Skip to main content
Glama
117,013 servers. Updated
20 Best PDF MCP Servers: compared and ranked, November 2026Ranked from 2,140 matching servers on stars, growth, downloads and maintenance. Updated .

Matching MCP tools:

Matching MCP Connectors:

"Official tool for reading and analyzing PDF files from MCP" matching MCP servers:

GET /v1/servers – MCP directory API reference
  • F
    license
    Not graded
    quality
    B
    maintenance
    Enables read-only listing and reading of files in an Azure Files SMB share, enforcing each user's NTFS permissions per request.
    -
  • A
    license
    A
    quality
    B
    maintenance
    Enables cryptographic PDF signature verification, tamper detection, PAdES baseline level determination, and PDF/A/PDF/UA conformance validation, along with policy-based trust verdicts.
    7
    1,441 npm
    MIT
  • A
    license
    A
    quality
    A
    maintenance
    Enables AI agents to permanently remove personally identifiable information from PDF documents, returning redacted files with the sensitive text deleted rather than merely covered. Supports scanned documents, multiple languages, entity types, and optional human review.
    9
    100 npm
    1
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Read selected local folders from ChatGPT on macOS, with per-folder read-only or read-write access and hash-checked, recoverable edits. Requires local installation and a private ChatGPT app. The Glama container is a synthetic evaluation demo; it does not connect to files on your Mac.
    12
    1
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Enables MCP clients to extract tables and text from digital PDF invoices, bank statements, and bills into CSV, JSON, or Excel, with automatic PII redaction by default.
    2
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables centralized proxy and orchestration of MCP servers, providing unified tool discovery, authentication, and secure request routing. It adds a human-in-the-loop approval gate for high-risk actions and audit logging.
    Apache 2.0
  • A
    license
    Not graded
    quality
    D
    maintenance
    A secure tool-execution plane for agentic AI that enforces JWT authentication, rate limiting, prompt-injection inspection, and audit logging, while ingesting downstream OpenAPI endpoints as MCP tools.
    MIT
  • A
    license
    A
    quality
    C
    maintenance
    Enables AI agents to inspect any public domain’s web technology stack, email deliverability and DNS health (MX, SPF, DKIM, DMARC, MTA-STS, TLS-RPT, BIMI), and HTTPS security posture with typed JSON scores and remediation-ready findings, plus history, bulk checks, monitoring alerts, and reverse technology lookups.
    12
    476 npm
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables an AI host to list, read, and move files within a single designated folder, where each action is held until a human approves it through a consent card and the decision is recorded on a tamper-evident chain. Actions proceed only with a written receipt, and any missing answer or error counts as a refusal.
    Apache 2.0
  • A
    license
    Not graded
    quality
    C
    maintenance
    A stateless remote MCP server that lets AI agents anonymously submit encrypted reports of alignment and safety failures to leaks.md (what others did) and confession.md (what the agent itself did), returning a receipt without accounts or keys. It exposes public tools such as submit_leak and submit_confession over Streamable HTTP.
    MIT
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables agents to check third-party tool licenses, validate vendor policies, and issue license receipts before using external tools.
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    An enterprise MCP server scaffold that provides secure, governed access to internal tools through RBAC, audit logging, rate limiting, and prompt-injection boundaries, with a FastAPI control plane and OpenTelemetry observability.
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    MCP server that detects and guards against tool poisoning and prompt injection attacks in tool descriptions and schemas. It provides risk scoring, pattern detection, safe rewriting, and audit reports with zero external API cost.
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables agents to search across the pooled tools of many connected MCP servers and invoke them through a single endpoint, returning only the handful of tools relevant to each request. Filters by the caller's permissions before ranking, so agents never see or plan around tools their user is not allowed to use.
    MIT
  • A
    license
    Not graded
    quality
    D
    maintenance
    Enables MCP clients to fetch the signed-in Microsoft Entra user's profile from Microsoft Graph via the GET /me endpoint using the provided bearer token.
    Apache 2.0
  • A
    license
    Not graded
    quality
    C
    maintenance
    Enables AI agents to securely discover, invoke, and manage tools through a hardened MCP endpoint with protections like injection detection, circuit breakers, retry backoff, response caching, context-window limiting, and state snapshots.
    6 npm
    MIT
  • A
    license
    Not graded
    quality
    A
    maintenance
    Enables wrapping any Model Context Protocol server command so every tools/call is evaluated against compiled typed policy rails, with redaction, approval, throttling, denial, and a tamper-evident evidence trail.
    31 PyPI
    Apache 2.0
  • A
    license
    Not graded
    quality
    B
    maintenance
    Enables MCP tool handlers to be declared with a decorator, collected into a registry from a config map, and served over a bearer-token-authenticated Streamable HTTP ASGI app. Tools can also be invoked in-process without running any HTTP server.
    135 PyPI
    MIT
  • A
    license
    A
    quality
    F
    maintenance
    Provides AI assistants with specialized tools to interact with NIST's Open Security Controls Assessment Language (OSCAL) framework. It enables agents to retrieve schemas, explore models, and generate valid OSCAL documentation for security compliance automation.
    40
    52
    Apache 2.0
  • A
    license
    A
    quality
    D
    maintenance
    Enables checking IP reputations and threat intelligence by querying Chaitin's global honeypot network and millions of defense nodes. Provides real-time IP profiling, malicious behavior detection, and threat alerts based on aggregated security data.
    1
    3 npm
    2
    MIT
  • A
    license
    Not graded
    quality
    B
    maintenance
    Turn Claude into an ISO 27001 compliance assistant - controls, risk register, policies, evidence tracking, SoA generation, and full audit workflows in one local encrypted MCP server.
    58 npm
    35
    MIT
  • A
    license
    A
    quality
    B
    maintenance
    Compare service-grant changes, tool alias origins, and saved MCP tool definitions with Gooo rules. Reports preserve incomplete-capture uncertainty and source bindings. No grants are applied and no compared tools are invoked.
    4
    1
    BSD 3-Clause
  • A
    license
    A
    quality
    B
    maintenance
    Enables AI agents to run private computations on encrypted data using fully homomorphic encryption, supporting operations such as addition, mean, comparison, concatenation, and scientific functions without exposing plaintext inputs.
    6
    17 npm
    37
    MIT