
anymd MCP Server: Read Any Document in Claude, Cursor and More
Lets Claude, Cursor and other assistants read and search PDFs, Office files, web pages and media as clean Markdown, on your machine.
anymd lets Claude, Cursor and other assistants read PDFs, Word, PowerPoint, Excel, EPUB, web pages, images and audio or video as clean Markdown, and search across them. It runs on your own computer with no account or API key, and it is made by Sylphx. It was called pdf-reader-mcp before, and the older package name is still published. Without the --allow-dir option, it can open any file your user account can read, so limit it to your documents folder.
Good for
- Anyone asking Claude questions about long PDFs, contracts or papers
- Researchers searching a folder of mixed documents at once
- Teams that must keep documents on their own machines
- Developers feeding Word, Excel and slide files to coding agents
Works in
12 should work
Tap an app to see how to set it up and any known problems.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Client does not support this transport.
Client does not support this transport.
Install anymd MCP
Claude Code
- 1
Copy this prompt.
Add the anymd MCP server to Claude Code. Run this command: claude mcp add anymd -- npx -y @sylphx/anymd Then check that it loaded and tell me if I need to sign in or restart.
- 2
Paste it into Claude Code. It shows the change and asks before running it.
Requires Node.js.
Built from the package data we hold. Not yet tested by us.
Tools
Turns a file, web page or folder into Markdown
Converts PDF, Word, PowerPoint, Excel, CSV, EPUB, HTML, web pages, images and audio or video into Markdown with page markers. Long files stop at a token limit and give a cursor to continue; you can pick pages. Images in documents are saved to the anymd cache folder.
Try: “Read pages 1 to 5 of ~/Documents/report.pdf and summarize the findings.”
Runs code ·
readFinds text across files, folders and web pages
Looks for a phrase across one file, many files, whole folders or URLs in any supported format, and returns each hit with its page and a snippet. If nothing matches exactly, it falls back to ranked passages.
Try: “Search ~/Contracts for "indemnification" in PDF files only.”
Network ·
searchShows a document heading tree
Returns a document structure with section ids and page, slide or chapter ranges, so the assistant can open one section instead of the whole file.
Try: “Show me the outline of this 200-page report.”
Read ·
outlineDigs into a PDF: pages, regions, OCR, compare
Gives page facts, renders pages as images, crops regions, runs OCR or a vision provider you configure, returns structured JSON with geometry, and compares two PDFs. Video timelines, frame rendering and quote checking are anymd Pro features.
Try: “Compare the old and new versions of the contract PDF and list the changed pages.”
Runs code ·
inspect
Read from the source code
Permissions
medium risk · 5 things to watch · 7 advisories
Medium risk
It can read any document your account can open and fetch web addresses you hand it, but it does not edit or delete files. Add --allow-dir with your documents folder to the server command so the assistant can only open files there.
What it can do
- Read your data
- Create and change things
- Delete things
- Read-only mode
Watch out for
It can open any file you can read
Without --allow-dir, the read, search and inspect tools accept any local path. Add --allow-dir=/path/to/docs to the server command to confine it to one folder. github.com
It fetches web addresses you give it
read and search accept URLs and fetch them. The README says private and loopback addresses are blocked and redirects are rechecked, but earlier versions had bypasses (see advisories). github.com
It runs tesseract, ffmpeg and ffprobe if installed
These optional programs run without a shell, with a timeout and an output cap, for OCR, subtitles and transcripts. Skip installing them if you do not need images or video. github.com
Embedded images are saved to a cache folder
Pictures from documents are written only to anymd cache directory, set by ANYMD_CACHE_DIR or the platform default, never next to your files. github.com
Pro features and hosted mode are separate
anymd Pro (video timelines, quote checking) is a paid add-on. The hosted Sylphx AI parse service is billed per page; the local binary does not use it. github.com
Security advisories
7 known advisories, all fixed in a newer version.
