
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
MCP server for pdffr: PDF → Markdown for AI agents, local and private. Tools: pdf_to_markdown, pdf_outline, pdf_tables.
An MCP server that gives any agent — Claude Desktop, Claude Code, Cursor, Windsurf, Zed, your own — a local, private PDF → Markdown tool backed by pdffr. Born-digital pages decompile from glyph geometry in milliseconds; scans and screenshots get on-device OCR only where the text layer can't explain the ink. Nothing leaves the machine.
Claude Desktop / Claude Code / Cursor / Windsurf — add to your MCP config:
{
"mcpServers": {
"pdffr": {
"command": "npx",
"args": ["-y", "pdffr-mcp"]
}
}
}
Claude Code one-liner:
claude mcp add pdffr -- npx -y pdffr-mcp
Requires Node 20+. The first run downloads the OCR model for the requested language (English by default) into the OS temp directory.
pdf_to_markdownDecompile a PDF to Markdown. Give it one of path, url or base64.
| Argument | Type | Notes |
|---|---|---|
path | string | absolute or relative file path |
url | string | fetched with the server's network access |
base64 | string | raw PDF bytes |
pages | string | e.g. "1-3,7"; default all |
ocr | boolean | escalate unexplained ink to OCR (default true) |
lang | string | tesseract language(s), e.g. "deu", "eng+ara" (default "eng") |
maxChars | number | truncate the result (default 200 000) — the response says if it did |
Returns the Markdown, followed by a one-line stats footer (pages, time, OCR regions).
pdf_outlineHeadings only — level, text and page — so an agent can decide which pages to read before paying for them. Same inputs (path / url / base64, ocr, lang).
pdf_tablesEvery table as JSON rows ([{ page, rows: string[][] }]). Same inputs.
A PDF already knows where every glyph is. pdffr reads that geometry directly and reserves OCR for the pixels the text layer doesn't explain, so a 30-page report comes back in well under a second and a scanned invoice in a couple of seconds — with no API key and no upload. See the architecture notes.
MIT © Amer Sarhan
FAQs
MCP server for pdffr: PDF → Markdown for AI agents, local and private. Tools: pdf_to_markdown, pdf_outline, pdf_tables.
The npm package pdffr-mcp receives a total of 22 weekly downloads. As such, pdffr-mcp popularity was classified as not popular.
We found that pdffr-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.