About abox.tools
abox.tools is a local file-processing MCP server and CLI for agents that need image and PDF operations or file checksums. It processes files on the user's computer and returns output paths and concise JSON results.
Key features
- 01Compress, resize, and convert images
- 02Merge, split, reorder, and rotate PDFs
- 03Convert images to PDF
- 04Inspect or remove image metadata
- 05Calculate file checksums
- 06Run operations through MCP or CLI
Use cases
- 01Reduce an image to a target file size
- 02Reorder or split PDF pages
- 03Create a PDF from image files
- 04Remove image metadata before sharing
MCP support
Provides local MCP tools for image processing, PDF editing, metadata operations, and checksums. File bytes remain on the computer during adapter processing.
Configuration
Local server config is the same for every client. Copy it into your client’s MCP config file.
We haven’t collected a package or remote endpoint for this server. Follow the instructions in the project README.
Tools
Local servers expose tools only once running on your machine, and the maintainer has not provided a tool list.
Details
From the project READMEabox.tools for agents
Published by Abox Technologies. Compress, resize and convert images; merge, split, reorder and rotate PDF pages; turn images into PDFs; inspect or remove image metadata; and calculate file checksums with the existing abox.tools code. An agent supplies local paths and receives output paths and short JSON results. File bytes stay on your computer.
Download the latest release.
Listed in the Official MCP Registry
as io.github.A-Box-of-Tools/abox-tools. New tagged releases update the Registry
automatically after their downloads pass verification.
Release bundles include Node.js, production dependencies, pinned processing code, and the shared skill. You do not need to install Node or npm, or type setup commands. Image processing and images to PDF need an installed Edge, Chrome, or Chromium. PDF editing, metadata operations and checksums do not.
Install in Codex
Download the matching .zip from the release's Assets:
| Release label | Computer |
|---|---|
windows-x64 | Windows with an Intel or AMD 64-bit processor |
macos-arm64 | Mac with Apple silicon |
macos-x64 | Mac with an Intel processor |
linux-x64 | Linux with an Intel or AMD 64-bit processor |
- Extract the entire ZIP to a permanent folder. For example, a 0.4.0 Windows
bundle extracts as
abox-tools-0.4.0-windows-x64. Keep this folder in place because the local marketplace uses it for plugin refresh. - Open
START-HERE.htmlinside the extracted folder. This page works offline. Select Install in Codex, allow your browser to open the desktop app, then select Install on the plugin's detail page. - Start a new local chat and ask for one of the operations below.
You need the desktop app installed with its codex:// link handler available.
The button opens the app's supported local-plugin detail link; the app handles
installation. See the official OpenAI deep-link documentation.
If your browser blocks the link, use Install in Codex.cmd on Windows or
Install in Codex.command on macOS. Linux includes Install in Codex.sh for
file managers that support executing shell scripts. These launchers open the
same detail page and may briefly show a terminal; no commands need to be typed.
Install the tools in Claude Desktop
Download the universal.mcpb from the same release, open it with Claude Desktop,
and follow its installation prompts. One file supports Windows x64, Linux x64,
and both Apple silicon and Intel Macs. It includes the runtimes and processing
dependencies. Smaller platform-specific MCPBs are also available. This installs
the MCP tools; the shared agent skill is part of the Codex ZIP.
If opening the file does not show an installer, go to Settings → Desktop app →
Manage beside Extensions, then Advanced settings → Install Extension… and
select the .mcpb. See Claude's desktop extension instructions.
Bundle format and MCP execution are checked in CI on all four platforms. The
0.2.1 universal bundle was installed and enabled in Claude Desktop on Windows,
where the app reported its local MCP server Running. The macOS desktop interface
has not been checked. Download and install a new bundle when updating; custom
MCPB files do not update automatically.
Version 0.3.0 corrects the publisher to Abox Technologies. If your desktop host shows both the earlier publisher entry and the new one, disable the older entry to avoid duplicate tools.
Install in Gemini CLI
With Gemini CLI installed, run:
gemini extensions install https://github.com/A-Box-of-Tools/abox-tools-plugin
Gemini selects the matching prebuilt archive from the latest GitHub Release. The extension includes its runtime, dependencies and shared skill. Review the installation prompt and allow its local MCP server. See the Gemini extension release guide.
Install tools in Cursor
Extract the matching native ZIP, open START-HERE.html, and select Install
tools in Cursor. Cursor shows the local server configuration before adding it.
Keep the extracted folder in place. This adds the MCP tools; the shared skill
can be installed separately. The repository's Cursor plugin route needs Node
and a one-time adapter setup; see Cursor installation.
