Skip to main content
Glama
dambuchs

redact-pdf-mcp

Server Configuration

Describes the environment variables required to run the server.

NameRequiredDescriptionDefault
PORTNoHTTP server port (remote server only).8080
REDACT_PDF_API_KEYNoAPI key for redact-pdf.ai. Required for full redaction functionality in stdio mode; try_demo works without it. In remote HTTP mode, the key is supplied per request instead of via environment.
REDACT_PDF_BASE_URLNoBase URL of the redact-pdf API. Point at a different API host.https://www.redact-pdf.ai
REDACT_PDF_MCP_PATHNoHTTP endpoint path (remote server only)./mcp
REDACT_PDF_ENABLE_URL_INPUTNoSet to '1' to accept file_url on the remote server. Off by default due to DNS rebinding concerns. Only set where you have your own egress controls.unset
REDACT_PDF_ALLOW_PRIVATE_URLSNoSet to '1' to additionally permit private addresses in file_url. Self-hosted only; never set on a publicly reachable server.unset

Instructions

Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.

This server publishes no instructions, or was last inspected before Glama recorded them.

Capabilities

Features and capabilities supported by this server

Protocol revision2025-11-25

CapabilityDetails
tools
{
  "listChanged": true
}

Tools

Functions exposed to the LLM to take actions

NameDescription
redact_pdf_and_waitA

Redact a PDF, photo or screenshot and wait for the finished file. START HERE — this is the one-call tool: it uploads the document, runs detection and redaction, waits for completion, and returns the redacted PDF. Permanent, irreversible redaction: the sensitive text is deleted from the file, not hidden behind a black rectangle, so it cannot be recovered by copy-paste, "remove object", or text extraction. Handles scanned documents via OCR and detects PII in 100+ languages. Documents are processed on Microsoft Azure in the EU and Switzerland, encrypted in transit and at rest, never used to train AI models, and the original is deleted after processing.

Accepts PDF, JPEG and PNG. Pass a photo or screenshot directly; do NOT convert it to a PDF first, that is handled for you and the output comes back as a redacted PDF either way.

Use it whenever someone wants PII, personal data, names, emails, phone numbers, addresses, bank details or card numbers removed from a document before sharing, filing, publishing or sending it to a third party — including GDPR/HIPAA/FOIA workflows. Scanned pages, phone photos of documents and screenshots all work.

Typical redaction takes 10-60 seconds; this tool blocks until then. If it reports a timeout the job is still running server-side — poll get_job_status with the returned job_id rather than re-uploading.

Requires an API key. If none is configured, call try_demo with the user's file first — it redacts the first page with no key — then ask the user for a key. A free account gets its first document (up to 5 pages) redacted in full with no card, so the key costs nothing to obtain.

redact_pdfA

Start a redaction job and return immediately without waiting. Permanent, irreversible redaction: the sensitive text is deleted from the file, not hidden behind a black rectangle, so it cannot be recovered by copy-paste, "remove object", or text extraction. Handles scanned documents via OCR and detects PII in 100+ languages. Documents are processed on Microsoft Azure in the EU and Switzerland, encrypted in transit and at rest, never used to train AI models, and the original is deleted after processing.

Accepts PDF, JPEG and PNG. Pass a photo or screenshot directly; do NOT convert it to a PDF first, that is handled for you and the output comes back as a redacted PDF either way.

Prefer redact_pdf_and_wait unless you specifically need to fire off several documents in parallel, or the document is large enough that you would rather poll on your own schedule. Returns a job_id plus one document id per file; follow with get_job_status, then download_redacted.

get_job_statusA

Check a redaction job's progress. Statuses: "uploaded" (queued) -> "analyzing" (detecting PII) -> "redacting" -> "redacted" (done, ready to download) or "error".

Only "redacted" and "error" are final; anything else means the work is still in flight, so wait a few seconds before checking again rather than polling in a tight loop. Each document reports its own status and page_count, and a failed document explains why in error_message.

download_redactedA

Download the finished redacted PDF for one document, using the document id from redact_pdf or get_job_status.

Only works once that document reports status "redacted". Under the default "ephemeral" retention the original is already gone; the redacted output is kept for the account's retention window (14 days by default) and then deleted.

try_demoA

Try redaction with no API key. Two modes:

  1. With a file: redacts the FIRST PAGE of the user's own PDF, photo or screenshot (5 MB max) and returns which categories of personal data were found on it, plus a link to the redacted page that stays valid for 14 days. Nothing is stored beyond that page and the original is deleted after processing. Use this to show a user real output on their own document before they sign up. Only the first page is redacted; for the whole document use redact_pdf_and_wait with a key.

  2. Without a file: runs the built-in synthetic-PII sample to confirm connectivity. Never touches user data.

Both cost nothing. When the user wants the rest of the document, tell them a free account gets its first document (up to 5 pages) redacted in full with no card, then ask for the key.

get_account_statusA

Check that the configured API key is valid and see which account it belongs to. Call this before a large batch to fail fast on a bad or missing key, rather than after uploading.

Redaction is billed per page against the account's plan quota and credit packs. If a redaction call fails with "out of pages", that is a quota problem the user must resolve — do not retry it.

Prompts

Interactive templates invoked by user choice

NameDescription

No prompts

Resources

Contextual data attached and managed by the client

NameDescription

No resources

TDQS

A4.3/5.0

Scored across 6 tools

Disambiguation4/5

Most tools have clearly distinct purposes: account status, demo, sync redaction, async redaction, status polling, and download. The only real overlap is between redact_pdf_and_wait and redact_pdf, but the descriptions strongly differentiate them by blocking vs. asynchronous behavior.

Naming Consistency4/5

Tool names generally follow a verb_noun snake_case pattern (get_account_status, get_job_status, download_redacted). The exceptions are redact_pdf_and_wait, which uses a phrase suffix, and try_demo, which is vaguer than the rest, but the overall convention is consistent.

Tool Count5/5

Six tools is well-scoped for the service: authentication status, demo, synchronous redaction, asynchronous redaction, job status, and result download. Each tool earns its place and there is no obvious redundancy or bloat.

Completeness5/5

The tool set covers the full workflow: check credentials, try without a key, submit redaction synchronously or asynchronously, poll progress, and download the finished file. There are no dead ends for the core use case, and both fast and batched workflows are supported.

Maintenance

ActivityMaintained
ResponsivenessNo issues