Is io.github.bzsanti/oxidize-pdf-mcp safe to use?

io.github.bzsanti/oxidize-pdf-mcp has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.

How do I install io.github.bzsanti/oxidize-pdf-mcp?

io.github.bzsanti/oxidize-pdf-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can io.github.bzsanti/oxidize-pdf-mcp do?

io.github.bzsanti/oxidize-pdf-mcp provides 7 tools: Installation, Configuration, Operations, Graphics, Types and 2 more. See the full tools list on the server page for descriptions and parameters.

What AI clients work with io.github.bzsanti/oxidize-pdf-mcp?

io.github.bzsanti/oxidize-pdf-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.

Is io.github.bzsanti/oxidize-pdf-mcp actively maintained?

io.github.bzsanti/oxidize-pdf-mcp is actively maintained - last commit was 9 days ago. It has 6 GitHub stars.

io.github.bzsanti/oxidize-pdf-mcp

oxidize-pdf

MCP server for PDF generation, parsing, splitting, merging, and manipulation via oxidize-pdf

6 7 tools GitHub PyPI

No known CVEs

MIT license

Actively maintained

Last commit 9d ago

Works with most clients

Transport: stdio, http

7 tools · ~150 tok

Grade A · 0.1% of 200K ctx

MCPpedia last refreshed this data 1d ago

Edit this pageView history

io.github.bzsanti/oxidize-pdf-mcp is an MCP server that MCP server for PDF generation, parsing, splitting, merging, and manipulation via oxidize-pdf. Its tool list has not been published yet over stdio and http, requires no API key, and scores 87/100 on MCPpedia's security, maintenance and efficiency rubric.

Productivity Developer Tools

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "oxidize-pdf": {
      "env": {
        "OXIDIZE_WORKSPACE": "/path/to/your/pdfs"
      },
      "command": "oxidize-mcp"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-bzsanti-oxidize-pdf-mcp)](https://mcppedia.org/s/io-github-bzsanti-oxidize-pdf-mcp)

Read me

What io.github.bzsanti/oxidize-pdf-mcp does

MCP server for PDF generation, parsing, splitting, merging, and manipulation via oxidize-pdf

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.

uvx 'oxidize-pdf' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

87/100across 5 weighted dimensions

How we score →

0255075100

−13

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

1 fixed

GHSA-88q9-cmp2-c2vqmedium · fixedCVSS 4.3

oxidize-pdf: NaN/inf bypass in colour content-stream emission causes PDF rejection (DoS)

### Impact `oxidize-pdf` defines `Color` as a `pub enum` with public tuple-struct variants `Rgb(f64, f64, f64)`, `Gray(f64)`, and `Cmyk(f64, f64, f64, f64)`. The constructors `Color::rgb`, `Color::gray`, and `Color::cmyk` clamp incoming components to `[0.0, 1.0]`, but because the variants are `pub`, callers can construct values directly without going through the constructors: ```rust let safe = Color::rgb(f64::NAN, 0.5, 0.5); // clamps NaN to 0.0 let attack = Color::Rgb(f64::NAN,

Affected: >= 0Fixed in 2.6.0source →

Inventory

Tools (7)

Click any tool to inspect its schema.

~150 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.bzsanti/oxidize-pdf-mcp safe to use?: io.github.bzsanti/oxidize-pdf-mcp has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.
How do I install io.github.bzsanti/oxidize-pdf-mcp?: io.github.bzsanti/oxidize-pdf-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.bzsanti/oxidize-pdf-mcp do?: io.github.bzsanti/oxidize-pdf-mcp provides 7 tools: Installation, Configuration, Operations, Graphics, Types and 2 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.bzsanti/oxidize-pdf-mcp?: io.github.bzsanti/oxidize-pdf-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.
Is io.github.bzsanti/oxidize-pdf-mcp actively maintained?: io.github.bzsanti/oxidize-pdf-mcp is actively maintained - last commit was 9 days ago. It has 6 GitHub stars.

Similar servers

Others in productivity / developer-tools

View all →

XcodeBuildMCP97

XcodeBuildMCP provides tools for Xcode project management, simulator management, and app utilities.

6.6k 2

Supabase MCP Server96

Manage Supabase projects — databases, auth, storage, and edge functions

3.0k 4

Mcp Gitlab96

MCP server for using the GitLab API

2.1k 12

Codebase Memory Mcp95

Codebase knowledge graph for AI agents — 162 languages, sub-ms queries, 99% fewer tokens.

