Security & Testing
trustpdf.io
Provides PDF forensic analysis, credit purchasing, and usage tracking.
ENDPOINT 1
https://trustpdf.io/mcp
MCP server metadata
- Name
- trustpdf
- Version
- 1
Facts about PDF documents, cited to byte offsets. This server reports what is in a file; it never states whether a document is genuine. Read trustpdf://report-schema before parsing a report. Analysis is paid: either per document with x402, or from a key bought with purchase_bundle and sent as `Authorization: Bearer <key>`, which is cheaper and removes the payment round trip. Buying a key requires no account.
Known tools 3
analyze_pdfForensic facts about a PDF: its revision history, what its signatures actually cover and whether the signed bytes still match, and what it says about its own origin.
Inferred read-onlypurchase_bundleBuy analysis credits for the PDF forensics endpoint, or top up a key you already hold.
Inferred read-onlyusage_historyWhat the key in your Authorization header has been spent on: when, the document's digest, its size, how long the call took, what it cost, and what was left afterwards.
Inferred read-onlyCONNECT WITH APPROVAL
Client installation
Review this server and its permissions before adding it. Secret placeholders must be set locally.
Codex
~/.codex/config.toml
[mcp_servers.trustpdf]
url = "https://trustpdf.io/mcp"
enabled = true
Claude Code
.mcp.json
{
"mcpServers": {
"trustpdf": {
"type": "http",
"url": "https://trustpdf.io/mcp"
}
}
}
Claude Desktop
Settings → Connectors → Add custom connector
Name: trustpdf
Remote MCP URL: https://trustpdf.io/mcp
Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.
Cursor
.cursor/mcp.json
{
"mcpServers": {
"trustpdf": {
"url": "https://trustpdf.io/mcp"
}
}
}
Visual Studio Code
.vscode/mcp.json
Add to Visual Studio Code{
"servers": {
"trustpdf": {
"type": "http",
"url": "https://trustpdf.io/mcp"
}
}
}
Generic MCP
Client-specific MCP configuration
{
"name": "trustpdf",
"transport": "streamable-http",
"url": "https://trustpdf.io/mcp"
}
MCP Inspector
Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.
TRUST AND VERIFICATION EVIDENCE
Loading Trust v2 evidence…
Checking the associated registrable domain. The BuiltWith key remains server-side.
Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.