
Company News
Free Business Plan Upgrades for Open Source Maintainers
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.
@codespar/mcp-certta
Advanced tools
MCP server for Certta — Brazilian identity + signature platform (KYC/KYB, biometrics, OCR, ICP-Brasil + electronic signature, onboarding pipelines)
MCP server for Certta — Brazilian identity + signature platform. KYC/KYB (CPF / CNPJ via Receita Federal + SPC / Serasa), face match + liveness, OCR of RG / CNH / comprovantes, antifraud score, ICP-Brasil digital signature + GoCertta electronic signature, and orchestrated onboarding pipelines that chain KYC + biometrics + signature in one process.
Add to your claude_desktop_config.json:
{
"mcpServers": {
"certta": {
"command": "npx",
"args": ["@codespar/mcp-certta"],
"env": {
"CERTTA_API_KEY": "your-api-key"
}
}
}
}
Same config in .cursor/mcp.json.
| Tool | Certta endpoint | Notes |
|---|---|---|
kyc_lookup_cpf | POST /v1/kyc/cpf | CPF → name, DOB, regularity, restrictions, risk score |
kyb_lookup_cnpj | POST /v1/kyb/cnpj | CNPJ → corporate profile, QSA, CNAE, capital |
| Tool | Certta endpoint | Notes |
|---|---|---|
biometrics_face_match | POST /v1/biometrics/face-match | Selfie vs document photo + liveness |
biometrics_liveness | POST /v1/biometrics/liveness | Passive liveness on a selfie |
| Tool | Certta endpoint | Notes |
|---|---|---|
documents_ocr | POST /v1/documents/ocr | OCR RG / CNH / CRLV / proof of residence / passport |
antifraud_score | POST /v1/antifraud/score | Composite risk score (0..100) |
| Tool | Certta endpoint | Notes |
|---|---|---|
signature_icp_create | POST /v1/signature/icp/envelopes | ICP-Brasil digital signature envelope |
signature_electronic_create | POST /v1/signature/electronic/envelopes | GoCertta electronic signature envelope |
signature_get_envelope | GET /v1/signature/envelopes/{envelope_id} | Status + signer responses |
| Tool | Certta endpoint | Notes |
|---|---|---|
onboarding_process_create | POST /v1/onboarding/processes | Orchestrate KYC + biometrics + signature in one flow |
onboarding_process_get | GET /v1/onboarding/processes/{process_id} | Per-step verdicts |
Standard Bearer auth:
Authorization: Bearer <CERTTA_API_KEY>
Issue your API key from the Certta dashboard:
Sandbox endpoint: https://api-sandbox.certta.com.br. Override via CERTTA_API_BASE.
| Variable | Required | Description |
|---|---|---|
CERTTA_API_KEY | yes | API key from the Certta dashboard |
CERTTA_API_BASE | no | Override base URL (default https://api.certta.com.br) |
Three BR identity rails in this catalog, each with a different specialty:
| Provider | Strength | Best for |
|---|---|---|
| Certta | KYC + biometrics + ICP-Brasil signature | Onboarding with signed contracts |
Caf (@codespar/mcp-caf) | KYC + Trust Platform orchestration | Hosted onboarding with policy rules |
BigDataCorp (@codespar/mcp-bigdatacorp) | Broad data enrichment + antifraud | KYC + AML + credit decisioning |
Need governance, budget limits, and audit trails for agent identity calls? CodeSpar Enterprise adds policy engine, payment routing, and compliance templates on top of these MCP servers.
MIT
FAQs
MCP server for Certta — Brazilian identity + signature platform (KYC/KYB, biometrics, OCR, ICP-Brasil + electronic signature, onboarding pipelines)
We found that @codespar/mcp-certta demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Company News
Open source maintainers are under more pressure than ever. We're raising our open source program from the Team plan to the Business plan, free.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.