Mcp Onfido

io.github.codespar由 GitHub 账号 codespar 发布v0.2.2更新于 Oct 24, 2026

MCP server for Onfido — global identity verification + KYC: applicants, documents, checks, workflows

已验证STDIO仅桌面安全与监控商业与电商

概览

AI 生成的概览

面向 Onfido 身份验证与 KYC 的本地 MCP 服务器，让助手创建申请人、上传证件与自拍、发起核验并读取报告。

可以做什么
创建、查询、更新和软删除申请人，即其他记录所依附的人员档案。上传身份证件与活体自拍，列出记录、查询元数据并下载原始证件文件。发起核验检查、列出并恢复检查，获取单项报告与报告列表。启动并查询 Onfido Studio 工作流运行。签发短期 SDK 令牌，用于在前端嵌入 Onfido 网页与移动 SDK。
适用场景
当助手需要端到端驱动 Onfido KYC 流程时使用：录入申请人、提交证件与自拍、发起核验并获取报告详情，尤其适合拉美以外用户或全球范围的受监管开户场景。
运行要求
通过 npm 包以 stdio 在本地运行，需要 Node.js。需要在 ONFIDO_API_TOKEN 中提供 Onfido API 令牌。可选设置 ONFIDO_REGION 为 eu、us 或 ca，否则使用默认主机。需要访问 Onfido API 的网络连接。
安装前请注意
ONFIDO_API_TOKEN 是可访问身份验证数据的密钥，应避免出现在日志和共享配置中。服务器处理身份证件、自拍等敏感个人数据，并会发送给 Onfido。相关工具会创建、更新、恢复和软删除记录并启动工作流，会改变真实核验状态。部分账户可能限制直接上传活体照片。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Mcp Onfido，将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Desktop only，通过 STDIO。 STDIO 服务会启动本地进程，因此需要 SourceWeft 桌面宿主。

其他 MCP 客户端

参照 仓库 中的启动说明。

README

@codespar/mcp-onfido

MCP server for Onfido — global identity verification and KYC.

Onfido is the identity verification layer behind Revolut, N26, Uber, and hundreds of regulated fintechs. One API covers 195+ countries and the full KYC flow: applicant → document → live photo → check (runs verification) → reports.

Second entry in CodeSpar's identity category alongside Unico (BR-first KYC). Pair them: Unico for Brazilian users (CPF + Receita Federal biometric pool), Onfido when the flow touches non-LatAm users.

Tools (20)

ToolPurpose
create_applicantCreate an Onfido applicant — the person record that documents, live photos, and checks attach to.
retrieve_applicantRetrieve an applicant by id.
update_applicantUpdate fields on an existing applicant.
upload_documentUpload an identity document image for an applicant.
retrieve_documentRetrieve document metadata by id.
upload_live_photoUpload a live photo (selfie) for an applicant, used by facial_similarity_photo reports.
retrieve_live_photoRetrieve a live photo record by id.
create_checkRun a verification check on an applicant.
retrieve_checkRetrieve a check by id.
list_checksList all checks for a given applicant.
retrieve_reportRetrieve an individual report by id.
delete_applicantSoft-delete an applicant.
list_documentsList all documents uploaded for a given applicant.
download_documentDownload the raw binary of an uploaded document.
list_live_photosList all live photos (selfies) uploaded for a given applicant.
resume_checkResume a check that was paused (typically awaiting_applicant or paused states).
list_reportsList the reports contained within a given check.
create_workflow_runStart an Onfido Studio workflow run.
retrieve_workflow_runRetrieve a workflow run by id.
generate_sdk_tokenMint a short-lived SDK token for embedding the Onfido Web / iOS / Android SDKs in your frontend.

Flow

create_applicant    -> upload_document  (front, and back if driving_licence / national_identity_card)    -> upload_live_photo    -> create_check      report_names=["document","facial_similarity_photo","watchlist_standard"]    -> retrieve_check    (poll until status = complete)    -> retrieve_report   (for each report id to get the detailed breakdown)

Install

bash
npm install @codespar/mcp-onfido

Environment

bash
ONFIDO_API_TOKEN="..."    # API token (required, secret)ONFIDO_REGION="eu"        # Optional. 'eu' | 'us' | 'ca'. Defaults to api.onfido.com.

Authentication

Onfido uses a non-Bearer header format:

Authorization: Token token=<ONFIDO_API_TOKEN>

The server handles this automatically.

Regional hosts

RegionHost
Defaulthttps://api.onfido.com
EUhttps://api.eu.onfido.com
UShttps://api.us.onfido.com
CAhttps://api.ca.onfido.com

All requests target API version v3.6 (current stable).

Multipart uploads

upload_document and upload_live_photo accept files as base64-encoded strings. Pass the bytes in file, with file_name and content_type:

json
{  "applicant_id": "a1b2c3...",  "type": "passport",  "file": "<base64-encoded bytes>",  "file_name": "passport.jpg",  "content_type": "image/jpeg"}

The server wraps it as multipart/form-data before sending.

Note: Onfido increasingly recommends capturing live photos via their SDK rather than API upload. Direct /live_photos upload may be restricted on some accounts — use the SDK flow when in doubt.

Run

bash
# stdio (default — for Claude Desktop, Cursor, etc)npx @codespar/mcp-onfido
# HTTP (for server-to-server testing)MCP_HTTP=true MCP_PORT=3000 npx @codespar/mcp-onfido

When to pick Onfido vs Unico

SignalPick
User is Brazilian, need CPF validation + biometric match against Receita FederalUnico
User is outside LatAm, or flow is globalOnfido
Regulated fintech needing AML watchlist + PEP screening globallyOnfido
Travel / gig marketplace onboarding across 20+ countriesOnfido

Enterprise

Need governance, budget limits, and audit trails for agent payments? CodeSpar Enterprise adds policy engine, payment routing, and compliance templates on top of these MCP servers.

License

MIT

来源：packages/identity/onfido/README.md，提交 d0a519a

工具

0
SourceWeft 尚未在沙箱中启动过该软件包，因此其工具未知。

版本历史

1
  1. v0.2.2最新Sep 16, 2026

评分

已满足适用检查项的 50%

该评分衡量此收录条目的完整程度，依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价，也不表示服务器安全或当前可用：可连通性是带日期的检查结果，评分也不包含安装量或用户评价。

  • 近 30 天内可连通25 分

    请保持端点能够响应 MCP 握手；SourceWeft 每 30 天探测一次。

  • 已声明认证方式10 分

    请在注册中心条目中声明凭据请求头，或保持端点能够响应探测，以便判定其认证方式。

  • 已列出工具15 分

    请让服务器在无凭据时响应 tools/list，或发布可在沙箱中无凭据启动的软件包。

  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分