PDF Triage
NPM · PDF-TRIAGE-MCP · SCANNED AUG 3
Read local PDFs without uploading. Classifies first, flags untrustworthy text, bounds output.
Available components
How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →
Supply Chain Security88
- No malware found by supply-chain analysis.Pass
- Only part of the dependency tree could be resolved (100 of 104), so this covers what we could see, not the whole tree.Partial
- No install/post-install scripts declared.Pass
- Only part of the dependency tree could be resolved (100 of 104), so this covers what we could see, not the whole tree. View diagnostics → Partial
Provenance & Transparency45
- Source repository is publicly reachable at the declared URL. View diagnostics → Pass
- Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
- Clear OSI-approved license (MIT).Pass
- Actively maintained (last published 0 days ago).Pass
- Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability0
- Schema quality not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.Unverified
Stability & Change Management0
- Stability not yet verified: we do not have a sandbox capture of the MCP schema this version of the package serves yet.Unverified
Tool Coverage0
- Tool coverage not yet verified: we do not have a sandbox capture of the tool definitions this version of the package serves yet.Unverified
Capabilities0
- Protocol version not yet verified: we do not have a sandbox capture of the MCP handshake this version of the package performs yet.Unverified
Unverified: 4 categories
Categories scored 0 because our sandbox run of this package has not given us the schema these checks need to read. That is a gap on our side rather than a finding about the package, and we only credit what we can confirm, so the score stands at 0 until the capture succeeds. We are working through the fleet, so this normally clears without any action from you. How we score packages →
Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.
npm · pdf-triage-mcp
claude mcp add vishalmeena2211-pdf-triage-mcp -- npx -y pdf-triage-mcp
codex mcp add vishalmeena2211-pdf-triage-mcp -- npx -y pdf-triage-mcp
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"vishalmeena2211-pdf-triage-mcp": {
"type": "local",
"command": [
"npx",
"-y",
"pdf-triage-mcp"
],
"enabled": true
}
}
} openclaw mcp add vishalmeena2211-pdf-triage-mcp --command npx --arg -y --arg pdf-triage-mcp
mcp_servers:
vishalmeena2211-pdf-triage-mcp:
command: "npx"
args: ["-y", "pdf-triage-mcp"] {
"mcpServers": {
"vishalmeena2211-pdf-triage-mcp": {
"command": "npx",
"args": [
"-y",
"pdf-triage-mcp"
]
}
}
} Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.
- 3 Aug 26 35
First indexed and scored.
Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.
Captured 3 Aug 2026 · Analysed npm/[email protected]
Provenance none
Ecosystem: npm · Outcome: none
Dependencies 100 packages
100 packages in the resolved dependency tree · 95 deprecated · 29 stale.
The dependency tree was only partially resolved, so these counts may be incomplete.
The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.
pdf_classify Classify a PDF ~135
Triage a local PDF without extracting its text (typically 10-50ms). Returns whether the document is text-based, scanned, image-based or mixed, a confidence score, and the exact 1-indexed pages that need OCR. ALWAYS call this before pdf_extract on an unfamiliar or large document: it is cheap, and it tells you whether local extraction is worth attempting at all. If it reports scanned, image_based, or encoding issues, do not extract — route the document to an OCR service instead.
| Name | Type | Req | Description |
|---|---|---|---|
| path | string | yes | Absolute path, or path relative to an allowed root, of a .pdf file |
No output schema declared.
No examples provided.
pdf_extract Extract PDF to Markdown ~190
Extract a local PDF to Markdown, preserving headings, lists and tables. Output is TRUNCATED by default to protect your context window — to read a long document, call repeatedly with the `pages` parameter rather than raising `maxChars`. Call pdf_classify first on unfamiliar documents. If the response carries a critical warning (encoding issues, no text layer, right-to-left script), the text is unreliable and must not be quoted as fact.
| Name | Type | Req | Description |
|---|---|---|---|
| compact | boolean | — | Collapse dot leaders and source padding for token efficiency. Defaults to true. |
| maxChars | integer | — | Truncation ceiling. Defaults to the server setting (40000). |
| pages | array | — | 1-indexed page numbers to extract. Omit for the whole document. Prefer this over raising maxChars. |
| path | string | yes | Absolute path, or path relative to an allowed root, of a .pdf file |
No output schema declared.
No examples provided.
pdf_search Search inside a PDF ~155
Find text inside a local PDF and return matching pages with surrounding context. Much cheaper than pdf_extract when you only need to locate something — use this first on long documents, then pdf_extract with the `pages` it reports.
| Name | Type | Req | Description |
|---|---|---|---|
| contextChars | integer | — | Characters of surrounding context per match. Defaults to 200. |
| maxMatches | integer | — | Maximum matches to return. Defaults to 25. |
| path | string | yes | Absolute path, or path relative to an allowed root, of a .pdf file |
| query | string | yes | Literal text to find, or a regular expression when `regex` is true |
| regex | boolean | — | Treat `query` as a JavaScript regular expression. Defaults to false. |
No output schema declared.
No examples provided.
pdf_tables Extract tables from a PDF ~133
Return only the tables from a local PDF as Markdown, skipping prose. Useful for invoices, financial statements and reports where the numbers are the point. Tables are detected from the PDF's own drawing operations and text alignment — the cell values are read directly from the document, not guessed by a model or OCR.
| Name | Type | Req | Description |
|---|---|---|---|
| maxChars | integer | — | Truncation ceiling. Defaults to the server setting. |
| pages | array | — | 1-indexed pages to search for tables. Omit for the whole document. |
| path | string | yes | Absolute path, or path relative to an allowed root, of a .pdf file |
No output schema declared.
No examples provided.