com.pdfgate/mcp-server

NPM · @PDFGATE/MCP-SERVER · SCANNED AUG 3

MCP server for the PDFGate API. Generate PDFs, manage documents and handle e-signatures.

Available components

+25 this week 78 78 Trust /100

Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security87

No malware found by supply-chain analysis.Pass
Only part of the dependency tree could be resolved (96 of 100), so this covers what we could see, not the whole tree.Partial
No install/post-install scripts declared.Pass
Only part of the dependency tree could be resolved (96 of 100), so this covers what we could see, not the whole tree. View diagnostics → Partial

Provenance & Transparency84

Source repository is publicly reachable at the declared URL. View diagnostics → Pass
Cryptographically verified build provenance (signed, bound to pdfgate/pdfgate-mcp-server). View diagnostics → Pass
License check failed: no license is declared. See how to fix → Fail
Actively maintained (last published 50 days ago).Pass
Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail

Schema Quality & AI Usability82

100% of prompts and resources have a non-trivial description (not blank, and not just the item's name).Pass
AI-judged instruction clarity (good).Pass
Tool/resource definitions use about 1460 tokens (~97/item across 15 items; 14 tools + 1 resources), lean.Pass
Usage-examples check failed: none of the tools include examples. See how to fix → Fail

Stability & Change Management27

Stability observed for 8 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial

Tool Coverage100

100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
99% of tool parameters carry a description.Partial

Capabilities100

Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · @pdfgate/mcp-server

Claude Codex opencode OpenClaw Hermes Other

# add to Claude Code

claude mcp add com-pdfgate-mcp-server -- npx -y @pdfgate/mcp-server

# add to Codex CLI

codex mcp add com-pdfgate-mcp-server -- npx -y @pdfgate/mcp-server

// opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "com-pdfgate-mcp-server": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@pdfgate/mcp-server"
      ],
      "enabled": true
    }
  }
}

# add to OpenClaw

openclaw mcp add com-pdfgate-mcp-server --command npx --arg -y --arg @pdfgate/mcp-server

# ~/.hermes/config.yaml

mcp_servers:
  com-pdfgate-mcp-server:
    command: "npx"
    args: ["-y", "@pdfgate/mcp-server"]

// mcp.json

{
  "mcpServers": {
    "com-pdfgate-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@pdfgate/mcp-server"
      ]
    }
  }
}

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

2 Aug 26 +52
- Provenance: unverified → pass ▲ security
- Known CVEs: unverified → partial ▲ security
- Install scripts: unverified → pass ▲ security
- Malware scan: unverified → pass ▲ security
- The attested source repository moved: pdfgate/pdfgate-mcp-server security
- License: unverified → fail ▼ functional
- Schema quality: 100 → unverified ▼ functional
- Security disclosure: fail → unverified ▼ functional
- Tool coverage: 100 → unverified ▼ functional
- Dependency health: unverified → partial ▲ functional
- Maintenance: unverified → pass ▲ functional
- MCP protocol: unverified → pass ▲ functional
- Stability: unverified → 0.23 ▲ functional
- Schema quality: unverified → good ▲ functional
31 Jul 26 −9
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
30 Jul 26 −18
- Malware scan: pass → unverified ▼ security
27 Jul 26 53

First indexed and scored.

Show 2 earlier entries Hide earlier entries

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Analysed npm/@pdfgate/[email protected]

Provenance verified

Ecosystem: npm · Outcome: verified

Reason: verified

Source repo:: pdfgate/pdfgate-mcp-server
Certificate issuer:: https://token.actions.githubusercontent.com
Certificate SAN:: https://github.com/pdfgate/pdfgate-mcp-server/.github/workflows/publish.yml@refs/tags/v1.0.1
Rekor log index:: 1810417523
Predicate type:: https://slsa.dev/provenance/v1
Subject digest:: sha512:1dd9ec5df2191c6e1c173bb7622c145bd0e8c37656260688d292e1e601c61aa370a5761130573a9eb5b06de2dcc957aa2e4231db298e5d1373f83fff7
Discovery method:: attestation_endpoint

Dependencies 96 packages

96 packages in the resolved dependency tree · 95 deprecated · 29 stale.

The dependency tree was only partially resolved, so these counts may be incomplete.

MCP tools — 14 exposed · ~1,426 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens

compress_pdf ~94

Compress/optimise a PDF to reduce file size without changing visual content.

Input Output Examples

Name	Type	Req	Description
documentId	string	yes	The source document ID to compress
linearize	boolean	—	Linearise the PDF to enable fast web view (first page renders sooner)
metadata	object	—	Custom metadata to attach
preSignedUrlExpiresIn	integer	—	Pre-signed download URL expiry in seconds (60–86400)

No output schema declared.

No examples provided.

create_envelope ~81

Create a signing envelope from one or more existing PDFGate documents. Returns an envelope in 'created' status; call send_envelope to dispatch signing emails.

Input Output Examples

Name	Type	Req	Description
documents	array	yes	Documents to include in the envelope
metadata	object	—	Custom metadata to attach
requesterName	string	yes	Name of the user or system creating the envelope

No output schema declared.

No examples provided.

create_webhook ~73

Create a PDFGate webhook subscription. The response includes a signing secret — store it securely to verify incoming event signatures.

Input Output Examples

Name	Type	Req	Description
description	string	—	Optional label to identify this webhook
eventTypes	array	yes	Event types to subscribe to
url	string	yes	The HTTPS endpoint that will receive webhook events

No output schema declared.

No examples provided.

delete_document ~27

Delete a PDFGate document.

