# pdf

> pdf is an officially published MCP server from Anthropic. Anomity scores its risk at 10 out of 100 (low).

- **Canonical URL:** https://catalog.anomity.ai/mcp/pdf
- **Kind:** MCP server
- **Publisher:** Anthropic
- **Trust level:** official
- **Risk score:** 10/100 (low)
- **Last updated:** 2026-11-01
- **JSON:** https://catalog.anomity.ai/api/entries/mcp/pdf

## Why it scored 10

The score starts at the catalog's neutral base of 50 and moves only through the signals below. The formula is published at https://catalog.anomity.ai/about — there is no model and no hidden heuristic.

| Signal | Contribution | Severity | Evidence |
| --- | --- | --- | --- |
| Published by the vendor | -40 | trust offset |  |

Clamped result: **10/100**, band **low**.

## Capabilities

| Capability | Name | Security implication |
| --- | --- | --- |
| `filesystem:read` | Filesystem read | Can read files on the host system. Used for context, indexing, or analysis. |
| `network:outbound` | Outbound network | Can make outbound network requests. Required for hosted model providers and remote APIs; also the path for data exfiltration if combined with read access. |

## Related MCP servers

- [desktop-commander](https://catalog.anomity.ai/mcp/desktop-commander) — risk 100 (critical)
- [angular-cli](https://catalog.anomity.ai/mcp/angular-cli) — risk 75 (high)
- [task-master](https://catalog.anomity.ai/mcp/task-master) — risk 75 (high)
- [motherduck](https://catalog.anomity.ai/mcp/motherduck) — risk 70 (high)
- [dbt](https://catalog.anomity.ai/mcp/dbt) — risk 60 (high)
- [gmail-autoauth](https://catalog.anomity.ai/mcp/gmail-autoauth) — risk 50 (medium)

---

Source: Anomity Security Database (https://catalog.anomity.ai/). Scoring methodology: https://catalog.anomity.ai/about. Machine-readable index: https://catalog.anomity.ai/llms.txt · https://catalog.anomity.ai/openapi.json