pdfops-mcp
OfficialThe server provides deterministic PDF tools for AI agents via MCP: inspect and fill AcroForm PDF forms, merge PDFs, generate structured invoices, and check API quota.
pdf_inspect – list a PDF's form fields (names, types, options, values, maxLength), get a ready-to-use fill template, and detect XFA/hybrid forms.
pdf_fill – fill named AcroForm fields with string values, optionally flatten the form so values are baked in and fields become non-editable.
pdf_merge – merge two or more PDFs in the given order into one output file.
pdf_invoice – generate a complete, professionally laid-out invoice PDF from structured data (from/to, items, currency, tax, notes, etc.), with deterministic byte-identical output.
pdfops_usage – check quota/usage for the configured PDFops API key (tier, limit, used, remaining, reset date).
Inputs accept local file paths, HTTPS URLs, or base64 data URIs; outputs can be written to a file or returned inline as embedded PDF resources for hosted/remote runtimes.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@pdfops-mcpfill ~/docs/w9.pdf for Ada Lovelace"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
pdfops-mcp
MCP server that gives AI agents deterministic PDF tools, backed by the PDFops API: inspect AcroForm fields, fill forms, merge PDFs, and generate invoices — no Chromium, no native deps, nothing to host.
Beside a local agent, tools operate on file paths, so PDF bytes never transit the model context: your agent says "fill /tmp/form.pdf and save to /tmp/out.pdf" and gets a one-line confirmation back. Every PDF input also accepts an https:// URL or a data:application/pdf;base64,… URI, and every output can be returned inline instead of written — which is what makes the server work on hosted runtimes (see below).
Install
Claude Code
claude mcp add pdfops -- npx -y pdfops-mcpClaude Desktop (claude_desktop_config.json) / Cursor (.cursor/mcp.json)
{
"mcpServers": {
"pdfops": {
"command": "npx",
"args": ["-y", "pdfops-mcp"],
"env": { "PDFOPS_API_KEY": "pdfops_live_…" }
}
}
}PDFOPS_API_KEY is optional — without it you get the keyless trial (100 requests/IP/month). A free key (250/month, no card) takes one field at pdfops.dev/pricing.
Related MCP server: Agent Helper
Tools
Tool | What it does |
| List a PDF's form fields (names, types, options, values) + a paste-ready fill template. Call first on unfamiliar PDFs. |
| Fill AcroForm fields → write the filled PDF. Optional |
| Merge ≥2 PDFs in order → write the result. |
| Structured data → complete invoice PDF. Deterministic: same input, byte-identical output. |
| Quota check for the configured key. |
Running remotely (Smithery, Glama hosted, cloud IDE gateways)
A hosted MCP runtime executes this server on a machine where your agent's file paths do not exist. Nothing changes in the config — pass sources the server can reach and skip output_path:
Inputs (
pdf_path,pdf_paths): anhttps://URL the server can fetch (≤50 MB), or adata:application/pdf;base64,…URI for small files.Outputs: omit
output_pathandpdf_fill/pdf_merge/pdf_invoicereturn the PDF inline as an embeddedapplication/pdfresource (pdfops://filled.pdf, …) that the client saves. Withoutput_pathset, the file is written where the server runs.
Locally, absolute paths keep working exactly as before and remain the recommended form — bytes stay off the model context.
Example agent flow
"Fill the W-9 template at ~/docs/w9.pdf for Ada Lovelace and merge it with ~/docs/cover.pdf"
pdf_inspect→ discovers field names + fill templatepdf_fill→ writes the filled W-9pdf_merge→ writes the combined packet
Links
API docs: pdfops.dev/docs · OpenAPI: pdfops.dev/openapi.json · Typed client: pdfops-sdk · Questions: hello@pdfops.dev
Privacy Policy
This server runs on your machine and sends only what a tool call needs to the PDFops API (https://pdfops.dev): the PDF bytes you point it at, the field values you supply, and your API key if you set one. PDFops processes the request in memory and returns the result; it does not store your documents. Anonymous usage is metered per IP and per client tag (mcp) for quota and attribution only. Nothing is shared with third parties. The full policy, including retention and contact details, is at https://pdfops.dev/privacy. Questions: hello@pdfops.dev.
