accueil / serveurs / Fichiers & Documents / io.github.assinafy/mcp-server
io.github.assinafy/mcp-server
serveur MCP (Model Context Protocol) · assinafy-mcp-server v3.3.3
Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur.
Est-ce que io.github.assinafy/mcp-server est sûr ?
Au dernier audit MCP Hub, le serveur MCP « io.github.assinafy/mcp-server » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.
Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.
Les 27 outils
- assinafy_create_assignment≈ 1611 tokens
Request signatures on a document. Use `method: virtual` to sign without input fields, or `method: collect` to place input fields on specific pages. DigitalCertificate signers require `method: virtual`; other methods fail with code `digital_certificate_requires_virtual`. For **virtual**, the document may be in `uploaded`, `metadata_processing` or `metadata_ready`; it is promoted to `pending_signature` automatically once metadata processing completes. For **collect**, the document must be in `metadata_ready` (fields reference specific pages). `step` controls signing order: signers sharing a step sign in parallel, and the next step is notified only after the previous step completes. If supplied, every signer must supply it and values must be contiguous starting at 1. Obtain signer IDs from assinafy_list_signers or assinafy_create_signer and page IDs from assinafy_get_document. This sends signing invitations. Check with assinafy_get_document that no assignment exists first; this can consume credits.
Paramètres, retour & exemple (8)
Paramètresmethod· string · requis · virtual | collectentries· array · optionnel
Required for `collect`: field placements per page.message· string · optionnel
Text included in the invitation email.signers· array · requisexpires_at· string · optionnel
ISO 8601; default is no expiration. Must be at least one hour in the future.document_id· string · requis
Document ID.estimate_only· boolean · optionnel
Preview cost and balances without creating an assignment or notifying anyone.copy_receivers· array · optionnel
Signer IDs that only receive a copy.
Exemple d'appel{"name": "assinafy_create_assignment", "arguments": {"method": "virtual", "signers": [], "document_id": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - assinafy_create_document_from_template≈ 739 tokens
Generate a document from a saved template and invite one signer per role, by signer ID or full name and email. Find roles with assinafy_list_templates and validate editor_fields values with assinafy_validate_fields first. DigitalCertificate signers require a virtual template without placed fields. This sends invitations and can consume credits.
Paramètres, retour & exemple (9)
Paramètresname· string · optionnel
custom document nametags· null|array · optionnel
tag names, merged with the template's defaultsmessage· string · optionnel
signing invitation messagesigners· null|array · requis
one signer per template role, each by ID or by name and emailaccount_id· string · optionnel
account ID; uses request routing if omittedexpires_at· string · optionnel
assignment expiry in RFC 3339 formattemplate_id· string · requis
template IDeditor_fields· null|array · optionnel
template editor field valuesestimate_only· boolean · optionnel
preview cost and balances for the given roles without creating contacts, documents or invitations; roles alone are sufficient
Exemple d'appel{"name": "assinafy_create_document_from_template", "arguments": {"signers": [], "template_id": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - assinafy_create_signer≈ 257 tokens
Create a signer in the workspace. Search with assinafy_list_signers first to avoid duplicates. Sends no invitation.
Paramètres, retour & exemple (5)
Paramètresemail· string · optionnelfull_name· string · requisaccount_id· string · optionnel
Authorized workspace; discovered from OAuth when omitted.government_id· string · optionnel
Signer's CPF (11 digits) or CNPJ (14 characters; may be alphanumeric). Formatting is accepted and the value is normalized on save. Required before the signer can use a verification method that identifies them by CPF.whatsapp_phone_number· string · optionnel
E.164; normalized on save.
Exemple d'appel{"name": "assinafy_create_signer", "arguments": {"full_name": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - assinafy_delete_document≈ 147 tokens
Delete a document only when the user's instruction explicitly authorizes deletion. Inspect its current state first; Assinafy enforces which documents may be deleted.
Paramètres, retour & exemple (1)
Paramètresdocument_id· string · requis
unique document ID to delete
Exemple d'appel{"name": "assinafy_delete_document", "arguments": {"document_id": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - assinafy_download_document≈ 184 tokens
Download a document artifact as base64: original (default), certificated, certificate-page, pades or bundle. Download the signed PDF only when the document is certificated and the artifact is listed.
