Back to Browse

Tersign Js MCP Server

Developer ToolsModerate5.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Counter-signed evidence records for agent commerce: receipts, verification, dispute envelopes.

About

Counter-signed evidence records for agent commerce: receipts, verification, dispute envelopes.

Security Report

5.2
Moderate5.2Moderate Risk

Tersign is a well-structured MCP server for evidence/receipt management with proper cryptographic signing and verification. Authentication is correctly handled via TERSIGN_SELLER_KEY environment variable, and the codebase shows good defensive practices around sensitive data (digests only, no raw arguments logged). Permissions align with the server's purpose (network for ledger communication, env vars for credentials, file I/O for local fallback). Minor code quality observations do not materially impact security. Supply chain analysis found 2 known vulnerabilities in dependencies (2 critical, 0 high severity). Package verification found 1 issue.

5 files analyzed · 7 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

File System Write

Writes or modifies files on your machine. Check that this is expected for the tool.

process_spawn

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

0x-prefixed private key the seller signs receipts withRequired

Environment variable: TERSIGN_SELLER_KEY

Seller/issuer display nameOptional

Environment variable: TERSIGN_ISSUER_NAME

Seller jurisdiction (e.g. HK)Optional

Environment variable: TERSIGN_ISSUER_JURISDICTION

Seller tax/business-registration id (optional)Optional

Environment variable: TERSIGN_ISSUER_TAX_ID

Hosted ledger base URL for counter-signing (optional; SDK works standalone)Optional

Environment variable: TERSIGN_LEDGER_URL

Ledger seller API key (required only if counter-signing)Required

Environment variable: TERSIGN_LEDGER_API_KEY

Ledger seller id (required only if counter-signing)Optional

Environment variable: TERSIGN_LEDGER_SELLER_ID

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-tersignhq-evidence": {
      "env": {
        "TERSIGN_LEDGER_URL": "your-tersign-ledger-url-here",
        "TERSIGN_SELLER_KEY": "your-tersign-seller-key-here",
        "TERSIGN_ISSUER_NAME": "your-tersign-issuer-name-here",
        "TERSIGN_ISSUER_TAX_ID": "your-tersign-issuer-tax-id-here",
        "TERSIGN_LEDGER_API_KEY": "your-tersign-ledger-api-key-here",
        "TERSIGN_LEDGER_SELLER_ID": "your-tersign-ledger-seller-id-here",
        "TERSIGN_ISSUER_JURISDICTION": "your-tersign-issuer-jurisdiction-here"
      },
      "args": [
        "-y",
        "tersign"
      ],
      "command": "npx"
    }
  }
}

Reviews

No reviews yet

Be the first to review this server!