
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
ezpzfile-mcp
Advanced tools
File tools for AI agents. Read and convert documents (DOCX, PDF, HWP, HWPX, EML), edit PDFs, resize, clean and cut out images, make QR codes. Runs locally, no upload.
File tools for AI agents. Read and convert documents, edit PDFs, resize and clean images, cut out backgrounds and make QR codes. Everything runs on your machine and nothing is uploaded.
Agents burn tokens re-solving the same small problem: write file-handling code, run it, debug it, open the output to check it worked. This server turns that loop into one tool call.
Korean HWP and HWPX are handled too, with no Hancom Office and no Windows. That is the part nothing else does locally, but it is one capability here, not the point.
claude mcp add ezpzfile -- npx -y ezpzfile-mcp
claude mcp add ezpzfile -- npx -y ezpzfile-mcp
claude_desktop_config.json (macOS: ~/Library/Application Support/Claude/,
Windows: %APPDATA%\Claude\):
{
"mcpServers": {
"ezpzfile": {
"command": "npx",
"args": ["-y", "ezpzfile-mcp"]
}
}
}
~/.cursor/mcp.json, or .cursor/mcp.json inside a project:
{
"mcpServers": {
"ezpzfile": {
"command": "npx",
"args": ["-y", "ezpzfile-mcp"]
}
}
}
code --add-mcp '{"name":"ezpzfile","command":"npx","args":["-y","ezpzfile-mcp"]}'
Node 22.13 or newer. The first run downloads the package including the document engine and fonts (about 18MB) plus native image and PDF libraries for your platform, after that npx serves it from cache.
Six tools, not twenty five. Tool definitions sit in the model's context every session,
so a long list would eat the tokens this server is meant to save. New capabilities
are added as another value of op or to, not as another tool.
| Tool | What it does |
|---|---|
doc_read | Text of a DOCX, PDF, HWP, HWPX or EML file. format: markdown keeps DOCX headings, lists and tables. |
doc_convert | PDF pages to jpg or png. Images to pdf. XLSX/CSV to csv or json. HWP/HWPX to pdf, hwp, hwpx. |
pdf_edit | merge, extract, delete, rotate, reorder, split, compress, protect, unlock. |
pdf_info | Page count, page sizes, encryption flag, document metadata. |
image_edit | Resize, compress, convert, strip EXIF and GPS, or cut out the background. |
qr_make | QR code as PNG or SVG. |
Every tool takes absolute paths and returns the path it wrote.
Each tool reopens what it made and reports the numbers, so a silently broken file shows up as a number instead of as a surprise later:
doc_convert compares the page count of the output against the source and counts
characters the bundled fonts had no glyph for.image_edit returns the real width, height and byte size of the output.pdf_edit compress returns bytes before and after, and copies the file unchanged
when qpdf could not make it smaller.
because their names tried to escape the target folder./Users/me/report.pdf
9 pages · no loss reported · reopened, page count matches
Pass password for encrypted PDF, HWP and HWPX files. pdf_edit protect sets an
AES-256 password, unlock removes one you know. Converting an encrypted HWP or HWPX
keeps the password on the output file.
Read ~/Downloads/notice.hwp and summarize it.
Convert ~/Downloads/notice.hwp to PDF.
Merge chapter1.pdf and chapter2.pdf, then rotate page 3 by 90 degrees.
Split thesis.pdf at pages 12 and 40 into three files.
Render page 1 of brochure.pdf as a PNG at 200 dpi.
Turn sales.xlsx into JSON, sheet "2026".
Resize banner.png to 1200 wide as WebP.
Strip the EXIF data from every photo in ~/Pictures/trip.
Make a QR code for https://example.com as qr.svg.
image_edit with op: "remove_background" runs U²-Net on your machine and
writes a PNG with the subject on transparency, or on a colour if you pass
background.
The model (4.4MB) and the onnxruntime wasm (14MB) are downloaded the first time
you ask for a cut-out and cached under ~/.cache/ezpzfile-mcp after that. They
are not in the package: most sessions never need them, and putting 18MB into
every npx would be a poor trade. This is the only operation that touches the
network, and it sends nothing: the model travels to your photo, not the other
way round.
Set EZPZFILE_CACHE to move the cache elsewhere.
doc_read tells you which pages came back empty
instead of guessing.unzip and tar in its shell, so a
tool definition spent on them would cost context without buying anything. Use
ezpzfile.com when an archive has file names that arrive garbled.No network calls. No telemetry. Files are read from and written to the paths you give, and nothing else leaves the machine. The same engine runs in the browser at ezpzfile.com if you would rather click than prompt.
cd mcp
npm install
npm run build # bundles to dist/ and copies the engine and fonts into vendor/
node dist/index.js
node test/protocol.mjs /path/to/sample/files # spawns the server over stdio and calls every tool
MIT
FAQs
File tools for AI agents. Read and convert documents (DOCX, PDF, HWP, HWPX, EML), edit PDFs, resize, clean and cut out images, make QR codes. Runs locally, no upload.
The npm package ezpzfile-mcp receives a total of 50 weekly downloads. As such, ezpzfile-mcp popularity was classified as not popular.
We found that ezpzfile-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.