← Back to search Server uses network capabilities via: fetch(), http Server uses filesystem capabilities via: fs, fs sync ops, fs.promises, path Server uses shell capabilities via: child_process, execSync(), spawn(), spawnSync() Server uses env_vars capabilities via: process.env
@sylphx/pdf-reader-mcp
The most-starred PDF MCP server. Stop agent hallucinations on PDFs — one read_pdf call returns an Agent Document Twin with markdown, tables, trust reports, and source evidence (page + bbox). Local-first. Benchmark-gated.
? Not scanned yet
Versions
4.1.2latestJul 28, 2026
4.1.1Jul 24, 2026
4.1.0Jul 24, 2026
4.0.2Jul 24, 2026
4.0.1Jul 24, 2026
+ show 57 moreshow less
4.0.0Jul 24, 2026
3.2.2Jul 23, 2026
3.2.1Jul 23, 2026
3.2.0Jul 23, 2026
3.1.4Jul 23, 2026
3.1.3Jul 23, 2026
3.1.2Jul 23, 2026
3.1.1Jul 17, 2026
3.1.0Jul 17, 2026
3.0.18Jul 17, 2026
3.0.17Jul 17, 2026
3.0.16Jul 17, 2026
3.0.15Jul 17, 2026
3.0.14Jul 8, 2026
3.0.13Jul 8, 2026
3.0.12Jul 8, 2026
3.0.11Jul 8, 2026
3.0.10Jul 1, 2026
3.0.9Jul 1, 2026
3.0.8Jul 1, 2026
3.0.7Jul 1, 2026
3.0.6Jul 1, 2026
3.0.5Jul 1, 2026
3.0.4Jul 1, 2026
3.0.3Jul 1, 2026
3.0.2Jul 1, 2026
3.0.1Jun 25, 2026
3.0.0Jun 22, 2026
2.7.2Jun 22, 2026
2.7.1Jun 22, 2026
2.7.0Jun 22, 2026
2.6.0Jun 15, 2026
2.5.4Jun 15, 2026
2.5.3Jun 15, 2026
2.5.2Jun 15, 2026
2.5.1Jun 15, 2026
2.5.0Jun 14, 2026
2.4.3May 30, 2026
2.4.2May 22, 2026
2.4.1May 20, 2026
2.4.0May 3, 2026
2.3.1Apr 19, 2026
2.3.0Feb 4, 2026
2.2.0Jan 28, 2026
2.1.0Dec 17, 2025
2.0.8Dec 5, 2025
2.0.7Dec 3, 2025
2.0.3Nov 30, 2025
2.0.2Nov 27, 2025
2.0.1Nov 27, 2025
2.0.0Nov 27, 2025
1.4.0Nov 27, 2025
1.3.2Nov 23, 2025
1.3.0Nov 6, 2025
1.2.0Oct 31, 2025
1.1.0Oct 31, 2025
1.0.0Oct 31, 2025
Tools 0
No tools indexed yet.
Permissions 4
network medium filesystem low shell high env_vars low Scan Findings 48
info
Sandbox failed to start for behavioral verification
medium
Vulnerable dependency: pdfjs-dist@6.0.227 (GHSA-hq66-cqwq-w95j)
medium
Hex string literal (>50 chars) in SylphxAI-pdf-reader-mcp-3324cf8/scripts/check-pure-rust-matrix.ts:2943
medium
Hex string literal (>50 chars) in SylphxAI-pdf-reader-mcp-3324cf8/scripts/check-pure-rust-matrix.ts:2969
medium
Hex string literal (>50 chars) in SylphxAI-pdf-reader-mcp-3324cf8/scripts/check-pure-rust-matrix.ts:2995
medium
Hex string literal (>50 chars) in SylphxAI-pdf-reader-mcp-3324cf8/scripts/check-pure-rust-matrix.ts:3022
medium
Hex string literal (>50 chars) in SylphxAI-pdf-reader-mcp-3324cf8/scripts/check-pure-rust-matrix.ts:3060
medium
Hex string literal (>50 chars) in SylphxAI-pdf-reader-mcp-3324cf8/scripts/check-pure-rust-matrix.ts:3089
medium
Hex string literal (>50 chars) in SylphxAI-pdf-reader-mcp-3324cf8/scripts/check-pure-rust-matrix.ts:3119
medium
Hex string literal (>50 chars) in SylphxAI-pdf-reader-mcp-3324cf8/scripts/check-pure-rust-matrix.ts:3195
medium
Buffer.from base64 in SylphxAI-pdf-reader-mcp-3324cf8/test/integration/mcp-server.test.ts:277
medium
Hex string literal (>50 chars) in SylphxAI-pdf-reader-mcp-3324cf8/scripts/check-pure-rust-matrix.ts:3198
medium
