Mcp Onfido

io.github.codespar由 GitHub 帳號 codespar 發布v0.2.2更新於 Oct 24, 2026

MCP server for Onfido — global identity verification + KYC: applicants, documents, checks, workflows

已驗證STDIO僅桌面安全與監控商業與電商

概覽

AI 產生的概覽

針對 Onfido 身分驗證與 KYC 的本機 MCP 伺服器，讓助理建立申請人、上傳證件與自拍、發起查核並讀取報告。

可以做什麼
建立、查詢、更新與軟刪除申請人，也就是其他紀錄所依附的人員檔案。上傳身分證件與活體自拍，列出紀錄、查詢中繼資料並下載原始證件檔案。發起查核檢查、列出並恢復檢查，取得單項報告與報告清單。啟動並查詢 Onfido Studio 工作流程執行。簽發短期 SDK 權杖，用於在前端嵌入 Onfido 網頁與行動 SDK。
適用情境
當助理需要端到端驅動 Onfido KYC 流程時使用：建立申請人、提交證件與自拍、發起查核並取得報告細節，特別適合拉丁美洲以外使用者或全球性的受監管開戶情境。
執行需求
透過 npm 套件以 stdio 在本機執行，需要 Node.js。需要在 ONFIDO_API_TOKEN 中提供 Onfido API 權杖。可選設定 ONFIDO_REGION 為 eu、us 或 ca，否則使用預設主機。需要連線至 Onfido API 的網路存取。
安裝前請注意
ONFIDO_API_TOKEN 是可存取身分驗證資料的密鑰，應避免出現在日誌與共用設定中。伺服器處理身分證件、自拍等敏感個人資料，並會傳送給 Onfido。相關工具會建立、更新、恢復與軟刪除紀錄並啟動工作流程，會改變真實查核狀態。部分帳戶可能限制直接上傳活體照片。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Mcp Onfido，將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only，透過 STDIO。 STDIO 服務會啟動本機處理程序，因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

@codespar/mcp-onfido

MCP server for Onfido — global identity verification and KYC.

Onfido is the identity verification layer behind Revolut, N26, Uber, and hundreds of regulated fintechs. One API covers 195+ countries and the full KYC flow: applicant → document → live photo → check (runs verification) → reports.

Second entry in CodeSpar's identity category alongside Unico (BR-first KYC). Pair them: Unico for Brazilian users (CPF + Receita Federal biometric pool), Onfido when the flow touches non-LatAm users.

Tools (20)

ToolPurpose
create_applicantCreate an Onfido applicant — the person record that documents, live photos, and checks attach to.
retrieve_applicantRetrieve an applicant by id.
update_applicantUpdate fields on an existing applicant.
upload_documentUpload an identity document image for an applicant.
retrieve_documentRetrieve document metadata by id.
upload_live_photoUpload a live photo (selfie) for an applicant, used by facial_similarity_photo reports.
retrieve_live_photoRetrieve a live photo record by id.
create_checkRun a verification check on an applicant.
retrieve_checkRetrieve a check by id.
list_checksList all checks for a given applicant.
retrieve_reportRetrieve an individual report by id.
delete_applicantSoft-delete an applicant.
list_documentsList all documents uploaded for a given applicant.
download_documentDownload the raw binary of an uploaded document.
list_live_photosList all live photos (selfies) uploaded for a given applicant.
resume_checkResume a check that was paused (typically awaiting_applicant or paused states).
list_reportsList the reports contained within a given check.
create_workflow_runStart an Onfido Studio workflow run.
retrieve_workflow_runRetrieve a workflow run by id.
generate_sdk_tokenMint a short-lived SDK token for embedding the Onfido Web / iOS / Android SDKs in your frontend.

Flow

create_applicant    -> upload_document  (front, and back if driving_licence / national_identity_card)    -> upload_live_photo    -> create_check      report_names=["document","facial_similarity_photo","watchlist_standard"]    -> retrieve_check    (poll until status = complete)    -> retrieve_report   (for each report id to get the detailed breakdown)

Install

bash
npm install @codespar/mcp-onfido

Environment

bash
ONFIDO_API_TOKEN="..."    # API token (required, secret)ONFIDO_REGION="eu"        # Optional. 'eu' | 'us' | 'ca'. Defaults to api.onfido.com.

Authentication

Onfido uses a non-Bearer header format:

Authorization: Token token=<ONFIDO_API_TOKEN>

The server handles this automatically.

Regional hosts

RegionHost
Defaulthttps://api.onfido.com
EUhttps://api.eu.onfido.com
UShttps://api.us.onfido.com
CAhttps://api.ca.onfido.com

All requests target API version v3.6 (current stable).

Multipart uploads

upload_document and upload_live_photo accept files as base64-encoded strings. Pass the bytes in file, with file_name and content_type:

json
{  "applicant_id": "a1b2c3...",  "type": "passport",  "file": "<base64-encoded bytes>",  "file_name": "passport.jpg",  "content_type": "image/jpeg"}

The server wraps it as multipart/form-data before sending.

Note: Onfido increasingly recommends capturing live photos via their SDK rather than API upload. Direct /live_photos upload may be restricted on some accounts — use the SDK flow when in doubt.

Run

bash
# stdio (default — for Claude Desktop, Cursor, etc)npx @codespar/mcp-onfido
# HTTP (for server-to-server testing)MCP_HTTP=true MCP_PORT=3000 npx @codespar/mcp-onfido

When to pick Onfido vs Unico

SignalPick
User is Brazilian, need CPF validation + biometric match against Receita FederalUnico
User is outside LatAm, or flow is globalOnfido
Regulated fintech needing AML watchlist + PEP screening globallyOnfido
Travel / gig marketplace onboarding across 20+ countriesOnfido

Enterprise

Need governance, budget limits, and audit trails for agent payments? CodeSpar Enterprise adds policy engine, payment routing, and compliance templates on top of these MCP servers.

License

MIT

來源：packages/identity/onfido/README.md，提交 d0a519a

工具

0
SourceWeft 尚未在沙箱中啟動過該軟體包，因此其工具未知。

版本歷史

1
  1. v0.2.2最新Sep 16, 2026

評分

已滿足適用檢查項的 50%

該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分

    請保持端點能夠回應 MCP 握手；SourceWeft 每 30 天探測一次。

  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭，或保持端點能夠回應探測，以便判定其認證方式。

  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list，或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分