
Turns ReportFlow's browser-based template designer into a PDF generation endpoint you can call from Claude, Cursor, or VS Code. The server exposes tools for listing templates, fetching their parameter schemas, and generating PDFs from natural language (think "create an invoice for Acme Corp totalling $330"). Ships as both a hosted HTTP endpoint at mcp.re-port-flow.com/mcp that works from Claude.ai web with no local install, and as an npm package for stdio mode when you want PDFs saved directly to your workspace. Authentication is OAuth 2.0 with PKCE and dynamic client registration, so no API keys touch the AI client. Includes batch generation with ZIP downloads and a template marketplace covering invoices, quotes, receipts, and delivery slips.
Official display name: Re:port Flow MCP. Package and implementation identifier: reportflow-mcp. Legacy search aliases: ReportFlow MCP Server and ReportFlow.
An MCP (Model Context Protocol) server that turns your Re:port Flow templates into PDF reports — invoices, contracts, statements, anything you've designed — straight from Claude or any other MCP-compatible AI agent.
Agents that should follow a procedure (not just read the protocol) use
skills/re-port-flow/SKILL.md. Copy that
directory into Claude Code / Codex .agents/skills or a Cursor project skill
folder. PDF generation always goes to https://mcp.re-port-flow.com/mcp.
The Hugging Face Space MCP (org card)
is gallery-only — add it from the Space MCP badge → Add to MCP tools,
not as a substitute for the product endpoint.
Re:port Flow MCP runs in two ways — pick whichever matches your client.
Add Re:port Flow as a custom connector pointing at the hosted endpoint:
https://mcp.re-port-flow.com/mcp
In Claude (claude.ai) go to Settings → Connectors → Add custom connector and paste the URL above. Authentication is handled in-app via OAuth (see Authentication) — nothing to install locally.
Add the following to your config file (.mcp.json, claude_desktop_config.json, ~/.cursor/mcp.json, etc.):
{
"mcpServers": {
"reportflow": {
"command": "npx",
"args": ["-y", "reportflow-mcp"]
}
}
}
That's the whole setup. No env vars, no API keys, no secrets to manage.
Same JSON in .vscode/mcp.json.
npx) and a browser available during the first login.Both transports (stdio / Streamable HTTP) serve two MCP protocol generations from a single endpoint:
2026-07-28 (current) — stateless per-request protocol. Modern clients discover it via server/discover; no session header, requests carry their protocol version in _meta.2025-11-25, 2025-06-18, 2025-03-26, 2024-11-05, 2024-10-07) — classic initialize handshake, kept for backwards compatibility with existing clients (Claude Desktop, claude.ai custom connectors, Cursor, ChatGPT, n8n, …).Version selection is automatic on both transports: modern clients probe with server/discover, legacy clients keep sending initialize — no configuration is required on either side, and existing connections keep working unchanged.
Either handshake also returns MCP instructions: a short brief telling the connected AI what Re:port Flow does and how to reach a first PDF (gallery search → copy → parameters → generate), so it can offer to create a document right after you connect instead of waiting to be asked. How closely a client follows those instructions is up to that client.
The remote server also speaks A2A v1.0 over the JSON-RPC binding:
https://mcp.re-port-flow.com/.well-known/agent-card.jsonPOST https://mcp.re-port-flow.com/a2a (SendMessage)Each A2A skill is one of the MCP tools above (the skill id is the tool name). Send a message with a data part {"skill": "<tool name>", "arguments": {...}}; the arguments follow that tool's input schema, and the call runs through the same authorization and workspace permissions as MCP. Authorize with the same OAuth flow (the MCP access token works as-is). Streaming, push notifications and task retrieval are not supported: every SendMessage returns a finished task.
When you add the connector, Claude runs the OAuth flow for you: Sign in → pick a workspace → consent. Tokens are held by the client — there's no local keychain or browser step to manage.
After reloading the MCP client, ask the AI:
Authenticate with Re:port Flow
A browser window opens. Sign in → pick a workspace → consent, and you're
done. Tokens are stored in your OS keychain (macOS Keychain / Windows
Credential Manager / Linux libsecret), with a chmod-0600 file fallback, and
are refreshed automatically.
Each example below is a prompt you can paste as-is; the AI picks the right tools.
Using the invoice template, create a PDF for Acme Corp totalling $330.
The AI lists designs with list_templates, fetches the parameter schema with
get_design_parameters, fills in the values, and calls generate_pdf_sync.
fileUrl — the output-history page of the Re:port Flow
web app (sign-in required). It is not a direct file download link.504);
use generate_pdfs_async for anything that may take longer.From the statement template, generate one PDF per customer (Acme $100, Globex $250, Initech $80) and give them to me together.
generate_pdfs_sync writes a single ZIP to your workspace.generate_pdfs_async runs the batch and returns a request id plus
the output-history page URL (url). get_generation_status tells you when
the batch has finished or failed.Kick off the contract PDF in the background, then download it once it's ready.
The AI calls generate_pdf_async (returns a requestId immediately), checks
progress with get_generation_status, then calls download_file to save the
finished PDF. The batch equivalent is generate_pdfs_async → download_zip.
If a download is attempted while the file is still being generated, the tool
reports FILE_NOT_READY with the number of seconds to wait instead of failing.
These download tools are stdio-only; on the remote server the sync/async tools
return the output-history page URL instead.
requestId, fileId and designId are short alphanumeric strings (for
example 0eUDdgAjNXrrItA2), not UUIDs.
