Groupdocs Signature Mcp

io.github.groupdocs-signaturePublished by GitHub account groupdocs-signaturev26.9.0Updated Oct 25, 2026

MCP server for GroupDocs.Signature — sign, search and verify document signatures via AI agents.

VerifiedSTDIODesktop onlyFiles & StorageSecurity & Monitoring

Overview

AI-generated overview

Local MCP server that lets an AI assistant sign, search and verify signatures in documents using the GroupDocs.Signature engine.

What you can do
Sign documents with text, QR code, barcode or digital certificate signatures, saving a signed copy alongside the original file. Verify existing signatures of any type and get a validity report. Search for embedded text, barcode, QR code, digital certificate and image signatures, with optional filters and returned images. Read document metadata such as file type, page count, size and per-page dimensions without modifying the file. Check which licensing mode is active and, under metered billing, remaining credit.
When to use it
Useful when an assistant needs to work with signed contracts, invoices, policies or reports: adding approval stamps or QR signatures, auditing who signed a PDF, or checking that signatures still validate. Best suited to desktop setups where documents live in a local folder.
Requirements
Runs locally as a .NET tool, so the .NET 10 SDK is needed for the dnx or global-tool route; a Docker image is offered as a zero-setup alternative. On Linux and macOS, native runs also need libgdiplus and fonts. Set GROUPDOCS_MCP_STORAGE_PATH for input and output files, and optionally GROUPDOCS_MCP_OUTPUT_PATH. A license file via GROUPDOCS_LICENSE_PATH or a metered key pair is needed to lift evaluation limits.
Before you install
Without a license the server runs in evaluation mode: output may carry evaluation notices and a process can open at most 15 documents before failing. Metered mode requires GROUPDOCS_METERED_PUBLIC_KEY and GROUPDOCS_METERED_PRIVATE_KEY, bills per use and sends usage data to GroupDocs servers, so it needs outbound connectivity. The private key is a secret; keep it in the OS environment rather than a committed project config. Signing writes new files into the configured storage or output folder.

Installation

In SourceWeft

  1. Open Groupdocs Signature Mcp in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

GroupDocs.Signature MCP Server

MCP server that exposes GroupDocs.Signature as AI-callable tools for Claude, Cursor, GitHub Copilot, and other MCP agents.

[NuGet] [NuGet downloads] [Docker pulls] [MCP Registry] [Integration tests] [License: MIT]

Installation

[Install in VS Code] [Install in VS Code Insiders] [Add to Cursor] [Codex CLI setup] [Windsurf setup]

One-click installs pre-fill every supported setting: edit the placeholder documents folder after install (output defaults to the same folder); an empty GROUPDOCS_LICENSE_PATH runs in evaluation mode - point it at your license to lift limits.

More clients - ready-made configs for Claude Code, Codex CLI, Visual Studio 2022, Cursor, Windsurf, Cline, and JetBrains Rider live in install/generated/.

Requires .NET 10 SDK.

Run directly with dnx (recommended — no install step):

bash
dnx GroupDocs.Signature.Mcp --yes

Pulls the latest stable release on every invocation. To pin to a specific version (recommended for shared configs and CI), append @<version>:

bash

Or install as a global dotnet tool:

bash
dotnet tool install -g GroupDocs.Signature.Mcpgroupdocs-signature-mcp

Or run via Docker:

bash
docker run --rm -i \  -v $(pwd)/documents:/data \  ghcr.io/groupdocs-signature/signature-net-mcp:latest

Native prerequisites

The underlying GroupDocs engine renders signature glyphs (text, QR codes, barcodes) onto document pages via System.Drawing (GDI+). When you run the server natively (via dnx or the global dotnet tool) on Linux or macOS, install the native libgdiplus library and a fonts package first:

PlatformSetup
WindowsNothing — GDI+ is built into the OS.
Linuxsudo apt-get install -y libgdiplus libfontconfig1 ttf-mscorefonts-installer
macOSbrew install mono-libgdiplus
DockerNothing — the image already bundles libgdiplus, libfontconfig1, and ttf-mscorefonts-installer.

Skipping this on Linux/macOS surfaces as DllNotFoundException: libgdiplus in the tool response. The simplest zero-setup option on Linux/macOS is the Docker image.

