Back to Browse

Signatrust MCP Server

Developer ToolsModerate5.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

Blockchain-anchored e-signatures: send envelopes, manage templates, verify anchors on Solana.

About

Blockchain-anchored e-signatures: send envelopes, manage templates, verify anchors on Solana.

Security Report

5.2
Moderate5.2Moderate Risk

This is a well-structured MCP server for document signing with proper authentication, appropriate scope validation, and no malicious patterns. The code demonstrates good security practices including vendored dependencies (zero external runtime deps), input validation, and error sanitization. Minor quality issues around error handling breadth and logging do not significantly impact security posture. Permissions align well with the server's document signing and API integration purpose. Supply chain analysis found 1 known vulnerability in dependencies (1 critical, 0 high severity). Package verification found 1 issue.

5 files analyzed · 6 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

env_vars

Check that this permission is expected for this type of plugin.

HTTP Network Access

Connects to external APIs or services over the internet.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

file_stat

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

SignaTrust API key (starts with sk_live_). Create one at Settings -> API keys.Required

Environment variable: SIGNATRUST_API_KEY

Override the API base URL. Defaults to https://app.signatrust.io; set for self-hosted or local development.Optional

Environment variable: SIGNATRUST_API_URL

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-signatrust-mcp-server": {
      "env": {
        "SIGNATRUST_API_KEY": "your-signatrust-api-key-here",
        "SIGNATRUST_API_URL": "your-signatrust-api-url-here"
      },
      "args": [
        "-y",
        "@signatrust/mcp-server"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

@signatrust/mcp-server

Send and verify e-signatures from Claude — zero-custody, with independently verifiable cryptographic evidence for every signature.

npm downloads MCP Registry License: MIT

Model Context Protocol (MCP) server for the SignaTrust document signing API. Enables AI assistants like Claude to create envelopes, manage templates, check signing status, and verify blockchain anchors via natural language.

Quick Start

Claude Code

claude mcp add signatrust -- npx -y @signatrust/mcp-server

Then set your API key in the MCP server environment.

Claude Desktop

Add to your claude_desktop_config.json:

{
  "mcpServers": {
    "signatrust": {
      "command": "npx",
      "args": ["-y", "@signatrust/mcp-server"],
      "env": {
        "SIGNATRUST_API_KEY": "sk_live_your_key_here"
      }
    }
  }
}

Cursor

Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (per-project):

{
  "mcpServers": {
    "signatrust": {
      "command": "npx",
      "args": ["-y", "@signatrust/mcp-server"],
      "env": {
        "SIGNATRUST_API_KEY": "sk_live_your_key_here"
      }
    }
  }
}

VS Code

Add to .vscode/mcp.json (note the top-level key is servers, not mcpServers):

{
  "servers": {
    "signatrust": {
      "command": "npx",
      "args": ["-y", "@signatrust/mcp-server"],
      "env": {
        "SIGNATRUST_API_KEY": "sk_live_your_key_here"
      }
    }
  }
}

To keep the key out of the file, use an input prompt instead of env:

{
  "inputs": [
    { "id": "signatrust-key", "type": "promptString", "description": "SignaTrust API key", "password": true }
  ],
  "servers": {
    "signatrust": {
      "command": "npx",
      "args": ["-y", "@signatrust/mcp-server"],
      "env": { "SIGNATRUST_API_KEY": "${input:signatrust-key}" }
    }
  }
}

Available Tools

ToolDescriptionRequired Scope
list_envelopesList envelopes with status filter and paginationenvelopes:read
get_envelopeGet full envelope details (signers, docs, blockchain)envelopes:read
create_envelopeCreate and send envelope for signing. Accepts documentIds (after upload_document) or templateId (backend copies the template). Supports three-tier securityLevel.envelopes:write
list_templatesList available document templatestemplates:read
upload_documentRead a local file and upload it to SignaTrust, returning a document ID for create_envelopedocuments:write
download_documentGet a time-limited pre-signed URL to download a document (e.g. the executed PDF)documents:read
analyze_documentRun AI contract analysis on an envelope (Gemini-powered risk/sentiment review, plan-gated)ai:analyze
verify_blockchainVerify Solana anchor and return composite hash + file hash + explorer URLenvelopes:read
get_evidenceGet the full court-ready evidence bundle (envelope, signers, audit trail, blockchain verification)envelopes:read

Three-tier security. create_envelope accepts securityLevel: STANDARD (bearer token only), VERIFIED (adds SMS/email OTP — recommended for employment, vendor, or healthcare consent), or CERTIFIED (adds WebAuthn biometric + device binding — recommended for real estate, high-value, or regulatory signings).

API Key Scopes

Create an API key at Settings > API Keys in your SignaTrust dashboard. Assign scopes based on what tools you need:

ScopeTools Enabled
envelopes:readlist_envelopes, get_envelope, verify_blockchain, get_evidence
envelopes:writecreate_envelope
templates:readlist_templates
documents:writeupload_document
documents:readdownload_document
ai:analyzeanalyze_document

Environment Variables

VariableRequiredDefaultDescription
SIGNATRUST_API_KEYYes-API key starting with sk_live_
SIGNATRUST_API_URLNohttps://app.signatrust.ioAPI base URL

Natural Language Examples

Once connected, you can ask your AI assistant things like:

  • "List all my pending envelopes"
  • "Upload ~/Documents/nda.pdf and send it to alice@example.com with VERIFIED security"
  • "Show me available templates, then create a lease agreement from the residential template for John Doe"
  • "Check the blockchain verification for envelope env_abc123 and show me the composite hash"
  • "Run AI analysis on envelope env_xyz — I want to know if there are any risky clauses before the signer reviews it"

Development

# Install dependencies
npm install

# Build
npm run build

# Run tests
npm test

# Run tests with coverage
npm run test:coverage

# Type check
npm run typecheck

# Local smoke test
SIGNATRUST_API_KEY=sk_live_xxx SIGNATRUST_API_URL=http://localhost:3000 node dist/server.js

Architecture

src/
  server.ts                      # Entry point — env validation, MCP server setup, stdio transport
  handlers.ts                    # Tool definitions and handler dispatch (testable)
  errors.ts                      # RFC 7807 ProblemDetails -> MCP tool error mapping
  vendor/signatrust-sdk/         # Vendored HTTP client + types (zero external runtime deps)
  *.test.ts                      # Co-located test files

The HTTP client and API types are vendored under src/vendor/signatrust-sdk/ so this package has no external runtime dependencies beyond @modelcontextprotocol/sdk.

Reviews

No reviews yet

Be the first to review this server!