Skip to content
superPDF

Agent permissions

Approve document access and requested operations.

Runs on your computer. Files stay on your device; the agent or script can only use the folders you allow.

You decide what an agent can reach. The superPDF MCP server only reads and writes inside the folders passed with --allow-dir.

What the server enforces

  • Folder scope. Paths are checked after resolving shortcuts and symbolic links, so a link can't lead outside the folder.
  • New files only. Outputs must not exist yet; nothing is ever overwritten.
  • No network. Every tool is marked closed-world and never connects to the internet.
  • Untrusted text. Text read from a PDF is treated as data; agents are told never to follow instructions found inside a document.
  • Where text goes. Page operations return only file paths and page counts. When an agent reads a document’s text (pdf_read_text), that text goes to whichever model the agent uses. With a cloud agent such as Claude or Codex, that’s its provider; with an agent that runs on Ollama, everything stays on your computer.

Allow more folders

Allow two folders
superpdf mcp --allow-dir ~/Documents/superPDF --allow-dir ~/Downloads/contracts

~ means your home folder.

Files outside the folders

A request for a file outside those folders is refused:

Tool result · pdf_info
{
  "isError": true,
  "content": [
    {
      "type": "text",
      "text": "Invalid input. input: ~/Desktop/tax.pdf is outside the allowed folders."
    }
  ]
}