Paramètres, retour & exemple (2)
Paramètresartifact· string · optionnel
original (default), certificated, certificate-page, pades, or bundledocument_id· string · requis
unique document ID
Exemple d'appel{"name": "assinafy_download_document", "arguments": {"document_id": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - assinafy_download_document_page≈ 162 tokens
Download the rendered image of a specific document page. Use a page_id returned by assinafy_get_document. Returns base64.
Paramètres, retour & exemple (2)
Paramètrespage_id· string · requis
The page ID.document_id· string · requis
Document ID.
Exemple d'appel{"name": "assinafy_download_document_page", "arguments": {"page_id": "texte", "document_id": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - assinafy_get_document≈ 164 tokens
Inspect one known document: status, assignment, signers with their progress, pages and available artifacts. Read it before retrying a send or following up. 100% signed does not mean certification is finished; the signed PDF is ready at status certificated.
Paramètres, retour & exemple (1)
Paramètresdocument_id· string · requis
unique document ID
Exemple d'appel{"name": "assinafy_get_document", "arguments": {"document_id": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - assinafy_get_field≈ 139 tokens
Retrieve a single field definition.
Paramètres, retour & exemple (2)
Paramètresfield_id· string · requis
The field ID.account_id· string · optionnel
Authorized workspace; discovered from OAuth when omitted.
Exemple d'appel{"name": "assinafy_get_field", "arguments": {"field_id": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - assinafy_get_signer≈ 140 tokens
Retrieve a signer's information.
Paramètres, retour & exemple (2)
Paramètressigner_id· string · requis
The signer ID.account_id· string · optionnel
Authorized workspace; discovered from OAuth when omitted.
Exemple d'appel{"name": "assinafy_get_signer", "arguments": {"signer_id": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - assinafy_get_template≈ 137 tokens
Get one saved template with its roles and field placements.
Paramètres, retour & exemple (2)
Paramètresaccount_id· string · optionnel
account ID; uses default if omittedtemplate_id· string · requis
unique template ID
Exemple d'appel{"name": "assinafy_get_template", "arguments": {"template_id": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - assinafy_list_document_activities≈ 167 tokens
List the activities recorded for a document. Each entry carries an event-specific `payload` snapshot (keys vary per event) and the request `origin` (`ip`, `user-agent`). Use it to explain what happened to a document and when.
Paramètres, retour & exemple (1)
Paramètresdocument_id· string · requis
Document ID.
Exemple d'appel{"name": "assinafy_list_document_activities", "arguments": {"document_id": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - assinafy_list_documents≈ 288 tokens
Search workspace documents by name or status, with pagination. Use it to find a document the user names before inspecting or following up on it.
Paramètres, retour & exemple (8)
Paramètrespage· integer · optionnel
page number (1-based)sort· string · optionnel
name or updated_at; prefix with - for descendingtags· string · optionnel
comma-separated tag IDs; documents must have all listed tagsmethod· string · optionnel
signature method filter: virtual or collectsearch· string · optionnel
partial match on document name or signerstatus· string · optionnel
document status filterper_page· integer · optionnel
number of results per page (max 100)account_id· string · optionnel
account ID; uses request routing if omitted
Exemple d'appel{"name": "assinafy_list_documents", "arguments": {"page": 1, "sort": "texte", "tags": "texte", "method": "texte", "search": "texte", "status": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - assinafy_list_fields≈ 220 tokens
List the field definitions of a workspace. When `include_standard` is enabled, records of type `signature`, `initial` and `signatureDate` are also returned. Match definitions to template placement field_id and ask about ambiguous names.
Paramètres, retour & exemple (3)
Paramètresaccount_id· string · optionnel
Authorized workspace; discovered from OAuth when omitted.include_inactive· boolean · optionnel
Include inactive field definitions.include_standard· boolean · optionnel
Include standard field types (signature, initial, signatureDate).
Exemple d'appel{"name": "assinafy_list_fields", "arguments": {"account_id": "texte", "include_inactive": true, "include_standard": true}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - assinafy_list_signers≈ 204 tokens
List the signers of a workspace. Use it to resolve a recipient to a signer ID; ask the user about ambiguous matches before sending.
Paramètres, retour & exemple (4)
Paramètrespage· integer · optionnel
Page number.search· string · optionnel
Filter by full_name or email.per_page· integer · optionnel
Records per page (max 100).account_id· string · optionnel
Authorized workspace; discovered from OAuth when omitted.
Exemple d'appel{"name": "assinafy_list_signers", "arguments": {"page": 1, "search": "texte", "per_page": 1, "account_id": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - assinafy_list_templates≈ 181 tokens
List saved templates with their signer roles, pages and field placements (field_id). Template authoring is done in Assinafy.
