Documents and protection

Access boundary: Current capability and authority required.

Implemented; exact-byte, scanner and owner-access gates apply.

Surfaces: Web, REST and MCP with current document authority; native import/inspection subset.

Read the engineering guide · All features

Capabilities

1. Bounded PDF upload and remote import with English API diagnostics and only a sanitized public source hostname
2. Search, paginated listing, metadata and page reading
3. Quarantine, real antivirus, exact hash and PDF validation
4. Resume analysis of the same document without reimport
5. Browser-administrator scanner warm-up
6. Isolated HTML-to-PDF rendering into an immutable document
7. Private storage, quotas, retention and owner-level privacy
8. Assistant exclusions announced before content collection/processing; known excluded content is not imported/read even when stored or ready; scanning never proves its absence

REST operations

• GET /api/documents
• POST /api/documents
• POST /api/documents/render
• GET /api/documents/{id}/content
• POST /api/documents/{id}/rescan
• GET /api/documents/{id}

Read the REST integration guide for authentication, errors and contract discovery.

MCP tools

• get_document
• import_document
• list_documents
• read_document_pages
• render_pdf
• rescan_document

Read the MCP integration guide for scope, approval and host boundaries.