Back to Home
john-walkoe icon

uspto_pfw_mcp

Verified Safe

by john-walkoe

Overview

This MCP server provides enhanced search capabilities and local PDF download functionality for USPTO Patent File Wrapper data, offering LLM guidance, secure proxy downloads, and integration points with other USPTO MCPs (FPD, PTAB, Citations).

Installation

Run Command
python -m patent_filewrapper_mcp

Environment Variables

  • USPTO_API_KEY
  • MISTRAL_API_KEY
  • PFW_PROXY_PORT
  • PROXY_PORT
  • INTERNAL_AUTH_SECRET
  • USPTO_TIMEOUT
  • USPTO_DOWNLOAD_TIMEOUT
  • MISTRAL_OCR_TIMEOUT
  • USPTO_MAX_RETRIES_PER_HOUR
  • ENABLE_ALWAYS_ON_PROXY
  • ENABLE_PROXY_SERVER
  • ENVIRONMENT

Security Notes

The server implements robust security measures. API keys are managed via Windows DPAPI (or secure file-based storage with 0o600 permissions on non-Windows) and environment variables, never exposed in client-facing URLs. The proxy server enforces IP whitelisting (localhost only), CORS restrictions, request size limits, and adds standard security headers. Internal communication relies on HMAC tokens with a shared secret. Sensitive data is protected through encryption (Fernet for proxy links). Placeholder API key detection helps prevent misconfiguration. A dedicated security logger with JSON formatting, rotation, and alerting is in place. While a legacy DPAPI module (secure_storage.py) still exists, it is clearly marked as deprecated and points to a more secure unified storage solution.

Similar Servers

Stats

Interest Score0
Security Score9
Cost ClassMedium
Avg Tokens7500
Stars0
Forks0
Last Update2025-12-06

Tags

Patent researchUSPTO APIDocument processingLLM toolsProxy serverSecurityInter-service communicationOCR