Mcp Jumio

io.github.codesparPublished by GitHub account codesparv0.2.2Updated Oct 24, 2026

MCP server for Jumio — global identity verification + KYX: documents, liveness, AML screening

VerifiedSTDIODesktop onlySecurity & MonitoringBusiness & Commerce

Overview

AI-generated overview

MCP server for Jumio identity verification: create end-user accounts, run KYC workflows, and pull document, liveness, face-match and AML results.

What you can do
  • Create, list and delete Jumio end-user accounts, and register an account-level callback URL
  • Start, list, cancel, retry and delete KYC workflow executions, and update their merchant-side status
  • Read transaction summaries and full result payloads, including raw OCR extraction data
  • Retrieve captured credentials, document fields, facial similarity scores, liveness results and biometric facemaps
  • Retrieve AML and watchlist screening output, and full GDPR data exports for an account
When to use it
For regulated onboarding and KYC/KYX flows where an assistant should drive Jumio checks: starting verification sessions, polling results, reading extracted ID data and screening hits, and handling erasure requests. Suited to banks, fintechs and high-value onboarding already using or evaluating Jumio.
Requirements
Runs locally over stdio via the npm package (npx @codespar/mcp-jumio), so Node.js is needed. Requires a Jumio API token and API secret (HTTP Basic auth), a merchant User-Agent string, and optionally a region (us, eu or sg; default us). Network access to the Jumio regional API host is required.
Before you install
Needs the Jumio API token and secret, which grant access to identity-verification data; keep them out of shared configs. It handles sensitive personal data: ID documents, selfies, biometric facemaps and AML/PEP screening results. Several tools write or destroy data, including deleting accounts and transactions (GDPR erasure), cancelling or retrying workflows, and changing statuses. Verification sessions may incur Jumio billing.

Installation

In SourceWeft

  1. Open Mcp Jumio in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

@codespar/mcp-jumio

MCP server for Jumio — global enterprise identity verification (KYX / Netverify).

Jumio is the identity layer banks and large regulated fintechs reach for when Onfido isn't deep enough on fraud-pattern detection. Longer operator history, richer risk intelligence, purpose-built for regulated commerce at scale.

Third entry in CodeSpar's identity category. Completes the tier:

ServerStrength
UnicoBR leader — local KYC, PEP, court records, Receita Federal biometric pool
OnfidoGlobal challenger — clean developer API, 195+ countries, strong SDK story
Jumio (this)Global enterprise — deeper fraud-pattern detection, longer operator history, bank-grade

When to pick Jumio

  • Regulated bank or tier-1 fintech where auditors expect a legacy-credible vendor
  • High-value onboarding where fraud-loss >> verification cost
  • Deep fraud intelligence matters (velocity checks, device/session signals, longitudinal identity graph)
  • You already run Jumio elsewhere in the org and want a single KYC stack

Pair with Unico for Brazil-resident users (CPF + Receita biometric match); use Jumio for the rest of the world.

Tools (20)

ToolPurpose
initiate_accountCreate a persistent Jumio end-user account.
initiate_transactionStart a new KYC workflow execution on an existing account.
get_transactionRetrieve a workflow execution summary — status ('INITIATED' | 'PROCESSED' | 'SESSION_EXPIRED' | 'TOKEN_EXPI...
list_transactionsList workflow executions for an account.
get_transaction_detailsRetrieve the full result payload for a workflow execution — all capability outputs (extraction, liveness, s...
retrieve_document_dataRetrieve extracted fields from the ID document (name, DOB, document number, expiry, issuing country, MRZ, e...
retrieve_similarity_scoreRetrieve the facial similarity result (selfie vs document photo).
delete_transactionDelete a workflow execution (GDPR right-to-erasure).
update_transaction_statusUpdate the merchant-side status of a workflow execution (PATCH).
retrieve_credentialsList the credentials (captured artefacts: ID front/back, selfie, proof-of-address, etc) for a workflow exec...
cancel_transactionCancel an in-flight workflow execution (status 'INITIATED' or 'ACQUIRED').
retry_transactionRetry a failed, expired, or rejected workflow execution.
retrieve_extraction_dataRetrieve raw OCR / extraction capability output for a completed workflow — every extracted field with its s...
retrieve_liveness_resultRetrieve the liveness capability result — passive/active liveness decision plus per-frame anti-spoofing sco...
retrieve_facemapRetrieve the biometric facemap (face template) generated during a workflow.
retrieve_screening_resultRetrieve AML / watchlist screening output for a workflow — sanctions hits, PEP hits, adverse-media hits wit...
retrieve_data_exportRetrieve a full GDPR-compliant data export for an account — every workflow execution, captured image URL, e...
register_callback_urlSet or update the account-level webhook (callback) URL where Jumio POSTs workflow result notifications.
delete_accountDelete a Jumio end-user account and every workflow execution under it (GDPR right-to-erasure).
list_accountsList Jumio end-user accounts under your authorizer / merchant.

Flow

initiate_account              (once per end-user)  -> initiate_transaction     returns redirectUrl  -> user completes capture at redirectUrl  -> get_transaction          poll until status = PROCESSED  -> get_transaction_details  full decision payload  -> retrieve_document_data   extracted ID fields  -> retrieve_similarity_score face-match result  -> update_transaction_status ("APPROVED" / "REJECTED" — feedback loop)

Install

bash
npm install @codespar/mcp-jumio

Environment

bash
JUMIO_API_TOKEN="..."       # API token (required)JUMIO_API_SECRET="..."      # API secret (required, secret)JUMIO_USER_AGENT="AcmeCorp KYX/1.0"   # required by Jumio — identifies the callerJUMIO_REGION="us"           # 'us' | 'eu' | 'sg'. Default 'us'.

Authentication

HTTP Basic, with API token as user and API secret as password:

Authorization: Basic base64(JUMIO_API_TOKEN:JUMIO_API_SECRET)User-Agent:    <JUMIO_USER_AGENT>

Jumio rejects requests without a custom User-Agent header — use something that identifies your merchant + integration (e.g. "AcmeCorp KYX/1.0"). The server wires both headers automatically.

Regional hosts

RegionHost
US (default)https://api.amer-1.jumio.ai
EUhttps://api.emea-1.jumio.ai
SG / APAChttps://api.apac-1.jumio.ai

All endpoints live under /api/v1.

Run

bash
# stdio (default — for Claude Desktop, Cursor, etc)npx @codespar/mcp-jumio
# HTTP (for server-to-server testing)MCP_HTTP=true MCP_PORT=3000 npx @codespar/mcp-jumio

Enterprise

Need governance, budget limits, and audit trails for agent payments? CodeSpar Enterprise adds policy engine, payment routing, and compliance templates on top of these MCP servers.

License

MIT

Source: packages/identity/jumio/README.md at commit d0a519a

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v0.2.2LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts