Proof CLI (unofficial)

io.github.tsarlewey由 GitHub 帳號 tsarlewey 發布v0.4.0更新於 Oct 25, 2026

Notarize, e-sign, and verify identity with the Proof API. Unofficial; not affiliated with Proof.

發布方自己的服務：Proof Holdings

已驗證STDIO僅桌面開發者工具安全與監控商業與電商

概覽

AI 產生的概覽

非官方的 Proof CLI MCP 伺服器，讓助理透過 stdio 呼叫 Proof 的公證、電子簽章、身分驗證、房地產與 SCIM API。

可以做什麼
  • 管理商務交易與文件：列出、建立、啟用、局部修改、取消或刪除交易，新增或移除文件，檢視範本與成本中心
  • 處理公證人、Webhook、推薦活動與整合，包括建立和刪除公證人、註冊 Webhook 位址
  • 操作房地產與房貸交易、文件、範本，並驗證地址
  • 管理 SCIM 使用者與結構描述，讀取組織的安全事件記錄
  • 簽發、使用與撤銷憑證，並產生可驗證憑證的授權連結
適用情境
適合需要讓助理從命令列驅動 Proof 的公證、電子簽章或身分流程的情境，例如建立簽署交易、管理公證人或 Webhook、管理 SCIM 使用者。此工具處於 alpha 階段且非官方，建議先在沙箱環境評估再用於正式環境。
執行需求
以本機程序執行：需要把 proof 執行檔放在 PATH 中，或改用已發布的容器映像。需要開通 API 用量的 Proof 帳號與 API 金鑰，透過 PROOF_API_KEY 或 CLI 設定提供；也支援 OAuth 用戶端憑證。可用 PROOF_API_ENDPOINT 指向沙箱位址。
安裝前請注意
API 金鑰屬於計費帳號憑證，會存放在 CLI 設定目錄中，應視為機密。許多工具具破壞性：會建立、啟用、局部修改、取消或刪除交易、文件、公證人、Webhook 與 SCIM 使用者，憑證也可被簽發或撤銷。Proof 帳號需付費 API 方案，操作可能產生費用。專案為 alpha 版本，與 Proof 官方無關。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Proof CLI (unofficial)，將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only，透過 STDIO。 STDIO 服務會啟動本機處理程序，因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

Proof CLI

An unofficial command-line interface for interacting with the Proof API. The Proof CLI provides access to Business, Real Estate, and SCIM APIs through a unified interface.

This is an alpha product and should be treated as such. It is not an official product from Proof.

Installation

Prebuilt binary

bash
# macOS / Linux: downloads the latest release for your OS and CPU into the current directorycurl -sL "https://github.com/tsarlewey/proof-cli/releases/latest/download/proof_$(uname -s | tr A-Z a-z)_$(uname -m | sed 's/x86_64/amd64/;s/aarch64/arm64/').tar.gz" | tar xz proof./proof version

Windows zips and checksums are on the Releases page.

Install via Go

bash
go install github.com/tsarlewey/proof-cli@latest

From Source

bash
git clone https://github.com/tsarlewey/proof-cli.gitcd proof-cligo build -o proof./proof --help

Use with AI agents

Claude Code plugin (bundles a usage skill and the MCP server; needs proof on your PATH):

/plugin marketplace add tsarlewey/proof-cli/plugin install proof@proof

MCP server for any MCP client. proof mcp exposes every API command as a tool over stdio, annotated read-only or destructive:

bash
claude mcp add proof -- proof mcp               # Claude Codeclaude mcp add proof -- proof mcp --read-only   # only tools that don't change anything

For other clients, run the command proof mcp. It reads credentials the same way as the CLI (PROOF_API_KEY or proof config).

Docker, with nothing installed locally. The image runs proof mcp and is listed in the MCP Registry as io.github.tsarlewey/proof-cli:

bash
docker run -i --rm -e PROOF_API_KEY -e PROOF_API_ENDPOINT=https://api.fairfax.proof.com ghcr.io/tsarlewey/proof-cli

Arguments after the image name go to proof mcp, e.g. --read-only. PROOF_API_ENDPOINT overrides the configured endpoint in any mode; leave it unset for production.

Agents using the shell can follow skills/proof/SKILL.md. Output is JSON (--pretty=false for compact), and API errors exit 1 with the response body on stderr. Point at the sandbox while testing: proof config set-endpoint https://api.fairfax.proof.com.

Getting Started

1. Configuration

Before using the CLI, you need to configure your API key:

bash
# Set your API keyproof config set-api-key YOUR_API_KEY
# Or set via environment variableexport PROOF_API_KEY=YOUR_API_KEY
# Verify your configurationproof config get

In order to get an API Key, you'll need an account with API Usage. You can get that here - https://www.proof.com/pricing#business

After your account is created and upgrade use https://dev.proof.com/docs/api-keys to setup your key.

OAuth 2.0 Authentication

The CLI supports OAuth 2.0 client credentials flow for secure API authentication:

bash
# Configure OAuth credentialsproof config set-oauth <client-id> <client-secret> [--scope="read write"]
# Test OAuth authenticationproof config test-oauth
# Disable OAuth (fallback to API key)proof config disable-oauth

OAuth tokens are automatically refreshed before expiration (5-minute buffer).

2. Basic Usage

The CLI is organized into three main API groups:

  • business - Business API operations (transactions, documents, webhooks, notaries, etc.)
  • real-estate - Real Estate/Mortgage API operations
  • scim - SCIM API operations for user management
bash
# Get help for any commandproof --helpproof business --helpproof real-estate --helpproof scim --help

API Reference

Business API

The Business API provides comprehensive transaction and document management capabilities.

Transactions
bash
# List all transactionsproof business transactions list
# List with filteringproof business transactions list --limit 10 --status completed
# Get a specific transactionproof business transactions get <transaction-id>
# Create a new transactionproof business transactions create \  --email "[email protected]" \  --first-name "John" \  --last-name "Doe" \  --document "/path/to/document.pdf" \  --name "Contract Signing" \  --draft
# Multiple documents, scheduled notary meeting, and a redirectproof business transactions create \  --email "[email protected]" \  --document "/path/to/deed.pdf" \  --document "/path/to/rider.pdf" \  --notary-meeting-time "2026-09-02T15:30:00Z" \  --allowed-notary-states "CA,NY" \  --notary-note "Verify the property address" \  --payer sender \  --idv-use-case ACCOUNT_RECOVERY \  --recipient-details-config "name=locked" \  --redirect-url "https://example.com/done"
# Multiple signers, from a JSON file holding an array of signer objects# (max 10, each needs at least an email). --email stays the primary signer.proof business transactions create \  --email "[email protected]" \  --document "/path/to/document.pdf" \  --signers-file ./signers.json
# Replace a draft transaction (PUT) -- anything you omit reverts to defaultproof business transactions update <transaction-id> \  --name "Contract Signing (revised)" \  --expiry "2026-09-08T10:00:00Z"
# Change individual fields and leave the rest alone (PATCH)proof business transactions patch <transaction-id> --expiry "2026-09-15T10:00:00Z"
# Reorder documents already attached to a draftproof business transactions patch <transaction-id> \  --document-order "doc_abc123=1" \  --document-order "doc_def456=2"
# See the full parameter setproof business transactions create --help
# Activate a draft transactionproof business transactions activate <transaction-id>
# Delete a transactionproof business transactions delete <transaction-id>
# Cancel a transactionproof business transactions cancel <transaction-id>
Documents
bash
# Add a document to a transactionproof business documents add <transaction-id> /path/to/document.pdf \  --filename "Contract.pdf" \  --requirement "esign" \  --esign-required
# Apply a specific template instead of automatic matchingproof business documents add <transaction-id> /path/to/document.pdf --template-id <template-id>
# Get a documentproof business documents get <transaction-id> <document-id>
# Get document as hosted URL (after completion)proof business documents get <transaction-id> <document-id> --encoding uri
# Delete a documentproof business documents delete <document-id>
Webhooks
bash
# List webhooks (v2)proof business webhooks list
# Get webhook detailsproof business webhooks get-v2 <webhook-id>
# Create a webhookproof business webhooks create \  --url "https://example.com/webhook" \  --name "Transaction Updates" \  --events "transaction.created,transaction.completed"
# Update a webhookproof business webhooks update <webhook-id> \  --url "https://new-url.com/webhook"
# Delete a webhookproof business webhooks delete <webhook-id>
# Get webhook eventsproof business webhooks events <webhook-id>
# List available event subscriptionsproof business webhooks subscriptions
Notaries
bash
# List notariesproof business notaries list
# List notaries by stateproof business notaries list --state CA
# Get notary detailsproof business notaries get <notary-id>
# Create a notaryproof business notaries create \  --email "[email protected]" \  --first-name "Jane" \  --last-name "Smith" \  --state "CA"
# Delete a notaryproof business notaries delete <notary-id>
Templates
bash
# List document templatesproof business templates list
# List with paginationproof business templates list --limit 50 --offset 100
Cost Centers
bash
# List cost centers, then attribute a transaction with --cost-center-idproof business cost-centers listproof business transactions create --email [email protected] --cost-center-id <id>
Referrals
bash
# Create a referral campaignproof business referrals create \  --name "Partner Referrals" \  --cover-payment \  --redirect-url "https://example.com/signup"
# Generate a referral codeproof business referrals generate-code <campaign-id> \  --expires-at "2024-12-31T23:59:59Z"
Integrations
bash
# Create an Adobe integrationproof business integrations create \  --name "ADOBE" \  --org-id "your-org-id" \  --account-id "adobe-account-id" \  --environment "production"
# Create a DocuTech integrationproof business integrations create \  --name "DOCUTECH" \  --org-id "your-org-id"

