arxiv-mcp

# arxiv-mcp

> FastMCP 3.2 arXiv MCP + React/Vite dashboard (ports 10770/10771). Prefab paper cards via `[apps]` extra. DOI resolution via Unpaywall + Crossref.

**Full doc (tools, env, MCPB, troubleshooting):** [llms-full.txt](llms-full.txt)

## Entry

- Python package: `src/arxiv_mcp/` — `server.py` (MCP tools), `app.py` (FastAPI + `/mcp`). Dual transport: stdio (`--stdio`) and streamable HTTP (`--serve`, `/mcp`); `GET /.well-known/mcp/manifest.json` lists both.
- Web: `web_sota/` — React + Vite + Tailwind; `start.bat` from `web_sota/` or `just serve` for backend only.
- Docs: `README.md` (user), `docs/ARCHITECTURE.md`, `CHANGELOG.md` (releases).
- Fleet: `glama.json`, `manifest.json` (MCPB); `justfile` recipes.
- `src/arxiv_mcp/data/fleet_default.json` (Apps hub); `mcp-central-docs/projects/arxiv-mcp/README.md`.

## Security

- All external text (titles, abstracts, full text, blog content, DOI metadata) wrapped with adversarial safety boundary via `sanitize.py::wrap_untrusted()` before returning to LLM
- Zero-width Unicode character stripping on all ingested text

## Depot search

- Ingest writes Markdown + **SQLite FTS5** chunks (`chunks_fts`, porter + unicode61). `GET /api/depot/search` for BM25-ranked snippets.

## DOI resolution

- `resolve_doi` / `fetch_doi_content` — Unpaywall (primary) + Crossref (fallback). Extracts OA PDF, downloads and extracts text via pypdf. No API keys required.