Install the shared skill through skills.sh
For agents supported by the skills CLI (Node 22.20+):
npx skills add A-Box-of-Tools/abox-tools-plugin --skill abox-local-files
Then ask the agent to set up the abox.tools local adapter. The skill includes a Python 3.9+ setup script that downloads the matching packaged release, verifies its checksum and installs the bundled runtime. It does not require cloning or building this project. See standalone setup. The skills.sh listing is public. Gemini release installation is verified; its gallery indexing is pending.
Ask the agent
- “Compress this photo below 500 KB and save a new copy.”
- “Resize this photo to fit within 1200 by 800 pixels.”
- “Convert this PNG to WebP.”
- “Merge these PDFs in this order.”
- “Split this PDF into one file per page.”
- “Extract pages 1–3 and 4–6 as two PDFs.”
- “Make one PDF containing pages 3, 1–2, and another copy of page 3.”
- “Rotate pages 2–4 clockwise by 90 degrees.”
- “Put these photos into one PDF, in this order.”
- “Check whether this image contains EXIF or XMP metadata.”
- “Remove location and other image metadata, keeping its orientation and colors.”
- “Calculate SHA-256 checksums for these files.”
All input and output paths must be absolute. Existing outputs are never overwritten. Image compression accepts an exact byte target; a result reports whether the target was met.
| MCP tool | Required arguments | Useful options |
|---|---|---|
abox_capabilities | none | Lists formats, limits, and defaults. |
abox_image_compress | input_path, output_path, target_bytes | format: keep, auto, jpeg, png, webp; allow_resize |
abox_image_resize | input_path, output_path, width and/or height | fit: contain or cover; allow_upscale: false; format, quality, background |
abox_image_convert | input_path, output_path, format | jpeg, png, or webp; quality from 0 to 1; JPEG background |
abox_pdf_split | input_path, output_dir | mode: each, every, ranges; pages_per_file; ranges; keep_bookmarks |
abox_pdf_merge | input_paths, output_path | 2–32 PDFs in input order; keep_bookmarks |
abox_pdf_select | input_path, output_path, pages | Ordered terms such as 3,1-2,3; keep_bookmarks |
abox_pdf_rotate | input_path, output_path, degrees | Clockwise 90, 180, or 270; pages defaults to all; retains every page |
abox_images_to_pdf | input_paths, output_path | One image per page; page_size, orientation, fit, margin_mm, dpi, image_mode, quality, max_side, background |
abox_exif_inspect | input_path | Read-only metadata inventory; does not return private tag values |
abox_exif_remove | input_path, output_path | keep_orientation; keep_icc |
abox_file_hash | input_path | algorithms: MD5, SHA-1, SHA-256 (default), SHA-384, SHA-512 |
Use the CLI
The CLI provides the same operations without MCP. These commands use Node in a
source checkout. In a release bundle, replace node with ./runtime/node, or
.\runtime\node.exe on Windows:
node bin/abox.mjs capabilities
node bin/abox.mjs doctor
node bin/abox.mjs compress-image --request-file /absolute/path/compress.json
node bin/abox.mjs resize-image --request-file /absolute/path/resize.json
node bin/abox.mjs convert-image --request-file /absolute/path/convert.json
node bin/abox.mjs split-pdf --request-file /absolute/path/split.json
node bin/abox.mjs merge-pdf --request-file /absolute/path/merge.json
node bin/abox.mjs select-pdf-pages --request-file /absolute/path/select.json
node bin/abox.mjs rotate-pdf --request-file /absolute/path/rotate.json
node bin/abox.mjs images-to-pdf --request-file /absolute/path/photos.json
node bin/abox.mjs inspect-exif --request-file /absolute/path/inspect.json
node bin/abox.mjs remove-exif --request-file /absolute/path/metadata.json
node bin/abox.mjs hash-file --request-file /absolute/path/hash.json
A compression request file contains:
{
"input_path": "/absolute/path/photo.jpg",
"output_path": "/absolute/path/photo-small.jpg",
"target_bytes": 500000,
"format": "keep",
"allow_resize": true
}
A page-range request file contains:
{
"input_path": "/absolute/path/document.pdf",
"output_dir": "/absolute/path/document-parts",
"mode": "ranges",
"ranges": ["1-3", "4-6"],
"keep_bookmarks": true
}
An image metadata request file contains:
{
"input_path": "/absolute/path/photo.jpg",
"output_path": "/absolute/path/photo-clean.jpg",
"keep_orientation": true,
"keep_icc": true
}
--request '<JSON>' is also supported, subject to your shell's quoting rules.
Request files avoid those differences. The CLI prints JSON summaries; it never
prints file contents.
Limits and behavior
- Image compression, resizing and conversion: JPEG, PNG, and static WebP.
