Pdf Merger Mcp Server — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Pdf Merger Mcp Server (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
An MCP (Model Context Protocol) server that exposes the PDF Merger App as a set of tools any MCP-compatible LLM client can use to upload, arrange, merge, and download PDFs.
| Tool | Description |
|---|---|
pdf_merger_upload_pdfs | Upload one or more PDF files from disk to the merger service |
pdf_merger_remove_file | Remove a file from an upload session |
pdf_merger_merge | Merge uploaded PDFs in a specified order |
pdf_merger_get_download_url | Build a one-time download URL for the merged result |
# Install dependencies
npm install
# Build
npm run build
# Run (stdio transport — default)
PDF_MERGER_API_URL=http://localhost:3000 npm start
# Run (HTTP transport for remote access)
TRANSPORT=http PORT=4000 PDF_MERGER_API_URL=http://localhost:3000 npm start| Variable | Default | Description |
|---|---|---|
PDF_MERGER_API_URL | http://localhost:3000 | Base URL of the PDF Merger App API |
TRANSPORT | stdio | Transport mode: stdio or http |
PORT | 4000 | HTTP server port (only when TRANSPORT=http) |
Add to your claude_desktop_config.json:
{
"mcpServers": {
"pdf-merger": {
"command": "node",
"args": ["/path/to/pdf-merger-mcp-server/dist/index.js"],
"env": {
"PDF_MERGER_API_URL": "https://your-merger-app.vercel.app"
}
}
}
}session_id + file IDstokenLLM Client ──MCP──▶ pdf-merger-mcp-server ──HTTP──▶ PDF Merger App (Express)
(stdio or HTTP) (Vercel Blob + pdf-lib)npm run dev # Auto-reload via tsx watch
npm run build # Compile TypeScript → dist/
npm run clean # Remove dist/~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.