MIT © PDFops
Available Tools
5 toolspdf_fillFill PDF formAIdempotent
Fill AcroForm form fields in a PDF and save or return the result. Field names must exist in the PDF (use pdf_inspect first). All values are strings; checkboxes take "true"/"false"; dropdown/radio/optionlist values must be one of the field's options; text values must respect the field's maxLength from pdf_inspect. The source PDF is never modified. Returns the filled PDF written to output_path, or inline as an application/pdf resource when output_path is omitted; an existing file at output_path is overwritten. Encrypted PDFs are rejected with decrypt advice (common for government blanks with an empty user password), and a rejected fill writes no file at all.
| Name | Required | Description | Default |
|---|---|---|---|
| fields | Yes | Field name → string value (from pdf_inspect's fillTemplate) | |
| flatten | No | Bake values into page content and drop the AcroForm so fields are no longer editable | |
| pdf_path | Yes | Template PDF source: an absolute file path, an https:// URL, or a data:application/pdf;base64,… URI. Use a URL or data URI when this server runs remotely (Smithery, hosted gateways) where local paths do not exist. | |
| output_path | No | Absolute path to write the result. Omit when running remotely: the PDF is then returned inline as an application/pdf resource for the client to save. |
Output Schema
| Name | Required | Description |
|---|---|---|
| bytes | Yes | Size of the produced PDF in bytes |
| output_path | No | Absolute path written, when output_path was supplied |
| resource_uri | No | pdfops:// uri of the inline application/pdf resource, when output_path was omitted |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description goes well beyond the annotations: it explicitly states the source PDF is never modified, an existing output file is overwritten, encrypted PDFs are rejected with decrypt advice, and a rejected fill writes no file. These are important behavioral details not present in the annotations.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is dense but well-organized, front-loading the core action and then covering prerequisites, value formats, safety behavior, and error handling. Every clause contributes useful information, though it is longer than strictly necessary.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a form-filling tool with an output schema and annotations, the description covers all necessary operational aspects: validation via pdf_inspect, value constraints, output file vs inline behavior, overwrite semantics, source immutability, and encrypted-file handling. The agent has enough context to invoke the tool correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
While the schema already has 100% parameter coverage, the description adds crucial semantic detail beyond the schema: checkbox values must be "true"/"false", dropdown/radio values must match field options, text values must respect maxLength, and fields are always strings. This meaningfully helps the agent construct valid parameter values.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb and resource: "Fill AcroForm form fields in a PDF and save or return the result." It clearly distinguishes this tool from siblings like pdf_inspect, pdf_merge, and pdf_invoice by focusing on form filling.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides clear usage context: use pdf_inspect first to get field names, follow field-specific value constraints, and omit output_path when running remotely to get an inline result. It does not explicitly contrast with all sibling tools, but the prerequisites and conditions are specific enough.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
pdf_inspectInspect PDF form fieldsARead-onlyIdempotent
List a PDF's AcroForm form fields — names, types, options, current values, per-field maxLength where declared — plus a paste-ready fillTemplate object for pdf_fill and a hasXFA flag (hybrid AcroForm/XFA inputs lose their XFA layer when filled). A PDF with no fillable form returns count 0. Read-only: the PDF is fetched or read but never modified. Call this FIRST when filling an unfamiliar PDF, since pdf_fill rejects unknown field names and over-length values.
