"How to read PDFs and images" matching MCP servers:

Routes web requests from AI tools through Tor for anonymized fetching, with selective per-URL routing to bypass Tor-blocking sites.

Enables cryptographic PDF signature verification, tamper detection, PAdES baseline level determination, and PDF/A/PDF/UA conformance validation, along with policy-based trust verdicts.

MCP server for local, verifiable PDF redaction. Enables AI agents to find sensitive regions, locate text, redact PDFs on-device, verify redaction and tamper-evidence seals, and generate PDFs—without uploading confidential documents.

Provides access to Atomic Red Team tests, enabling search, validation, and execution of atomic tests via natural language.

Lets AI agents check whether an EVM wallet address carries an EIP-7702 delegation across eight chains (Ethereum, Base, BNB Chain, Arbitrum, OP, Polygon, Gnosis, Unichain) and learn how to obtain a deeper paid report with delegate bytecode heuristics and risk levels. Read-only, never touching private keys or seed phrases.

Anonymize technical-drawing PDFs before sharing them — company names, logos, people, addresses, phone numbers, emails and websites found automatically and masked; tamper-proof flattened, metadata-free PDF or an expiring share link. NDA- and GDPR-safe drawing exchange.

Compare service-grant changes, tool alias origins, and saved MCP tool definitions with Gooo rules. Reports preserve incomplete-capture uncertainty and source bindings. No grants are applied and no compared tools are invoked.

Enables AI agents to permanently remove personally identifiable information from PDF documents, returning redacted files with the sensitive text deleted rather than merely covered. Supports scanned documents, multiple languages, entity types, and optional human review.

Investigate fraud directly from Claude, Cursor, or any MCP-compatible client. Analyze suspicious activity with clear, evidence-backed verdicts. Pivot from a single signup to every account sharing the same device, IP address, or email inbox. Check entities against a cross-operator abuse network, review linked accounts, and efficiently process your fraud review queue. Read-only by default, with no r

A read-only MCP server that provides tools to read, list, and inspect secrets from HashiCorp Vault's KV secrets engine (versions 1 and 2) using a Vault token.

Enables interaction with NowSecure Platform for listing applications, retrieving remediation findings, and generating remediation PDFs via REST and GraphQL APIs.

Local-first MCP proxy with BM25 tool discovery, quarantine security, Docker isolation, OAuth support, activity logging, and web UI. Routes multiple upstream MCP servers through a single endpoint.

Enables AI agents to inspect any public domain’s web technology stack, email deliverability and DNS health (MX, SPF, DKIM, DMARC, MTA-STS, TLS-RPT, BIMI), and HTTPS security posture with typed JSON scores and remediation-ready findings, plus history, bulk checks, monitoring alerts, and reverse technology lookups.

Open source input firewall for AI agents, in beta, packaged as an MCP server. A local scanner checks text, code, PDFs, images, QR codes, audio and video against a pattern library and reports findings and incomplete scans.

Exposes a single chat tool that lets any MCP client send text prompts together with images, PDFs, or Office attachments to a self-hosted Gemini web endpoint and get OpenAI-compatible responses back. An optional companion checker keeps the underlying Google session cookies fresh automatically so requests keep working without manual re-authentication.

Enables MCP clients to extract tables and text from digital PDF invoices, bank statements, and bills into CSV, JSON, or Excel, with automatic PII redaction by default.

Enables AI assistants to raise, submit, approve, amend, and cancel purchase orders and onboard suppliers in ERPNext or SAP S/4HANA while enforcing procurement controls such as duplicate detection, budget limits, split-purchase checks, price tolerances, and segregation of duties.

Enables AI agents to find local screenshots and images, check or read them for scam and prompt-injection risk, and look up links, phone numbers, or email addresses before acting.

MCP server for secure read-only PostgreSQL queries with automatic PII masking, pseudonymization, and strict SQL guards to enforce data privacy compliance.

A secure email gateway MCP server that protects AI agents from prompt injection attacks by scanning emails for malicious instructions before they reach the agent.

A security-hardened Postgres MCP server that enables LLM agents to run safe, read-only SQL queries with enforcement via SQL-AST inspection and read-only transactions.

Checks how long ago a package version was published and returns the newest version older than a minimum age (3 days by default), so an agent avoids brand new releases when adding dependencies. Also checks lockfiles across 15 ecosystems; read-only.

A demonstration server that reveals security risks by accessing sensitive environment variables, illustrating how MCP tools can potentially leak user data without explicit consent.

Provides a local-first MCP server for multi-format document redaction, enabling detection of sensitive content, physical removal from PDFs, DOCX, XLSX, PPTX, and text files, and forensic audit with zero network calls.

Provides read-only access to VeriLock document metadata and cryptographic evidence, enabling clients to list, retrieve, verify, and audit documents through the Model Context Protocol.

Enables secure remote SSH command execution with strict read-only enforcement, allowing safe delegation of SSH access to Claude while preventing write operations. Supports connection pooling, command validation, and comprehensive logging for audit trails.

Enables any MCP client to look up CVE intelligence — severity summaries, filtered searches, and full per-CVE detail fusing NVD, MITRE-CNA pre-NVD, CISA KEV, EPSS, and GitHub GHSA data — alongside a Shodan-derived internet-exposure footprint showing how many internet-facing services run a version mapping to a given CVE. It is free, keyless, and read-only, and distinguishes verified zeros from unassessed or failed lookups.

Enables AI assistants to perform vulnerability scanning using Grype, supporting scans of directories, container images, and packages via the Model Context Protocol.

Enables AI assistants to perform vulnerability scanning on Docker/OCI images, check CVE details, analyze licenses, and compare scan results via ScanRook.

Enables agents to explore the Hummingbird / Red Hat Hardened Images catalog read-only through its public API — searching images, streams, variants and tags, and inspecting container config, SBOM package lists, release history and CVE exposure. It trims large catalog, SBOM and vulnerability responses server-side so answers come back concise, with no credentials or scraping required.