Animated images are refused. Resizing fits the full image (
contain) or crops centrally (cover); upscaling is disabled by default. Re-encoding can change colors and removes source metadata. A no-op resize preserves original bytes. - Metadata removal: JPEG, PNG, and WebP containers, including their animation.
- PDFs: unencrypted input, up to 5,000 pages and 1,000 output files.
Merging accepts 2–32 PDFs, at most 128 MiB combined. Page selection preserves
the order and repetition of comma-separated terms. Ranges expand ascending:
3,1-2,3produces 3,1,2,3; use explicit terms for reverse order. Merging PDFs with colliding interactive form field names is currently unsupported by the source engine and fails before creating an output. Tool responses include at most 20 output entries. Larger splits also write a localmanifest.jsoncontaining every output path and its source pages. - Images to PDF: still JPEG, PNG or WebP, one image per page, up to 128 MiB
combined and 80 megapixels per image. Defaults to A4, automatic orientation,
contain, no margins.
keepcan embed original JPEG streams with their metadata; remove metadata first when a clean document is required.losslesspreserves decoded image pixels;jpegre-encodes using the requested quality. - Checksums: read-only, streaming, supports empty files and up to 8 GiB.
- Each other input: at most 128 MiB.
- Compression: up to 80 megapixels and two minutes per image.
automay adjust the output extension to match the selected format. Other modes require the output extension to match the actual bytes, including an unchanged original. - Compression may resize an image unless
allow_resizeisfalse. A file that already meets the target can pass through unchanged, retaining its metadata. Use metadata removal when that is part of the task. - Metadata removal can retain animation in PNG and WebP because it edits their containers; compression refuses animation rather than flattening it.
- PDF splitting creates new PDFs. Document tags and metadata may be removed; digital signatures do not survive as valid signatures. Output page counts are verified. Bookmark preservation is enabled by default where supported.
- Metadata removal retains orientation and ICC profiles by default to preserve
appearance. Set
keep_orientationandkeep_icctofalseto remove those supported fields too; display orientation or colors may change. It does not establish that an image is anonymous.
Downloading a release or installing a browser uses the network. Processing files through this adapter does not send their bytes over the network. The agent and its host still receive paths, settings, summaries, and errors. The adapter needs no account or API key.
See the plugin privacy notice for the data handled by the adapter and the separate responsibilities of the agent host.
The compressor detects common browser installations. Set ABOX_BROWSER_PATH
to an existing browser executable if needed. The browser's sandbox must work on
the host OS; Linux detection prefers installed stable Chrome over generic
Chromium builds. The plugin does not download a browser during processing.
This plugin and the website's development MCP
This plugin runs file operations locally over MCP stdio. The separate website
catalogue at mcp-dev.abox.tools/mcp exposes
find_browser_tools: it accepts a public search query, locale, and limit, then
returns tool links and an interactive catalogue. It accepts no files or filenames
and does not process files. Its source is the website's
development catalogue worker.
The mcp-dev endpoint is for development. This repository's release workflow
does not deploy the website or publish a production catalogue endpoint.
For directory submissions and MCP registration, see Publishing.
For Gemini CLI, Vercel skills.sh, Cursor and other distribution options, see
Platform support and publishing.
Developer setup and other MCP hosts
Use the release bundle for installation without development tools. To develop from a source checkout, install Node.js 22.15 or later, then run:
npm ci --ignore-scripts
npm test
npm run test:browser
npm run doctor
Source setup downloads npm dependencies. The source checkout's mcp.json uses
Node from the host; release packaging replaces it with the bundled executable.
A developer can add this repository marketplace with
codex plugin marketplace add A-Box-of-Tools/abox-tools-plugin, then install it
in the desktop app and run Setup in the installed copy. See the
official OpenAI packaging guide.
For another host supporting local MCP stdio, point its configuration at the extracted bundle's executable and server script using absolute paths:
{
"mcpServers": {
"abox": {
"command": "/absolute/path/to/bundle/runtime/node",
"args": ["/absolute/path/to/bundle/bin/abox-mcp.mjs"]
}
}
}
On Windows, use runtime/node.exe. Escape backslashes in JSON or use forward
slashes. A source checkout can use node instead of the bundled executable.
Follow the host's own configuration format; do not replace unrelated settings.
Maintain the reused code
To refresh the pinned website sources from a local website checkout:
npm run sync-upstream -- --source /absolute/path/to/etoolbox
Review the vendor diff and provenance, retain license notices, and run the checks
above. A v* tag starts .github/workflows/release.yml: it tests, builds all four
platform bundles, builds a universal MCPB, and checks extracted MCP execution on
all four platforms before publishing the GitHub Release. A successful tagged
release then publishes its verified metadata to the Official MCP Registry using
GitHub's short-lived identity token. Claude and OpenAI directory reviews remain
separate submissions; see Publishing.
Comments
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.