| Name | Required | Description | Default |
|---|---|---|---|
| pdf_path | Yes | PDF source: an absolute file path, an https:// URL, or a data:application/pdf;base64,… URI. Use a URL or data URI when this server runs remotely (Smithery, hosted gateways) where local paths do not exist. |
Output Schema
| Name | Required | Description |
|---|---|---|
| count | Yes | Number of form fields found; 0 when the PDF has no fillable form |
| fields | Yes | One entry per form field, in document order |
| hasXFA | Yes | True for hybrid AcroForm/XFA documents, whose XFA layer is dropped when filled |
| fillTemplate | Yes | Field name to empty-or-current value, ready to edit and pass to pdf_fill |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare readOnlyHint=true, idempotentHint=true, and destructiveHint=false, and the description's 'never modified' statement is consistent with them — no contradiction. It adds genuinely useful context beyond the annotations: the hasXFA caveat that hybrid AcroForm/XFA inputs 'lose their XFA layer when filled' and the count-0 edge case for PDFs with no fillable form.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three sentences with zero fluff: the core return value is front-loaded, the edge case occupies one short sentence, and the workflow guidance closes it out. The parenthetical XFA caveat is dense but earns its place because it warns of a destructive downstream side effect an agent would otherwise discover only after filling.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
With a single well-documented parameter, a full safety profile in annotations, and an output schema present, the bar is low and the description clears it easily. It covers purpose, return contents, the no-fields edge case, the XFA caveat, and ordering relative to pdf_fill — nothing an agent needs to call this tool correctly is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the parameter semantics are fully carried by the input schema, which already documents absolute paths, https URLs, data URIs, and the remote-server caveat. Baseline 3 applies; the description's 'fetched or read' phrasing loosely reinforces the URL/data-URI guidance but adds no new parameter-level meaning.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description starts with a specific verb and resource — 'List a PDF's AcroForm form fields' — and enumerates exactly what is returned (names, types, options, values, maxLength, a paste-ready fillTemplate, and a hasXFA flag). It distinguishes itself from the sibling pdf_fill by framing the output as direct input for that tool, so an agent can tell them apart without opening either schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The final sentence gives explicit when-to-use guidance: 'Call this FIRST when filling an unfamiliar PDF,' and justifies it with a concrete failure mode of the alternative — 'pdf_fill rejects unknown field names and over-length values.' This names the alternative, the triggering condition, and the rationale, leaving nothing to inference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
pdf_invoiceGenerate invoice PDFAIdempotent
Generate a complete, professionally laid-out invoice PDF from structured data — no template needed. Deterministic: the same input produces byte-identical output (safe to re-run). Note: without a paid PDFops key the output carries a small "Generated with pdfops.dev" footer line. Returns the invoice written to output_path, or inline as an application/pdf resource when output_path is omitted; an existing file at output_path is overwritten. Use this when you have invoice DATA and no document; if you already have an invoice PDF or a fillable template to populate, use pdf_fill instead.
| Name | Required | Description | Default |
|---|---|---|---|
| invoice | Yes | Invoice data | |
| output_path | No | Absolute path to write the result. Omit when running remotely: the PDF is then returned inline as an application/pdf resource for the client to save. |
Output Schema
| Name | Required | Description |
|---|---|---|
| bytes | Yes | Size of the produced PDF in bytes |
| output_path | No | Absolute path written, when output_path was supplied |
| resource_uri | No | pdfops:// uri of the inline application/pdf resource, when output_path was omitted |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare idempotentHint=true and destructiveHint=false, and the description adds valuable behavioral context beyond those hints: it states the output is byte-identical for the same input, safe to re-run, overwrites existing files at output_path, and includes a footer without a paid key. These are meaningful operational details an agent needs to invoke and reason about the tool correctly.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is information-dense but tightly structured, with the core purpose first, followed by determinism, licensing footer, output behavior, and sibling routing. Every sentence adds distinct value and none are redundant with the schema or annotations.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the nested invoice schema, annotations, and output schema, the description covers all essential operational aspects: what the tool does, when to use it, what output to expect, side effects like overwriting, determinism guarantees, and licensing-related watermarking. No important invocation-relevant context is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline is 3. The description goes beyond the schema by explaining the output_path behavior: omitting it returns the PDF inline as an application/pdf resource, while providing it writes to that path and overwrites existing files. It also clarifies that the invoice parameter is structured data, reinforcing the 'no template needed' claim.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('generate') and resource ('invoice PDF'), and further clarifies it produces a complete professionally laid-out PDF from structured data with no template needed. It explicitly distinguishes itself from pdf_fill, which handles existing PDFs or fillable templates, making sibling differentiation clear.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description gives explicit when-to-use guidance: use when you have invoice DATA and no document. It also names the alternative (pdf_fill) and the condition for choosing it, i.e., if you already have an invoice PDF or a fillable template. This leaves no ambiguity about tool selection.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
pdf_mergeMerge PDFsAIdempotent
Merge two or more PDFs into one, in the order given, and save or return the result. Source files are read only and never modified; an existing file at output_path is overwritten. Returns the merged PDF written to output_path, or inline as an application/pdf resource when output_path is omitted. This tool only concatenates whole documents: it does not reorder, rotate or delete pages within them, and it does not fill forms — use pdf_fill for a fillable form and pdf_invoice to build a document from data. An unreadable or rejected input fails with an error and writes no file, so a partial merge is never left behind.
