@modelcontextprotocol/server-pdf 1.1.0 → 1.1.1

package/dist/server.d.ts

@@ -2,7 +2,7 @@
  * PDF MCP Server
  *
  * An MCP server that displays PDFs in an interactive viewer.
- * Supports local files and remote URLs from academic sources (arxiv, biorxiv, etc).
+ * Supports local files and remote HTTPS URLs.
  *
  * Tools:
  * - list_pdfs: List available PDFs
@@ -19,8 +19,6 @@ export declare const CACHE_INACTIVITY_TIMEOUT_MS = 10000;
 export declare const CACHE_MAX_LIFETIME_MS = 60000;
 /** Max size for cached PDFs (defensive limit to prevent memory exhaustion) */
 export declare const CACHE_MAX_PDF_SIZE_BYTES: number;
-/** Allowed remote origins (security allowlist) */
-export declare const allowedRemoteOrigins: Set<string>;
 /** Allowed local file paths (populated from CLI args) */
 export declare const allowedLocalFiles: Set<string>;
 /** Allowed local directories (populated from MCP roots) */

package/dist/server.js

@@ -35767,24 +35767,6 @@ var RESOURCE_URI = "ui://pdf-viewer/mcp-app.html";
 var CACHE_INACTIVITY_TIMEOUT_MS = 1e4;
 var CACHE_MAX_LIFETIME_MS = 60000;
 var CACHE_MAX_PDF_SIZE_BYTES = 50 * 1024 * 1024;
-var allowedRemoteOrigins = new Set([
-  "https://agrirxiv.org",
-  "https://arxiv.org",
-  "https://chemrxiv.org",
-  "https://edarxiv.org",
-  "https://engrxiv.org",
-  "https://hal.science",
-  "https://osf.io",
-  "https://psyarxiv.com",
-  "https://ssrn.com",
-  "https://www.biorxiv.org",
-  "https://www.eartharxiv.org",
-  "https://www.medrxiv.org",
-  "https://www.preprints.org",
-  "https://www.researchsquare.com",
-  "https://www.sportarxiv.org",
-  "https://zenodo.org"
-]);
 var allowedLocalFiles = new Set;
 var allowedLocalDirs = new Set;
 var DIST_DIR = import.meta.filename.endsWith(".ts") ? path.join(import.meta.dirname, "dist") : import.meta.dirname;
@@ -35828,9 +35810,8 @@ function validateUrl(url2) {
   }
   try {
     const parsed = new URL(url2);
-    const origin = `${parsed.protocol}//${parsed.hostname}`;
-    if (![...allowedRemoteOrigins].some((allowed) => origin.startsWith(allowed))) {
-      return { valid: false, error: `Origin not allowed: ${origin}` };
+    if (parsed.protocol !== "https:") {
+      return { valid: false, error: `Only HTTPS URLs are allowed: ${url2}` };
     }
     return { valid: true };
   } catch {
@@ -35997,15 +35978,14 @@ ${[...allowedLocalDirs].map((d2) => `- ${d2}`).join(`
 `)}
 Any PDF file under these directories can be displayed.`);
     }
-    parts.push(`Remote PDFs from ${[...allowedRemoteOrigins].join(", ")} can also be loaded dynamically.`);
+    parts.push(`Any remote PDF accessible via HTTPS can also be loaded dynamically.`);
     return {
       content: [{ type: "text", text: parts.join(`
 
 `) }],
       structuredContent: {
         localFiles: pdfs.filter((p2) => p2.type === "local").map((p2) => p2.url),
-        allowedDirectories: [...allowedLocalDirs],
-        allowedOrigins: [...allowedRemoteOrigins]
+        allowedDirectories: [...allowedLocalDirs]
       }
     };
   });
@@ -36067,7 +36047,6 @@ Any PDF file under these directories can be displayed.`);
       };
     }
   });
-  const allowedDomains = [...allowedRemoteOrigins].map((origin) => origin.replace(/^https?:\/\/(www\.)?/, "")).join(", ");
   hk(server, "display_pdf", {
     title: "Display PDF",
     description: `Display an interactive PDF viewer.
@@ -36075,7 +36054,7 @@ Any PDF file under these directories can be displayed.`);
 Accepts:
 - Local files explicitly added to the server (use list_pdfs to see available files)
 - Local files under directories provided by the client as MCP roots
-- Remote PDFs from: ${allowedDomains}`,
+- Any remote PDF accessible via HTTPS`,
     inputSchema: {
       url: exports_external.string().default(DEFAULT_PDF).describe("PDF URL"),
       page: exports_external.number().min(1).default(1).describe("Initial page")
@@ -36127,7 +36106,6 @@ export {
   fileUrlToPath,
   createServer,
   createPdfCache,
-  allowedRemoteOrigins,
   allowedLocalFiles,
   allowedLocalDirs,
   RESOURCE_URI,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@modelcontextprotocol/server-pdf",
-  "version": "1.1.0",
+  "version": "1.1.1",
   "type": "module",
   "description": "MCP server for loading and extracting text from PDF files with chunked pagination and interactive viewer",
   "repository": {