@nutrient-sdk/dws-mcp-server

Name: @nutrient-sdk/dws-mcp-server
Author: Nutrient

MCPcommunity

v0.1.3NutrientMITUpdated 1mo agonpm GitHub

MCP server for Nutrient DWS Processor API

Works in

ClaudeCursorCopilotGemini

Inferred from the transports this listing declares (stdio). A client not listed here hasn’t been ruled out — it just isn’t something Forge can confirm.

Automatically indexed from public sources. Not yet verified by the developer on Forge.Claim this listing →

411Downloads/wk

1mo agoLast update

Reads these credentials

NUTRIENT_DWS_API_KEYAPI keyoptional
Nutrient DWS API key. Optional for local desktop use (browser sign-in on first request); required for CI or headless environments.
NUTRIENT_DWS_EXTRACTION_API_KEYAPI keyoptional
Data Extraction API key (starts with pdf_live_), needed for parse_document and extract_fields in static-key mode. OAuth covers both products.

Declared by the author in the official MCP registry. Forge does not store, broker, or ever see these values — the config below is scaffolded with placeholders you fill in locally.

Package

AuthorNutrient

LicenseMIT

Version0.1.3

Sourcenpm+mcp-registry

npm@nutrient-sdk/dws-mcp-server

GitHubPSPDFKit/nutrient-dws-mcp-server

SBOMCycloneDX 1.6 ↓

Trust Status

60/100Good

✓Listed in Forge index+10/10

—Publisher identity verified+0/20

→ Publisher: run `forge publish` from the package repo to claim ownership

—Ed25519 publish signature+0/5

→ Included automatically when the publisher runs `forge publish`

—Domain verification+0/5

→ Publisher: host /.well-known/forge.json on the package homepage with { "publisher": "<github-login>" }

—npm Trusted Publishing (Sigstore)+0/5

→ Publish from GitHub Actions with --provenance so the attestation binds this package to this repo

—npm maintainer match+0/5

→ Earned once your identity is verified above and that login is an npm maintainer of this package

✓CVE scan · clean+30/30

✓Static analysis · clean+20/20

Paste into Claude Code, Cursor, or any AI assistant to fix all gaps

StatusCommunity-indexed

PublisherUnverified

SignatureUnsigned

Domain—

Provenance—

Dependencies✓ 60 resolved+ · none vulnerable

Tool surface18 tools · none privileged

Security scan✓ Cleanv0.1.3 · 1mo agoHow well does this scan work?

EvalsNone

IndexedAug 26, 2026

Verification confirms publisher identity (repo ownership), not code safety. The security scan covers known CVEs and suspicious install scripts.

Tools

18 tools · none privileged

Statically extracted from the published packagev0.1.3 · 1mo ago

Read out of the source npm actually ships, at scan time. The package was never executed. Tools registered dynamically at runtime, or hidden inside bundled or minified code, can be missed — so this is a floor on the tool surface, not a complete census of it.

Filter toolsPrivileged only

document_processorProcess, convert, and transform documents using the Nutrient API. Reads input files from the local file system or sandbox (if enabled) and writes results back locally. Features: • Import XFDF annotations • Flatten annotations • OCR processing • Page rotation • Watermarking (text/image) • Redaction…

Process, convert, and transform documents using the Nutrient API. Reads input files from the local file system or sandbox (if enabled) and writes results back locally. Features: • Import XFDF annotations • Flatten annotations • OCR processing • Page rotation • Watermarking (text/image) • Redaction…

No input schema was published for this tool.

document_signerDigitally sign PDF files using the Nutrient Sign API. Reads input files from the local file system or sandbox (if enabled) and writes signed output back locally. Signature types: • CMS/PKCS#7 (standard digital signatures) • CAdES (advanced electronic signatures) Appearance options: • Visible or i…

Digitally sign PDF files using the Nutrient Sign API. Reads input files from the local file system or sandbox (if enabled) and writes signed output back locally. Signature types: • CMS/PKCS#7 (standard digital signatures) • CAdES (advanced electronic signatures) Appearance options: • Visible or i…

No input schema was published for this tool.

ai_redactorNo description published

This tool published no description. Forge does not invent one.

check_creditsCheck your Nutrient DWS API credit balance and usage for the current billing period. This is a read-only account lookup. It does not upload any document content. Returns: subscription type, total credits, used credits, and remaining credits.

Check your Nutrient DWS API credit balance and usage for the current billing period. This is a read-only account lookup. It does not upload any document content. Returns: subscription type, total credits, used credits, and remaining credits.

No input schema was published for this tool.

parse_documentNo description published

This tool published no description. Forge does not invent one.

extract_fieldsNo description published

This tool published no description. Forge does not invent one.

sandbox_file_treeBrowse files already available in the configured sandbox directory. This is a read-only local filesystem operation and does not upload documents to Nutrient.

Browse files already available in the configured sandbox directory. This is a read-only local filesystem operation and does not upload documents to Nutrient.

No input schema was published for this tool.

directory_treeBrowse local files when sandbox mode is disabled. This is a read-only local filesystem operation, but it can inspect any path visible to the current user. Sandbox mode is strongly recommended.

