sign-cli

Agent-first e-signature MCP server with **offline PAdES signing** and hash-chained audit. The same 19 tools / 4 prompts / 12 resources are reachable via stdio (`npx @drbaher/sign-cli mcp serve`) for local agents and over HTTP for remote ones. **Architectural claim:** an LLM agent can drive every step of a contract workflow except the actual signing gesture, which stays gated behind a human via per-signer approval tokens (TTL-bounded, scoped to one email, single-use). Pre-sign safety checks (`--require-hash`, `--require-title`, `--require-signer-email`) throw structured errors *before* any state mutation — so an agent that computed a hash earlier can refuse to sign if the document was swapped mid-flight. **Highlights:** - Fully-offline PAdES signer (real PKCS#7, self-issued X.509) - Hash-chained audit log with append-only DB triggers + RFC 3161 timestamping - Read-only mode (`--read-only true`) returns `FORBIDDEN_READ_ONLY` for mutating tools - Multi-provider routing (local / Dropbox Sign / DocuSign / SignWell) - Pre-sign signature visibility (`existingSignatures` on every fetch) - Tool allow-list + capability scoping for sandboxed agents This Smithery deployment runs in **read-only mode** against an ephemeral SQLite that wipes every 4 hours — safe to explore, not for production signing. For local agent use, install via `npm i -g @drbaher/sign-cli`. MIT-licensed. No telemetry. Source: github.com/DrBaher/sign-cli. Showcase: cli.drbaher.com.

接入信息

传输形态

http

鉴权方式

鉴权未知

端点

https://sign-cli--drbaher.run.tools

{
  "mcpServers": {
    "sign-cli": {
      "url": "https://sign-cli--drbaher.run.tools"
    }
  }
}

能力清单