Mcp Jumio

io.github.codespar由 GitHub 帳號 codespar 發布v0.2.2更新於 Oct 24, 2026

MCP server for Jumio — global identity verification + KYX: documents, liveness, AML screening

已驗證STDIO僅桌面安全與監控商業與電商

概覽

AI 產生的概覽

Jumio 身分驗證 MCP 伺服器：建立終端使用者帳戶、啟動 KYC 流程，並取得證件、活體偵測、人臉比對與 AML 篩查結果。

可以做什麼
  • 建立、列出與刪除 Jumio 終端使用者帳戶，並註冊帳戶層級的回呼網址
  • 啟動、列出、取消、重試與刪除 KYC 流程執行，並更新商戶端狀態
  • 讀取流程摘要與完整結果內容，包含原始 OCR 擷取結果
  • 取得擷取的憑證素材、證件欄位、人臉相似度、活體偵測結果與生物特徵 facemap
  • 取得 AML 與監控名單篩查結果，以及帳戶的完整 GDPR 資料匯出
適用情境
適用於受監管的開戶與 KYC/KYX 流程，讓助理驅動 Jumio 查核：啟動驗證工作階段、輪詢結果、讀取證件擷取欄位與篩查命中，並處理資料刪除請求。適合銀行、金融科技公司與高價值開戶情境，尤其是已在或打算採用 Jumio 的機構。
執行需求
透過 npm 套件以 stdio 在本機執行（npx @codespar/mcp-jumio），需要 Node.js。需要 Jumio API token 與 API secret（HTTP Basic 驗證）、商戶 User-Agent 字串，以及可選區域（us、eu 或 sg，預設 us）。需要能連線至 Jumio 各區域 API 主機的網路。
安裝前請注意
需要 Jumio API token 與 secret，可存取身分驗證資料，請勿放入共用設定。涉及敏感個人資料：證件、自拍、生物特徵 facemap 及 AML/PEP 篩查結果。多個工具會寫入或銷毀資料，包括刪除帳戶與流程（GDPR 刪除權）、取消或重試流程、變更狀態。驗證工作階段可能產生 Jumio 費用。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Mcp Jumio，將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only，透過 STDIO。 STDIO 服務會啟動本機處理程序，因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

@codespar/mcp-jumio

MCP server for Jumio — global enterprise identity verification (KYX / Netverify).

Jumio is the identity layer banks and large regulated fintechs reach for when Onfido isn't deep enough on fraud-pattern detection. Longer operator history, richer risk intelligence, purpose-built for regulated commerce at scale.

Third entry in CodeSpar's identity category. Completes the tier:

ServerStrength
UnicoBR leader — local KYC, PEP, court records, Receita Federal biometric pool
OnfidoGlobal challenger — clean developer API, 195+ countries, strong SDK story
Jumio (this)Global enterprise — deeper fraud-pattern detection, longer operator history, bank-grade

When to pick Jumio

  • Regulated bank or tier-1 fintech where auditors expect a legacy-credible vendor
  • High-value onboarding where fraud-loss >> verification cost
  • Deep fraud intelligence matters (velocity checks, device/session signals, longitudinal identity graph)
  • You already run Jumio elsewhere in the org and want a single KYC stack

Pair with Unico for Brazil-resident users (CPF + Receita biometric match); use Jumio for the rest of the world.

Tools (20)

ToolPurpose
initiate_accountCreate a persistent Jumio end-user account.
initiate_transactionStart a new KYC workflow execution on an existing account.
get_transactionRetrieve a workflow execution summary — status ('INITIATED' | 'PROCESSED' | 'SESSION_EXPIRED' | 'TOKEN_EXPI...
list_transactionsList workflow executions for an account.
get_transaction_detailsRetrieve the full result payload for a workflow execution — all capability outputs (extraction, liveness, s...
retrieve_document_dataRetrieve extracted fields from the ID document (name, DOB, document number, expiry, issuing country, MRZ, e...
retrieve_similarity_scoreRetrieve the facial similarity result (selfie vs document photo).
delete_transactionDelete a workflow execution (GDPR right-to-erasure).
update_transaction_statusUpdate the merchant-side status of a workflow execution (PATCH).
retrieve_credentialsList the credentials (captured artefacts: ID front/back, selfie, proof-of-address, etc) for a workflow exec...
cancel_transactionCancel an in-flight workflow execution (status 'INITIATED' or 'ACQUIRED').
retry_transactionRetry a failed, expired, or rejected workflow execution.
retrieve_extraction_dataRetrieve raw OCR / extraction capability output for a completed workflow — every extracted field with its s...
retrieve_liveness_resultRetrieve the liveness capability result — passive/active liveness decision plus per-frame anti-spoofing sco...
retrieve_facemapRetrieve the biometric facemap (face template) generated during a workflow.
retrieve_screening_resultRetrieve AML / watchlist screening output for a workflow — sanctions hits, PEP hits, adverse-media hits wit...
retrieve_data_exportRetrieve a full GDPR-compliant data export for an account — every workflow execution, captured image URL, e...
register_callback_urlSet or update the account-level webhook (callback) URL where Jumio POSTs workflow result notifications.
delete_accountDelete a Jumio end-user account and every workflow execution under it (GDPR right-to-erasure).
list_accountsList Jumio end-user accounts under your authorizer / merchant.

Flow

initiate_account              (once per end-user)  -> initiate_transaction     returns redirectUrl  -> user completes capture at redirectUrl  -> get_transaction          poll until status = PROCESSED  -> get_transaction_details  full decision payload  -> retrieve_document_data   extracted ID fields  -> retrieve_similarity_score face-match result  -> update_transaction_status ("APPROVED" / "REJECTED" — feedback loop)

Install

bash
npm install @codespar/mcp-jumio

Environment

bash
JUMIO_API_TOKEN="..."       # API token (required)JUMIO_API_SECRET="..."      # API secret (required, secret)JUMIO_USER_AGENT="AcmeCorp KYX/1.0"   # required by Jumio — identifies the callerJUMIO_REGION="us"           # 'us' | 'eu' | 'sg'. Default 'us'.

Authentication

HTTP Basic, with API token as user and API secret as password:

Authorization: Basic base64(JUMIO_API_TOKEN:JUMIO_API_SECRET)User-Agent:    <JUMIO_USER_AGENT>

Jumio rejects requests without a custom User-Agent header — use something that identifies your merchant + integration (e.g. "AcmeCorp KYX/1.0"). The server wires both headers automatically.

Regional hosts

RegionHost
US (default)https://api.amer-1.jumio.ai
EUhttps://api.emea-1.jumio.ai
SG / APAChttps://api.apac-1.jumio.ai

All endpoints live under /api/v1.

Run

bash
# stdio (default — for Claude Desktop, Cursor, etc)npx @codespar/mcp-jumio
# HTTP (for server-to-server testing)MCP_HTTP=true MCP_PORT=3000 npx @codespar/mcp-jumio

Enterprise

Need governance, budget limits, and audit trails for agent payments? CodeSpar Enterprise adds policy engine, payment routing, and compliance templates on top of these MCP servers.

License

MIT

來源：packages/identity/jumio/README.md，提交 d0a519a

工具

0
SourceWeft 尚未在沙箱中啟動過該軟體包，因此其工具未知。

版本歷史

1
  1. v0.2.2最新Sep 16, 2026

評分

已滿足適用檢查項的 50%

該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分

    請保持端點能夠回應 MCP 握手；SourceWeft 每 30 天探測一次。

  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭，或保持端點能夠回應探測，以便判定其認證方式。

  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list，或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分