pdfops-mcp
OfficialClick on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@pdfops-mcpfill ~/docs/w9.pdf for Ada Lovelace"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
pdfops-mcp
MCP server that gives AI agents deterministic PDF tools, backed by the PDFops API: inspect AcroForm fields, fill forms, merge PDFs, and generate invoices — no Chromium, no native deps, nothing to host.
Tools operate on local file paths, so PDF bytes never transit the model context: your agent says "fill /tmp/form.pdf and save to /tmp/out.pdf" and gets a one-line confirmation back.
Install
Claude Code
claude mcp add pdfops -- npx -y pdfops-mcpClaude Desktop (claude_desktop_config.json) / Cursor (.cursor/mcp.json)
{
"mcpServers": {
"pdfops": {
"command": "npx",
"args": ["-y", "pdfops-mcp"],
"env": { "PDFOPS_API_KEY": "pdfops_live_…" }
}
}
}PDFOPS_API_KEY is optional — without it you get the keyless trial (100 requests/IP/month). A free key (250/month, no card) takes one field at pdfops.dev/pricing.
Related MCP server: filewash
Tools
Tool | What it does |
| List a PDF's form fields (names, types, options, values) + a paste-ready fill template. Call first on unfamiliar PDFs. |
| Fill AcroForm fields → write the filled PDF. Optional |
| Merge ≥2 PDFs in order → write the result. |
| Structured data → complete invoice PDF. Deterministic: same input, byte-identical output. |
| Quota check for the configured key. |
Example agent flow
"Fill the W-9 template at ~/docs/w9.pdf for Ada Lovelace and merge it with ~/docs/cover.pdf"
pdf_inspect→ discovers field names + fill templatepdf_fill→ writes the filled W-9pdf_merge→ writes the combined packet
Links
API docs: pdfops.dev/docs · OpenAPI: pdfops.dev/openapi.json · Typed client: pdfops-sdk · Questions: hello@pdfops.dev
MIT © PDFops
Available Tools
5 toolspdf_fillA
Fill AcroForm form fields in a PDF and save the result. Field names must exist in the PDF (use pdf_inspect first). All values are strings; checkboxes take "true"/"false"; dropdown/radio/optionlist values must be one of the field's options; text values must respect the field's maxLength from pdf_inspect. Encrypted PDFs are rejected with decrypt advice (common for government blanks with an empty user password).
| Name | Required | Description | Default |
|---|---|---|---|
| fields | Yes | Field name → string value (from pdf_inspect's fillTemplate) | |
| flatten | No | Bake values into page content and drop the AcroForm so fields are no longer editable | |
| pdf_path | Yes | Absolute path to the template PDF | |
| output_path | Yes | Absolute path to write the filled PDF |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full behavioral burden and delivers: it discloses validation behavior (field names must exist), value semantics per field type (checkbox 'true'/'false', option-list membership for dropdown/radio, maxLength for text), and a specific failure mode with remediation advice (encrypted PDFs rejected). It does not explicitly state that the source PDF is left unmodified, a minor omission given output_path implies a separate write.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three sentences with no filler: purpose front-loaded in sentence one, input constraints in sentence two, failure mode in sentence three. Each clause carries operational weight and nothing is repeated from the schema.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
The tool is moderately complex — nested fields object, conditional value semantics, a failure mode — and has neither annotations nor an output schema, yet the description covers purpose, prerequisites, parameter semantics, and error behavior. The only gap is the return value, which is not described anywhere since no output schema exists.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the baseline is 3, and the description adds genuine value on top: it specifies the value formats for the fields object ('true'/'false' for checkboxes, option-list membership for dropdown/radio, maxLength for text), which the schema only vaguely describes as 'Field name → string value'. This materially improves an agent's ability to construct valid input.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description opens with a specific verb and resource — 'Fill AcroForm form fields in a PDF and save the result' — which unambiguously distinguishes it from siblings pdf_merge, pdf_inspect, pdf_invoice, and pdfops_usage. The write-to-output behavior is also stated upfront, leaving no ambiguity about what the tool accomplishes.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It explicitly names the prerequisite workflow — 'use pdf_inspect first' — and warns when the tool will refuse input (encrypted PDFs, with decrypt advice). It does not enumerate when-not-to-use scenarios relative to the other siblings (e.g., merge or invoice), so it stops just short of full exclusion guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
pdf_inspectA
List a PDF's AcroForm form fields — names, types, options, current values, per-field maxLength where declared — plus a paste-ready fillTemplate object for pdf_fill and a hasXFA flag (hybrid AcroForm/XFA inputs lose their XFA layer when filled). A PDF with no form returns count 0. Call this FIRST when filling an unfamiliar PDF: you cannot fill fields whose names you do not know, and values longer than a field's maxLength are rejected.
