
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
addsign-mcp
Advanced tools
MCP server for AddSign — agents send documents for signature, track signing status, and download signed PDFs
MCP server for AddSign — lets AI agents send documents for signature, track signing status, remind signers, and download signed, hash-verifiable PDFs.
Stateless by design: it speaks only AddSign's public v1 API with your API key. No database access, no shared secrets. Revoking the key at addsign.io/settings/api kills the integration instantly.
export ADDSIGN_API_KEY=sk_...
claude mcp add addsign --env ADDSIGN_API_KEY=sk_... -- npx -y addsign-mcp
(Until the npm package is published, point at a checkout instead:
claude mcp add addsign --env ADDSIGN_API_KEY=sk_... -- node /path/to/simple-sign/mcp/dist/index.js)
claude_desktop_config.json){
"mcpServers": {
"addsign": {
"command": "node",
"args": ["/path/to/simple-sign/mcp/dist/index.js"],
"env": { "ADDSIGN_API_KEY": "sk_..." }
}
}
}
| Variable | Required | Default | Purpose |
|---|---|---|---|
ADDSIGN_API_KEY | yes | — | Your AddSign API key (sk_...) |
ADDSIGN_BASE_URL | no | https://addsign.io | Point at a different deployment |
| Tool | Kind | What it does |
|---|---|---|
list_templates | read | Templates + the signer roles each expects + field summary |
send_for_signature | write | Create from template + email signers; idempotent via request_id |
check_status | read | Document + per-signer state + recent audit events |
download_signed | read | 5-minute signed URL + the ledger's SHA-256 for verification |
remind | write | Nudge pending signers (4h per-signer server-side cooldown) |
list_documents | read | Paginated document list, filterable by status |
No destructive tools: an agent cannot cancel or delete a legal document through this server.
list_templates → find "Contract to Lease", roles: [tenant_1, tenant_2]
send_for_signature {template_id,
signers: [Artem…, Valeria…],
request_id: <uuid>} → document_id, status: pending, usage 3/8
check_status {document_id} → Artem signed, Valeria viewed
remind {document_id, valeria@…} → reminded (or skipped: reminded_recently)
download_signed {document_id} → url + sha256 → fetch, verify, file it
Every AddSign error carries a stable error_code; this server appends the
right next step for the agent. The two that matter most:
rate_limited (429) — back off retry_after seconds, retry.plan_limit_reached (402) — never retry; the monthly cap resets on the
1st or the human upgrades.cd mcp
npm install
npm run build # → dist/index.js
ADDSIGN_API_KEY=sk_... node dist/index.js
FAQs
MCP server for AddSign — agents send documents for signature, track signing status, and download signed PDFs
The npm package addsign-mcp receives a total of 27 weekly downloads. As such, addsign-mcp popularity was classified as not popular.
We found that addsign-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.