PDF tools + QR over MCP: merge, split, rotate, text, metadata, malicious-content scan.
MCPpedia last refreshed this data
net.bigfloppy.tinytoolbox/tinytoolbox is an MCP server that PDF tools + QR over MCP: merge, split, rotate, text, metadata, malicious-content scan. Its tool list has not been published yet over http, requires no API key, and scores 33/100 on MCPpedia's security, maintenance and efficiency rubric.
Config is the same across clients - only the file and path differ.
https://tinytoolbox.bigfloppy.net/mcpRemote servers are added as connectors, not in claude_desktop_config.json, which is for local servers.
Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
PDF tools + QR over MCP: merge, split, rotate, text, metadata, malicious-content scan.
No automated test available for this server. Check the GitHub README for setup instructions.
Five weighted categories - click any category to see the underlying evidence.
No known CVEs.
No package registry to scan.
Be the first to review
Have you used this server?
Share your experience - it helps other developers decide.
Sign in to write a review.
Others in design
Design tokens from any live site: colours, type, spacing, components, drift against a baseline.
Draw and visually collaborate with your agents on tldraw's canvas.
MeiGen-AI-Design-MCP — Turn Claude Code / OpenClaw into your local Lovart. Local ComfyUI, 1,400+ prompt library, multi-direction parallel generation.
Inspect and edit Three.js scenes, materials, shaders, lights in real time from any AI agent
MCP Security Weekly
Get CVE alerts and security updates for net.bigfloppy.tinytoolbox/tinytoolbox and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
One HTTPS endpoint for boring file chores, driven by plain curl. Live at https://tinytoolbox.bigfloppy.net (served from this repo).
Free: GET / (landing), GET /api/health, GET /claim (unclaimed paid keys), GET /pay.
Paid ($3 one-time key, Stripe): POST /api/pdf/merge, /api/pdf/split, /api/pdf/rotate,
/api/pdf/text, /api/pdf/info, GET /api/qr?text=...&size=....
Auth: ?key=... or Authorization: Bearer <key>. Max upload 8 MB. ~100 calls/hour/key.
pip install -r requirements.txt
PORT=8095 python3 app.py # or: bash start.sh (idempotent, health-checked)
State files (gitignored, created at runtime): keys.json (API keys), paid.json
(Stripe payment ids), usage.log (one line per request).
After each Stripe payment, append to paid.json:
{"<payment_id>": {"amount": 3.0, "date": "2026-10-22T20:00:00"}}, then run
python3 issue_keys.py (idempotent). Customers pick up their key at /claim.
Checkout: https://buy.stripe.com/3cIcN66Ou2XS0Z71VM8Vi05