Hex string literal (>50 chars) in SylphxAI-pdf-reader-mcp-3324cf8/scripts/check-pure-rust-matrix.ts:3201
medium
Hex string literal (>50 chars) in SylphxAI-pdf-reader-mcp-3324cf8/scripts/check-pure-rust-matrix.ts:3204
medium
Hex string literal (>50 chars) in SylphxAI-pdf-reader-mcp-3324cf8/scripts/check-pure-rust-matrix.ts:3207
medium
Hex string literal (>50 chars) in SylphxAI-pdf-reader-mcp-3324cf8/scripts/check-pure-rust-matrix.ts:3210
medium
Hex string literal (>50 chars) in SylphxAI-pdf-reader-mcp-3324cf8/scripts/check-pure-rust-matrix.ts:3213
medium
Hex string literal (>50 chars) in SylphxAI-pdf-reader-mcp-3324cf8/scripts/check-pure-rust-matrix.ts:3216
medium
Hex string literal (>50 chars) in SylphxAI-pdf-reader-mcp-3324cf8/scripts/check-pure-rust-matrix.ts:3310
medium
Hex string literal (>50 chars) in SylphxAI-pdf-reader-mcp-3324cf8/scripts/check-pure-rust-matrix.ts:3359
medium
Buffer.from base64 in SylphxAI-pdf-reader-mcp-3324cf8/test/pdf/renderer.test.ts:70
medium
Buffer.from base64 in SylphxAI-pdf-reader-mcp-3324cf8/test/pdf/regions.test.ts:92
medium
Buffer.from base64 in SylphxAI-pdf-reader-mcp-3324cf8/test/pdf/regions.test.ts:94
medium
Buffer.from base64 in SylphxAI-pdf-reader-mcp-3324cf8/test/integration/mcp-server.test.ts:257
medium
Buffer.from base64 in SylphxAI-pdf-reader-mcp-3324cf8/test/integration/mcp-server.test.ts:324
medium
Buffer.from base64 in SylphxAI-pdf-reader-mcp-3324cf8/test/integration/http-transport.test.ts:303
medium
Buffer.from base64 in SylphxAI-pdf-reader-mcp-3324cf8/src/pdf/regions.ts:126
medium
Buffer.from base64 in SylphxAI-pdf-reader-mcp-3324cf8/src/pdf/ocr.ts:578
medium
Buffer.from base64 in SylphxAI-pdf-reader-mcp-3324cf8/src/pdf/regionAnalysis.ts:1116
medium
Buffer.from base64 in SylphxAI-pdf-reader-mcp-3324cf8/scripts/differential/v3014-raster-image-projection.ts:93
medium
Buffer.from base64 in SylphxAI-pdf-reader-mcp-3324cf8/scripts/differential/v3014-visual-baseline-runner.ts:65
medium
Buffer.from base64 in SylphxAI-pdf-reader-mcp-3324cf8/scripts/differential/check-v3014-visual-differential.ts:135
info
package.json metadata
info
Transport: stdio
info
Required env vars (47)
info
Sandbox failed to start for output poisoning scan
medium
Permission: network access detected
low
Permission: filesystem access detected
high
Permission: shell access detected
low
Permission: env_vars access detected
info
SBOM generated: 12 components
critical
RSA Private Key found in SylphxAI-pdf-reader-mcp-3324cf8/scripts/benchmark-pdf-quality.ts
high
Hardcoded Password found in SylphxAI-pdf-reader-mcp-3324cf8/crates/pdf-reader-core/src/read_pdf.rs
critical
RSA Private Key found in SylphxAI-pdf-reader-mcp-3324cf8/crates/pdf-reader-core/src/document_twin.rs
critical
RSA Private Key found in SylphxAI-pdf-reader-mcp-3324cf8/scripts/differential/check-v3014-trust-report-differential.ts
high
Hardcoded Password found in SylphxAI-pdf-reader-mcp-3324cf8/.opencode/agent/writer.md
medium
No build provenance detected (SLSA L0)
high
Declared package '@sylphx/pdf-reader-mcp' matches no manifest in the repo