Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/nizoka/pdfnative-mcp/agents-mdgit clone --depth 1 https://github.com/Nizoka/pdfnative-mcpWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/instructions/nizoka/pdfnative-mcp/agents-md)<a href="https://agentmods.dev/instructions/nizoka/pdfnative-mcp/agents-md"><img src="https://agentmods.dev/badge/instructions/nizoka/pdfnative-mcp/agents-md.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.10137 | $0.10137 |
| Opus 5 | $0.05069 | $0.05069 |
| Sonnet 5 | $0.02027 | $0.02027 |
| Haiku 4.5 | $0.01014 | $0.01014 |
Grade A, and why
pdfnative-mcp AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 295 lines — stays where its author put it; the contents beside it link to each section on GitHub.
AGENTS.md — pdfnative-mcp
Operations manual for AI agents. Two audiences:
- Agents using the server (Copilot, Claude, Cursor, Cline, …) — read §1–§6.
- Agents contributing to this repo — read §7.
The server also returns the §1 decision tree in serverInfo.instructions. Deeper
references: docs/AI_GUIDE.md (pitfalls + recipes),
docs/KNOWLEDGE_BASE.md (architecture),
docs/API_STABILITY.md (versioning charter). Worked
invocations live under examples/.
1. Tool catalogue (28 tools)
| # | Tool | Use it for | Read-only |
|---|---|---|---|
| 1 | generate_basic_pdf |
Any document from the 13 block kinds: heading, paragraph, list, table, image, link, toc, barcode, svg, formField, chart, pageBreak, spacer⁴. Optional pdfA, watermark (text and/or image), normalize, outline (bookmarks), pageLabels, viewerPreferences, print / PDF/A options³, layout options⁵. |
|
| 2 | add_barcode |
QR / Code 128 / EAN-13 / Data Matrix / PDF417. Print / PDF/A options³, layout options⁵. | |
| 3 | add_international_text |
24 scripts + colour emoji (flag / ZWJ sequences), BiDi + OpenType shaping. Optional normalize (default NFC), viewerPreferences, print, metadata, strict, includeDiagnostics (fonts are always embedded, so no embedFonts), layout options⁵. |
|
| 4 | add_table |
Tabular reports (wrap, repeatHeader, zebra, caption, cellBorders, cellVAlign…). Optional watermark (text and/or image), viewerPreferences, print / PDF/A options³, layout options⁵. |
|
| 5 | add_form |
Create a new interactive AcroForm (text, textarea, checkbox, radio, dropdown, listbox; placeholder hint text). Print / PDF/A options³, layout options⁵ — encrypt keeps the AcroForm. |
|
| 6 | read_form_fields |
Enumerate an existing AcroForm's fields (name, type, value, widgets). Supports password. |
✓ |
| 7 | fill_form |
Fill / flatten an existing AcroForm (incremental update). Supports password. |
|
| 8 | add_chart |
Native vector charts v2 (bar / barH / stackedBar / stackedBarH / line / area / scatter / pie / donut; axis2, log / time scales, dataLabels, labelStride), PDF/A-safe. Print / PDF/A options³, layout options⁵. |
|
| 9 | embed_image |
Embed a JPEG/PNG into a titled PDF (align, alt; no length bound on imageBase64). Print / PDF/A options³, layout options⁵. |
|
| 10 | prepare_signature_placeholder |
Customize the /Sig placeholder before signing (signer metadata, subFilter, reserveTimestamp, placeholderBytes). Print / PDF/A options³, layout options⁵ (no encrypt — the output must stay signable). |
|
| 11 | sign_pdf |
PAdES B-B / B-T CMS signature (RSA-SHA256/384/512, ECDSA-P256; profile:'pades', timestamp, certChainDerBase64, fieldName, allowMultiple, signingTime); DER keys sign through constant-time node:crypto (raw P-256 scalars through the pure-JS signer). Auto-injects a placeholder. Never cached. |
|
| 12 | add_ltv |
PAdES B-LT: embed /DSS + /VRI (certs, OCSP, CRLs). mode:'online' via the operator provider, mode:'offline' with caller-supplied DER material. |
|
| 13 | timestamp_pdf |
PAdES B-LTA: append an RFC 3161 /DocTimeStamp from the operator TSA; re-run to extend the chain. |
|
| 14 | verify_pdf |
Verify every PAdES signature and document timestamp (integrity + value + chain; verification is pure JS). A /DocTimeStamp counts in allValid like any signature. ltv:true adds profile / timestamp / revocation / ltvLevel. Supports password. |