| Name | Required | Description | Default |
|---|---|---|---|
| pdf_path | Yes | Absolute path to the PDF to inspect |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full behavioral burden. It discloses the no-form result ('count 0'), the hybrid XFA/AcroForm consequence, the fillTemplate generation, and the rejection behavior for over-maxLength values — none of which is visible in the schema or annotations. This is above and beyond what an annotations block would provide.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is dense but organized: the core output list, the important XFA caveat, the no-form behavior, and the usage directive. A little redundancy appears ('you cannot fill fields whose names you do not know' restates the need for the field list), but each clause contributes useful operational context.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a one-parameter tool with no output schema, the description covers the returned data, the edge case of a formless PDF, and the critical consequence for pdf_fill. It gives an agent everything needed to decide when to call this tool and what to expect from it.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and the only parameter, pdf_path, already has a clear description ('Absolute path to the PDF to inspect'). The tool description adds no extra parameter-level meaning beyond reinforcing that the path targets the PDF to inspect, so the baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb and resource: 'List a PDF's AcroForm form fields' and enumerates the exact outputs (names, types, options, current values, maxLength, fillTemplate, hasXFA). It clearly distinguishes this as the inspection sibling that feeds pdf_fill, rather than merging, invoicing, or usage meta-tools.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Explicitly states when to use it: 'Call this FIRST when filling an unfamiliar PDF' and gives the rationale: field names must be known and over-maxLength values are rejected. This makes the sequencing against pdf_fill unambiguous, while the sibling list reinforces that it is the pre-fill step.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
pdf_invoiceA
Generate a complete, professionally laid-out invoice PDF from structured data — no template needed. Deterministic: the same input produces byte-identical output (safe to re-run). Note: without a paid PDFops key the output carries a small "Generated with pdfops.dev" footer line.
| Name | Required | Description | Default |
|---|---|---|---|
| invoice | Yes | Invoice data | |
| output_path | Yes | Absolute path to write the invoice PDF |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It meaningfully reveals that output is deterministic and byte-identical (safe to re-run) and that unpaid usage adds a footer line. These are valuable, non-obvious behaviors beyond simply 'generate a PDF'.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is tight, front-loaded with the core purpose, and every sentence adds value: the no-template qualifier, the deterministic guarantee, and the key-dependent footer caveat. No filler or redundant restatement of the schema.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given that the schema fully documents the two parameters and the description covers determinism and licensing side effects, this is quite complete for selecting and invoking the tool. It could add a note about overwrite behavior or return value, but the core invocation context is well covered.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the invoice and output_path parameters are already documented structurally. The description adds no additional parameter-level meaning beyond the schema, matching the baseline for high schema coverage.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Generate'), a clear resource ('invoice PDF'), and a defining characteristic ('from structured data — no template needed'). This cleanly distinguishes pdf_invoice from siblings like pdf_fill and pdf_merge, which serve different purposes.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description clearly implies when to use this tool: when an invoice PDF needs to be generated from structured data. However, it does not explicitly mention alternatives or when-not-to-use conditions, leaving the routing decision mostly to inference rather than direct guidance.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
pdf_mergeA
Merge two or more PDFs into one, in the order given, and save the result.
