
Security News
Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI Attack
Anthropic found biased reasoning and recklessness drove Claude Mythos 5 to publish malware on PyPI and compromise a security vendor.
@pdfbroker/mcp-server
Advanced tools
Generate PDFs from HTML using AI agents via PdfBroker.io.
This package connects Claude Desktop, Cursor, and other MCP clients to the PdfBroker.io cloud PDF generation API.
Settings → Developer → Edit Config):{
"mcpServers": {
"pdfbroker": {
"command": "npx",
"args": ["-y", "@pdfbroker/mcp-server"],
"env": {
"PDFBROKER_CLIENT_ID": "pb_cid_your_id_here",
"PDFBROKER_CLIENT_SECRET": "pb_sec_your_secret_here"
}
}
}
}
Both tools accept:
html or url — the document, either inline or as an https address PdfBroker fetches
for you. Exactly one is needed; url wins if both are given. Passing a URL keeps a large
template out of the conversation entirely.pdfForms — set to true for a fillable PDF, where <input>, <select> and
<textarea> become interactive form fields. Works on both engines.paperSize / orientation — both default to Auto, which leaves the page to the
document's own @page { size: ... } CSS on WeasyPrint (A4 portrait when it says nothing).
Name a size to override the document. Note that wkhtmltopdf does not honour CSS @page
geometry — use html_to_pdf when the stylesheet must decide.extraArguments — a string-to-string map of engine flags for anything without a
dedicated parameter.resources — base64-encoded files keyed by relative path, for embedded images and
custom fonts. Has no effect on a url render, where relative paths resolve against the
document's own URL.Connected clients can read the full argument list from the
docs://pdfbroker/api-reference resource the server exposes.
Ask Claude: "Create a PDF invoice for Acme Corp with 3 line items"
Claude will generate HTML, call the html_to_pdf tool, and return a download link for the PDF.
Add to .vscode/mcp.json:
{
"servers": {
"pdfbroker": {
"command": "npx",
"args": ["-y", "@pdfbroker/mcp-server"],
"env": {
"PDFBROKER_CLIENT_ID": "pb_cid_your_id_here",
"PDFBROKER_CLIENT_SECRET": "pb_sec_your_secret_here"
}
}
}
}
Claude Code supports direct HTTP connections — no wrapper needed:
claude mcp add-json pdfbroker '{
"type": "http",
"url": "https://mcp.pdfbroker.io/",
"headers": {
"X-PdfBroker-ClientId": "pb_cid_your_id_here",
"X-PdfBroker-ClientSecret": "pb_sec_your_secret_here"
}
}'
| Variable | Required | Description |
|---|---|---|
PDFBROKER_CLIENT_ID | Yes | Your Client ID from pdfbroker.io |
PDFBROKER_CLIENT_SECRET | Yes | Your Client Secret from pdfbroker.io |
Note: earlier versions accepted a
PDFBROKER_MCP_URLoverride. As of1.1.0the server URL is fixed athttps://mcp.pdfbroker.io/(the MCP server is hosted-only). If the variable is still set in your environment the wrapper logs a warning and ignores it.
FAQs
PdfBroker.io MCP server — generate PDFs from HTML with AI agents
We found that @pdfbroker/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Anthropic found biased reasoning and recklessness drove Claude Mythos 5 to publish malware on PyPI and compromise a security vendor.

Research
/Security News
Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.

Security News
GPT-6 Astra hits 100% on ExploitBench and finds zero-days autonomously, while independent tests reveal scope violations and monitoring gaps.