Mcp Unico

io.github.codespar由 GitHub 帳號 codespar 發布v0.2.0-alpha.4更新於 Oct 24, 2026

DEPRECATED: no live endpoint (api.unico.co does not resolve)

已驗證STDIO僅桌面安全與監控商業與電商

概覽

AI 產生的概覽

已棄用的 Unico 身分驗證 MCP 伺服器（CPF/CNPJ、OCR、生物辨識、篩查），其 API 端點已無法解析。

可以做什麼
封裝 Unico 的巴西身分驗證產品：IDCloud（CPF/CNPJ 驗證、證件 OCR、真偽偵測）、IDPay（人臉比對與活體偵測）與 IDCheck（PEP、制裁名單、法院紀錄、流程狀態、Unico Score），另有 webhook 註冊與跨租戶可攜性檢查。它使用 OAuth 2.0 用戶端憑證驗證，共提供 18 個工具。此套件已棄用，依其自身文件，沒有任何工具能連上線上服務。
適用情境
不建議新安裝：文件中的 API 與權杖主機無法透過 DNS 解析，且套件在 npm 上已棄用。僅當你已有可用的 Unico 端點並想指向它，或想參考其工具介面時才值得考慮。
執行需求
本機 Node.js 程序，從 npm 套件 @codespar/mcp-unico 安裝。需要 UNICO_CLIENT_ID 與 UNICO_CLIENT_SECRET，可選 UNICO_ENV、UNICO_BASE_URL、UNICO_AUTH_URL 覆寫。Unico 各產品須個別簽約，未啟用的產品會回傳 403。
安裝前請注意
會把 OAuth 憑證（UNICO_CLIENT_ID、UNICO_CLIENT_SECRET）送到所設定的權杖端點，文件要求這些憑證僅限伺服器端使用。工具處理身分證件、生物辨識自拍與個人資料，並包含寫入操作，例如上傳證件、註冊 webhook、刪除 webhook 訂閱。預設端點已失效，任何覆寫都會把憑證指向你自行選擇的主機。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Mcp Unico，將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only，透過 STDIO。 STDIO 服務會啟動本機處理程序，因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

@codespar/mcp-unico

Deprecated: no live endpoint. Measured on 2026-09-27 against two public DNS resolvers (8.8.8.8 and 1.1.1.1): api.unico.co (API) and auth.unico.co (token) do not resolve in DNS. Unico's developer docs now name api.id.unico.app / api.id.uat.unico.app for the API and identity.acesso.io / identityhomolog.acesso.io for OAuth; this server's paths and auth were not written against them and have not been checked. No tool in this server reaches a service. The package is deprecated on npm and stays in this repository for reference only. If you have a working endpoint, point the server at it with UNICO_BASE_URL and UNICO_AUTH_URL. To bring the package back, open an issue in mcp-dev-latam with the provider's documented base URL.

MCP server for Unico — the Brazilian identity verification leader. CPF/CNPJ validation, document OCR, face biometrics, liveness, PEP / watchlist / court-records screening.

First entry in the CodeSpar identity category. Commerce agents onboarding sellers (marketplaces), running high-value transactions, or operating KYC-regulated flows need identity verification — Unico is the BR standard. Paired with @codespar/mcp-onfido for BR-first + global coverage.

Products

Unico sells three separately-contracted products. This server exposes tools for all three; agents should call only what's enabled on your contract (disabled products return 403).

ProductWhat it does
IDCloudCPF/CNPJ validation with Receita Federal, document OCR, authenticity
IDPayFace match + liveness for login and payment authentication
IDCheckPEP, sanctions watchlists, Brazilian court records

Tools (18)

ToolPurpose
validate_cpfIDCloud: validate a Brazilian CPF with Receita Federal.
validate_cnpjIDCloud: validate a Brazilian CNPJ with Receita Federal.
extract_documentIDCloud: OCR + structured field extraction from a Brazilian ID document image.
verify_document_authenticityIDCloud: tamper / forgery detection on a document image.
face_matchIDPay: biometric 1:1 comparison between a live selfie and a document photo.
liveness_checkIDPay: passive liveness detection.
check_pepIDCheck: Politically Exposed Person screening.
check_watchlistsIDCheck: global sanctions / adverse-media screening.
court_records_searchIDCheck: Brazilian judicial-records search.
get_process_statusIDCheck: poll the status of a verification process previously created via the Unico Web/Mobile SDK or API.
batch_get_process_statusIDCheck: batch status lookup.
upload_process_documentIDCheck: upload a captured image to a running verification process.
get_extracted_dataIDCheck: fetch the structured OCR result for a finished process — typed fields (name, document number, issu...
get_unico_scoreIDCheck: Unico Score — Brazil's identity-fraud risk score (0-1000, higher = lower risk) computed from Unico...
connect_portability_checkConnect: cross-tenant portability check.
register_webhookWebhooks: subscribe a callback URL to receive Unico process events (process.created, process.finished, proc...
list_webhooksWebhooks: list all webhook subscriptions registered for this tenant.
delete_webhookWebhooks: remove a webhook subscription.

Install

bash
npm install @codespar/mcp-unico@alpha

Environment

bash
UNICO_CLIENT_ID="..."       # OAuth client_idUNICO_CLIENT_SECRET="..."   # OAuth client_secretUNICO_ENV="sandbox"         # Optional. 'sandbox' | 'production'. Default: sandboxUNICO_BASE_URL="..."        # Optional. Default: https://api.unico.coUNICO_AUTH_URL="..."        # Optional. Default: https://auth.unico.co

Authentication

OAuth 2.0 Client Credentials. The server posts client_id:client_secret as Basic auth to Unico's token endpoint and caches the bearer token in memory until 60 s before expiry. Unico's docs require server-side integration only — never expose these credentials to a browser or mobile client.

Run

bash
# stdio (default)npx @codespar/mcp-unico
# HTTPMCP_HTTP=true MCP_PORT=3000 npx @codespar/mcp-unico

Status

Shipped as 0.1.0-alpha.1. Unico's REST contract lives behind the devcenter.unico.io portal and is gated by merchant account. Tool names and argument shapes are stable, but exact endpoint paths may shift once we validate against live credentials — override UNICO_BASE_URL / UNICO_AUTH_URL if your account is served from a different host. PRs welcome once you've seen the real payloads.

Enterprise

Need governance, budget limits, and audit trails for agent payments? CodeSpar Enterprise adds policy engine, payment routing, and compliance templates on top of these MCP servers.

License

MIT

來源：packages/identity/unico/README.md，提交 d0a519a

工具

0
SourceWeft 尚未在沙箱中啟動過該軟體包，因此其工具未知。

版本歷史

2
  1. v0.2.0-alpha.4最新Sep 27, 2026
  2. v0.2.0-alpha.3Sep 16, 2026

評分

已滿足適用檢查項的 50%

該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分

    請保持端點能夠回應 MCP 握手；SourceWeft 每 30 天探測一次。

  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭，或保持端點能夠回應探測，以便判定其認證方式。

  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list，或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分