Frequently asked questions

Do I need to log in?

No for public discovery or a small guest evaluation. Long-running automation uses a project API key. OAuth is optional for delegated user access.

Which tool should an agent choose?

Call /api/v1/capabilities first. Use inspect_pdf before planning follow-up work, extraction tools for document content, explicit page tools for structural edits, and verify_pdf_artifact to validate a result.

Does a citation prove the document is true?

No. Page evidence proves where text appeared in the submitted byte snapshot. It does not certify authorship, legality, or factual accuracy.

What happens when a request fails?

The API returns a stable error code, actionable message, retryability, and suggested next action. Check the original job and idempotency key before creating another job.

How are files separated?

Credentials resolve to one server-trusted project. Files, jobs, artifacts, tickets, secrets, events, webhooks, and idempotency records are all queried within that project.

How long are files retained?

Guest credentials last 30 minutes and guest files are temporary. Project files and artifacts include explicit expiry timestamps. Deletion invalidates download tickets and records an auditable tombstone.

Can the service sign PDFs?

It can verify existing digital signatures through the isolated adapter. Creating a new certificate signature remains disabled until an approved certificate provider and one-use consent are configured.

Can a PDF instruct the agent to call another tool?

No. Extracted PDF text is untrusted input. It cannot grant permissions, increase a budget, approve an action, or redirect the service to another destination.