Available MCP Tools

ToolDescription
SignSign a document with a text, QR code, barcode, or digital certificate signature; saves the signed file as <name>_signed.<ext>
VerifyVerify signatures in a document (text, QR code, barcode, digital, or all) and return a validity report
SearchTextSignaturesFind embedded text signatures (stamps, labels, native text annotations) with optional substring filter
SearchBarcodesFind barcode signatures (Code39, Code128, EAN, etc.) with optional decoded-text filter and optional inline image
SearchQrCodesFind QR code signatures with optional decoded-text filter and optional inline image
SearchDigitalSignaturesFind digital certificate signatures and return signer, issuer, serial number, validity status
SearchImageSignaturesFind embedded image signatures (logos, stamp images, picture overlays) and return them as base64 PNGs
GetDocumentInfoReturn file type, page count, size, and per-page dimensions as JSON (no modification)

Example prompts

  • "Sign contract.pdf with a QR code containing 'Signed by Alice'"
  • "Verify all signatures in agreement.docx and tell me if any failed"
  • "Search invoice.pdf for QR codes — return the decoded text and the QR images"
  • "Are there any digital signatures in this report.pdf? If so, who signed it?"
  • "Add a text signature 'APPROVED' to the bottom-right of every page of policy.pdf"

Licensing

The MCP server itself is MIT; the underlying GroupDocs.Signature engine requires a license for production use. Without one the server runs in evaluation mode:

  • Operations run with evaluation limits, and output may carry evaluation notices.
  • A single server process can open at most 15 documents; further calls fail with an evaluation-cap error until the server restarts.

There are two ways to license the server.

License file — point GROUPDOCS_LICENSE_PATH at your GroupDocs.Total.lic. Works offline.

Metered (pay-per-use) — set both GROUPDOCS_METERED_PUBLIC_KEY and GROUPDOCS_METERED_PRIVATE_KEY. You are billed for what you actually process, which suits AI agents well because their usage is bursty and hard to predict up front. If both a metered key pair and a license file are configured, metered wins and the file is ignored.

Metered mode needs outbound connectivity. Usage is reported to GroupDocs servers, so air-gapped or firewalled deployments must allow that egress — or use a license file instead.

Call the get_license_status tool at any time to see which mode is active, and — under metered — the consumed quantity and remaining credit.

Keeping the private key out of your config

The metered private key is a secret. MCP client configs are plain files on disk, and a project-scoped .mcp.json is committed by convention, so prefer, in order:

  1. Set the variables in your OS environment and leave them out of the config entirely. An stdio MCP server inherits its client's environment, so this works in every client. On macOS note that an app launched from Finder does not inherit shell exports — use launchctl setenv, or launch the client from a terminal.
  2. Reference them indirectly if your client supports it (Claude Code expands ${VAR}; VS Code uses ${env:VAR} and ${input:...}).
  3. A literal value in a user-scoped config (for example ~/.claude.json) is acceptable for a single developer.
  4. Never commit a literal key in a project-scoped .mcp.json.

For Docker, forward the values without writing them into any file:

bash
docker run --rm -i \  -e GROUPDOCS_METERED_PUBLIC_KEY -e GROUPDOCS_METERED_PRIVATE_KEY \  -v /path/to/documents:/data \  ghcr.io/groupdocs-signature/signature-net-mcp:latest

To lift the limits with a license file:

Configuration

VariableDescriptionDefault
GROUPDOCS_MCP_STORAGE_PATHBase folder for input and output filescurrent directory
GROUPDOCS_MCP_OUTPUT_PATH(Optional) separate folder for output filesGROUPDOCS_MCP_STORAGE_PATH
GROUPDOCS_LICENSE_PATHPath to GroupDocs license file(evaluation mode)
GROUPDOCS_METERED_PUBLIC_KEYMetered public key. Requires the private key too; takes precedence over the license file(unset)
GROUPDOCS_METERED_PRIVATE_KEYMetered private key. Secret - see Licensing(unset)

Usage with Claude Desktop

json
{  "mcpServers": {    "groupdocs-signature": {      "type": "stdio",      "command": "dnx",      "args": ["GroupDocs.Signature.Mcp", "--yes"],      "env": {        "GROUPDOCS_MCP_STORAGE_PATH": "/path/to/documents"      }    }  }}

To pin to a specific version, replace "GroupDocs.Signature.Mcp" with "[email protected]" in args. Pinning is recommended for shared / committed configs to avoid surprise upgrades.

Usage with VS Code / GitHub Copilot

NuGet.org generates a ready-to-use mcp.json snippet on the package page. Copy it directly into your .vscode/mcp.json.

Alternatively, add manually to .vscode/mcp.json:

json
{  "inputs": [    {      "type": "promptString",      "id": "storage_path",      "description": "Base folder for input and output files.",      "password": false    }  ],  "servers": {    "groupdocs-signature": {      "type": "stdio",      "command": "dnx",      "args": ["GroupDocs.Signature.Mcp", "--yes"],      "env": {        "GROUPDOCS_MCP_STORAGE_PATH": "${input:storage_path}"      }    }  }}

Same pinning rule as above — swap "GroupDocs.Signature.Mcp" for "[email protected]" to lock to a specific release.

Usage with Docker Compose

bash
cd dockerdocker compose up

Edit docker/docker-compose.yml to point volumes at your local documents folder.

License

MIT — see LICENSE

Source: README.md at commit a236bc4

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v26.9.0LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts