Groupdocs Redaction Mcp

io.github.groupdocs-redactionPublished by GitHub account groupdocs-redactionv26.9.0Updated Oct 24, 2026

MCP server for GroupDocs.Redaction — redact text, metadata, annotations, image areas via AI agents.

VerifiedSTDIODesktop onlyFiles & StorageSecurity & Monitoring

Overview

AI-generated overview

A local MCP server that lets an assistant redact text, metadata, annotations and image regions in documents using the GroupDocs.Redaction engine.

What you can do
Redact text matching a regex pattern in a document and save a redacted copy with a new file name suffix. Erase document metadata fields such as author, title, company and dates. Replace or delete annotations and comments. Cover a rectangular page region with a solid-color box using pixel coordinates. Read document info such as file type, page count, size and per-page dimensions without modifying the file.
When to use it
Use it when an assistant needs to prepare documents for sharing by removing names, comments, metadata or visible regions, or when you want to inspect a document's page count and dimensions before redacting. It suits contract, report and review workflows handled locally.
Requirements
Runs locally as a .NET tool via dnx or a global dotnet tool, or as a Docker image; native runs need the .NET 10 SDK and, on Linux or macOS, libgdiplus. Set GROUPDOCS_MCP_STORAGE_PATH for input and output files, optionally GROUPDOCS_MCP_OUTPUT_PATH. A license file via GROUPDOCS_LICENSE_PATH or metered keys via GROUPDOCS_METERED_PUBLIC_KEY and GROUPDOCS_METERED_PRIVATE_KEY lift evaluation limits; metered mode needs outbound network access.
Before you install
Without a license the server runs in evaluation mode: output is watermarked and one process can open only one document. Metered mode bills per use and reports usage to GroupDocs servers, so it needs outbound connectivity. GROUPDOCS_METERED_PRIVATE_KEY is a secret; keep it out of committed config files and prefer OS environment variables. Redaction tools write new files into the configured storage or output folder.

Installation

In SourceWeft

  1. Open Groupdocs Redaction Mcp in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

GroupDocs.Redaction MCP Server

MCP server that exposes GroupDocs.Redaction as AI-callable tools for Claude, Cursor, GitHub Copilot, and other MCP agents.

[NuGet] [NuGet downloads] [Docker pulls] [MCP Registry] [Integration tests] [License: MIT]

Installation

[Install in VS Code] [Install in VS Code Insiders] [Add to Cursor] [Codex CLI setup] [Windsurf setup]

One-click installs pre-fill every supported setting: edit the placeholder documents folder after install (output defaults to the same folder); an empty GROUPDOCS_LICENSE_PATH runs in evaluation mode - point it at your license to lift limits.

More clients - ready-made configs for Claude Code, Codex CLI, Visual Studio 2022, Cursor, Windsurf, Cline, and JetBrains Rider live in install/generated/.

Requires .NET 10 SDK.

Run directly with dnx (recommended — no install step):

bash
dnx GroupDocs.Redaction.Mcp --yes

Pulls the latest stable release on every invocation. To pin to a specific version (recommended for shared configs and CI), append @<version>:

bash

Or install as a global dotnet tool:

bash
dotnet tool install -g GroupDocs.Redaction.Mcpgroupdocs-redaction-mcp

Or run via Docker:

bash
docker run --rm -i \  -v $(pwd)/documents:/data \  ghcr.io/groupdocs-redaction/redaction-net-mcp:latest

Native prerequisites

The underlying GroupDocs engine uses System.Drawing (GDI+) for image-area redaction (drawing solid-color boxes over page regions). When you run the server natively (via dnx or the global dotnet tool) on Linux or macOS, install the native libgdiplus library first:

PlatformSetup
WindowsNothing — GDI+ is built into the OS.
Linuxsudo apt-get install -y libgdiplus libfontconfig1
macOSbrew install mono-libgdiplus
DockerNothing — the image already bundles libgdiplus.

Skipping this on Linux/macOS surfaces as DllNotFoundException: libgdiplus in the tool response. The simplest zero-setup option on Linux/macOS is the Docker image.

Available MCP Tools

ToolDescription
RedactTextRedact text matching a regex pattern in a document; saves result as <name>_redacted.<ext>
EraseMetadataErase document metadata fields (author, title, company, dates, and other properties)
RedactAnnotationsReplace or delete annotations and comments in a document
RedactImageAreaCover a rectangular page region with a solid-color box (pixel coordinates)
GetDocumentInfoReturn file type, page count, size, and per-page dimensions as JSON (no modification)

Example prompts

  • "Redact all occurrences of 'John Smith' in contract.docx"
  • "Remove all metadata from report.pdf before sharing it externally"
  • "Delete all comments and annotations from review.docx"
  • "Cover the signature area on page 1 of agreement.pdf with a black box from (100,200) to (400,300)"
  • "How many pages does confidential.pdf have?"

