Skip to main content
Glama

Finekot API

pdf_sign

op=verify: every signature in a PDF — signer and certificate, digest and cryptographic validity, whether the file was edited after signing (no trust store, chain of trust is not asserted). op=sign: add a PAdES-B (adbe.pkcs7.detached) signature from a PKCS#12 bundle; billed ×2. Unsigned PDF on verify returns signatures: []. Cost €0.005 per document, charged to the API key in Authorization: Bearer. Parameters — op: verify | sign; url: pdf url; p12_base64: PKCS#12 (.p12/.pfx) bundle, base64-encoded — required for op=sign; a multipart p12 alongside the pdf file is not supported, this API accepts one binary upload per call; password: PKCS#12 password (op=sign, empty if the bundle has none); reason: signing reason shown in the signature (op=sign, optional); location: signer location (op=sign, optional); contact: contact info (op=sign, optional).

Input Schema

NameRequiredDescriptionDefault
opNo
urlNo
reasonNo
contactNo
locationNo
passwordNo
p12_base64No

Output Schema

NameRequiredDescriptionDefault
resultYes

Schema Changelog

Changes observed during successful MCP inspections.

  1. First observed

TDQS

A4.4/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description supplies substantial behavioral context: cryptographic validity versus trust-chain assertions, post-signing edit detection, the unsigned-PDF edge case, signature format, upload limitations, billing, and API-key charging. These details go well beyond merely implying that verification reads and signing mutates.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The operation distinctions and important trust limitation are front-loaded, and nearly all of the text conveys actionable information. However, combining pricing, authentication, and a seven-parameter glossary into one dense paragraph reduces scanability.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a complex dual-mode tool with no annotations and an undescribed schema, this covers nearly all selection and invocation needs, while the output schema can carry return structure. It still leaves the nullable op's default behavior unstated and does not clarify whether signing produces a new file or modifies the source.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters5/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Despite 0% schema description coverage, the description explains all seven parameters, including op values, PKCS#12 encoding and formats, conditional requirements, empty-password handling, and optional sign-only metadata. The one-binary-upload constraint adds further invocation meaning absent from the schema.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description specifies two concrete operations on PDF signatures: verifying every signature and adding a PAdES-B signature from a PKCS#12 bundle. It also details what verification checks, but it does not explicitly distinguish this tool from the broader pdf_tools sibling.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The op=verify and op=sign sections provide clear operation-specific context, while the conditional p12_base64 requirement and multipart restriction guide signing calls. There is no explicit when-not-to-use guidance or alternative tool for other PDF operations or trust-chain validation.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Try in Browser

Glama MCP Gateway

Add one secure layer between your agents and this server.

Resources