AnyDoc

Fast local document extraction through Firecrawl's MIT-licensed AnyDoc Rust library, with a tenant-keyed standalone /v1/extract API and the swappable document.parse provider contract.

The public home of ryu-anydoc. Source, builds, and releases live here — binaries for every platform are attached to each release.

This tree is generated from the Ryu monorepo, so commits pushed here directly are replaced on the next sync. Pull requests are welcome — open them here and they are ported into the monorepo, then flow back out. Ryu as a whole: https://github.com/amajorai/ryu

Install

App: Install (opens the Ryu desktop app and asks you to confirm)

CLI:

ryu apps add @ryu/anydoc

Crate:

cargo install ryu-anydoc

Prebuilt binaries for every platform are attached to each release.

License

Apache-2.0 — see LICENSE.

What it converts

AnyDoc emits one GitHub-Flavored Markdown result for:

• Word: .doc, .docx, .docm
• PowerPoint: .ppt, .pps, .pot, .pptx, .pptm, .ppsx, .ppsm
• Excel: .xls, .xlsx, .xlsm, .xlsb
• OpenDocument: .odt, .ods, .odp
• .rtf, .epub, .csv, and text-based .pdf

The format is detected from document bytes when the format has a signature. A filename or explicit format is used for CSV and other signature-less input. Embedded assets remain available to the upstream AnyDoc document model, while the Markdown API returns their text/alt representation.

AnyDoc does not OCR scanned PDFs and does not make network requests in its Rust API. Such a PDF fails with needs_ocr; bind a backend with OCR when scans are part of the corpus.

Ryu provider

The manifest registers document.parse with the same submit-and-poll contract as the other parser apps:

POST /api/ext/@ryu/anydoc/parse
GET  /api/ext/@ryu/anydoc/capability
GET  /api/ext/@ryu/anydoc/jobs/{job_id}

Core sends either a confined blob path plus the original filename, or inline contentBase64 bytes. The sidecar resolves and checks path inputs against RYU_ANYDOC_ROOTS before reading them. The sidecar is loopback-only when Core starts it and accepts only Core's injected RYU_EXT_TOKEN on that lane.

Standalone service

The same binary exposes a versioned API at /v1/extract. Set a single API key:

RYU_ANYDOC_API_TOKEN=replace-me \
RYU_ANYDOC_HOST=0.0.0.0 \
RYU_ANYDOC_PORT=8097 \
ryu-anydoc

For more than one tenant, use a JSON object mapping tenant ids to distinct API keys:

RYU_ANYDOC_API_TOKENS='{"acme":"acme-secret","beta":"beta-secret"}' \
ryu-anydoc

Raw bytes avoid base64 overhead. X-Filename is required for format fallback:

curl -fsS https://extract.example.com/v1/extract \
  -H "Authorization: Bearer ${RYU_ANYDOC_API_TOKEN}" \
  -H 'Content-Type: application/pdf' \
  -H 'X-Filename: report.pdf' \
  --data-binary @report.pdf

JSON is useful for smaller integrations. The standalone /v1 API accepts inline bytes only; filesystem path input is restricted to the Core-managed provider route:

{
  "contentBase64": "...",
  "filename": "report.docx"
}

The response includes markdown, the detected format, the AnyDoc library version, a SHA-256 of the input, warnings, and a truncated flag. Errors keep a stable code, including needs_ocr, unsupported_format, encrypted_document, resource_limit, and input_too_large. Put TLS, edge rate limiting, and customer billing in the deployment layer; this service owns API-key authentication, tenant key separation, input/output bounds, and conversion.

Configuration

Variable	Default	Meaning
RYU_ANYDOC_HOST	127.0.0.1	Bind address; use 0.0.0.0 only behind a protected edge.
RYU_ANYDOC_PORT	8097	Listen port. Core supplies the profile-adjusted value.
RYU_EXT_TOKEN	unset	Core-to-sidecar bearer; unset means protected routes reject all requests.
RYU_ANYDOC_API_TOKEN	unset	One standalone bearer key.
RYU_ANYDOC_API_TOKENS	unset	Tenant-to-key JSON object for multi-tenant service mode.
RYU_ANYDOC_ROOTS	RYU_DIR	Absolute roots allowed for the provider's path form.
RYU_ANYDOC_MAX_INPUT_BYTES	200 MiB	Input ceiling.
RYU_ANYDOC_MAX_OUTPUT_BYTES	8 MiB	Shared output ceiling; clipping sets truncated: true.
RYU_ANYDOC_TIMEOUT_SECS	600	Per-conversion wall-clock ceiling.
RYU_ANYDOC_MAX_WORKERS	2	Concurrent conversions.
RYU_ANYDOC_MAX_JOBS	64	Retained submit-and-poll jobs.

The public /v1 route accepts only API keys. The mounted Ryu route also accepts the Core-injected bearer, and Core's own node authentication remains in front of it.

Development

cargo test --manifest-path apps-store/anydoc/backend/Cargo.toml
cargo run --manifest-path apps-store/anydoc/backend/Cargo.toml

The backend is Apache-2.0; the upstream AnyDoc dependency is MIT-licensed.

Star History