Papex MCP server

Read from the package source without running it. The installed server may list more.

• papex_checkpoint
• papex_diff_checkpoints

  Compares two local checkpoints, or one checkpoint with what its folder holds right now, on this machine only: which files were added, removed or changed, with sizes and, for text files up to 256 KiB on each side, a unified line diff (capped at … lines per file and … in total). Binary or larger files are named as changed without content, and a content copy this device no longer holds is said to be

• papex_get_discovery_status

  Privately poll one agent-prepared Discovery draft using its research-record-draft grant. Returns workflow state and the human review URL only. It cannot publish, expose human edits, or establish that the declared result is true or novel.

• papex_get_draft_assist_context

  Read only human-selected, bounded authoring fields from one private draft owned by the connected grant. Affiliation, rights, Artifact decisions, lifecycle controls and signing fields are unavailable. This cannot save, accept, sign, or publish.

• papex_get_profile
• papex_get_publication_status

  Privately poll status of an agent-prepared research or Publication draft using its research-record-draft grant. Does not publish. Testable and Registered are workflow statuses, not scientific validation.

• papex_list_checkpoints

  Lists this machine's local checkpoint store as file then versions: content hash, size, local capture time, the checkpoints each version belongs to, and whether its content copy is still on this device. Each checkpoint also carries its id, manifest hash and file count, the same three values the checkpoint details in Papex shows. Reads the local index only: it contacts Papex for nothing, reads no fi

• papex_list_private_drafts

  List only bounded summaries of the connected grant owner's private Hypothesis, Discovery, and Publication drafts so the human can select one. Returns no manuscript, affiliation, artifact decisions, fingerprint, signing data, or other user's drafts.

• papex_list_records
• papex_lookup_reference

  Ask Papex to look up one reference identifier in its registry: Crossref or DataCite for a DOI, arXiv, or PubMed. Returns whether it was found and, if so, the registered title, authors, year, venue (journal, proceedings or publisher) and link. The lookup only says the identifier exists and what it is registered as; it does not check that the source supports any claim. ISBNs and web addresses are no

• papex_prepare_discoverywrite action

  Create a PRIVATE, structured Discovery draft from a bounded result. Does NOT publish. Before calling, identify the problem addressed, result summary, method or derivation, evidence, limitations, references or basis records \u2014 the exact signed version (id, version, content hash) of a Papex hypothesis or record this result builds on \u2014 and decision origins. To be ready for signing it needs a

• papex_prepare_hypothesiswrite action

  Create a PRIVATE hypothesis Draft on Papex from agent-prepared fields. Does NOT publish. Returns a review URL for human review and exact-version signing in the browser. Before calling, resolve or explicitly mark unresolved: system/population, variables, parameters, observer/reference frame, assumptions/scope, expected result, units, tolerance, research mode, known limitations, falsification criter

• papex_prepare_publication
• papex_prepare_publication_revision

  Select an exact signed base (baseVersion and baseContentHash for private records), then hash and upload one replacement PDF into a base-bound private vN+1 review. The base may be private or public; its access is unchanged. Refuses to overwrite other private revision work. Optional claimScope states what this version claims, under which assumptions, against which canonical statement, and how it dev

• papex_preview_capsule

  Read and hash a local research directory on this machine, without uploading bytes or creating a receipt. Returns relative paths, local hashes and heuristic file roles to the connected AI app. Skipped: common repository, dependency and build folders, symlinks, files with more than one hard link, and common environment, key, credential, token, secret and shell-history names. Skipping is by name, so

• papex_propose_draft_changeswrite action

  Create a proposal bound to one exact private draft version and fingerprint. The proposal does not mutate or save the draft. Only the accountable human can accept it, then explicitly save, decide affiliation and rights, resolve Artifacts, request signing, sign, or publish.

• papex_propose_record_artifact
• papex_restore_checkpoint
• papex_seal_draft
• papex_setup_delegation
• papex_upload_artifact_packagewrite action

  Hash and upload 1\u201332 explicitly selected Markdown, text, PDF, CSV, TSV, JSON, JSONL or notebook files into private Papex quarantine, bound to the exact version of an existing research record. The package and its parent link stay private and proposed. This tool cannot sign for the human, accept the link, state rights, release files, publish a record, issue a DOI, or make a scientific-correctne

• Code scan2 source files scanned25/25
• –Live reliabilityno gateway calls yet and no remote to proben/a
• –Tool poisoningtools not inspected (local package is not executed); not countedn/a
• Auth qualitystatic API keys via environment variables6/15
• Maintenancerepository not readable: repo not found3/15
• Maintainer identityverified namespace with website, no repo4/10

Papex: common questions

Is Papex MCP server safe?

With care: it is graded C, so read the findings first (58/100). Read the Papex safety report

How do I install Papex?

It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.

Does Papex need an API key?

Yes. The registry entry asks for PAPEX_DELEGATE_PRIVATE_KEY.

Is Papex maintained?

The latest release is v0.7.3.