Skip to main content
Glama
115,581 servers. Updated
20 Best PDF MCP Servers: compared and ranked, November 2026Ranked from 2,140 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"A tool or method for searching within PDF files" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables AI agents to call tools through a security gateway that intercepts requests, enforces deterministic policy and risk checks, blocks or escalates high-risk actions for human approval, and keeps tool credentials and audit logs protected.
    1
    MIT
  • F
    license
    Not graded
    quality
    B
    maintenance
    Enables read-only listing and reading of files in an Azure Files SMB share, enforcing each user's NTFS permissions per request.
    -
  • A
    license
    A
    quality
    B
    maintenance
    Enables cryptographic PDF signature verification, tamper detection, PAdES baseline level determination, and PDF/A/PDF/UA conformance validation, along with policy-based trust verdicts.
    7
    101 npm
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Enables AI agents to permanently remove personally identifiable information from PDF documents, returning redacted files with the sensitive text deleted rather than merely covered. Supports scanned documents, multiple languages, entity types, and optional human review.
    9
    153 npm
    1
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Read selected local folders from ChatGPT on macOS, with per-folder read-only or read-write access and hash-checked, recoverable edits. Requires local installation and a private ChatGPT app. The Glama container is a synthetic evaluation demo; it does not connect to files on your Mac.
    12
    1
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Enables MCP clients to extract tables and text from digital PDF invoices, bank statements, and bills into CSV, JSON, or Excel, with automatic PII redaction by default.
    2
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables centralized proxy and orchestration of MCP servers, providing unified tool discovery, authentication, and secure request routing. It adds a human-in-the-loop approval gate for high-risk actions and audit logging.
    Apache 2.0
  • A
    license
    Not graded
    quality
    D
    maintenance
    A secure tool-execution plane for agentic AI that enforces JWT authentication, rate limiting, prompt-injection inspection, and audit logging, while ingesting downstream OpenAPI endpoints as MCP tools.
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables AI agents to request an independent second opinion from a different frontier model, with PII scrubbing before transit, live web search grounding, caching, and multi-provider failover.
    Apache 2.0
  • F
    license
    Not graded
    quality
    C
    maintenance
    This MCP server provides secure access to databases for AI agents, enforcing authentication, authorization, human approval, logging, and notifications to prevent dangerous actions.
    -
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables an AI host to list, read, and move files within a single designated folder, where each action is held until a human approves it through a consent card and the decision is recorded on a tamper-evident chain. Actions proceed only with a written receipt, and any missing answer or error counts as a refusal.
    Apache 2.0
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables agents to check third-party tool licenses, validate vendor policies, and issue license receipts before using external tools.
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    An enterprise MCP server scaffold that provides secure, governed access to internal tools through RBAC, audit logging, rate limiting, and prompt-injection boundaries, with a FastAPI control plane and OpenTelemetry observability.
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    MCP server that detects and guards against tool poisoning and prompt injection attacks in tool descriptions and schemas. It provides risk scoring, pattern detection, safe rewriting, and audit reports with zero external API cost.
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables agents to search across the pooled tools of many connected MCP servers and invoke them through a single endpoint, returning only the handful of tools relevant to each request. Filters by the caller's permissions before ranking, so agents never see or plan around tools their user is not allowed to use.
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables MCP clients to fetch the signed-in Microsoft Entra user's profile from Microsoft Graph via the GET /me endpoint using the provided bearer token.
    Apache 2.0
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables AI agents to securely discover, invoke, and manage tools through a hardened MCP endpoint with protections like injection detection, circuit breakers, retry backoff, response caching, context-window limiting, and state snapshots.
    7 npm
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables wrapping any Model Context Protocol server command so every tools/call is evaluated against compiled typed policy rails, with redaction, approval, throttling, denial, and a tamper-evident evidence trail.
    31 PyPI
    Apache 2.0
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables MCP tool handlers to be declared with a decorator, collected into a registry from a config map, and served over a bearer-token-authenticated Streamable HTTP ASGI app. Tools can also be invoked in-process without running any HTTP server.
    135 PyPI
    MIT
  • A
    license
    A
    quality
    F
    maintenance
    Provides AI assistants with specialized tools to interact with NIST's Open Security Controls Assessment Language (OSCAL) framework. It enables agents to retrieve schemas, explore models, and generate valid OSCAL documentation for security compliance automation.
    40
    52
    Apache 2.0
  • A
    license
    A
    quality
    D
    maintenance
    Enables checking IP reputations and threat intelligence by querying Chaitin's global honeypot network and millions of defense nodes. Provides real-time IP profiling, malicious behavior detection, and threat alerts based on aggregated security data.
    1
    3 npm
    2
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    A client-side MCP proxy that injects OAuth 2.0 bearer tokens or API keys into MCP requests, enabling MCP clients to connect to OAuth/API-key-protected MCP servers like Amazon Bedrock AgentCore Gateway. It automatically fetches and refreshes credentials using AgentCore Identity or static values.
    1
    MIT No Attribution
  • A
    license
    Not graded
    quality
    A
    maintenance
    Turn Claude into an ISO 27001 compliance assistant - controls, risk register, policies, evidence tracking, SoA generation, and full audit workflows in one local encrypted MCP server.
    58 npm
    35
    MIT