Hosted MCP front door to the pdf2md API: checked PDF-to-Markdown requests, short-lived credential.
MCPpedia last refreshed this data
dev.dudko/pdf-to-md is an MCP server that hosted MCP front door to the pdf2md API: checked PDF-to-Markdown requests, short-lived credential. Its tool list has not been published yet over http, requires no API key, and scores 69/100 on MCPpedia's security, maintenance and efficiency rubric.
Config is the same across clients - only the file and path differ.
{
"mcpServers": {
"pdf-to-md": {
"url": "https://pdf2md.dudko.dev/mcp"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Hosted MCP front door to the pdf2md API: checked PDF-to-Markdown requests, short-lived credential.
This server supports HTTP transport. Be the first to test it - help the community know if it works.
Five weighted categories - click any category to see the underlying evidence.
No known CVEs.
No package registry to scan.
Click any tool to inspect its schema.
Be the first to review
Have you used this server?
Share your experience - it helps other developers decide.
Sign in to write a review.
Others in security / writing
Search-first MCP server for JavaScript reverse engineering: 735 tools across 36 domains.
MCP server for 1Password service accounts — tools and resources for vaults and credentials
Scrape, crawl, and map websites to Markdown or JSON via local CLI.
MCP security scanner. CI-native testing, attack simulation, health scoring, and SARIF.
MCP Security Weekly
Get CVE alerts and security updates for dev.dudko/pdf-to-md and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
Connect your AI assistant to pdf2md — PDF to clean Markdown, tables and images included — through our hosted Model Context Protocol (MCP) server. Sign in once with your dudko.dev account; no API key to paste.
The server is the front door to the pdf2md HTTP API, not a converter: a document never travels through the model or through the server. The assistant asks for a request, and runs it wherever the PDF is.
pdf-to-mdhttps://pdf2md.dudko.dev/mcpauth.dudko.dev — you'll be prompted to sign in.Two tools, both free:
| Tool | What it does |
|---|---|
api_access | How the pdf2md API works: endpoints, options, limits, errors. |
api_request | Checks conversion options (convert, detect, text) and returns the exact request — URL, headers, a curl command — with a 15-minute credential for your account. |
/plugin marketplace add dudko-dev/pdf-to-md-mcp-setup
/plugin install pdf-to-md@pdf-to-md
/reload-plugins
Then run /mcp and complete the sign-in when prompted.
Prefer not to use the marketplace? Add the server directly:
claude mcp add --transport http pdf-to-md https://pdf2md.dudko.dev/mcp
Same remote URL, same sign-in — only the config location differs.
PDF to Markdownhttps://pdf2md.dudko.dev/mcp~/.cursor/mcp.json (global) or .cursor/mcp.json (per project):
{
"mcpServers": {
"pdf-to-md": {
"url": "https://pdf2md.dudko.dev/mcp"
}
}
}
{
"servers": {
"pdf-to-md": {
"type": "http",
"url": "https://pdf2md.dudko.dev/mcp"
}
}
}
The server is an OAuth 2.1 resource server. The first call answers 401 with a
WWW-Authenticate header pointing at its protected-resource metadata:
https://pdf2md.dudko.dev/.well-known/oauth-protected-resource/mcpwhich names https://auth.dudko.dev as the authorization server (scope
usage). Compliant MCP clients discover this automatically — you only need the
server URL, and you sign in with your dudko.dev account. Tokens are
audience-bound to https://pdf2md.dudko.dev/mcp and are refused anywhere else.
The server itself carries no files and no content: its tools return a ready-to-run HTTP request with a short-lived credential (15 minutes, good for this API only) for the account you signed in as. Your assistant runs that request wherever the file is, and the API answers the caller directly. Each request counts against your account's plan like any other API call; the MCP tools themselves are free.
401 / asked to sign in again — the token expired; reconnect in the client.402 — the conversion quota for your account is spent;
retrying will not help. See https://auth.dudko.dev/account.422 from /convert — the PDF is a scan with no text layer. pdf2md does
no OCR; detect tells you this before you spend a conversion./mcp in
Claude Code shows connected).