Real Estate API

The Real Estate API specializes in mortgage and real estate transaction management.

Transactions
bash
# List real estate transactionsproof real-estate transactions list
# List with filteringproof real-estate transactions list --status "in_progress" --limit 20
# Get transaction detailsproof real-estate transactions get <transaction-id>
# Create a transactionproof real-estate transactions create \  --type "purchase" \  --file-number "RE-2024-001" \  --loan-number "LN-2024-001"
# Place an order for a transactionproof real-estate transactions place-order <transaction-id>
# Cancel a transactionproof real-estate transactions cancel <transaction-id>
Templates
bash
# List templatesproof real-estate templates list
Cost Centers
bash
proof real-estate cost-centers listproof real-estate transactions create --cost-center-id <id>
Documents
bash
# List documentsproof real-estate documents list <transaction-id>
# Get document detailsproof real-estate documents get <document-id>
# Upload a documentproof real-estate documents upload <transaction-id> /path/to/document.pdf \  --type "purchase_agreement" \  --external-id "PA-001"
Webhooks
bash
# List real estate webhooksproof real-estate webhooks list
# Create a webhookproof real-estate webhooks create "https://example.com/re-webhook" \  --subscriptions "transaction.created,document.uploaded"
Address Verification
bash
# Verify an addressproof real-estate verify-address \  --line1 "123 Main St" \  --city "San Francisco" \  --state "CA" \  --postal-code "94102"

SCIM API

The SCIM API provides standardized user management capabilities.

Users
bash
# List users in an organizationproof scim users list <organization-id>
# List with paginationproof scim users list <organization-id> --start-index 1 --count 25
# Get user detailsproof scim users get <organization-id> <user-id>
# Create a userproof scim users create <organization-id> \  --username "[email protected]" \  --given-name "John" \  --family-name "Doe" \  --email "[email protected]" \  --active
# Update a user (full replacement)proof scim users update <organization-id> <user-id> \  --username "[email protected]" \  --given-name "Jane"
# Patch a user (partial update); --operation is repeatable, format op:path[:value]proof scim users patch <organization-id> <user-id> \  --operation 'replace:active:false'
# Delete a userproof scim users delete <organization-id> <user-id>
Schemas
bash
# Get user schemaproof scim schemas user <organization-id>
# Get service provider configurationproof scim schemas service-provider-config <organization-id>
# Get resource typesproof scim schemas resource-types <organization-id>

Security Events API

Read the organization's OCSF-formatted security event log.

