signdocsbrasil/signdocs-mcp-server

A Model Context Protocol server for the
SignDocs Brasil e-signature API. It lets MCP-capable AI clients (Claude
Desktop, Claude Code, Cursor, …) create signing sessions, manage multi-signer
envelopes, upload/download documents, verify signatures, and manage webhooks —
the same action catalog as the official n8n, Zapier, and Make.com integrations.
It is a thin adapter over the official @signdocs-brasil/api
SDK, which owns OAuth2 token exchange, caching, retries, and error handling.
## Install
bash
npm install -g @signdocs-brasil/mcp-server # or run on demand with npx
## Credentials
Create an API credential in the SignDocs dashboard (app.signdocs.com.br → API)
and expose it as environment variables:
| Variable | Required | Default | Notes |
| SIGNDOCSCLIENTID | yes | — | OAuth2 client id |
| SIGNDOCSCLIENTSECRET | yes | — | OAuth2 client secret |
| SIGNDOCSENVIRONMENT | no | hml | hml (staging) or production |
| SIGNDOCSBASEURL | no | derived | override the resolved base URL |
| SIGNDOCSSCOPES | no | full set | space-separated scope override |
> Start in hml. HML data expires after ~7 days and is safe for testing.
> Switch to production only when you intend to create real, legally-binding
> signatures.
## Connect an AI client
Claude Desktop (claudedesktopconfig.json):
json
"mcpServers": {
"signdocs": {
"command": "npx",
"args": ["-y", "@signdocs-brasil/mcp-server"],
"env": {
"SIGNDOCSCLIENTID": "yourclientid",
"SIGNDOCSCLIENTSECRET": "yourclientsecret",
"SIGNDOCSENVIRONMENT": "hml"
Claude Code:
bash
claude mcp add signdocs \
-e SIGNDOCSCLIENTID=yourclientid \
-e SIGNDOCSCLIENTSECRET=yourclientsecret \
-e SIGNDOCSENVIRONMENT=hml \
-- npx -y @signdocs-brasil/mcp-server
## Tools
| Tool | Action | Safety |
| createsigningsession | Create single-signer session, returns signingUrl | ⚠️ binding + quota |
| getsigningsessionstatus | Poll session status | read |
| getsigningsession | Full session bootstrap | read |
| listsigningsessions | List by status | read |
| cancelsigningsession | Cancel a session | ⚠️ irreversible |
| resendsigningsessionotp | Resend OTP | write |
| createenvelope | Multi-signer envelope | ⚠️ binding + quota |
| getenvelope | Envelope details | read |
| addsessiontoenvelope | Add a signer, returns signingUrl | ⚠️ binding + quota |
| getenvelopecombinedstamp | Combined stamped PDF URL | read |
| uploaddocument | Attach a PDF to a transaction | write |
| downloaddocument | Presigned download URLs | read |
| listtransactions | Search/list transactions | read |
| gettransaction | Transaction details | read |
| canceltransaction | Cancel a transaction | ⚠️ irreversible |
| getevidence | Cryptographic evidence | read |
| verifyevidence | Public evidence verification | read |
| verifyenvelope | Public envelope verification | read |
| verifydocument | Detect signatures in a PDF | ⚠️ PROD-only + quota |
| registerwebhook / listwebhooks / deletewebhook / testwebhook | Webhook management | mixed |
⚠️ tools carry destructiveHint annotations and a warning in their
description so compliant clients prompt the human before invoking them.
Annotations are only hints — review your client's auto-approval settings.
### Not yet exposed
Trust sessions (/v1/trust-sessions) and resend-invite are not in