Skip to main content
Glama
108,095 servers. Updated
20 Best PDF MCP Servers: compared and ranked, October 2026Ranked from 1,892 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"A tool for reading PDF documents" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    A
    quality
    B
    maintenance
    Enables cryptographic PDF signature verification, tamper detection, PAdES baseline level determination, and PDF/A/PDF/UA conformance validation, along with policy-based trust verdicts.
    7
    425 npm
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Enables AI agents to permanently remove personally identifiable information from PDF documents, returning redacted files with the sensitive text deleted rather than merely covered. Supports scanned documents, multiple languages, entity types, and optional human review.
    6
    217 npm
    1
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables centralized proxy and orchestration of MCP servers, providing unified tool discovery, authentication, and secure request routing. It adds a human-in-the-loop approval gate for high-risk actions and audit logging.
    Apache 2.0
  • A
    license
    Not graded
    quality
    D
    maintenance
    A secure tool-execution plane for agentic AI that enforces JWT authentication, rate limiting, prompt-injection inspection, and audit logging, while ingesting downstream OpenAPI endpoints as MCP tools.
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables MCP tool handlers to be declared with a decorator, collected into a registry from a config map, and served over a bearer-token-authenticated Streamable HTTP ASGI app. Tools can also be invoked in-process without running any HTTP server.
    39 PyPI
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Enables agents to detect and redact PII and secrets in text, HTML, and PDF documents before they reach an LLM, with reversible placeholder, mask, or hash redaction, and to list supported detectors and redaction styles.
    4
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Provides a local MCP server that exposes the check_prompt_injection tool to MCP clients, letting agents scan untrusted text (web pages, documents, tool outputs, emails) for prompt injection before passing it to another LLM.
    1
    26 PyPI
    Apache 2.0
  • A
    license
    A
    quality
    A
    maintenance
    Supply-chain gate for AI agent skills and MCP servers: poison-scan tool definitions, hash-pin the vetted set into a lock file and verify drift in CI. truecopy-mcp is a drop-in stdio proxy that filters a live server's tools/list down to its pinned, unmodified, unpoisoned tools.
    2
    31 npm
    1
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Security scanner for third-party AI agent-skill files: SKILL.md manifests, hooks, and bundled scripts, exposed via an MCP tool.
    1
    10 npm
    1
    Apache 2.0
  • A
    license
    A
    quality
    C
    maintenance
    An MCP server that reads a file's embedded C2PA Content Credential to report whether it declares AI generation or a real-world capture, and checks whether that declaration's signature still verifies against the file's current bytes.
    2
    25 PyPI
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    An MCP front-end for AnB. The tool surface is "use-don't-reveal": no tool returns a plaintext secret. Reveal paths require a TTY the server doesn't have, so the no-reveal guarantee is structural, not prompt-based — it holds even against a prompt-injected agent. Runs as a dedicated, narrowly-scoped AnB identity; exec is default-deny (only allowlist rules tagged scope=mcp run); command output
    5
    1
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    MCP server for local, verifiable PDF redaction. Enables AI agents to find sensitive regions, locate text, redact PDFs on-device, verify redaction and tamper-evidence seals, and generate PDFs—without uploading confidential documents.
    8
    392 npm
    -
  • A
    license
    A
    quality
    A
    maintenance
    Lets an agent verify VSL settlement receipts entirely offline and produce signed triggers authorizing a settlement, with the signing key and endpoint fixed at start-up rather than passed in tool calls. When started with an endpoint and token, it can also request a receipt from an issuer, which is the only tool that touches the network.
    1
    298 PyPI
    Apache 2.0
  • A
    license
    A
    quality
    D
    maintenance
    Provides MCP-compatible AI agents with a verify_image tool to check a photo's capture time and provenance using C2PA, EXIF, XMP metadata, and pixel forensics, returning a verdict and confidence score.
    1
    16 npm
    2
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    This MCP server preserves a Bearer principal on every tool call and SSE frame, rotates vaulted credentials in place, and enforces per-tool allowlists for agents.
    3
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    MCP server for sealing, verifying, and reading KNOBE Protocol v1 documents with human-confirmed authorship, ensuring document provenance and integrity.
    5
    Apache 2.0
  • A
    license
    A
    quality
    B
    maintenance
    Enables AI assistants to read identification verdicts, search history, summarize entities, explain risk scores, and verify webhook signatures through read-only tools over stdio or streamable HTTP.
    6
    216 npm
    MIT