- read_pdf URL source: SSRF and file:// local-file read bypassed path confinement. Affects @sylphx/pdf-reader-mcp and @sylphlab/pdf-reader-mcp before 2.4.1.high · Fixed in 2.4.1 · GHSA-34gp-w56h-r2mv
- HTTP mode accepted requests without checking MCP_API_KEY. Affects @sylphx/pdf-reader-mcp 2.2.0 to before 3.0.1.high · Fixed in 3.0.1 · GHSA-q344-5v34-gm84
- SSRF protection bypass through IPv6 transition addresses in PDF URL loading. Affects @sylphx/pdf-reader-mcp 3.0.14 and earlier.high · Fixed in 3.0.15 · GHSA-f3xw-ff5r-rj7c
- DNS-rebinding SSRF bypassed the private-IP guard. Affects @sylphx/pdf-reader-mcp 3.1.2 to 3.1.4.medium · Fixed in 3.2.0 · GHSA-rgg9-pwc3-jg39
- SSRF guard bypassable through DNS rebinding (TOCTOU). Affects @sylphx/pdf-reader-mcp 3.1.2 to 3.1.4.medium · Fixed in 3.2.0 · GHSA-5r2f-7788-qp8v
Show all 7Show fewer
- The documented --allow-dir folder limit was not implemented in the Rust server. Affects @sylphx/pdf-reader-mcp 4.0.0 to 4.1.3.medium · Fixed in 8.0.0 · GHSA-qr3f-g5wf-225w
- The legacy pdf_compare tool bypassed the --allow-dir folder limit. Affects @sylphx/anymd 7.0.0 to 8.5.4.medium · Fixed in 8.5.5 · GHSA-xrc8-gj3q-m8vm
Technical details
| Turning on read-only | There are no tools that change your documents. --allow-dir=<path> (repeatable) or MCP_PDF_ALLOWED_DIRS limits which folders it can open. |
|---|---|
| Talks to | Web pages and files you ask it to fetch by URL. Model weights only when you ask for a download (download_asr_model) |
| Sign-in and keys | No sign-in and no API key. Documents are processed on your machine. |
Questions
Is anymd official?
It is made by Sylphx, the team behind the hosted Sylphx AI parse service, and it does not connect to another vendor's app. It was previously published as pdf-reader-mcp.
Does anymd need an API key or an account?
No. The free local version runs on your computer with no sign-in. Only the separate hosted Sylphx AI parse service needs an account and bills per page, and the local server does not use it.
Does my document leave my computer?
No, not by itself. The README says documents are not uploaded, and only a URL you pass is fetched. OCR and transcripts use local models or installed tools.
Can I limit which folders it reads?
Yes. Add --allow-dir=/path/to/docs to the server command, once per folder, or set MCP_PDF_ALLOWED_DIRS. Without it the server can open any file you can read.
Which apps does it work with?
Any app that can run a local MCP server over stdio, including Claude Code, Claude Desktop, Cursor, VS Code, Windsurf and Codex. The README also offers a one-click Claude Desktop bundle (.mcpb) on its releases page. Use the install box above.
What happened to pdf-reader-mcp?
anymd is the same project under a new name. Older versions of the @sylphx/pdf-reader-mcp package had security fixes, listed in the advisories on this page, and the current release is past all of them.
Is anymd free?
Yes. The core is MIT-licensed and free. anymd Pro adds paid video timelines and quote checking, and nothing that was free moved to Pro, according to the README.
Which file types can it read?
PDF, Word, PowerPoint, Excel and OpenDocument sheets, CSV, EPUB, HTML and web pages, text and JSON, images (with OCR), and audio or video (metadata, subtitles and optional transcripts).
Information
updated Nov 2, 2026
- Publisher
- Community
- Package
@sylphx/anymd- Registry
- npm
- Transport
- stdio
- Version
- 8.5.7
- License
- MIT
- Last commit
- Oct 31, 2026
- Open issues
- 2
- Listed in
- Official MCP registry
Sources
Docs, issue trackers and discussions this page is built from. Issues, quotes and findings above link to their own source.
Show all 5Hide
- github.com · github.com
- github.com · github.com
- github.com · github.com
- github.com · github.com
- osv.dev · osv.dev