| Name | Required | Description | Default |
|---|---|---|---|
| pdf_paths | Yes | In order, each a PDF source: an absolute file path, an https:// URL, or a data:application/pdf;base64,… URI. Use a URL or data URI when this server runs remotely (Smithery, hosted gateways) where local paths do not exist. | |
| output_path | No | Absolute path to write the result. Omit when running remotely: the PDF is then returned inline as an application/pdf resource for the client to save. |
Output Schema
| Name | Required | Description |
|---|---|---|
| bytes | Yes | Size of the produced PDF in bytes |
| output_path | No | Absolute path written, when output_path was supplied |
| resource_uri | No | pdfops:// uri of the inline application/pdf resource, when output_path was omitted |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
The description adds excellent behavioral detail: sources are never modified, an existing output_path is overwritten, failures write no file, and no partial merge is left behind. However, the explicit overwrite statement contradicts destructiveHint=false, which indicates the tool performs no destructive operations. Per the rubric, this annotation contradiction forces a score of 1.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is tightly written and front-loaded: operation, safety/overwrite behavior, return behavior, exclusions, and failure semantics each get one clear sentence. No sentence is filler.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The description covers return format, remote vs local invocation, failure atomicity, and exclusions of related tools. Given the schema and output schema already exist, nothing an agent needs to invoke this tool correctly is missing apart from the annotation conflict already flagged.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and both parameters already have detailed descriptions, so the baseline is 3. The description reinforces ordering and the inline return when output_path is omitted, but it does not add parameter meaning beyond what the schema provides.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Opens with a specific verb and resource: 'Merge two or more PDFs into one, in the order given'. It also distinguishes itself from siblings by explicitly stating it does not fill forms and by routing to pdf_fill and pdf_invoice, so an agent can select it confidently.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly says when to use alternatives: 'use pdf_fill for a fillable form and pdf_invoice to build a document from data.' It also gives conditional guidance for output_path (omit when running remotely) and notes it only concatenates whole documents, providing a clear boundary versus related tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
pdfops_usageCheck PDFops quotaARead-onlyIdempotent
Check the current PDFops API quota for the configured key: tier, limit, used, remaining, the billing period, and the reset timestamp. Read-only and safe to call before a batch to confirm there is headroom. Requires PDFOPS_API_KEY.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
Output Schema
| Name | Required | Description |
|---|---|---|
| tier | Yes | Plan name, e.g. free |
| used | Yes | |
| limit | Yes | Calls allowed in the current period |
| period | Yes | Billing period the counts belong to, YYYY-MM |
| remaining | Yes | |
| resets_at | Yes | ISO 8601 timestamp when used resets to 0 |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already mark it read-only, idempotent, and non-destructive; the description adds a prerequisite ('Requires PDFOPS_API_KEY') and clarifies that it performs no mutation and is safe for pre-batch checks. This meaningfully supplements the annotation metadata.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two dense sentences: the first states the resource and expected return fields, and the second covers safety, usage timing, and configuration requirements. There is no filler or redundant restatement.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given zero parameters, rich annotations, and an output schema, the description supplies all necessary extra context: what to expect, when to call it, and the required environment variable. Nothing important is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema is empty with 100% coverage, so the baseline is 4 for zero parameters. The description adds no parameter details, but none are needed.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific verb ('Check'), a specific resource ('current PDFops API quota for the configured key'), and enumerates the returned fields (tier, limit, used, remaining, billing period, reset timestamp). This clearly separates it from sibling tools like pdf_fill and pdf_merge, which are about document operations.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives an explicit use case: 'safe to call before a batch to confirm there is headroom.' It does not explicitly name sibling alternatives or state when not to use the tool, but the context is strong enough for an agent to select it correctly.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
