# Tanod Docs PDF Protect

> Tanod Docs PDF Protect is a paid API for AI agents from docs.tanod.dev, paid per call via x402, $0.005/call, status unknown (last checked 2026-10-13).

Password-protects a PDF with AES-256 encryption and granular permission controls (print, copy, modify, etc.)

## Facts

- Endpoint: POST https://docs.tanod.dev/v1/pdf/protect?utm_source=zero.xyz
- Price: $0.005/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-13
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/tanod-docs-pdf-protect-a0ac6aa7
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_USOOVkGOvQ-V10hKTaPqA

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability tanod-docs-pdf-protect-a0ac6aa7 -d '<json body>'
```

Example prompt: Can you password-protect this PDF so that only someone with the password 'OpenSesame123' can open it, and make it so they can't copy text or print it? Here's the file URL: https://example.com/report.pdf

## When to prefer this

Use this endpoint when you need to add AES-256 password encryption to an existing PDF with fine-grained permission controls (print, copy, modify, annotate, assemble, fill forms, accessibility). Prefer this over generic file converters when security and DRM-style restrictions are the primary goal rather than format conversion.

## Known failure modes

- PDF URL is unreachable, private, or internal (IP-literal hosts refused)
- PDF exceeds 20 MB via URL or 10 MB via base64
- Neither url nor pdf_base64 provided
- Invalid base64 encoding in pdf_base64
- Password exceeds 127 characters
- Malformed permissions object with unrecognized keys
- PDF is already encrypted and cannot be re-protected without owner password

## How this service works

Documents: DOCX template fill, Office to PDF, any file to Markdown, PDF to Word, OCR, PDF pipeline.

## Output

Returns a JSON object containing the AES-256 encrypted PDF (as base64 inline or a 24-hour download URL), along with metadata including file size in bytes, page count, active permissions granted, whether an owner password was set, encryption type, and input/output byte counts.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "properties": {
  "url": {
   "anyOf": [
    {
     "type": "string",
     "maxLength": 2048,
     "minLength": 1
    },
    {
     "type": "null"
    }
   ],
   "default": null,
   "description": "Public http(s) URL of the PDF (at most 20 MB; private, internal and IP-literal hosts are refused); or use pdf_base64."
  },
  "output": {
   "enum": [
    "base64",
    "url"
   ],
   "type": "string",
   "default": "base64",
   "description": "base64 (default): the file comes back inline as base64. url: the file is stored for 24 hours and the reply carries a download link (url, expires_at, bytes, content_type, sha256) instead of the base64, which keeps the file out of your context window."
  },
  "pdf_base64": {
   "anyOf": [
    {
     "type": "string",
     "maxLength": 13398872,
     "minLength": 1
    },
    {
     "type": "null"
    }
   ],
   "default": null,
   "description": "The PDF as base64 (at most 10 MB decoded per request); or use url."
  },
  "permissions": {
   "type": "object",
   "properties": {
    "print": {
     "type": "boolean",
     "default": true
    },
    "modify": {
     "type": "boolean",
     "default": true
    },
    "annotate": {
     "type": "boolean",
     "default": true
    },
    "assemble": {
     "type": "boolean",
     "default": true
    },
    "copy_text": {
     "type": "boolean",
     "default": true
    },
    "fill_forms": {
     "type": "boolean",
     "default": true
    },
    "accessibility": {
     "type": "boolean",
     "default": true
    },
    "print_high_quality": {
     "type": "boolean",
     "default": true
    }
   },
   "description": "What a user-password holder may do (default: everything).",
   "additionalProperties": false
  },
  "user_password": {
   "type": "string",
   "maxLength": 127,
   "minLength": 1,
   "description": "Needed to open the PDF; never logged."
  },
  "owner_password": {
   "anyOf": [
    {
     "type": "string",
     "maxLength": 127,
     "minLength": 1
    },
    {
     "type": "null"
    }
   ],
   "default": null,
   "description": "Lifts the restrictions; default: a random one nobody knows."
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "file": {
   "name": "protected.pdf",
   "bytes": 14183,
   "pages": 1,
   "data_base64": "JVBERi0xLjcKJb/3... (trimmed: 18,912 base64 characters in the reply)",
   "content_type": "application/pdf"
  },
  "operation": "protect",
  "encryption": "AES-256",
  "input_bytes": 13264,
  "input_pages": 1,
  "permissions": {
   "print": true,
   "modify": true,
   "annotate": true,
   "assemble": true,
   "copy_text": true,
   "fill_forms": true,
   "accessibility": true,
   "print_high_quality": true
  },
  "output_bytes": 14183,
  "untrusted_content": true,
  "owner_password_set": false,
  "active_content_removed": {}
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/tanod-docs-pdf-protect-a0ac6aa7/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from docs.tanod.dev](https://www.zero.xyz/host/docs.tanod.dev/llms.txt)