
PDF Reader MCP Server: Tools, Setup for Claude Code, Cursor & More
Evidence-first PDF MCP. Agent Document Twin with citeable page+bbox evidence.
Works in
12 should work
Tap an app to see how to set it up and any known problems.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Supports local MCP servers.
Client does not support this transport.
Client does not support this transport.
Install PDF Reader MCP
Claude Code
- 1
Copy this prompt.
Add the PDF Reader MCP server to Claude Code. Run this command: claude mcp add pdf-reader -- npx -y @sylphx/pdf-reader-mcp Then check that it loaded and tell me if I need to sign in or restart.
- 2
Paste it into Claude Code. It shows the change and asks before running it.
Requires Node.js.
Built from the package data we hold. Not yet tested by us.
Tools
We don't list PDF Reader MCP's tools here yet. After you connect it, ask your assistant "What can you do with PDF Reader MCP?" to see them.
Security advisories
7 advisories
7 known advisories, all fixed in a newer version.
- SSRF protection bypass via IPv6 transition addresses (NAT64 / 6to4 / Teredo) in PDF URL loaderhigh · Fixed in 3.0.15 · GHSA-f3xw-ff5r-rj7c
- read_pdf url source: SSRF and file:// local-file read bypass path confinementhigh · Fixed in 2.4.1 · GHSA-34gp-w56h-r2mv
- @sylphx/pdf-reader-mcp: HTTP transport accepts unauthenticated requests despite a configured MCP_API_KEYhigh · Fixed in 3.0.1 · GHSA-q344-5v34-gm84
- [withdrawn duplicate - see GHSA-xrc8-gj3q-m8vm] pdf_compare allowlist bypassmedium · Fixed in 8.5.5 · GHSA-f8xf-6vpc-6hpj
- Documented --allow-dir / MCP_PDF_ALLOWED_DIRS filesystem allowlist is not implemented in the pure-Rust servermedium · Fixed in 8.0.0 · GHSA-qr3f-g5wf-225w
Information
updated Nov 2, 2026
- Publisher
- Community
- Package
@sylphx/pdf-reader-mcp- Registry
- npm
- Transport
- stdio
- Version
- 4.1.2
- License
- MIT
- Last commit
- Oct 31, 2026
- Open issues
- 2
- Listed in
- Official MCP registry