens.
DOCSPACE_OAUTH_STATE_TOKEN_SECRET_KEYsecretThe secret key to use for signing OAuth state tokens.
DOCSPACE_OAUTH_STATE_TOKEN_TTLThe time-to-live (TTL) for OAuth state tokens in milliseconds.
DOCSPACE_PASSWORDsecretThe password for accessing the API using basic authentication.
DOCSPACE_PORTThe port to bind the server to.
DOCSPACE_PROXY_HOPSThe number of proxy servers between the server and the client.
DOCSPACE_REQUEST_AUTHORIZATION_HEADERThe flag that indicates whether the server should check for the Authorization header in incoming requests.
DOCSPACE_REQUEST_HEADER_PREFIXThe prefix to use with custom configuration headers.
DOCSPACE_REQUEST_QUERYThe flag that indicates whether the server should accept configuration via query parameters in incoming requests.
DOCSPACE_SERVER_ALLOWED_HOSTNAMESThe list of allowed hostnames.
DOCSPACE_SERVER_BASE_URLThe base URL of the server.
DOCSPACE_SERVER_CORS_MCP_MAX_AGEThe maximum age in milliseconds to include in the Access-Control-Max-Age header for CORS requests to MCP endpoints.
DOCSPACE_SERVER_CORS_MCP_ORIGINThe list of allowed origins to include in the Access-Control-Allow-Origin header for CORS requests to MCP endpoints.
DOCSPACE_SERVER_CORS_OAUTH_MAX_AGEThe maximum age in milliseconds to include in the Access-Control-Max-Age header for CORS requests to OAuth endpoints.
DOCSPACE_SERVER_CORS_OAUTH_ORIGINThe list of allowed origins to include in the Access-Control-Allow-Origin header for CORS requests to OAuth endpoints.
DOCSPACE_SERVER_RATE_LIMITS_MCP_CAPACITYThe maximum number of requests allowed per window for the MCP endpoints.
DOCSPACE_SERVER_RATE_LIMITS_MCP_WINDOWThe time window in milliseconds for the rate limit for the MCP endpoints.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_AUTHORIZE_CAPACITYThe maximum number of requests allowed per window for the OAuth authorization endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_AUTHORIZE_WINDOWThe time window in milliseconds for the rate limit for the OAuth authorization endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_CALLBACK_CAPACITYThe maximum number of requests allowed per window for the OAuth callback endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_CALLBACK_WINDOWThe time window in milliseconds for the rate limit for the OAuth callback endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_INTROSPECT_CAPACITYThe maximum number of requests allowed per window for the OAuth introspection endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_INTROSPECT_WINDOWThe time window in milliseconds for the rate limit for the OAuth introspection endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_REGISTER_CAPACITYThe maximum number of requests allowed per window for the OAuth client registration endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_REGISTER_WINDOWThe time window in milliseconds for the rate limit for the OAuth client registration endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_RESOURCE_METADATA_CAPACITYThe maximum number of requests allowed per window for the OAuth resource metadata endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_RESOURCE_METADATA_WINDOWThe time window in milliseconds for the rate limit for the OAuth resource metadata endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_REVOKE_CAPACITYThe maximum number of requests allowed per window for the OAuth token revocation endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_REVOKE_WINDOWThe time window in milliseconds for the rate limit for the OAuth token revocation endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_SERVER_METADATA_CAPACITYThe maximum number of requests allowed per window for the OAuth server metadata endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_SERVER_METADATA_WINDOWThe time window in milliseconds for the rate limit for the OAuth server metadata endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_TOKEN_CAPACITYThe maximum number of requests allowed per window for the OAuth token endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_TOKEN_WINDOWThe time window in milliseconds for the rate limit for the OAuth token endpoint.
DOCSPACE_SESSION_INTERVALThe interval for checking HTTP sessions for expiration in milliseconds.
DOCSPACE_SESSION_TTLThe time-to-live (TTL) for HTTP sessions in milliseconds.
DOCSPACE_TOOLSETSThe list of toolsets to enable for the MCP server.
DOCSPACE_TRANSPORTThe transport protocol to use for communication with the MCP server.
DOCSPACE_USER_AGENTThe user agent to include in the User-Agent header for API requests.
DOCSPACE_USERNAMEThe username for accessing the API using basic authentication.
DOCSPACE_API_KEYsecretThe API key for accessing the API.
DOCSPACE_AUTH_TOKENsecretThe Personal Access Token (PAT) for accessing the API.
DOCSPACE_AUTHORIZATIONsecretThe raw value to include in the Authorization header for API requests.
DOCSPACE_BASE_URLThe base URL of the ONLYOFFICE Apps instance for API requests.
DOCSPACE_DISABLED_TOOLSThe list of tools to disable for the MCP server.
DOCSPACE_DYNAMICThe flag that indicates whether the MCP server should use meta tools.
DOCSPACE_ENABLED_TOOLSThe list of tools to enable for the MCP server.
DOCSPACE_FILE_OPERATION_INTERVALThe interval for polling the status of in-progress file operations in milliseconds.
DOCSPACE_FILE_OPERATION_TIMEOUTThe maximum time to wait for a file operation to complete in milliseconds.
DOCSPACE_HOSTThe host to bind the server to.
DOCSPACE_OAUTH_AUTH_TOKEN_ALGORITHMThe algorithm to use for signing OAuth access tokens.
