
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
mintpdf-mcp
Advanced tools
MCP server that turns HTML or Markdown into a styled PDF, or renders a public URL to PDF.
MCP server that turns HTML or Markdown into a styled PDF, or renders a public URL to PDF, and returns a download link. Markdown ships with a clean default stylesheet, so agent-written documents look right without any design work.
Home: mintpdf.dev
{
"mcpServers": {
"mintpdf": {
"command": "npx",
"args": ["-y", "mintpdf-mcp"]
}
}
}
Restart your MCP client, then ask for a document:
Summarise this thread as a one-page brief with page numbers and give me a PDF.
| Tool | Input | Returns |
|---|---|---|
generate_pdf | html or markdown, plus options | download URL, valid one hour |
pdf_from_url | public url, plus options | download URL, valid one hour |
Options: format (A4, Letter, Legal, A3, A5), landscape, margin, headerText, footerText,
pageNumbers.
Works with no key at all for a few renders a day. A free key (email only, no card) raises it to 100 a month:
curl -X POST https://mintpdf.dev/v1/keys \
-H "Content-Type: application/json" -d '{"email":"you@example.com"}'
Then set it in your MCP config:
"env": { "MINTPDF_API_KEY": "pm_..." }
Point the package at your own instance with MINTPDF_BASE_URL. The server itself is MIT-licensed
and self-hostable: https://github.com/TrendTweekers/mintpdf
Generated files are deleted after one hour. No document storage, no account required.
FAQs
MCP server that turns HTML or Markdown into a styled PDF, or renders a public URL to PDF.
The npm package mintpdf-mcp receives a total of 25 weekly downloads. As such, mintpdf-mcp popularity was classified as not popular.
We found that mintpdf-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.