| Name | Required | Description | Default |
|---|---|---|---|
| pdf_paths | Yes | Absolute paths of the PDFs to merge, in order | |
| output_path | Yes | Absolute path to write the merged PDF |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It discloses that merging preserves the given order and that the result is saved, but it does not mention whether the output file is overwritten, whether input files are affected, or how errors are handled. These are notable gaps for a file-writing tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, well-structured sentence that front-loads the action and includes the key ordering constraint. There is no wasted text or redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a simple two-parameter merge tool, the description covers the core behavior and the schema documents the parameters. However, with no annotations and no output schema, a few behavioral details such as overwrite behavior and error handling are missing, though they are relatively minor for this operation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already fully documents both parameters. The description adds no new parameter-specific detail beyond restating what the schema says ('in order' and 'save the result'), so the baseline 3 applies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Merge') with a clear resource ('PDFs') and explains the outcome ('save the result'). It also specifies the order-sensitive nature, which helps distinguish it from sibling tools like pdf_inspect or pdf_fill that operate on PDFs differently.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage when combining multiple PDFs, but it provides no explicit when-to-use guidance or comparison with alternatives. Since sibling tools cover different PDF operations, a note on when to choose merge over others would have been helpful.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
pdfops_usageA
Check the current PDFops API quota for the configured key: tier, limit, used, remaining, reset date. Requires PDFOPS_API_KEY.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It conveys a read-only check ('Check the current... quota') and discloses the authentication requirement ('Requires PDFOPS_API_KEY'). It also previews the response fields, giving the agent useful expectations without relying on an output schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence with no filler. It front-loads the core action and resource, adds the returned fields, and ends with the essential prerequisite. Every part earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
This is a simple no-parameter tool with no annotations or output schema. The description fully covers what the tool does, what it returns, and the required environment variable. Nothing essential is missing for an agent to select and invoke it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
There are zero parameters, so the schema provides no meaningful semantics to augment. The description correctly focuses on the configured key and the quota values returned, which is the relevant context for a parameterless tool.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific verb and resource: 'Check the current PDFops API quota for the configured key.' It also enumerates the exact data returned (tier, limit, used, remaining, reset date), which clearly distinguishes this quota-checking tool from the sibling PDF-processing tools like pdf_fill and pdf_merge.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description clearly states that this tool is for checking API quota, which is a distinct purpose among the siblings. It does not explicitly name alternative tools or state when not to use it, but the 'quota' concept makes the intended usage unambiguous.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.
5 tool updates
v0.2.0- First observed
pdf_fill - First observed
pdf_inspect - First observed
pdf_invoice - First observed
pdf_merge - First observed
pdfops_usage
TDQS
Each tool has a clearly distinct purpose: quota check, form-field inspection, form filling, merging, and invoice generation. pdf_inspect and pdf_fill are complementary rather than overlapping, and the descriptions explicitly guide the correct workflow.
Most tools follow a consistent pdf_<verb> pattern (pdf_inspect, pdf_fill, pdf_merge, pdf_invoice), but pdfops_usage breaks the pattern with a different prefix and noun-style name. The naming is still predictable and readable.
Five tools is a tight, well-scoped set for a PDF form-filling and generation server. Each tool earns its place, and the count is comfortably within the ideal range.
The form-inspect/fill workflow is well covered, and merge/invoice add practical capabilities. However, for a general 'pdfops' server, common PDF operations like text extraction, splitting, rotation, or conversion are notably absent.
Maintenance
Related MCP Connectors
Generate and read PDFs for AI agents: a generate_pdf and a read_pdf tool, priced per document.
Deterministic fact verification for AI agents — checksums & curated data, not guesses.
Free PDF tools for AI agents: merge, split, rotate, watermark, page numbers, metadata, flatten.
Long-term memory for AI agents: durable records, observable retrieval, governed context assembly.
Related MCP Servers
- AlicenseNot gradedqualityBmaintenanceA local document processing toolkit for AI agents that extracts text, converts PDFs to Markdown, merges files, extracts tables, and summarizes documents without external API dependencies.15MIT
- AlicenseNot gradedqualityDmaintenancePrivacy-first file tools for AI agents, enabling operations like PDF merge/split, image compression/convert, metadata stripping, and background removal without storing files.57MIT
- FlicenseNot gradedqualityBmaintenanceEnables AI agents to process files locally — OCR images, extract text from PDFs and DOCX, and describe images using local vision models, all without sending data to external services.-
- FlicenseNot gradedqualityCmaintenanceA local PDF manipulation server for AI agents that provides tools for merging, splitting, extracting info, and converting images to PDF, all without uploading files.-
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/pdfops/pdfops-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server