Paramètres, retour & exemple (4)
Paramètrespage· integer · optionnel
page number (1-based)search· string · optionnel
filter templates by nameper_page· integer · optionnel
results per pageaccount_id· string · optionnel
account ID; uses default if omitted
Exemple d'appel{"name": "assinafy_list_templates", "arguments": {"page": 1, "search": "texte", "per_page": 1, "account_id": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - assinafy_list_whatsapp_notifications≈ 270 tokens
List all WhatsApp notification messages sent for an assignment. The response includes the rendered template text split into `header`, `body` and `buttons` — exactly what the signer would see. In sandbox/stage, WhatsApp messages are simulated (no real delivery) and button URLs include access/verification codes you can use to simulate the signing flow. Treat returned signing links and verification codes as sensitive; never use them to sign for another person. Use it to troubleshoot WhatsApp delivery for one assignment.
Paramètres, retour & exemple (2)
Paramètresdocument_id· string · requis
Document ID.assignment_id· string · requis
The assignment ID.
Exemple d'appel{"name": "assinafy_list_whatsapp_notifications", "arguments": {"document_id": "texte", "assignment_id": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - assinafy_place_fields≈ 920 tokens
Open a visual editor to place signature, initials, date and input fields on a metadata_ready document, then send it with method collect. Takes the assinafy_create_assignment arguments except method and entries. Sends nothing by itself: in apps-capable hosts the user places fields and presses Send; other clients get page sizes and field IDs as text to build entries.
Paramètres, retour & exemple (5)
Paramètresmessage· string · optionnel
Text included in the invitation email.signers· array · requisexpires_at· string · optionnel
ISO 8601; default is no expiration. Must be at least one hour in the future.document_id· string · requis
Document ID.copy_receivers· array · optionnel
Signer IDs that only receive a copy.
Exemple d'appel{"name": "assinafy_place_fields", "arguments": {"signers": [], "document_id": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - assinafy_rename_document≈ 211 tokens
Update a document's name. Only allowed before any assignment is created (i.e. while the document is in `uploaded` or `metadata_ready` status and has no signers yet); once the signature process has started or the document is certificated, the name is locked. The name is normalized: diacritics are removed and unsupported characters are replaced with dashes.
Paramètres, retour & exemple (2)
Paramètresname· string · requisdocument_id· string · requis
Document ID.
Exemple d'appel{"name": "assinafy_rename_document", "arguments": {"name": "texte", "document_id": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - assinafy_resend_notification≈ 239 tokens
Send one reminder to a pending signer in the assignment's active step, after confirming with assinafy_get_document that they have not signed. May consume notification credits; never repeat a reminder only because progress is unchanged.
Paramètres, retour & exemple (4)
Paramètressigner_id· string · requis
unique signer ID to notifydocument_id· string · requis
unique document IDassignment_id· string · requis
unique assignment IDestimate_only· boolean · optionnel
preview the reminder cost and balances without notifying the signer
Exemple d'appel{"name": "assinafy_resend_notification", "arguments": {"signer_id": "texte", "document_id": "texte", "assignment_id": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - assinafy_review_signature_request≈ 1405 tokens
Preview an assinafy_create_assignment call without sending anything: same arguments, checked against the document and signers. Use it when the user wants to review before sending. Apps-capable hosts render a card whose Send button performs the request; other clients get the summary as text, and the request is sent only after the user confirms.
Paramètres, retour & exemple (7)
Paramètresmethod· string · requis · virtual | collectentries· array · optionnel
Required for `collect`: field placements per page.message· string · optionnel
Text included in the invitation email.signers· array · requisexpires_at· string · optionnel
ISO 8601; default is no expiration. Must be at least one hour in the future.document_id· string · requis
Document ID.copy_receivers· array · optionnel
Signer IDs that only receive a copy.
Exemple d'appel{"name": "assinafy_review_signature_request", "arguments": {"method": "virtual", "signers": [], "document_id": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - assinafy_send_pdf_for_signature≈ 514 tokens
Upload a new PDF, wait for processing and invite signers by full name and email, using Email verification and notification. This sends invitations and uses plan allowance: use only recipients the user authorized. After a partial failure, inspect the retained document ID and continue with assinafy_create_assignment instead of uploading again.
