← Back to search

io.github.mcp-z/mcp-pdf

mcp-z Scanned 2d ago

MCP server for creative PDF generation with full emoji, Unicode, and offline support

MCP Registry ↗
? Not scanned yet

Versions

1.1.0latest
first seen Jun 5, 2026

Tools 0

No tools indexed yet.

Permissions 3

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs, fs sync ops, path
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 29

medium
Vulnerable dependency: liquidjs@10.0.0 (GHSA-56p5-8mhr-2fph) dependency_analyzer · 95%
medium
Vulnerable dependency: liquidjs@10.0.0 (GHSA-6q5m-63h6-5x4v) dependency_analyzer · 95%
medium
Vulnerable dependency: liquidjs@10.0.0 (GHSA-8xx9-69p8-7jp3) dependency_analyzer · 95%
medium
Vulnerable dependency: liquidjs@10.0.0 (GHSA-9r5m-9576-7f6x) dependency_analyzer · 95%
medium
Vulnerable dependency: liquidjs@10.0.0 (GHSA-9x9p-qf8f-mvjg) dependency_analyzer · 95%
medium
Vulnerable dependency: liquidjs@10.0.0 (GHSA-g357-x5c3-c72p) dependency_analyzer · 95%
medium
Vulnerable dependency: liquidjs@10.0.0 (GHSA-gf2q-c269-pqgc) dependency_analyzer · 95%
medium
Vulnerable dependency: liquidjs@10.0.0 (GHSA-hh27-hf48-9f5q) dependency_analyzer · 95%
medium
Vulnerable dependency: liquidjs@10.0.0 (GHSA-mmg9-6m6j-jqqx) dependency_analyzer · 95%
medium
Vulnerable dependency: liquidjs@10.0.0 (GHSA-r7g9-xpmj-5fcq) dependency_analyzer · 95%
medium
Vulnerable dependency: liquidjs@10.0.0 (GHSA-rv5g-f82m-qrvv) dependency_analyzer · 95%
medium
Vulnerable dependency: liquidjs@10.0.0 (GHSA-v273-448j-v4qj) dependency_analyzer · 95%
medium
Vulnerable dependency: liquidjs@10.0.0 (GHSA-wmfp-5q7x-987x) dependency_analyzer · 95%
medium
Vulnerable dependency: image-size@2.0.0 (GHSA-m5qc-5hw7-8vg7) dependency_analyzer · 95%
medium
Vulnerable dependency: image-size@2.0.0 (GHSA-w3rx-r6r6-pgpr) dependency_analyzer · 95%
medium
Vulnerable dependency: liquidjs@10.0.0 (GHSA-2qv6-9wx5-cwv4) dependency_analyzer · 95%
medium
Vulnerable dependency: liquidjs@10.0.0 (GHSA-4rc3-7j7w-m548) dependency_analyzer · 95%
high
Remote transport without authentication auth_checker · 70%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.0.0 (GHSA-w48q-cv73-mx4w) dependency_analyzer · 95%
medium
Vulnerable dependency: ajv@8.0.0 (GHSA-2g4f-4pwh-qvx6) dependency_analyzer · 95%
medium
Vulnerable dependency: image-size@2.0.0 (GHSA-5p2g-fcmc-qvqq) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 305 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%