Mcp Unico

io.github.codespar由 GitHub 账号 codespar 发布v0.2.0-alpha.4更新于 Oct 24, 2026

DEPRECATED: no live endpoint (api.unico.co does not resolve)

已验证STDIO仅桌面安全与监控商业与电商

概览

AI 生成的概览

已弃用的 Unico 身份验证 MCP 服务器（CPF/CNPJ、OCR、生物识别、筛查），其 API 端点已无法解析。

可以做什么
封装 Unico 的巴西身份验证产品：IDCloud（CPF/CNPJ 校验、证件 OCR、真伪检测）、IDPay（人脸比对与活体检测）和 IDCheck（PEP、制裁名单、法院记录、流程状态、Unico Score），另含 webhook 注册与跨租户可携带性检查。它使用 OAuth 2.0 客户端凭证认证，共暴露 18 个工具。该包已弃用，按其自身文档，没有任何工具能连到在线服务。
适用场景
不建议新安装：文档中的 API 与令牌主机无法通过 DNS 解析，且该包在 npm 上已弃用。仅当你已有可用的 Unico 端点并想指向它，或想参考其工具接口时才值得考虑。
运行要求
本地 Node.js 进程，从 npm 包 @codespar/mcp-unico 安装。需要 UNICO_CLIENT_ID 与 UNICO_CLIENT_SECRET，可选 UNICO_ENV、UNICO_BASE_URL、UNICO_AUTH_URL 覆盖。Unico 各产品需单独签约，未启用的产品返回 403。
安装前请注意
会把 OAuth 凭证（UNICO_CLIENT_ID、UNICO_CLIENT_SECRET）发送到所配置的令牌端点，文档要求这些凭证仅限服务端使用。工具处理身份证件、生物识别自拍与个人数据，并包含写入操作，如上传证件、注册 webhook、删除 webhook 订阅。默认端点已失效，任何覆盖都会把凭证指向你自行选择的主机。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Mcp Unico，将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Desktop only，通过 STDIO。 STDIO 服务会启动本地进程，因此需要 SourceWeft 桌面宿主。

其他 MCP 客户端

参照 仓库 中的启动说明。

README

@codespar/mcp-unico

Deprecated: no live endpoint. Measured on 2026-09-27 against two public DNS resolvers (8.8.8.8 and 1.1.1.1): api.unico.co (API) and auth.unico.co (token) do not resolve in DNS. Unico's developer docs now name api.id.unico.app / api.id.uat.unico.app for the API and identity.acesso.io / identityhomolog.acesso.io for OAuth; this server's paths and auth were not written against them and have not been checked. No tool in this server reaches a service. The package is deprecated on npm and stays in this repository for reference only. If you have a working endpoint, point the server at it with UNICO_BASE_URL and UNICO_AUTH_URL. To bring the package back, open an issue in mcp-dev-latam with the provider's documented base URL.

MCP server for Unico — the Brazilian identity verification leader. CPF/CNPJ validation, document OCR, face biometrics, liveness, PEP / watchlist / court-records screening.

First entry in the CodeSpar identity category. Commerce agents onboarding sellers (marketplaces), running high-value transactions, or operating KYC-regulated flows need identity verification — Unico is the BR standard. Paired with @codespar/mcp-onfido for BR-first + global coverage.

Products

Unico sells three separately-contracted products. This server exposes tools for all three; agents should call only what's enabled on your contract (disabled products return 403).

ProductWhat it does
IDCloudCPF/CNPJ validation with Receita Federal, document OCR, authenticity
IDPayFace match + liveness for login and payment authentication
IDCheckPEP, sanctions watchlists, Brazilian court records

Tools (18)

ToolPurpose
validate_cpfIDCloud: validate a Brazilian CPF with Receita Federal.
validate_cnpjIDCloud: validate a Brazilian CNPJ with Receita Federal.
extract_documentIDCloud: OCR + structured field extraction from a Brazilian ID document image.
verify_document_authenticityIDCloud: tamper / forgery detection on a document image.
face_matchIDPay: biometric 1:1 comparison between a live selfie and a document photo.
liveness_checkIDPay: passive liveness detection.
check_pepIDCheck: Politically Exposed Person screening.
check_watchlistsIDCheck: global sanctions / adverse-media screening.
court_records_searchIDCheck: Brazilian judicial-records search.
get_process_statusIDCheck: poll the status of a verification process previously created via the Unico Web/Mobile SDK or API.
batch_get_process_statusIDCheck: batch status lookup.
upload_process_documentIDCheck: upload a captured image to a running verification process.
get_extracted_dataIDCheck: fetch the structured OCR result for a finished process — typed fields (name, document number, issu...
get_unico_scoreIDCheck: Unico Score — Brazil's identity-fraud risk score (0-1000, higher = lower risk) computed from Unico...
connect_portability_checkConnect: cross-tenant portability check.
register_webhookWebhooks: subscribe a callback URL to receive Unico process events (process.created, process.finished, proc...
list_webhooksWebhooks: list all webhook subscriptions registered for this tenant.
delete_webhookWebhooks: remove a webhook subscription.

Install

bash
npm install @codespar/mcp-unico@alpha

Environment

bash
UNICO_CLIENT_ID="..."       # OAuth client_idUNICO_CLIENT_SECRET="..."   # OAuth client_secretUNICO_ENV="sandbox"         # Optional. 'sandbox' | 'production'. Default: sandboxUNICO_BASE_URL="..."        # Optional. Default: https://api.unico.coUNICO_AUTH_URL="..."        # Optional. Default: https://auth.unico.co

Authentication

OAuth 2.0 Client Credentials. The server posts client_id:client_secret as Basic auth to Unico's token endpoint and caches the bearer token in memory until 60 s before expiry. Unico's docs require server-side integration only — never expose these credentials to a browser or mobile client.

Run

bash
# stdio (default)npx @codespar/mcp-unico
# HTTPMCP_HTTP=true MCP_PORT=3000 npx @codespar/mcp-unico

Status

Shipped as 0.1.0-alpha.1. Unico's REST contract lives behind the devcenter.unico.io portal and is gated by merchant account. Tool names and argument shapes are stable, but exact endpoint paths may shift once we validate against live credentials — override UNICO_BASE_URL / UNICO_AUTH_URL if your account is served from a different host. PRs welcome once you've seen the real payloads.

Enterprise

Need governance, budget limits, and audit trails for agent payments? CodeSpar Enterprise adds policy engine, payment routing, and compliance templates on top of these MCP servers.

License

MIT

来源：packages/identity/unico/README.md，提交 d0a519a

工具

0
SourceWeft 尚未在沙箱中启动过该软件包，因此其工具未知。

版本历史

2
  1. v0.2.0-alpha.4最新Sep 27, 2026
  2. v0.2.0-alpha.3Sep 16, 2026

评分

已满足适用检查项的 50%

该评分衡量此收录条目的完整程度，依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价，也不表示服务器安全或当前可用：可连通性是带日期的检查结果，评分也不包含安装量或用户评价。

  • 近 30 天内可连通25 分

    请保持端点能够响应 MCP 握手；SourceWeft 每 30 天探测一次。

  • 已声明认证方式10 分

    请在注册中心条目中声明凭据请求头，或保持端点能够响应探测，以便判定其认证方式。

  • 已列出工具15 分

    请让服务器在无凭据时响应 tools/list，或发布可在沙箱中无凭据启动的软件包。

  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分