Paramètres, retour & exemple (9)
Paramètresmessage· string · optionnel
invitation message shown to signerssigners· null|array · requis
one or more signers to create or reuse and request signatures fromfile_name· string · requis
PDF filename including the .pdf extensionpoll_secs· integer · optionnel
polling interval in seconds (default 2; cannot exceed max_wait_secs)account_id· string · optionnel
account ID; uses the request or server default if omittedexpires_at· string · optionnel
assignment expiry timestamp in RFC 3339 formatfile_base64· string · requis
base64-encoded PDF bytes (max 25 MB decoded)estimate_only· boolean · optionnel
upload and prepare the PDF, then return cost and document ID without creating contacts or sending invitations; reuse that ID to sendmax_wait_secs· integer · optionnel
maximum seconds to wait for PDF processing (default 30; max 600)
Exemple d'appel{"name": "assinafy_send_pdf_for_signature", "arguments": {"signers": [], "file_name": "texte", "file_base64": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - assinafy_set_assignment_expiration≈ 190 tokens
Change when an existing signature request expires, using an RFC 3339 timestamp. Assinafy may refuse for requests that already expired.
Paramètres, retour & exemple (3)
Paramètresexpires_at· string · requis
new expiry timestamp in RFC 3339 formatdocument_id· string · requis
unique document IDassignment_id· string · requis
unique assignment ID
Exemple d'appel{"name": "assinafy_set_assignment_expiration", "arguments": {"expires_at": "texte", "document_id": "texte", "assignment_id": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - assinafy_show_document≈ 170 tokens
Show a status card for one known document: its status, who has signed, who is still pending and when it expires. Apps-capable hosts render it with a reminder button; other clients get the same summary as text. Resolve the document with assinafy_list_documents first.
Paramètres, retour & exemple (1)
Paramètresdocument_id· string · requis
unique document ID
Exemple d'appel{"name": "assinafy_show_document", "arguments": {"document_id": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - assinafy_update_signer≈ 416 tokens
Update a signer's information. **Verification integrity:** `email` / `whatsapp_phone_number` cannot be changed while the signer has verified that channel on an in-flight (not yet certificated) document — the response is `400` naming the offending document(s). Already-certificated documents do not block updates. Changing a channel that has *unverified* in-flight requests rotates their access/verification codes (invalidating previously sent links/OTPs); use the resend endpoint to redeliver. `full_name` can always be updated.
Paramètres, retour & exemple (6)
Paramètresemail· string · optionnelfull_name· string · optionnelsigner_id· string · requis
The signer ID.account_id· string · optionnel
Authorized workspace; discovered from OAuth when omitted.government_id· string · optionnel
Signer's CPF (11 digits) or CNPJ (14 characters; may be alphanumeric). Formatting is accepted and the value is normalized on save. Required before the signer can use a verification method that identifies them by CPF.whatsapp_phone_number· string · optionnel
E.164; normalized on save.
Exemple d'appel{"name": "assinafy_update_signer", "arguments": {"signer_id": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - assinafy_upload_document≈ 217 tokens
Upload a PDF without sending invitations and return its document ID. Use it when the user wants to prepare a document now and send it later with assinafy_create_assignment. Never upload again when a document ID is already known.
Paramètres, retour & exemple (3)
Paramètresfile_name· string · requis
PDF filename including .pdfaccount_id· string · optionnel
authorized workspace; discovered through OAuth when omittedfile_base64· string · requis
base64 PDF bytes, at most 25 MiB decoded
Exemple d'appel{"name": "assinafy_upload_document", "arguments": {"file_name": "texte", "file_base64": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - assinafy_validate_fields≈ 278 tokens
Validate one or more input values against existing field definitions without creating a document or requesting signatures. Supply field/value pairs in values; the server sends the documented JSON array. Check each result's success before requesting signatures.
Paramètres, retour & exemple (2)
Paramètresvalues· array · requis
Field/value pairs to validate; sent to Assinafy as the JSON request array.account_id· string · optionnel
Authorized workspace; discovered from OAuth when omitted.
Exemple d'appel{"name": "assinafy_validate_fields", "arguments": {"values": []}}Exemple de retour{"content": [{"type": "text", "text": "…"}]} - assinafy_verify_document≈ 148 tokens
Verify a signed document using its actual Assinafy SHA-1 signature hash. Public lookup; requires no workspace connection and sends no credential upstream.
Paramètres, retour & exemple (1)
Paramètreshash· string · requis
SHA-1 signature hash of the signed document
Exemple d'appel{"name": "assinafy_verify_document", "arguments": {"hash": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}]}
C'est votre serveur ?
Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».