5 tool updates
v0.3.2- Changed
pdf_fill4 fields changed- changed
Input schema / properties / output_path / descriptionPrevious value: -"Absolute path to write the filled PDF"New value: +"Absolute path to write the result. Omit when running remotely: the PDF is then returned inline as an application/pdf resource for the client to save." - changed
Input schema / properties / pdf_path / descriptionPrevious value: -"Absolute path to the template PDF"New value: +"Template PDF source: an absolute file path, an https:// URL, or a data:application/pdf;base64,… URI. Use a URL or data URI when this server runs remotely (Smithery, hosted gateways) where local paths do not exist." - changed
Input schema / requiredPrevious value: -[ - "pdf_path", - "fields", - "output_path" -]New value: +[ + "pdf_path", + "fields" +] - changed
Output schema / (root)Previous value: -nullNew value: +{ + "$schema": "http://json-schema.org/draft-07/schema#", + "additionalProperties": false, + "properties": { + "bytes": { + "description": "Size of the produced PDF in bytes", + "type": "integer" + }, + "output_path": { + "description": "Absolute path written, when output_path was supplied", + "type": "string" + }, + "resource_uri": { + "description": "pdfops:// uri of the inline application/pdf resource, when output_path was omitted", + "type": "string" + } + }, + "required": [ + "bytes" + ], + "type": "object" +}
- Changed
pdf_inspect2 fields changed- changed
Input schema / properties / pdf_path / descriptionPrevious value: -"Absolute path to the PDF to inspect"New value: +"PDF source: an absolute file path, an https:// URL, or a data:application/pdf;base64,… URI. Use a URL or data URI when this server runs remotely (Smithery, hosted gateways) where local paths do not exist." - changed
Output schema / (root)Previous value: -nullNew value: +{ + "$schema": "http://json-schema.org/draft-07/schema#", + "additionalProperties": false, + "properties": { + "count": { + "description": "Number of form fields found; 0 when the PDF has no fillable form", + "type": "integer" + }, + "fields": { + "description": "One entry per form field, in document order", + "items": { + "additionalProperties": false, + "properties": { + "checked": { + "type": "boolean" + }, + "maxLength": { + "description": "Longer values are rejected by pdf_fill", + "type": "integer" + }, + "name": { + "type": "string" + }, + "options": { + "description": "Permitted values for radio/dropdown/optionlist fields", + "items": { + "type": "string" + }, + "type": "array" + }, + "raw": {}, + "readOnly": { + "type": "boolean" + }, + "type": { + "description": "text, checkbox, radio, optionlist, or unsupported", + "type": "string" + }, + "value": { + "type": "string" + } + }, + "required": [ + "name", + "type", + "readOnly" + ], + "type": "object" + }, + "type": "array" + }, + "fillTemplate": { + "additionalProperties": { + "type": "string" + }, + "description": "Field name to empty-or-current value, ready to edit and pass to pdf_fill", + "type": "object" + }, + "hasXFA": { + "description": "True for hybrid AcroForm/XFA documents, whose XFA layer is dropped when filled", + "type": "boolean" + } + }, + "required": [ + "count", + "hasXFA", + "fields", + "fillTemplate" + ], + "type": "object" +}
- Changed
pdf_invoice3 fields changed- changed
Input schema / properties / output_path / descriptionPrevious value: -"Absolute path to write the invoice PDF"New value: +"Absolute path to write the result. Omit when running remotely: the PDF is then returned inline as an application/pdf resource for the client to save." - changed
Input schema / requiredPrevious value: -[ - "invoice", - "output_path" -]New value: +[ + "invoice" +] - changed
Output schema / (root)Previous value: -nullNew value: +{ + "$schema": "http://json-schema.org/draft-07/schema#", + "additionalProperties": false, + "properties": { + "bytes": { + "description": "Size of the produced PDF in bytes", + "type": "integer" + }, + "output_path": { + "description": "Absolute path written, when output_path was supplied", + "type": "string" + }, + "resource_uri": { + "description": "pdfops:// uri of the inline application/pdf resource, when output_path was omitted", + "type": "string" + } + }, + "required": [ + "bytes" + ], + "type": "object" +}
- Changed
pdf_merge4 fields changed- changed
