Docmost Community Bridge

An independent, AGPL-3.0 bridge that adds a small REST API and an MCP Streamable HTTP server to a self-hosted Docmost Community installation.

The bridge uses the authenticated routes already available in the AGPL Docmost Community server. It does not contain, copy, or depend on Docmost Enterprise API or MCP code.

Features

• List and create accessible spaces, and list pages.
• Read page content as Markdown, HTML, or JSON.
• Search accessible pages.
• Create pages from Markdown.
• Rename pages or append, prepend, and replace Markdown content.
• Use the same operations through REST or MCP.
• Protect every data endpoint with a static Bearer token.
• Run as a non-root user in Docker.

The bridge intentionally does not expose permanent deletion operations.

Requirements

• A reachable Docmost Community instance.
• A dedicated Docmost user account, preferably restricted to the spaces the automation is allowed to access.
• Docker, or Python 3.12 if running without Docker.

Configuration

Variable	Description
DOCMOST_URL	Internal Docmost URL, such as http://docmost:3000.
DOCMOST_EMAIL	Email of the Docmost automation account.
DOCMOST_PASSWORD	Password of the Docmost automation account.
BRIDGE_TOKEN	Long random Bearer token required by REST and MCP clients.
BRIDGE_PUBLIC_URL	Public HTTPS URL used to allow the reverse-proxy host, such as https://docs.example.com.

Never commit these values. Store them in a local .env file or a secrets manager.

Docker Compose example

services:
  docmost-bridge:
    build: .
    restart: unless-stopped
    environment:
      DOCMOST_URL: http://docmost:3000
      DOCMOST_EMAIL: ${DOCMOST_EMAIL}
      DOCMOST_PASSWORD: ${DOCMOST_PASSWORD}
      BRIDGE_TOKEN: ${BRIDGE_TOKEN}
      BRIDGE_PUBLIC_URL: https://docs.example.com
    ports:
      - "127.0.0.1:8000:8000"

Place the bridge on a Docker network shared with Docmost. Keep the published port bound to localhost and expose it through a TLS reverse proxy.

Endpoints

• POST /mcp - MCP Streamable HTTP endpoint.
• GET /bridge/v1/spaces - list accessible spaces.
• POST /bridge/v1/spaces - create a space from name and optional description, slug, or visible_to_everyone (defaults to true).
• DELETE /bridge/v1/spaces/{space_id} - permanently delete a space and its contents.
• GET|POST /bridge/v1/pages - list or create pages.
• GET|PATCH /bridge/v1/pages/{page_id} - read or update a page.
• POST /bridge/v1/pages/{page_id}/move - move a page to another space.
• GET /bridge/v1/search?q=... - search pages.
• GET /health - public container health check.

All endpoints except /health require this header:

Authorization: Bearer YOUR_BRIDGE_TOKEN

REST examples

curl -H "Authorization: Bearer $BRIDGE_TOKEN" \
  https://docs.example.com/bridge/v1/spaces

curl -X POST \
  -H "Authorization: Bearer $BRIDGE_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"space_id":"SPACE_UUID","title":"Meeting notes","content":"# Notes"}' \
  https://docs.example.com/bridge/v1/pages

MCP client configuration

Configure an MCP client with:

• Transport: Streamable HTTP
• URL: https://docs.example.com/mcp
• Header: Authorization: Bearer YOUR_BRIDGE_TOKEN

Available MCP tools:

• docmost_health
• list_spaces
• create_space
• list_pages
• get_page
• search_pages
• create_page
• update_page
• move_page_to_space

Security notes

• The bridge acts with the permissions of DOCMOST_EMAIL.
• Use a dedicated Docmost account instead of a workspace owner in production.
• Use a long random Bearer token and rotate it if it is disclosed.
• Do not expose port 8000 directly to the Internet.
• Terminate HTTPS at a trusted reverse proxy.

License

This project is licensed under the GNU Affero General Public License v3.0. See LICENSE.