Change permissions of PDF

---

name: change-pdf-permissions description: Change a PDF’s permission flags (edit, print, copy, forms, annotations, etc.) by uploading it to the Solutions API, polling until completion, then returning a download URL for the updated PDF. license: MIT compatibility: agentskills: ">=0.1.0" metadata: category: document-security tags: - pdf - permissions - restrict - allow - security - cross-service-solutions provider: Cross-Service-Solutions (Solutions API) allowed-tools: - http - files

---

change-pdf-permissions

Purpose

This skill changes the permission flags of a PDF (e.g., whether it can be printed, edited, or copied) by: 1) accepting a PDF file from the user, 2) accepting desired permission settings (true/false), 3) uploading them to the Solutions API, 4) polling the job status until it is finished, 5) returning the download URL for the updated PDF.

Credentials

The API requires an API key used as a Bearer token:

Authorization: Bearer

How the user gets an API key:

https://login.cross-service-solutions.com/register

Or the user can provide an API key directly.

Rule: never echo or log the API key.

API endpoints

Base URL:

https://api.xss-cross-service-solutions.com/solutions/solutions

Create permission-change job:

POST /api/75

multipart/form-data parameters:

- file — required — PDF file - canModify — required — "true" or "false" - canModifyAnnotations — required — "true" or "false" - canPrint — required — "true" or "false" - canPrintHighQuality — required — "true" or "false" - canAssembleDocument — required — "true" or "false" - canFillInForm — required — "true" or "false" - canExtractContent — required — "true" or "false" - canExtractForAccessibility — required — "true" or "false"

Get result by ID:

GET /api/

When done, the response contains:

output.files[] with { name, path } where path is a downloadable URL.

Inputs

Required

PDF file (binary)

Permission flags (boolean-like), all required by API:

- canModify - canModifyAnnotations - canPrint - canPrintHighQuality - canAssembleDocument - canFillInForm - canExtractContent - canExtractForAccessibility

API key (string)

Optional

None

Defaults (recommended)

If the user does not specify permissions, use a conservative default that disallows modification and extraction, but allows printing:

canModify: false

canModifyAnnotations: false

canPrint: true

canPrintHighQuality: true

canAssembleDocument: false

canFillInForm: true (reasonable default if forms exist)

canExtractContent: false

canExtractForAccessibility: true (often desirable for accessibility)

These defaults can be adjusted per product policy.

Output

Return a structured result:

job_id (number)

status (string)

download_url (string, when done)

file_name (string, when available)

permissions (object) reflecting the final values sent

Example output: ```json { "job_id": 7501, "status": "done", "download_url": "https://.../permissions.pdf", "file_name": "permissions.pdf", "permissions": { "canModify": false, "canModifyAnnotations": false, "canPrint": true, "canPrintHighQuality": true, "canAssembleDocument": false, "canFillInForm": true, "canExtractContent": false, "canExtractForAccessibility": true } }