Input schema / properties / output_path / descriptionPrevious value: -"Absolute path to write the merged PDF"New value: +"Absolute path to write the result. Omit when running remotely: the PDF is then returned inline as an application/pdf resource for the client to save." - changed
Input schema / properties / pdf_paths / descriptionPrevious value: -"Absolute paths of the PDFs to merge, in order"New value: +"In order, each a PDF source: an absolute file path, an https:// URL, or a data:application/pdf;base64,… URI. Use a URL or data URI when this server runs remotely (Smithery, hosted gateways) where local paths do not exist." - changed
Input schema / requiredPrevious value: -[ - "pdf_paths", - "output_path" -]New value: +[ + "pdf_paths" +] - changed
Output schema / (root)Previous value: -nullNew value: +{ + "$schema": "http://json-schema.org/draft-07/schema#", + "additionalProperties": false, + "properties": { + "bytes": { + "description": "Size of the produced PDF in bytes", + "type": "integer" + }, + "output_path": { + "description": "Absolute path written, when output_path was supplied", + "type": "string" + }, + "resource_uri": { + "description": "pdfops:// uri of the inline application/pdf resource, when output_path was omitted", + "type": "string" + } + }, + "required": [ + "bytes" + ], + "type": "object" +}
- Changed
pdfops_usage1 field changed- changed
Output schema / (root)Previous value: -nullNew value: +{ + "$schema": "http://json-schema.org/draft-07/schema#", + "additionalProperties": false, + "properties": { + "limit": { + "description": "Calls allowed in the current period", + "type": "integer" + }, + "period": { + "description": "Billing period the counts belong to, YYYY-MM", + "type": "string" + }, + "remaining": { + "type": "integer" + }, + "resets_at": { + "description": "ISO 8601 timestamp when used resets to 0", + "type": "string" + }, + "tier": { + "description": "Plan name, e.g. free", + "type": "string" + }, + "used": { + "type": "integer" + } + }, + "required": [ + "tier", + "limit", + "used", + "remaining", + "period", + "resets_at" + ], + "type": "object" +}
5 tool updates
v0.2.0- First observed
pdf_fill - First observed
pdf_inspect - First observed
pdf_invoice - First observed
pdf_merge - First observed
pdfops_usage
TDQS
Each tool targets a distinct operation: inspecting form fields, filling forms, merging documents, generating invoices, and checking API usage. The descriptions explicitly cross-reference when to use each tool, so an agent is unlikely to select the wrong one.
Most tools follow a clear pdf_<verb> pattern like pdf_inspect, pdf_fill, and pdf_merge. pdf_invoice is a noun-style exception and pdfops_usage breaks the prefix pattern, but the names remain readable and generally predictable.
Five tools is a well-scoped size for a focused PDF utility server. Each tool covers a distinct non-redundant operation, and none feel unnecessary or missing for the stated workflow.
The inspect-then-fill form workflow is well covered, and merge plus invoice generation provide useful end-to-end PDF creation paths without dead ends. Common PDF operations like splitting or rotating pages are absent, but the set appears intentionally scoped to form filling, merging, and invoice generation.
Maintenance
Related MCP Connectors
Generate and read PDFs for AI agents: a generate_pdf and a read_pdf tool, priced per document.
DXF and PDF/X-4 for AI agents: structured facts, PNG renders, an interactive in-chat viewer.
Deterministic fact verification for AI agents — checksums & curated data, not guesses.
Free PDF tools for AI agents: merge, split, rotate, watermark, page numbers, metadata, flatten.
Related MCP Servers
- AlicenseNot gradedqualityDmaintenancePrivacy-first file tools for AI agents, enabling operations like PDF merge/split, image compression/convert, metadata stripping, and background removal without storing files.57MIT
- FlicenseNot gradedqualityBmaintenanceEnables AI agents to process files locally — OCR images, extract text from PDFs and DOCX, and describe images using local vision models, all without sending data to external services.-
- FlicenseNot gradedqualityDmaintenanceA local PDF manipulation server for AI agents that provides tools for merging, splitting, extracting info, and converting images to PDF, all without uploading files.-
- FlicenseNot gradedqualityAmaintenanceEnables AI agents to perform comprehensive PDF operations locally, including compression, text extraction, PII redaction, page organization, splitting, merging, watermarking, creation, and form filling, all without cloud uploads.323-
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/pdfops/pdfops-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server