Licensing

The MCP server itself is MIT; the underlying GroupDocs.Redaction engine requires a license for production use. Without one the server runs in evaluation mode:

  • Saved output is watermarked.
  • A single server process can open at most 1 document in evaluation mode - each redaction needs a fresh server process.

There are two ways to license the server.

License file — point GROUPDOCS_LICENSE_PATH at your GroupDocs.Total.lic. Works offline.

Metered (pay-per-use) — set both GROUPDOCS_METERED_PUBLIC_KEY and GROUPDOCS_METERED_PRIVATE_KEY. You are billed for what you actually process, which suits AI agents well because their usage is bursty and hard to predict up front. If both a metered key pair and a license file are configured, metered wins and the file is ignored.

Metered mode needs outbound connectivity. Usage is reported to GroupDocs servers, so air-gapped or firewalled deployments must allow that egress — or use a license file instead.

Call the get_license_status tool at any time to see which mode is active, and — under metered — the consumed quantity and remaining credit.

Keeping the private key out of your config

The metered private key is a secret. MCP client configs are plain files on disk, and a project-scoped .mcp.json is committed by convention, so prefer, in order:

  1. Set the variables in your OS environment and leave them out of the config entirely. An stdio MCP server inherits its client's environment, so this works in every client. On macOS note that an app launched from Finder does not inherit shell exports — use launchctl setenv, or launch the client from a terminal.
  2. Reference them indirectly if your client supports it (Claude Code expands ${VAR}; VS Code uses ${env:VAR} and ${input:...}).
  3. A literal value in a user-scoped config (for example ~/.claude.json) is acceptable for a single developer.
  4. Never commit a literal key in a project-scoped .mcp.json.

For Docker, forward the values without writing them into any file:

bash
docker run --rm -i \  -e GROUPDOCS_METERED_PUBLIC_KEY -e GROUPDOCS_METERED_PRIVATE_KEY \  -v /path/to/documents:/data \  ghcr.io/groupdocs-redaction/redaction-net-mcp:latest

To lift the limits with a license file:

Configuration

VariableDescriptionDefault
GROUPDOCS_MCP_STORAGE_PATHBase folder for input and output filescurrent directory
GROUPDOCS_MCP_OUTPUT_PATH(Optional) separate folder for output filesGROUPDOCS_MCP_STORAGE_PATH
GROUPDOCS_LICENSE_PATHPath to GroupDocs license file(evaluation mode)
GROUPDOCS_METERED_PUBLIC_KEYMetered public key. Requires the private key too; takes precedence over the license file(unset)
GROUPDOCS_METERED_PRIVATE_KEYMetered private key. Secret - see Licensing(unset)

Usage with Claude Desktop

json
{  "mcpServers": {    "groupdocs-redaction": {      "type": "stdio",      "command": "dnx",      "args": ["GroupDocs.Redaction.Mcp", "--yes"],      "env": {        "GROUPDOCS_MCP_STORAGE_PATH": "/path/to/documents"      }    }  }}

To pin to a specific version, replace "GroupDocs.Redaction.Mcp" with "[email protected]" in args. Pinning is recommended for shared / committed configs to avoid surprise upgrades.

Usage with VS Code / GitHub Copilot

NuGet.org generates a ready-to-use mcp.json snippet on the package page. Copy it directly into your .vscode/mcp.json.

Alternatively, add manually to .vscode/mcp.json:

json
{  "inputs": [    {      "type": "promptString",      "id": "storage_path",      "description": "Base folder for input and output files.",      "password": false    }  ],  "servers": {    "groupdocs-redaction": {      "type": "stdio",      "command": "dnx",      "args": ["GroupDocs.Redaction.Mcp", "--yes"],      "env": {        "GROUPDOCS_MCP_STORAGE_PATH": "${input:storage_path}"      }    }  }}

Same pinning rule as above — swap "GroupDocs.Redaction.Mcp" for "[email protected]" to lock to a specific release.

Usage with Docker Compose

bash
cd dockerdocker compose up

Edit docker/docker-compose.yml to point volumes at your local documents folder.

Documentation & guides

Step-by-step deployment guides and a published-package integration test suite live in the companion repo GroupDocs.Redaction.Mcp.Tests:

That repo also exercises every advertised tool against the published NuGet artifact on Linux, macOS, and Windows in CI — so the snippets above are verified end-to-end on every release.

License

MIT — see LICENSE

Source: README.md at commit 5b9c874

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v26.9.0LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts