ArXiv MCP Server by blazickjp

Quick Verdict

ArXiv MCP Server by blazickjp is a strong open-source option for researchers who want an MCP client to search arXiv, download papers, read long documents in bounded chunks, and keep a local collection. Release 0.5.1 requires Python 3.11 or newer and uses Apache-2.0. Its stable core workflow is search_papers to download_paper to read_paper, with list_papers for local inventory. It supports stdio and Streamable HTTP, prefers arXiv HTML, can fall back to PDF with an optional dependency, and returns pagination metadata instead of silently pretending a truncated paper is complete.

The decisive caveat is trust. arXiv includes preprints that may be wrong, outdated, superseded, or not peer reviewed. Paper text is also untrusted external input. The project explicitly warns that a malicious paper can include prompt-injection instructions intended to make an agent disclose data or call other tools. Use the server as a retrieval layer, not an autonomous research authority, and keep it isolated from shell, write, browser, messaging, and credential-bearing tools unless a person reviews every transition.

Best For

• Researchers and students who repeatedly search arXiv and benefit from a local paper cache.
• Technical-intelligence teams building a bounded candidate list before expert screening and synthesis.
• MCP developers who want a clear, mostly read-oriented research server with documented transports.
• Literature-review authors who need chunked reading and structured comparisons while preserving links to the source.
• Not ideal for users needing a curated peer-review database, licensed subscription full text, automatic fact certification, or unattended high-privilege agents.

Key Features

• Filtered paper search: query by topic with date, category, result-count, and relevance or recency controls.
• Rate-limit handling: the server enforces arXiv’s three-second request interval and recommends a 60-second wait after throttling.
• Download and cache: papers are stored locally; HTML is attempted first, with a [pdf] extra for older PDF-only records.
• Safe long-document paging: start, max_chars, next_start, returned_chars, and is_truncated make output boundaries visible.
• Local collection access: list downloaded paper IDs and read their extracted Markdown without repeating every network fetch.
• Research prompts: a deep-analysis workflow plus summary, comparison, and literature-review prompt surfaces.
• Experimental extensions: optional local semantic search, Semantic Scholar citation graphs, and topic alerts are useful but explicitly not fully tested.

Use Cases

• Run a date- and category-limited topic scan, then treat the returned abstracts as discovery metadata rather than complete evidence.
• Download one paper and page through methods, datasets, results, limitations, and appendices without overflowing the model context.
• Build a comparison matrix across selected papers, followed by manual checks of versions, tables, citations, and experimental conditions.
• Enable semantic similarity over papers already downloaded locally; it does not become a vector index of all arXiv.
• Register an experimental topic watch and poll conservatively for new papers while accepting false positives and missed terminology.

This server improves access, not epistemic quality. A model can still omit caveats, misread equations, hallucinate citations, or confuse an updated version with the original. Store the arXiv ID and version beside every derived note.

Pricing

The package is free under Apache-2.0. That license applies to server code, not automatically to every paper, figure, dataset, or supplementary artifact retrieved from arXiv. Each submission has its own copyright and reuse terms. Teams redistributing content should inspect the paper’s license rather than treating the MCP server license as blanket clearance.

The supported package is published on PyPI. The project warns that the npm package with the same name is unrelated; use uv tool install arxiv-mcp-server, not an assumed npm command. The base install covers the normal HTML workflow. The [pdf] extra adds PDF parsing, while [pro] brings heavier local embedding dependencies. There is no subscription or hosted SLA. Costs come from storage, compute, the MCP host model, optional embedding models, and outbound network access.

The default maximum search result count is 50 and the default request timeout is 60 seconds. The upstream three-second pacing is intentional. Do not evade it with parallel server instances. Queue requests, cache papers, back off after errors, and follow arXiv’s service rules.

Pros

• Complete core path from search through local download, inventory, chunked reading, and analysis prompts.
• Explicit pagination metadata prevents large papers from being mistaken for complete short outputs.
• stdio, HTTP, .mcpb, VS Code, and Codex setup paths cover several client environments.
• Clear Apache-2.0 package identity, Python requirements, and published release information.
• Security documentation directly addresses paper prompt injection and remote HTTP exposure.

Cons

• arXiv preprints are not automatically peer reviewed or factually reliable.
• Formulae, figures, tables, references, and multi-column PDF order can still be extracted incorrectly.
• HTTP transport does not provide a complete user identity and authorization product out of the box.
• Three-second upstream pacing limits bulk collection, and experimental tools lack a full stability promise.
• Optional embedding models add downloads, memory use, model-license review, and local data-governance work.

Installation requires PyPI or GitHub connectivity; live search and downloads require arXiv, and experimental citation graphs use Semantic Scholar. Base arXiv access generally needs no API key. Local stdio needs no project account. HTTP defaults to loopback and includes DNS-rebinding protections, but those controls are not authentication. Before remote access, add TLS, an authenticating reverse proxy, allowed origins and hosts, quotas, and logs that do not leak paper notes or user queries.

Alternatives

FAQ

Is ArXiv MCP Server free?

Yes. The code uses Apache-2.0. Model APIs, infrastructure, storage, and optional external services may still cost money.

Does it require an arXiv API key?

Normal search and download workflows generally do not. A shared HTTP deployment still needs your own user authentication and authorization.

Why are searches deliberately slow?

The project enforces arXiv’s three-second interval. After rate limiting, wait and back off instead of adding concurrency to bypass the policy.

Can I trust an AI paper summary?

No summary should be accepted without checking the source, version, methods, numbers, limitations, and citations. Preprints may not be peer reviewed.

Can an untrusted paper attack the agent?

Yes. Embedded text can attempt prompt injection. Keep the research server read-only, separate high-risk tools, and reject commands derived from paper content.

Which models can use the server?

Any MCP-compatible host can call it. Long-context handling, PDF comprehension, citation discipline, and injection resistance differ substantially by model.

Bottom Line

ArXiv MCP Server by blazickjp is a capable research retrieval component, especially for local caching and transparent long-paper pagination. Responsible use requires three separations: Apache licensing is not paper-content licensing; retrieved text is not verified knowledge; and an HTTP endpoint is not authenticated merely because it runs. Pin the package, honor upstream pacing, constrain storage and network exposure, isolate untrusted paper text from privileged tools, and require human verification before citing or acting on any model-generated analysis.