✓ |
| 15 | validate_pdf |
PDF/UA (ISO 14289-1) structural conformance. | ✓ |
| 16 | inspect_pdf |
Metadata: version, pages (+ boxes), encryption (+ encryptionInfo), PDF/A claim (not its validity), signatures (+ signatures:true inventory, dss, docTimestampCount), trapped, attachments, annotations:true (every page annotation + annotationCount). check:[…] → checks with the requested keys only + checksPassed. Supports password. |
✓ |
| 17 | update_metadata |
Rewrite /Info title / author / subject / keywords (+ XMP, incl. XMP dates) of an existing PDF (incremental update; unencrypted only). |
|
| 18 | add_attachment |
PDF/A-3 with embedded files (Factur-X / ZUGFeRD). Print / PDF/A options³, layout options⁵ (no encrypt — PDF/A-3 forbids it). |
|
| 19 | extract_attachments |
Read embedded files back out (byte-for-byte). Supports password. |
✓ |
| 20 | extract_text |
Unicode text extraction (resolves /ToUnicode), optional positioned runs. Supports password. |
✓ |
| 21 | merge_pdfs |
Concatenate 2–50 PDFs into one (page-tree API; page boxes preserved). Optional password / encrypt. |
|
| 22 | split_pdf |
Split a PDF into one document per page range (multi-output). Optional password / encrypt. |
|
| 23 | extract_pages |
Pull an arbitrary page subset into a single PDF. Optional password / encrypt. |
✓¹ |
| 24 | encrypt_pdf |
Re-secure a PDF with AES-128 / AES-256 (owner/user passwords, permissions, rotation). | |
| 25 | decrypt_pdf |
Emit an unencrypted copy of an RC4 / AES-128 / AES-256 document. | |
| 26 | annotate_pdf |
Add markup annotations (highlight, sticky note, square/circle, line, freetext). Visual overlay only — does not redact underlying content. | |
| 27 | inspect_layout |
Pagination dry run of the same blocks as generate_basic_pdf (+ title, footerText, pdfA, normalize, embedFonts, pageSize, margins, headerTemplate, footerTemplate): totalPages and each block's page / x / top / width / height. No PDF produced. verbosity / fields. |
✓ |
| 28 | draft_governance_issue |
Draft a governance-compliant GitHub issue for human review. Produces a local draft + compliance report; never submits, no network. | ✓² |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 295 lines · 10,137 tokens per session scan A 10526d076671
pdfnative-mcp AGENTS.md is an instructions file published in the GitHub repository Nizoka/pdfnative-mcp (2 stars, last pushed 11d ago), licensed MIT. It adds 10,137 tokens to every session, about $0.0507 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other instructions, from other repositories
docs-to-pdf CLAUDE.md
Claude Code instructions for jean-humann/docs-to-pdf, covering claude development guide for docs-to-pdf, project overview, development environment setup, using mise (recommended) and install mise (if not already installed).
docforge CLAUDE.md
Claude Code instructions for PrecisionUtilityGuild/docforge, covering typstmcp — codebase notes for claude, what this is, stack, commands (verified 2026-07-13) and layout.
invoice-builder copilot-instructions.md
Copilot instructions for piratuks/invoice-builder, a project described as: Invoice and quotation builder desktop app with PDF export, designed for small businesses and freelancers. Create, manage, and export invoices and quotes easily using a local database in an Electron-based app.
PDF-Writer CLAUDE.md
Instructions for galkahana/PDF-Writer, covering claude code context - pdf-writer development guide, project overview, coding standards discovered, project structure and key components.
notebooklm-wiki-pipeline CLAUDE.md
Instructions for capitalparser/notebooklm-wiki-pipeline, covering 05notebooklmwikipipeline — 프로젝트 컨텍스트, 핵심 문제, 아키텍처, 도구 구성 and 슬래시 커맨드.
agentic-resume-builder CLAUDE.md
Claude Code instructions for WtotdeD/agentic-resume-builder, covering agentic-resume-builder development guidelines, what this repo is, active technologies, package manager and validation.