
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
MCP server for Siglio. Lets an AI assistant send documents for e-signature by email or text.
Lets an AI assistant send documents for electronic signature through Siglio, by email, text message, or both at once.
It runs on your own machine, so your API key never leaves it.
Get a key from your Siglio account. Signing up takes an email address, no card, and comes with 25 free envelopes.
Claude Desktop — add this to your config file:
{
"mcpServers": {
"siglio": {
"command": "npx",
"args": ["-y", "siglio-mcp"],
"env": { "SIGLIO_API_KEY": "sig_sandbox_your_key_here" }
}
}
}
Other MCP clients take the same command and environment.
| Tool | What it does |
|---|---|
send_for_signature | Sends a PDF to one or two people, by email, text, or both |
check_envelope | Whether it has been delivered, opened, signed or cancelled |
download_signed_document | Saves the completed PDF once every signature is in |
void_envelope | Cancels an unsigned envelope; the link stops working |
Then you can just ask: "Send the NDA on my desktop to Dana at 813 555 0142 by text."
Siglio does not take coordinates for signature fields. Placement comes from literal text tags inside the document itself:
^S1 signer one signs here ^S2 signer two signs here
^I1 signer one initials here ^I2 ...
^D1 a date that fills itself ^D2 ...
Set that tag text to white font before you save the PDF. The tags are instructions, not content, and black ones stay visible on the signed document.
If the tags are missing the send is rejected and nothing goes out, so you cannot accidentally mail someone a document they have no way to sign.
Live keys are refused by default. A key starting with sig_live_ will not
run unless you also set SIGLIO_ALLOW_LIVE=true. Until you do that, the worst a
confused assistant can do is send a free sandbox envelope. Sandbox envelopes
deliver for real and produce real signatures; they just cost nothing.
Sending is idempotent by content. If an assistant retries the same document to the same people, it gets the first envelope back instead of putting a second copy of a contract in someone's inbox.
Cancelling additionally requires an explicit confirmation, so it cannot happen as a side effect of a vague instruction.
| Variable | |
|---|---|
SIGLIO_API_KEY | Required |
SIGLIO_ALLOW_LIVE | Set to true to permit a live key |
SIGLIO_API_BASE | Optional, defaults to https://api.esigndev.com |
FAQs
MCP server for Siglio. Lets an AI assistant send documents for e-signature by email or text.
The npm package siglio-mcp receives a total of 284 weekly downloads. As such, siglio-mcp popularity was classified as not popular.
We found that siglio-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.