Input Output Examples

Name	Type	Req	Description
documentId	string	yes	The document ID to delete

No output schema declared.

No examples provided.

delete_webhook ~41

Delete a PDFGate webhook subscription. Future events will no longer be delivered to the associated endpoint.

Input Output Examples

Name	Type	Req	Description
webhookId	string	yes	The webhook ID to delete

No output schema declared.

No examples provided.

extract_pdf_form_data ~47

Extract form field values from a fillable PDF. Returns a JSON object mapping field names to their values.

Input Output Examples

Name	Type	Req	Description
documentId	string	yes	The document ID of the fillable PDF

No output schema declared.

No examples provided.

flatten_pdf ~81

Flatten an interactive PDF into a static, non-editable PDF. Creates a new document; does not overwrite the original.

Input Output Examples

Name	Type	Req	Description
documentId	string	yes	The source document ID to flatten
metadata	object	—	Custom metadata to attach
preSignedUrlExpiresIn	integer	—	Pre-signed download URL expiry in seconds (60–86400)

No output schema declared.

No examples provided.

generate_pdf ~274

Generate a PDF from a URL or raw HTML. Provide either 'url' or 'html', not both.

Input Output Examples

Name	Type	Req	Description
css	string	—	CSS to inject before rendering
emulateMediaType	string	—	—
enableFormFields	boolean	—	Enable interactive PDF form fields from HTML
footer	string	—	HTML string for the page footer
header	string	—	HTML string for the page header
html	string	—	Raw HTML string to render as PDF
javascript	string	—	JavaScript to inject before rendering
marginBottom	string	—	Bottom margin
marginLeft	string	—	Left margin
marginRight	string	—	Right margin
marginTop	string	—	Top margin e.g. '10mm'
metadata	object	—	Custom metadata to attach
orientation	string	—	Page orientation (default: portrait)
pageSizeType	string	—	Page size (default: a4)
preSignedUrlExpiresIn	integer	—	Pre-signed download URL expiry in seconds (60–86400)
printBackground	boolean	—	Print background graphics (default: true)
url	string	—	Public URL to render as PDF
waitForNetworkIdle	boolean	—	Wait for network idle before rendering

No output schema declared.

No examples provided.

get_document ~61

Retrieve metadata for a stored PDFGate document by its ID.

Input Output Examples

Name	Type	Req	Description
documentId	string	yes	The document ID
preSignedUrlExpiresIn	integer	—	Generate a fresh pre-signed download URL expiring in this many seconds (60–86400)

No output schema declared.

No examples provided.

get_envelope ~43

Retrieve the current state of an envelope including its status, document progress, and per-recipient signing status.

Input Output Examples

Name	Type	Req	Description
envelopeId	string	yes	The envelope ID to retrieve

No output schema declared.

No examples provided.

protect_pdf ~175

Encrypt a PDF with a password and optional permission restrictions. Produces a new document; the original is unchanged.

Input Output Examples

Name	Type	Req	Description
algorithm	string	—	Encryption algorithm (default: AES256)
disableCopy	boolean	—	Prevent copying text
disableEditing	boolean	—	Prevent editing
disablePrint	boolean	—	Prevent printing
documentId	string	yes	The source document ID to protect
encryptMetadata	boolean	—	Encrypt PDF metadata (default: false)
metadata	object	—	Custom metadata to attach
ownerPassword	string	—	Full-control owner password; required when using AES256 with a userPassword
preSignedUrlExpiresIn	integer	—	Pre-signed download URL expiry in seconds (60–86400)
userPassword	string	—	Password required to open the PDF

No output schema declared.

No examples provided.

send_envelope ~50

Send a created envelope to its recipients. PDFGate dispatches signing emails with secure, OTP-protected links that expire after 30 days.

Input Output Examples

Name	Type	Req	Description
envelopeId	string	yes	The envelope ID to send

No output schema declared.

No examples provided.

upload_pdf ~105

Upload a PDF to PDFGate so it can be referenced by other operations. Provide either 'filePath' (local path) or 'url'.

Input Output Examples

Name	Type	Req	Description
filePath	string	—	Absolute local path to the PDF file to upload
metadata	object	—	Custom metadata to attach
preSignedUrlExpiresIn	integer	—	Pre-signed download URL expiry in seconds (60–86400)
url	string	—	Publicly accessible URL of the PDF to upload

No output schema declared.

No examples provided.

watermark_pdf ~274

Apply a text or image watermark to a PDF. For type='text' provide 'text'; for type='image' provide 'watermarkImagePath'.

Input Output Examples

Name	Type	Req	Description
documentId	string	yes	The source document ID
font	string	—	Standard PDF font name
fontColor	string	—	Font colour as hex e.g. '#FF0000'
fontFilePath	string	—	Local path to a .ttf/.otf font file (overrides 'font')
fontSize	number	—	Font size in points
imageHeight	number	—	Image watermark height
imageWidth	number	—	Image watermark width
metadata	object	—	Custom metadata to attach
opacity	number	—	Opacity 0–1
preSignedUrlExpiresIn	integer	—	Pre-signed download URL expiry in seconds (60–86400)
rotate	number	—	Rotation in degrees (0–360)
text	string	—	Watermark text (required when type='text')
type	string	yes	Watermark type
watermarkImagePath	string	—	Local path to a .png/.jpg watermark image (required when type='image')
xPosition	number	—	Horizontal position
yPosition	number	—	Vertical position

No output schema declared.

No examples provided.

On this page

Handy links

Scoring key

80+ high trust
60–79 medium
below 60 low

How we score

Score history · last 30 days

27 Jul 3 Aug