bash
# List recent security eventsproof logs list
# Page through resultsproof logs list --limit 100proof logs list --cursor <next_cursor-from-previous-response>
# Filterproof logs list --since 2026-01-01T00:00:00Zproof logs list --class-uid 1001 --severity-id 3

Certificates API

Issue, use, and revoke organization certificates.

bash
# List certificatesproof certificates list --limit 25 --offset 0
# Get one certificateproof certificates get <certificate-id>
# Issue a certificate with a Proof-generated keyproof certificates create \  --common-name "Acme Signing Authority" \  --profile organization_authenticity_al2
# Issue a certificate from your own CSRproof certificates create-from-csr --csr "$(cat request.pem)"
# Sign base64-encoded SHA256 digests (--digest is repeatable, max 25)proof certificates sign <certificate-id> --digest "BOGQnhPlcpXqM7fAH6tvFPI4QOXsIyXMiBKtFpblmjU="
# Revokeproof certificates revoke <certificate-id> --reason "key compromise"

Verifiable Credentials API

Requests a Verifiable Credential presentation from an End-User. This endpoint is a browser redirect, not a server-to-server call — the CLI prints the URL for you to send the End-User to, and does not follow it.

bash
# Fragment mode: the vp_token comes back on your redirect URIproof credentials authorize-url \  --client-id <oauth-client-id> \  --response-mode fragment \  --redirect-uri https://app.example.com/callback \  --scope "openid" \  --login-hint [email protected] \  --nonce "$(openssl rand -hex 16)" \  --state "$(openssl rand -hex 8)"
# direct_post mode: Proof POSTs the vp_token to your response URIproof credentials authorize-url \  --client-id <oauth-client-id> \  --response-mode direct_post \  --response-uri https://app.example.com/vp \  --scope "openid" \  --login-hint [email protected] \  --nonce "$(openssl rand -hex 16)"

--redirect-uri is required in fragment mode and rejected in direct_post mode; --response-uri is the reverse. Both URIs must be registered on your OAuth Application.

Examples

The CLI includes example commands that demonstrate common workflows:

bash
# List all available examplesproof example --help
# Business API examplesproof example business-transactions     # List business transactionsproof example business-notary          # Create a notary
# Real Estate API examplesproof example real-estate-transactions  # List real estate transactionsproof example verify-address           # Verify an address
# SCIM API examplesproof example scim-users <org-id>       # List SCIM usersproof example scim-schema <org-id>      # Get SCIM user schema

Configuration

The CLI stores configuration in ~/.proof-cli/:

  • config.json - Main configuration file
  • api_key - API key (permissions 0600)

Configuration options:

  • endpoint - API endpoint URL
  • timeout - Request timeout in seconds
bash
# View current configurationproof config get
# Set API endpointproof config set-endpoint "https://api.proof.com"
# Set request timeoutproof config set-timeout 30
# Set API keyproof config set-api-key "your-api-key"

Global Flags

All commands support these global flags:

  • --pretty - Pretty print JSON output (default: true)
  • --verbose - Show additional debug output
  • --help - Show help information

Environment Variables

  • PROOF_API_KEY - API key for authentication
  • PROOF_ENDPOINT - Override default API endpoint
  • PROOF_TIMEOUT - Request timeout in seconds

Error Handling

The CLI provides detailed error messages and uses standard exit codes:

  • 0 - Success
  • 1 - General error (API error, invalid arguments, etc.)

Development

Building from Source

bash
git clone https://github.com/tsarlewey/proof-cli.gitcd proof-cligo mod downloadgo build -o proof

Makefile Targets

The project provides a Makefile for common development tasks:

bash
make build          # Build the ./proof binarymake install        # Install the CLI via go installmake fmt            # Run go fmtmake vet            # Run go vetmake test           # Run all testsmake test-race      # Run all tests with -racemake coverage       # Run tests with coverage profilemake check          # fmt + vet + build + test-racemake clean          # Remove the built binarymake smoke          # Run shell smoke tests against live APImake smoke-go       # Run Go smoke tests (build-tag smoke)make smoke-write    # Run shell write smoke tests (PROOF_SMOKE_WRITE=1)make smoke-write-go # Run Go write smoke tests (build-tag smoke_write)

SDK Source

The generated Go SDK clients now live in their own repo: github.com/tsarlewey/proof-sdk-go. This CLI imports them as a regular Go module dependency. If you need to regenerate the clients after an upstream OpenAPI spec change, work inside the SDK repo — the generation toolchain (OpenAPI specs, oapi-codegen configs, preprocessing scripts, make regenerate) moved there.