DOCSPACE_OAUTH_AUTH_TOKEN_SECRET_KEYsecretThe secret key to use for signing OAuth access tokens.
DOCSPACE_OAUTH_AUTH_TOKEN_TTLThe time-to-live (TTL) for OAuth access tokens in milliseconds.
DOCSPACE_OAUTH_BASE_URLThe base URL of the ONLYOFFICE Apps OAuth service for OAuth requests.
DOCSPACE_OAUTH_CLIENT_IDThe client ID of the OAuth application.
DOCSPACE_OAUTH_CLIENT_SECRETsecretThe client secret of the OAuth application.
DOCSPACE_OAUTH_STATE_TOKEN_ALGORITHMThe algorithm to use for signing OAuth state tokens.
DOCSPACE_OAUTH_STATE_TOKEN_SECRET_KEYsecretThe secret key to use for signing OAuth state tokens.
DOCSPACE_OAUTH_STATE_TOKEN_TTLThe time-to-live (TTL) for OAuth state tokens in milliseconds.
DOCSPACE_PASSWORDsecretThe password for accessing the API using basic authentication.
DOCSPACE_PORTThe port to bind the server to.
DOCSPACE_PROXY_HOPSThe number of proxy servers between the server and the client.
DOCSPACE_REQUEST_AUTHORIZATION_HEADERThe flag that indicates whether the server should check for the Authorization header in incoming requests.
DOCSPACE_REQUEST_HEADER_PREFIXThe prefix to use with custom configuration headers.
DOCSPACE_REQUEST_QUERYThe flag that indicates whether the server should accept configuration via query parameters in incoming requests.
DOCSPACE_SERVER_ALLOWED_HOSTNAMESThe list of allowed hostnames.
DOCSPACE_SERVER_BASE_URLThe base URL of the server.
DOCSPACE_SERVER_CORS_MCP_MAX_AGEThe maximum age in milliseconds to include in the Access-Control-Max-Age header for CORS requests to MCP endpoints.
DOCSPACE_SERVER_CORS_MCP_ORIGINThe list of allowed origins to include in the Access-Control-Allow-Origin header for CORS requests to MCP endpoints.
DOCSPACE_SERVER_CORS_OAUTH_MAX_AGEThe maximum age in milliseconds to include in the Access-Control-Max-Age header for CORS requests to OAuth endpoints.
DOCSPACE_SERVER_CORS_OAUTH_ORIGINThe list of allowed origins to include in the Access-Control-Allow-Origin header for CORS requests to OAuth endpoints.
DOCSPACE_SERVER_RATE_LIMITS_MCP_CAPACITYThe maximum number of requests allowed per window for the MCP endpoints.
DOCSPACE_SERVER_RATE_LIMITS_MCP_WINDOWThe time window in milliseconds for the rate limit for the MCP endpoints.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_AUTHORIZE_CAPACITYThe maximum number of requests allowed per window for the OAuth authorization endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_AUTHORIZE_WINDOWThe time window in milliseconds for the rate limit for the OAuth authorization endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_CALLBACK_CAPACITYThe maximum number of requests allowed per window for the OAuth callback endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_CALLBACK_WINDOWThe time window in milliseconds for the rate limit for the OAuth callback endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_INTROSPECT_CAPACITYThe maximum number of requests allowed per window for the OAuth introspection endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_INTROSPECT_WINDOWThe time window in milliseconds for the rate limit for the OAuth introspection endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_REGISTER_CAPACITYThe maximum number of requests allowed per window for the OAuth client registration endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_REGISTER_WINDOWThe time window in milliseconds for the rate limit for the OAuth client registration endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_RESOURCE_METADATA_CAPACITYThe maximum number of requests allowed per window for the OAuth resource metadata endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_RESOURCE_METADATA_WINDOWThe time window in milliseconds for the rate limit for the OAuth resource metadata endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_REVOKE_CAPACITYThe maximum number of requests allowed per window for the OAuth token revocation endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_REVOKE_WINDOWThe time window in milliseconds for the rate limit for the OAuth token revocation endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_SERVER_METADATA_CAPACITYThe maximum number of requests allowed per window for the OAuth server metadata endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_SERVER_METADATA_WINDOWThe time window in milliseconds for the rate limit for the OAuth server metadata endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_TOKEN_CAPACITYThe maximum number of requests allowed per window for the OAuth token endpoint.
DOCSPACE_SERVER_RATE_LIMITS_OAUTH_TOKEN_WINDOWThe time window in milliseconds for the rate limit for the OAuth token endpoint.
DOCSPACE_SESSION_INTERVALThe interval for checking HTTP sessions for expiration in milliseconds.
DOCSPACE_SESSION_TTLThe time-to-live (TTL) for HTTP sessions in milliseconds.
DOCSPACE_TOOLSETSThe list of toolsets to enable for the MCP server.
DOCSPACE_TRANSPORTThe transport protocol to use for communication with the MCP server.
DOCSPACE_USER_AGENTThe user agent to include in the User-Agent header for API requests.
DOCSPACE_USERNAMEThe username for accessing the API using basic authentication.

Endpoint

https://mcp.onlyoffice.com/mcp

streamable-http

Own this server?

Claim it to keep the listing current and reply to reviews. Claiming never changes the grade or hides a review.

Claim listing

Badge for your README

Shows the safety grade and links back to this page. It updates itself after every scan and review.

[![mcp.market](https://mcp.market/badge/onlyoffice-docspace.svg)](https://mcp.market/server/onlyoffice-docspace)

How the badge works