Papermark: API, MCP and document access

Papermark is a data room, used globally for private equity and venture capital. The registry rates investor document access 2 of 5 (partner or client API with some friction): the API is available for GPs, and a vendor MCP server is available.

Vendor: PapermarkUnverified community researchUpdated
Category
Data room
Regions
Global, Europe
Asset classes
Private equity, Venture capital, Other
Investor access difficulty
2 / 5 Partner or client API with some friction
Automation policy
Unknown (terms not checked)
Verification
Unverified community research
Last updated

Access channels

Each way to get data out of Papermark, as recorded in the registry. "Unknown" means nobody has checked yet, not that the channel is missing.

ChannelStatusAuthDocsNotes
Web portalAvailableSSO: SAMLNot recordedData rooms with NDA gating, dynamic watermarking, granular permissions, Q&A, page-level analytics and custom domains. SSO on Data Rooms Premium and Enterprise. Recipients open links in the browser, often with email verification.
APIAvailableAPI key; OAuth 2.0 authorization codeDocs
OpenAPI spec 		Style: REST. Audience: GPs. Public REST API with bearer tokens (pm_live_...), scoped tokens and an OAuth 2.1 device flow. Datarooms, documents, links, visitors and analytics. Included from the Business plan (EUR 59 per month annual). Owner-side: no operations documented for a recipient.
MCP serverAvailableOAuth 2.0; API keyDocs
Source 		Transport: Streamable HTTP, stdio. Maintained by the vendor. Endpoint: https://mcp.papermark.com/mcp. Vendor MCP server, hosted (OAuth 2.0 with dynamic client registration and PKCE) and as the npm package @papermark/mcp-server (token via PAPERMARK_TOKEN). About 65 tools across datarooms, documents, links, folders, branding, visitors, analytics. Version 0.1.0, alpha. Acts as the owner's user.
SFTPNot offeredNot recordedNot recordedNot recorded
WebhooksPlannedNot recordedNot recordedListed as planned in the API docs.
Email notificationsAvailableNot recordedNot recordedOwners are notified of views; recipients receive share links by email.

How an investor gets documents today

Owner side is the best in class: public REST API with OpenAPI, scoped tokens, CLI and a vendor MCP server from a EUR 59 plan. Not a 1 because nothing is offered to the invited LP, who still reaches documents through browser links. The research records no investor-side API.

  • The API is for GPs, not for investors. Ask the GP or administrator to deliver documents to a nominated email address or SFTP folder, or to send a data feed from their side of the API. See Partner-only portal access explained.
  • MCP server. An MCP server is available. The registry has not confirmed that an investor account can connect to it, so check with Papermark before relying on it.
  • Email notifications. Turn on notifications and route them to a monitored mailbox, so new notices trigger your own processing. See How to automate capital call notices.
  • Manual download. Download documents from the web portal (exports recorded: PDF).
  • Check the terms. The registry has not reviewed the terms for automated access. Read them before automating anything.

Background: How to automate capital call notices and Partner-only portal access explained.

Capabilities and terms

What Papermark exposes to investors, according to the research: documents, fund reports and other.

  • Export formats: PDF
  • Standards: OpenAPI, OAuth 2.0, SAML SSO
  • Terms of service: No terms link recorded
  • Automation policy: Unknown (terms not checked)

OIPP status

Not yet on the open protocol. Papermark does not implement the Open Investor Portal Protocol (OIPP), the open API any portal can implement so investors reach every portal through one interface with their own key.

For Papermark. If anything on this page is wrong or out of date, correct the entry by pull request to the registry or by email. A pull request from a vendor-owned domain marks the entry vendor verified. Implementing OIPP lets investors and their agents fetch documents without scraping, under your own access rules. See the registry badge for how to show your status.

For Papermark: show your listing

If you operate Papermark, you can link to this registry entry from your developer, security or integrations page with the badge below. It links back here, so investors and their operations teams can see how access works.

Papermark: Listed on OpenInvestorPortal

<a href="https://openinvestorportal.com/portals/papermark/" title="Papermark on OpenInvestorPortal"><img src="https://openinvestorportal.com/badge/papermark.svg" alt="Papermark: Listed on OpenInvestorPortal" width="220" height="28"></a>

This entry is not vendor verified yet. Confirm it with a pull request from an email on your company domain, or with a DNS TXT record. See how the badge and vendor verification work.

Sources and notes

Open source data room (AGPLv3, github.com/mfts/papermark, about 9.3k stars) with a hosted SaaS and self-hosting on the Enterprise plan. Next.js, Postgres, S3. SOC 2 Type II, ISO 27001, GDPR, EU hosting per vendor. Used by GPs for fundraising data rooms and investor document sharing. The most programmable data room in the registry for the owner side: public REST API, OpenAPI spec, CLI and a vendor MCP server. Recipient-side programmatic access is not offered, so an LP still opens links in the browser. Because it is open source, it is a natural first implementation target for an OIPP endpoint. High confidence (vendor docs and GitHub, 2026-11-07).

Sources checked for the assessment:

Questions

Does Papermark have an API?

Yes. Papermark has a REST API for GPs. Public documentation is linked on this page. Investors are not listed among its users, so an LP usually cannot get credentials directly.

Does Papermark have an MCP server?

Yes. An MCP server is available for Papermark. Papermark maintains it. The registry has not confirmed that an investor account can use it.

Can investors download documents from Papermark programmatically?

The registry rates investor access 2 of 5: partner or client API with some friction. Owner side is the best in class: public REST API with OpenAPI, scoped tokens, CLI and a vendor MCP server from a EUR 59 plan. Not a 1 because nothing is offered to the invited LP, who still reaches documents through browser links. The research records no investor-side API. The usual route is delivery by the GP or administrator to a nominated email address, SFTP folder or data feed.

Independent community research. Not affiliated with Papermark. Facts are unverified community research as of 2026-11-07.

Comparisons

Other data rooms

Guides

More in the registry