pdfnative MCP — PDF generation, PAdES signing & introspection

What you can do with it

We have not written a plain-language summary for this one yet. Below are the facts we read from the registry.

• Connection: Runs on your computer
• Transport: stdio
• Category: Docs, sheets & office work
• You need to fill in: PDFNATIVE_MCP_HTTP_TOKEN, PDFNATIVE_MCP_TSA_AUTH

Install

Pick the AI app you use, then copy the settings.

You need

• npmNode.js installed (for the npx command)

Which app do you use?

{
  "mcpServers": {
    "pdfnative": {
      "command": "npx",
      "args": [
        "-y",
        "pdfnative-mcp"
      ],
      "env": {
        "PDFNATIVE_MCP_OUTPUT_DIR": "your-value",
        "PDFNATIVE_MCP_OUTPUT_BASE_URL": "your-value",
        "PDFNATIVE_MCP_CACHE_DIR": "your-value",
        "PDFNATIVE_MCP_FONT_DIR": "your-value",
        "PDFNATIVE_MCP_PORT": "your-value",
        "PDFNATIVE_MCP_HTTP_TOKEN": "your-value",
        "PDFNATIVE_MCP_MAX_INFLATE_BYTES": "your-value",
        "PDFNATIVE_MCP_CREATION_DATE": "your-value",
        "SOURCE_DATE_EPOCH": "your-value",
        "PDFNATIVE_MCP_TSA_URL": "your-value",
        "PDFNATIVE_MCP_TSA_AUTH": "your-value",
        "PDFNATIVE_MCP_REVOCATION": "your-value",
        "PDFNATIVE_MCP_NETWORK_ALLOWED_HOSTS": "your-value",
        "PDFNATIVE_MCP_NETWORK_TIMEOUT_MS": "your-value"
      }
    }
  }
}

claude mcp add pdfnative --env PDFNATIVE_MCP_OUTPUT_DIR=your-value --env PDFNATIVE_MCP_OUTPUT_BASE_URL=your-value --env PDFNATIVE_MCP_CACHE_DIR=your-value --env PDFNATIVE_MCP_FONT_DIR=your-value --env PDFNATIVE_MCP_PORT=your-value --env PDFNATIVE_MCP_HTTP_TOKEN=your-value --env PDFNATIVE_MCP_MAX_INFLATE_BYTES=your-value --env PDFNATIVE_MCP_CREATION_DATE=your-value --env SOURCE_DATE_EPOCH=your-value --env PDFNATIVE_MCP_TSA_URL=your-value --env PDFNATIVE_MCP_TSA_AUTH=your-value --env PDFNATIVE_MCP_REVOCATION=your-value --env PDFNATIVE_MCP_NETWORK_ALLOWED_HOSTS=your-value --env PDFNATIVE_MCP_NETWORK_TIMEOUT_MS=your-value -- npx -y pdfnative-mcp

{
  "mcpServers": {
    "pdfnative": {
      "command": "npx",
      "args": [
        "-y",
        "pdfnative-mcp"
      ],
      "env": {
        "PDFNATIVE_MCP_OUTPUT_DIR": "your-value",
        "PDFNATIVE_MCP_OUTPUT_BASE_URL": "your-value",
        "PDFNATIVE_MCP_CACHE_DIR": "your-value",
        "PDFNATIVE_MCP_FONT_DIR": "your-value",
        "PDFNATIVE_MCP_PORT": "your-value",
        "PDFNATIVE_MCP_HTTP_TOKEN": "your-value",
        "PDFNATIVE_MCP_MAX_INFLATE_BYTES": "your-value",
        "PDFNATIVE_MCP_CREATION_DATE": "your-value",
        "SOURCE_DATE_EPOCH": "your-value",
        "PDFNATIVE_MCP_TSA_URL": "your-value",
        "PDFNATIVE_MCP_TSA_AUTH": "your-value",
        "PDFNATIVE_MCP_REVOCATION": "your-value",
        "PDFNATIVE_MCP_NETWORK_ALLOWED_HOSTS": "your-value",
        "PDFNATIVE_MCP_NETWORK_TIMEOUT_MS": "your-value"
      }
    }
  }
}

{
  "servers": {
    "pdfnative": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "pdfnative-mcp"
      ],
      "env": {
        "PDFNATIVE_MCP_OUTPUT_DIR": "your-value",
        "PDFNATIVE_MCP_OUTPUT_BASE_URL": "your-value",
        "PDFNATIVE_MCP_CACHE_DIR": "your-value",
        "PDFNATIVE_MCP_FONT_DIR": "your-value",
        "PDFNATIVE_MCP_PORT": "your-value",
        "PDFNATIVE_MCP_HTTP_TOKEN": "your-value",
        "PDFNATIVE_MCP_MAX_INFLATE_BYTES": "your-value",
        "PDFNATIVE_MCP_CREATION_DATE": "your-value",
        "SOURCE_DATE_EPOCH": "your-value",
        "PDFNATIVE_MCP_TSA_URL": "your-value",
        "PDFNATIVE_MCP_TSA_AUTH": "your-value",
        "PDFNATIVE_MCP_REVOCATION": "your-value",
        "PDFNATIVE_MCP_NETWORK_ALLOWED_HOSTS": "your-value",
        "PDFNATIVE_MCP_NETWORK_TIMEOUT_MS": "your-value"
      }
    }
  }
}

Your choice stays on this device in a cookie; no account needed.

