Skip to content

DocMorph Studio

by docmorph.dev · remote · no sign-in to list tools · v1.0.2 · published by dev.docmorph

Render Mermaid diagrams, Markdown to PDF and outlines, image OCR, and media metadata cleanup.

Deletes · 2Changes · 7
CompareRegistry entry

11 tools: 2 can delete or cancel things, 7 change things and 2 only read.

Scanned Oct 21, 2026

No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http docmorph-studio https://docmorph.dev/mcp

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

11 tools

Deletes or cancels 2Claude Code: deny
  • sanitize_media_securityPermanently wipe and sanitize privacy metadata from image, video, or audio files (strip GPS coordinates, device fingerprints, timestamps, and comments) with zero quality loss.No findings

    Why it is in this group

    • The description's first verb is "wipe": a word for removing or ending something.
    Description, as the server wrote it
    Permanently wipe and sanitize privacy metadata from image, video, or audio files (strip GPS coordinates, device fingerprints, timestamps, and comments) with zero quality loss.
  • word_remove_passwordRemove the open password from an encrypted Word .docx (Agile encryption, Office 2010+) using the known password, with integrity (HMAC) verification.No findings

    Why it is in this group

    • The name "word_remove_password" says "remove": a word for removing or ending something.
    Description, as the server wrote it
    Remove the open password from an encrypted Word .docx (Agile encryption, Office 2010+) using the known password, with integrity (HMAC) verification. Returns the decrypted .docx as base64. A wrong password returns a clear WRONG_PASSWORD error; this tool does not crack or guess passwords. Max input 20MB base64. Privacy: when called remotely (Streamable HTTP / SSE) the file is uploaded to the DocMorph server and processed in memory only; it is not written to disk or retained after processing, and passwords and file contents are never logged. When the MCP server runs locally over stdio, the file is processed entirely on this machine.
Changes things 7Claude Code: ask
  • assist_ocr_textAI assistant to translate, proofread, or summarize extracted OCR document text.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    AI assistant to translate, proofread, or summarize extracted OCR document text.
  • convert_markdown_to_pdfCompile Markdown text into a styled, publication-ready PDF document with automatic pagination and headers.No findings

    Why it is in this group

    • The name "convert_markdown_to_pdf" says "convert": a word for a change.
    Description, as the server wrote it
    Compile Markdown text into a styled, publication-ready PDF document with automatic pagination and headers.
  • extract_markdown_outlineExtract hierarchical headings, table of contents, word/character statistics, and document structure outline from Markdown text.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Extract hierarchical headings, table of contents, word/character statistics, and document structure outline from Markdown text.
  • image_ocr_recognizeExtract multilingual text, complex headings, formulas, and tabular data from images using multimodal AI vision.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Extract multilingual text, complex headings, formulas, and tabular data from images using multimodal AI vision.
  • parse_pdf_to_markdownExtract structured Markdown, tables, and mathematical formulas from a base64 encoded PDF using AI vision OCR.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Extract structured Markdown, tables, and mathematical formulas from a base64 encoded PDF using AI vision OCR.
  • render_mermaid_diagramRender a Mermaid diagram into styled SVG vector image code and node metadata.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Render a Mermaid diagram into styled SVG vector image code and node metadata. Supports flowchart/graph and sequenceDiagram (sequence) types. Other types (ER/gantt/mindmap/pie/state) should be rendered on client-side using mermaid.js.
  • word_protectProtect a Word .docx document in one call: set an open password (Agile AES-256 encryption, opens in Microsoft Word / WPS / LibreOffice), add a native Word text watermark, add copyr…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Protect a Word .docx document in one call: set an open password (Agile AES-256 encryption, opens in Microsoft Word / WPS / LibreOffice), add a native Word text watermark, add copyright info (author/custom property/footer), clean privacy metadata, and restrict editing (read-only / comments only / tracked changes only / forms, optionally password-protected). Returns the protected .docx as base64 plus a summary of applied operations. Max input 20MB base64. Privacy: when called remotely (Streamable HTTP / SSE) the file is uploaded to the DocMorph server and processed in memory only; it is not written to disk or retained after processing, and passwords and file contents are never logged. When the MCP server runs locally over stdio, the file is processed entirely on this machine.
Only reads 2Claude Code: allow
  • inspect_media_securityDeeply inspect image, video, or audio files for privacy leaks, including GPS physical coordinates, camera/recorder hardware serials, recording timestamps, and editing software sign…No findings

    Why it is in this group

    • The name "inspect_media_security" says "inspect": a word for reading.
    Description, as the server wrote it
    Deeply inspect image, video, or audio files for privacy leaks, including GPS physical coordinates, camera/recorder hardware serials, recording timestamps, and editing software signatures.
  • word_inspect_securityInspect the security and privacy state of a Word .docx: whether it is password-encrypted and with which algorithm, editing restriction mode and whether it is password-protected, pr…No findings

    Why it is in this group

    • The name "word_inspect_security" says "inspect": a word for reading.
    Description, as the server wrote it
    Inspect the security and privacy state of a Word .docx: whether it is password-encrypted and with which algorithm, editing restriction mode and whether it is password-protected, presence of a text watermark, and privacy metadata (author, last modified by, company, manager, timestamps, custom properties, comment/revision author names). For encrypted files, pass the password to also inspect the contents. Max input 20MB base64. Privacy: when called remotely (Streamable HTTP / SSE) the file is uploaded to the DocMorph server and processed in memory only; it is not written to disk or retained after processing, and passwords and file contents are never logged. When the MCP server runs locally over stdio, the file is processed entirely on this machine.

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.0.2. Values in angle brackets are yours to fill in.

claude mcp add --transport http docmorph-studio https://docmorph.dev/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__docmorph-studio__inspect_media_security",
      "mcp__docmorph-studio__word_inspect_security"
    ],
    "ask": [
      "mcp__docmorph-studio__render_mermaid_diagram",
      "mcp__docmorph-studio__extract_markdown_outline",
      "mcp__docmorph-studio__convert_markdown_to_pdf",
      "mcp__docmorph-studio__parse_pdf_to_markdown",
      "mcp__docmorph-studio__image_ocr_recognize",
      "mcp__docmorph-studio__assist_ocr_text",
      "mcp__docmorph-studio__word_protect"
    ],
    "deny": [
      "mcp__docmorph-studio__sanitize_media_security",
      "mcp__docmorph-studio__word_remove_password"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as docmorph-studio. Review it before you use it.