48.6k 6

MCP Security Weekly

Get CVE alerts and security updates for io.github.bzsanti/oxidize-pdf-mcp and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Productivity Developer Tools

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio, http · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "oxidize-pdf": {
      "env": {
        "OXIDIZE_WORKSPACE": "/path/to/your/pdfs"
      },
      "command": "oxidize-mcp"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-bzsanti-oxidize-pdf-mcp)](https://mcppedia.org/s/io-github-bzsanti-oxidize-pdf-mcp)

Read me

What io.github.bzsanti/oxidize-pdf-mcp does

MCP server for PDF generation, parsing, splitting, merging, and manipulation via oxidize-pdf

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked - your result helps other developers.

uvx 'oxidize-pdf' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

README

oxidize-pdf

Documentation · Context7 · Documentation publishing and indexing

Version 0.23.4 pins Rust core 5.5.6. See compatibility and validation.

Rust-powered PDF library for Python. Generate, parse, split, merge, and manipulate PDFs with native performance. Ships with a built-in MCP server so AI agents can work with PDFs out of the box.

No C dependencies. No Java. No subprocess calls.

Installation

pip install oxidize-pdf            # Core library
pip install "oxidize-pdf[mcp]"     # + MCP server for AI agents

Platforms: Linux (x86_64, aarch64) | macOS (x86_64, Apple Silicon) | Windows (x86_64) Requires: Python 3.10+

Version 0.23.4 pins Rust core 5.5.6, using the MIT-licensed oxidize-webpki RustCrypto provider for certificate verification. See the dependency policy for supported builds and limits. 0.23.4 release notes describe the signed-field permission fixes. New APIs include explicit text recovery, non-breaking-space normalization, build identification controls and incremental signature slots. See the API guide and validation.

The current develop branch contains post-release parity work. See the current capability inventory and Python/.NET comparison for the audited subset, missing bindings and inherited core limitations. Neither the core version nor the type stubs establish full functional parity; no global coverage percentage is claimed.

Why oxidize-pdf?

	oxidize-pdf	Pure-Python libs	C/Java wrappers
Performance	Native (compiled Rust)	Interpreted	Native but heavy
Dependencies	Zero	Varies	Poppler, Java, Ghostscript
Memory safety	Rust ownership model	GC-dependent	Manual / GC
Type stubs	Public API inventory + strict mypy checks on develop	Varies	Varies
AI-ready (MCP)	Built-in	No	No

MCP Server

Expose the supported PDF tools to your AI agent:

oxidize-mcp

The built-in Model Context Protocol server exposes 12 tools, 5 static resources plus a session resource template, and 5 prompts over stdio. Install oxidize-pdf[mcp] to include its dependencies; the base library keeps MCP optional.

Version 0.20 uses FastMCP 4 and MCP Python SDK 2, with support for both modern and legacy stdio clients. See the migration guide for versions and installation routes.

If tools/list returns an empty array with an older installation (issue #198), upgrade to 0.20.0 or newer. These versions fix tool registration when starting server.py directly. On Windows, use the same Python environment for installation and startup:

py

... [View full README on GitHub](https://github.com/bzsanti/oxidize-python#readme)

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

87/100across 5 weighted dimensions

How we score →

0255075100

−13

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

1 fixed

GHSA-88q9-cmp2-c2vqmedium · fixedCVSS 4.3

oxidize-pdf: NaN/inf bypass in colour content-stream emission causes PDF rejection (DoS)

Affected: >= 0Fixed in 2.6.0source →

Inventory

Tools (7)

Click any tool to inspect its schema.

~150 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.bzsanti/oxidize-pdf-mcp safe to use?: io.github.bzsanti/oxidize-pdf-mcp has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.
How do I install io.github.bzsanti/oxidize-pdf-mcp?: io.github.bzsanti/oxidize-pdf-mcp supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.bzsanti/oxidize-pdf-mcp do?: io.github.bzsanti/oxidize-pdf-mcp provides 7 tools: Installation, Configuration, Operations, Graphics, Types and 2 more. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.bzsanti/oxidize-pdf-mcp?: io.github.bzsanti/oxidize-pdf-mcp is compatible with claude-desktop, cursor, claude-code. It uses stdio and http transport.
Is io.github.bzsanti/oxidize-pdf-mcp actively maintained?: io.github.bzsanti/oxidize-pdf-mcp is actively maintained - last commit was 9 days ago. It has 6 GitHub stars.