To pick up a new SDK release in this CLI:

bash
go get github.com/tsarlewey/proof-sdk-go@<new-version>go mod tidymake check

Adding or Updating Commands

CLI commands live in cmd/ (one file per API surface) and are built with Cobra. Each command's Run closure calls a method on the generated SDK client via the factory helpers in cmd/root.go (getBusinessClient, getRealEstateClient, getSCIMClient). The factories wrap the SDK client with common.AuthenticatedDoer (from the SDK repo), which injects OAuth bearer tokens or the API key on every request.

Shared helpers in cmd/root.go:

  • initializeForAPICall — lazy client setup, used as PreRun on every API-calling command.
  • PrintResponse / PrintVerbose — response output with optional pretty-printing and colorization.
  • parseDateFlag — parses optional date-flag values, exits with a clear message on parse failure.
  • isSuccess — 2xx status-code check.
  • checkAPIStatus — after every SDK call, exits 1 with the body on stderr if the API returned a non-2xx response.

Errors from SDK calls are funneled through utils.HandleError(err, "action phrase") for transport errors and checkAPIStatus(resp.StatusCode(), resp.Body, "action phrase") for application-level HTTP errors. Both exit 1.

Support

For issues and feature requests, please visit the GitHub repository.

License

來源：README.md，提交 8b5a939

工具

0
SourceWeft 曾在隔離沙箱中以無憑證方式啟動該軟體包一次，以列出其工具，但未能完成：該軟體包類型無法在沙箱中執行。

版本歷史

2
  1. v0.4.0最新Oct 25, 2026
  2. v0.3.1Sep 30, 2026

評分

已滿足適用檢查項的 40%

該評分衡量此收錄條目的完整程度，依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價，也不表示伺服器安全或目前可用：可連通性是帶日期的檢查結果，評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分

    請保持端點能夠回應 MCP 握手；SourceWeft 每 30 天探測一次。

  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭，或保持端點能夠回應探測，以便判定其認證方式。

  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list，或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分

    請在儲存庫或註冊中心條目中宣告授權條款。

其他 Proof 整合

Proof Holdings

holdings.proof官方發布者

Proof Holdings MCP 伺服器讓助理發起並管理身分與控制權驗證（手機、電子郵件、網域、錢包），管理證明權杖與委派，並進行驗證。

Streamable HTTP可網頁執行
開發者工具179 個工具Nov 5, 2026

Proof of Work

由 GitHub 帳號 kivtxs 發布

讓助理閱讀 Proof of Work 的規則、檢查本機是否已有帳號，並建立代理帳號以發佈、投票與支持附證據的主張。

STDIO僅桌面
AI 與機器學習3 個工具Nov 6, 2026

QuietProof

由 GitHub 帳號 frankjie3-create 發布

QuietProof 提供免費探索工具，用來瀏覽一組確定性、唯讀的稽核服務，這些稽核按次以 Base 上的 USDC 透過 x402 付費。

Streamable HTTP可網頁執行
金融4 個工具Nov 1, 2026

SCRIPTMASTERLABS — 402Proof

com.scriptmasterlabs

遠端 MCP 端點，用於在 XRPL 上以 RLUSD 建立、驗證與評分發票，並對結算進行自證。

Streamable HTTP可網頁執行
商業與電商尚未收錄Nov 5, 2026

ZKStamp Proof-100

由 GitHub 帳號 ZKStamp 發布

遠端 MCP 伺服器，把 SHA-256 指紋以遮蔽交易寫入 BitcoinZ 區塊鏈，產生附日期的存在性證明時間戳。

Streamable HTTP可網頁執行驗證方式
金融3 個工具Oct 29, 2026