Tip — natural-language params: on a Sampling-capable client you can ask "draft the params for a $1,000 invoice to A社" and the AI will call
suggest_paramsto turn the brief into a validparamsobject before generating.
I don't have any templates yet — create an invoice PDF for Acme Corp.
When list_templates is empty, the AI searches the public template gallery
with search_gallery_templates, shows you the candidates, copies your pick
into your workspace with copy_gallery_template, and then proceeds with the
normal flow (get_design_parameters → generate_pdf_sync). The copy always
lands in the workspace you selected on the OAuth consent screen — the AI
cannot target any other workspace.
| Command | Purpose |
|---|---|
/generate_pdf | Step-by-step recipe for a single PDF |
/generate_pdfs | Recipe for batch PDF generation |
/reportflow_help | Quick feature tour |
Output location is resolved in this order:
The setup above assumes an MCP client that manages its own connection and login. If you are writing the agent yourself — Hugging Face Agents, a custom tool loop, or raw HTTP — the hosted endpoint is open to you directly:
https://mcp.re-port-flow.com/mcp
copy_gallery_template is not idempotent;
passthrough values end up in the PDF's metadata).initialize and tools/list work without credentials, so you can discover the
toolset before wiring up authentication. Every tools/call needs a Bearer token.
Re:port Flow is on the Hub at
huggingface.co/reportflow. The Hugging
Face SDKs have no MCP OAuth flow of their own, so fetch a token once with
examples/oauth/get-token.sh and inject it as
an Authorization header — see
examples/python/hf_mcp_client.py and
examples/javascript/hf-mcp-client.mjs.
| Tool | Purpose |
|---|---|
authenticate | First-time / re-authentication |
list_templates | List available designs |
get_design_parameters | Fetch the parameter schema for a design |
generate_pdf_sync / _async | Generate one PDF (sync returns path; async returns request ID) |
generate_pdfs_sync / _async | Generate many PDFs (returns a ZIP) |
get_generation_status | Check an async request (requestId): processing / completed / failed, with the failure code and message |
download_file / download_zip | Download artifacts produced by async tools (stdio only). Returns FILE_NOT_READY + seconds to wait while the file is still being generated |
suggest_params | Translate a natural-language brief into a params JSON via MCP Sampling (requires a Sampling-capable client) |
search / fetch | ChatGPT connector convention tools (single string argument), closed-world (openWorldHint: false) — they only read your own workspace's internal template catalog, never the web. search resolves templates by name; fetch returns a template's parameter schema by id. Thin wrappers over list_templates / get_design_parameters so ChatGPT (incl. Plus/Pro without Developer Mode) can discover and inspect templates. |
search_gallery_templates | Search the public template gallery (no auth needed) by keyword/category. Returns candidate templates that are not yet in your workspace — their slug cannot be used for PDF generation until copied. |
get_gallery_template | Fetch full details of one public gallery template by slug (no auth needed) |
copy_gallery_template | Write tool. Copy a gallery template into the workspace you authorized (the target workspace is fixed by your access token and cannot be passed as an argument). Returns designId + version ready for get_design_parameters / generate_pdf_sync. Each call creates a new design — it never reuses a previous copy. |
| URI | Contents |
|---|---|
reportflow://designs | List of available designs |
reportflow://designs/{designId}/parameters | Parameter schema for one design |
reportflow://errors | Catalog of error messages from the Content Service |
reportflow://server-info | Server feature overview |
/generate_pdf, /generate_pdfs, /reportflow_help — pass arguments and the AI follows the prepared workflow.
| Symptom | Fix |
|---|---|
Error containing re-authentication required | Ask the AI: "re-authenticate with Re:port Flow" |
npx cannot find the package | npm cache clean --force then retry |
| No keychain available on Linux | Falls back automatically to a chmod-0600 file under $XDG_STATE_HOME/reportflow-mcp/ |
| Browser cannot open over SSH / remote shell | Authenticate once on a local machine; afterwards the cached token works on remote hosts |
Re:port Flow MCP is a thin client: it forwards your requests to your own
Re:port Flow account and returns the generated PDFs. It does not sell or share
your data with third parties. Authentication tokens are stored locally (OS
keychain, or a chmod-0600 file fallback) and are sent only to Re:port Flow's
own services — during the OAuth login, and as a Bearer credential on each
authenticated API call (listing templates, generating or downloading PDFs).
They are never shared with any third party.
For the full privacy policy — what is collected, how long it is retained, and how it is handled — see: lp.re-port-flow.com
The hosted endpoint validates the Host header (DNS-rebinding protection) and
rejects structurally invalid Origin headers with 403 Forbidden, per the MCP
Streamable HTTP specification's Security requirements. Authentication is
Bearer-token only — no cookies, and CORS never allows credentials. The full
policy and its threat model are documented in
docs/security.md (Japanese).
Need help, found a bug, or have a directory-review question?
MIT — see LICENSE.
REPORTFLOW_CLIENT_IDOverride default OAuth client_id (optional, defaults to the official public client 'reportflow-mcp')
REPORTFLOW_AUTH_URLOverride default ReportFlow auth URL (optional, defaults to https://re-port-flow.com/api/v1)
REPORTFLOW_API_BASE_URLOverride default ReportFlow Content Service URL (optional, defaults to https://api.re-port-flow.com)
REPORTFLOW_TOKEN_STOREToken store backend: 'keychain' (default) or 'file'