Field-by-field comparison

Compare the evidence before choosing an MCP.

Each signal stays separate, missing facts remain visible, and the column order follows your selection.

MCPs in this comparison

Uncheck an MCP to remove it. Comparing two or three keeps each signal in its own row.

Open canonical comparison link

Comparable alternatives

Shown only when capability or industry context overlaps.

Side-by-side MCP evidence comparison
Evidence fieldCitra (PDF Reader MCP)Shortlist candidateCodebase Memory MCPMCP100 Recommended
Task fit
Best for
  • Reading and searching PDFs with structured text and tables
  • OCR or rendered PDF evidence with page and bounding-box citations
  • Repository indexing, symbol search, call-path tracing, impact analysis, and architecture queries across many languages
Not ideal for
  • Editing, creating, signing, or rewriting PDF files, which are outside the documented three-tool surface
  • Word, Excel, CSV, or general document workflows outside PDF
  • Tiny repositories, one-off text searches, or semantic questions unsupported by the indexed parsers
Avoid when
  • The process can read sensitive PDF directories that have not been explicitly allowlisted
  • You cannot review the Node and platform-native package chain before installation
  • The source tree cannot be indexed locally or persistent cache files are prohibited
Provenance
Provenance details

First-party MCP

SylphxAI · Publisher source ↗

First-party MCP

DeusData · Publisher source ↗

Maintenance
Maintenance details

Repo: Aug 8, 2026

Package: Aug 7, 2026

Repo: Aug 14, 2026

Package: Aug 14, 2026

Popularity evidence
GitHub stars

891

GitHub stars · checked 2026-08-14T18:46:26.000Z

44,904

GitHub stars · checked 2026-09-25T18:35:00Z

Package downloads / 30 daysNo reliable download data

28,000

package downloads / 30 days · checked 2026-08-14T00:00:00.000Z

Shared-package downloads / 30 days

1,062

shared-package downloads / 30 days (not MCP-specific) · checked 2026-09-08

Not documented
External adoption evidenceNot documented
  • npm: package downloads: 28,015Exact attributable signal.npm: package downloads · Rolling 30 days · checked 2026-08-14T18:46:26.000ZEvidence source ↗
Client coverage
Client coverage details
Claude Code✓ Local stdio
Claude Desktop✓ Local stdio
Codex✓ Local stdio
VS Code✓ Local stdio
Cursor✓ Local stdio
OpenCode✓ Local stdio
Claude Code✓ Local stdio
Claude Desktop✓ Local stdio
Codex✓ Local stdio
VS Code✓ Local stdio
Cursor✓ Local stdio
OpenCode✓ Local stdio
Client coverage noteLocal stdio runs on your computer. Streamable HTTP connects to a remotely hosted MCP server.
Access and data
AuthenticationDefault stdio needs no service credential. Optional HTTP mode supports MCP_API_KEY and binds loopback by default; configured HTTP or OpenAI-compatible visual providers may use their own headers or API key, while local command providers do not inherently require one.local stdio; no remote auth needed
CostThe MIT-licensed local server has no documented usage fee. Pricing for any operator-selected external OCR, visual, network, or client provider is outside the Citra documentation and remains provider-specific.none beyond local resources
PermissionsThe tools read PDF paths and URLs available to the process. Directory allowlists can restrict local reach; URL handling blocks private addresses by default unless the operator overrides it.reads indexed source/project data; installer writes supported agent/editor configs/hooks
Data handlingDefault stdio processing is local. Optional OCR or visual providers may receive rendered content according to their configuration, and URL inputs are fetched from their source.local processing; current docs state no source/index/query/env/telemetry upload
Limitations
Tradeoffs
  • Local-first PDF processing reduces routine cloud exposure, but optional OCR and visual providers introduce separate dependencies and data paths.
  • The focused three-tool surface is easier to reason about than a general file server, but it deliberately does not cover document editing.
  • Persistent indexing can reduce repeated reads, but consumes local storage and graph results can become stale until the repository is re-indexed.
  • Version 0.10.8 includes correctness and reliability fixes affecting graph/search results and Windows behavior.
Risk contextUse stdio, configure explicit allowed PDF directories, retain private-IP URL blocking, require an API key before any non-loopback HTTP deployment, and review native artifacts before installation.latest 0.10.x supported; SLSA/Sigstore/checksums/VirusTotal/security policy
Evidence date
Editorial review2026-08-142026-09-23
Candidate evidence2026-08-14T18:46:26.000Z2026-09-25T18:35:00Z

Popularity, maintenance, fit, permissions, and client support are independent evidence fields.

Read the evidence method →