Values you fill in

• PDFNATIVE_MCP_OUTPUT_DIR env
  Absolute path of a sandboxed directory where outputMode='file' may write PDFs. Unset: every tool returns base64 only (file output disabled).
• PDFNATIVE_MCP_OUTPUT_BASE_URL env
  Optional public base URL of PDFNATIVE_MCP_OUTPUT_DIR when the operator serves it over HTTP (e.g. https://files.example.com/pdf/). File-mode results then carry url (base + sandbox-relative path, perce…
• PDFNATIVE_MCP_CACHE_DIR env
  Opt-in content-addressed response cache directory (SHA-256 keyed, 1h TTL, 256 MiB LRU, plaintext at rest). Never caches encrypt/decrypt, sign, timestamp, add_ltv, update_metadata, encrypted builds or…
• PDFNATIVE_MCP_FONT_DIR env
  Optional operator font sandbox: absolute path of a directory of .ttf / .otf files (at most 64, 16 MiB each), each parsed by the engine and registered at boot under the slug of its file name; tools na…
• PDFNATIVE_MCP_PORT env
  Serve Streamable HTTP on this loopback port instead of stdio (MCP 2026-07-28, stateless). Unauthenticated unless PDFNATIVE_MCP_HTTP_TOKEN is set.
• PDFNATIVE_MCP_HTTP_TOKEN secret env
  Opt-in bearer token for the HTTP transport (>= 16 chars, no whitespace). When set, /mcp requires 'Authorization: Bearer ' or answers 401. Never logged.
• PDFNATIVE_MCP_MAX_INFLATE_BYTES env
  Per-stream FlateDecode decompression cap in bytes (zip-bomb mitigation; default 104857600 = 100 MiB). Integer >= 1024; an invalid value refuses to start the server.
• PDFNATIVE_MCP_CREATION_DATE env
  ISO 8601 instant with a time zone (e.g. 2026-01-01T00:00:00Z) pinned as the creation date of every generated document: reproducible bytes on any host. A call's own creationDate still wins. An invalid…
• SOURCE_DATE_EPOCH env
  reproducible-builds.org convention: integer seconds since the Unix epoch, used as the pinned creation date when PDFNATIVE_MCP_CREATION_DATE is unset. An invalid value refuses to start the server.
• PDFNATIVE_MCP_TSA_URL env
  http(s) URL of the RFC 3161 timestamp authority used by sign_pdf timestamp=true and timestamp_pdf (PAdES B-T / B-LTA). Unset: those calls fail with TSA_NOT_CONFIGURED and no network request is made.…
• PDFNATIVE_MCP_TSA_AUTH secret env
  Optional Authorization header value sent to the TSA (e.g. 'Basic ...' or 'Bearer ...'). Never logged or echoed.
• PDFNATIVE_MCP_REVOCATION env
  'ocsp', 'crl' or 'ocsp,crl': enables online revocation collection for add_ltv mode='online' (PAdES B-LT). Unset: that mode fails with REVOCATION_NOT_CONFIGURED; mode='offline' stays fully offline. Re…
• PDFNATIVE_MCP_NETWORK_ALLOWED_HOSTS env
  Comma-separated allow-list of OCSP / CRL responder hosts ('host', 'host:port' or '*.suffix'). Mandatory when PDFNATIVE_MCP_REVOCATION is set: responder URLs found in certificates are fetched only if…
• PDFNATIVE_MCP_NETWORK_TIMEOUT_MS env
  Per-request timeout for TSA / OCSP / CRL calls in milliseconds, 1000-120000 (default 10000).

These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.

What it can do

Runs on your computer; the tool list appears in your AI app after you install it.

Basic checksi

We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 7, 2026

• ✓ Pass

  Maker matches the repo

  The registry name was verified with the GitHub account Nizoka, which owns the repo

• … Not checked yet

  Still maintained

  We have not read this repo from GitHub yet

• … Not checked yet

  Has a licence

  We have not read this repo from GitHub yet

• – Not applicable

  Endpoint responds

  This one runs on your computer; there is no internet endpoint

• – Not applicable

  Sign-in with OAuth

  Runs on your computer and uses local settings instead

• … Not checked yet

  No hidden instructions in tool descriptions

  Runs on your computer; we can only read tool lists from internet endpoints

Compared with others in Docs, sheets & office worki

• More stars than 0% of the other 3535 servers in this category
• Published to the registry more recently than 81% of the other 3535 servers in this category
• Basic checks equal to or better than 100% of the other 3535 servers in this category

Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.

Alternatives

Servers in the same category from other makers, sorted by stars.

Reading a card:★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi

README from the maker