Browse local files when sandbox mode is disabled. This is a read-only local filesystem operation, but it can inspect any path visible to the current user. Sandbox mode is strongly recommended.

No input schema was published for this tool.

sign_and_watermarkAdd a text watermark to a document, then digitally sign the watermarked PDF.

Add a text watermark to a document, then digitally sign the watermarked PDF.

No input schema was published for this tool.

input_pathPath to the document to watermark and sign.

Path to the document to watermark and sign.

No input schema was published for this tool.

output_pathPath for the final signed PDF.

Path for the final signed PDF.

No input schema was published for this tool.

watermark_textText to place in the watermark.

Text to place in the watermark.

No input schema was published for this tool.

extract_document_fieldsExtract named fields from a document into a JSON object, optionally retaining citations in a file.

Extract named fields from a document into a JSON object, optionally retaining citations in a file.

No input schema was published for this tool.

fieldsComma-separated field names to extract.

Comma-separated field names to extract.

No input schema was published for this tool.

redact_piiDetect and permanently redact personally identifiable information from a document.

Detect and permanently redact personally identifiable information from a document.

No input schema was published for this tool.

entity_typesOptional sensitive entity types to redact; omit to use the tool default.

Optional sensitive entity types to redact; omit to use the tool default.

No input schema was published for this tool.

parse_for_ragParse a document as Markdown for retrieval-augmented generation and search indexing.

Parse a document as Markdown for retrieval-augmented generation and search indexing.

No input schema was published for this tool.

office_to_pdfaConvert an Office document to an archival PDF/A file.

Convert an Office document to an archival PDF/A file.

No input schema was published for this tool.

15 of 18 tools published a description.

Tool names and descriptions are written by the publisher and shown verbatim as inert text. They are the strings an MCP client passes to a model, so Forge scans them for prompt-injection patterns — any finding appears with the security scan above. “Privileged” is a keyword match on the tool name, not an audit of what the tool does: a benign-sounding name can still do anything.

About

MCP server for Nutrient DWS Processor API

Keywords

mcpmcp-servernutrientdwspdfdocument-processingaiagentdigital-signatureocrredactionmodel-context-protocol

Alternatives

Comparing tool surfaces…

Dependency tree

What one Forge scan resolved from npm metadata on 2026-08-29 — observed resolution, not a publisher declaration.

60 packages resolved · 6 direct · none carrying advisories Resolution stops at depth 4 and 60 packages.

zod3.25.76
open11.0.26 dependencies
- is-in-ssh1.0.0
- wsl-utils1.0.0+2 not drawn
- default-browser5.5.1+2 not drawn
- define-lazy-prop3.0.0
- powershell-utils0.2.1
- is-inside-container1.0.0+1 not drawn
axios1.20.04 dependencies
- form-data4.0.6+5 not drawn
- proxy-from-env2.1.0
- follow-redirects1.16.0
- https-proxy-agent5.0.1+2 not drawn
winston3.19.0+2 not drawn9 dependencies
- async3.2.6
- logform2.7.0+4 not drawn2 dependencies
  - @colors/colors1.6.0
  - triple-beam1.4.1
- one-time1.0.0+1 not drawn
- is-stream2.0.1
- stack-trace0.0.10
- triple-beam1.4.1shown above
- @colors/colors1.6.0shown above
- readable-stream3.6.2incomplete+2 not drawn
- @dabh/diagnostics2.0.8incomplete
form-data4.0.6shown above+5 not drawn
@modelcontextprotocol/sdk1.30.0+17 not drawn

The crawl stopped at the 60-package limit. The rest of the tree was never resolved.

36 more resolved packages are not drawn here (display cap: 24). Every dependency carrying an advisory is drawn regardless of the cap. Full inventory (CycloneDX SBOM)

Declared but not resolved

64 declared dependencies never landed in the tree. They are missing from Forge's resolution, not from the package.

package cap reached: 64

string_decoder ^1.1.1 — required by readable-stream@3.6.2package cap reached
util-deprecate ^1.0.1 — required by readable-stream@3.6.2package cap reached
@so-ric/colorspace ^1.1.6 — required by @dabh/diagnostics@2.0.8package cap reached
enabled 2.0.x — required by @dabh/diagnostics@2.0.8package cap reached
kuler ^2.0.0 — required by @dabh/diagnostics@2.0.8package cap reached
logform ^2.7.0 — required by winston-transport@4.9.0package cap reached
readable-stream ^3.6.2 — required by winston-transport@4.9.0package cap reached
triple-beam ^1.3.0 — required by winston-transport@4.9.0package cap reached
function-bind ^1.1.2 — required by hasown@2.0.4package cap reached
mime-db 1.52.0 — required by mime-types@2.1.35package cap reached
delayed-stream ~1.0.0 — required by combined-stream@1.0.8package cap reached
es-errors ^1.3.0 — required by es-set-tostringtag@2.1.0package cap reached

+52 more not listed. The counts by reason above cover all of them.

Not followed: peerDependencies. This tree covers runtime dependencies only, so anything those pull in was never resolved.

@nutrient-sdk/dws-mcp-server

Tools

Tools exposed

Dependency tree

Declared but not resolved

Topics

Related in documents & pdfs