← Back to search

io.github.penny4nonsense/mcp-pymupdf

penny4nonsense Scanned 15d ago

MCP server for reading PDFs using PyMuPDF. Supports local files and URLs.

B
81.5 / 100

Versions

0.1.1latest
first seen Jun 30, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 3

read_pdf
annotations: none low

Extract text from a PDF file or URL. Reads up to max_pages pages and max_bytes bytes of content. Scanned or image-based PDFs will be flagged as unreadable. Args: source: Local file path or URL to the PDF. max_pages: Maximum number of pages to read. Defaults to 50. max_bytes: Maximum output size in bytes. Defaults to 200000. Returns: Extracted text with page markers, or an error message.

source str max_bytes int max_pages int
get_page
annotations: none low

Extract text from a specific page range of a PDF. Pages are 1-indexed. If end_page is not specified, only start_page is read. Args: source: Local file path or URL to the PDF. start_page: First page to read (1-indexed). Defaults to 1. end_page: Last page to read (1-indexed, inclusive). Defaults to start_page if not specified. max_bytes: Maximum output size in bytes. Defaults to 200000. Returns: Extracted text from the specified pages.

source str end_page string max_bytes int start_page int
get_metadata
annotations: none low

Retrieve metadata from a PDF without reading its full text. Returns title, author, subject, keywords, creator, producer, creation date, and page count. Args: source: Local file path or URL to the PDF. Returns: Formatted metadata string.

source str

Permissions 2

network medium
Server uses network capabilities via: requests
filesystem low
Server uses filesystem capabilities via: open(), os, pathlib, tempfile

Scan Findings 31

medium
Vulnerable dependency: mcp@1.0.0 (GHSA-j975-95f5-7wqh) dependency_analyzer · 95%
low
Tool 'read_pdf' has no annotations annotation_checker · 100%
low
Tool 'get_page' has no annotations annotation_checker · 100%
low
Tool 'get_metadata' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-3qhf-m339-9g5v) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-9h52-p55h-vw2f) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-jpw9-pfvf-9f58) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (GHSA-vj7q-gjh5-988w) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1616) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1617) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-1618) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-3482) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.0.0 (PYSEC-2026-3483) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.28.0 (GHSA-9hjg-9r4m-mvj7) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.28.0 (GHSA-9wx4-h78v-vm56) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.28.0 (GHSA-gc5v-m9x4-r6x2) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.28.0 (GHSA-j8r2-6x86-q33q) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.28.0 (PYSEC-2023-74) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.28.0 (PYSEC-2026-1872) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.28.0 (PYSEC-2026-1873) dependency_analyzer · 95%
medium
Vulnerable dependency: requests@2.28.0 (PYSEC-2026-2275) dependency_analyzer · 95%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: read_pdf manifest_parser · 90%
info
Tool: get_page manifest_parser · 90%
info
Tool: get_metadata manifest_parser · 90%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 80%
info
No dependency files found for SBOM generation sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%