Jumio MCP server
MCP server for Jumio — global identity verification + KYX: documents, liveness, AML screening
271 stars
Reviews
Write oneNobody has reviewed Jumio yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Jumio tools (20, 5 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
cancel_transactionwrite actionCancel an in-flight workflow execution (status 'INITIATED' or 'ACQUIRED'). Use when the user abandons the flow or you decide upstream not to proceed; finalises the workflow as cancelled and stops further processing.
delete_accountwrite actionDelete a Jumio end-user account and every workflow execution under it (GDPR right-to-erasure). Irreversible. For deleting only a single transaction, use delete_transaction instead.
delete_transactionwrite actionDelete a workflow execution (GDPR right-to-erasure). Removes captured images, extracted data, and decision audit trail for this transaction on Jumio's side.
get_transactionRetrieve a workflow execution summary — status ('INITIATED' | 'PROCESSED' | 'SESSION_EXPIRED' | 'TOKEN_EXPIRED' | 'ACQUIRED'), decision outcome, and capability-level results. Poll this to track progress.
get_transaction_detailsRetrieve the full result payload for a workflow execution — all capability outputs (extraction, liveness, similarity, watchlist, etc). Use after status = 'PROCESSED'.
initiate_accountwrite actionCreate a persistent Jumio end-user account. An account groups all workflow executions (KYC transactions) for the same real-world user, enabling re-use of previously verified data and longitudinal fraud signals.
initiate_transactionStart a new KYC workflow execution on an existing account. Returns a `redirectUrl` — redirect the end user there to complete the Jumio-hosted capture flow (document + selfie). Poll get_transaction for status afterwards.
list_accountsList Jumio end-user accounts under your authorizer / merchant. Supports pagination + filtering by customerInternalReference. Useful for admin dashboards and back-office reconciliation.
list_transactionsList workflow executions for an account. Useful for auditing or rebuilding state after a webhook failure.
register_callback_urlSet or update the account-level webhook (callback) URL where Jumio POSTs workflow result notifications. Per-transaction callbackUrl overrides this. Validate signatures using the shared HMAC secret configured in the Jumio portal.
retrieve_credentialsList the credentials (captured artefacts: ID front/back, selfie, proof-of-address, etc) for a workflow execution. Each credential carries a parts[] array with URLs to download the stored images / PDFs.
retrieve_data_exportRetrieve a full GDPR-compliant data export for an account — every workflow execution, captured image URL, extracted field, decision, and audit log. Use to fulfil a Subject Access Request.
retrieve_document_dataRetrieve extracted fields from the ID document (name, DOB, document number, expiry, issuing country, MRZ, etc). Requires a completed workflow that included a document capability.
retrieve_extraction_dataRetrieve raw OCR / extraction capability output for a completed workflow — every extracted field with its source coordinates, MRZ raw lines, barcode contents, and confidence per field. Lower-level than retrieve_document_data.
retrieve_facemapRetrieve the biometric facemap (face template) generated during a workflow. Used for downstream face-search / re-verification flows; subject to biometric-data retention rules — handle accordingly.
retrieve_liveness_resultRetrieve the liveness capability result — passive/active liveness decision plus per-frame anti-spoofing scores. Requires a workflow that included a liveness capability (selfie or video).
retrieve_screening_resultRetrieve AML / watchlist screening output for a workflow — sanctions hits, PEP hits, adverse-media hits with source citations and match confidence. Requires a workflow that included a screening capability.
retrieve_similarity_scoreRetrieve the facial similarity result (selfie vs document photo). Returns match decision plus confidence score. Requires a completed workflow that included a similarity/selfie capability.
retry_transactionRetry a failed, expired, or rejected workflow execution. Creates a new workflow execution on the same account, optionally re-using the original workflow definition and customer references.
update_transaction_statuswrite actionUpdate the merchant-side status of a workflow execution (PATCH). Use to record your final accept/reject decision back on the Jumio transaction — helpful for Jumio's fraud model feedback loop and for dashboard reporting.
Public scan report
scanner v0.1.9 · 2026-09-26 · same rubric, same numbers if you re-run it
- Code scan5 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 29 days ago15/15
- Maintainer identityregistry namespace matches repository owner7/10
How Jumio compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 82/100
- higher than 63% of 48,255 servers
- Tools
- 20
- the typical server has 7
- Tools that change things
- 25%
- typical: 0%. Fewer write tools means less an agent can break
- GitHub stars
- 271
- more than 95% of 28,688 servers
What its tools let an agent do: 14 read · 1 create · 2 change · 3 delete
Install Jumio in Claude Code, Cursor or VS Code
Runs npx -y @codespar/mcp-jumio on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add mcp-jumio -- npx -y @codespar/mcp-jumio
What the publisher says
From the Jumio repository's README, as published. We do not edit it. Read it on GitHub
MCP Dev LATAM 🌎 Every commerce API your AI agent needs to run a business in Latin America. Brazil 🇧🇷 · Mexico 🇲🇽 · Argentina 🇦🇷 · Colombia 🇨🇴 · Chile 🇨🇱 · Peru 🇵🇪 · plus 4 agentic payment protocols. MCP servers for LATAM commerce · live in the official MCP Registry · MIT License Machine-readable catalog: codespar.dev/api/servers Catalog · Quick Start · Agentic Protocols · All Servers · Contribute
The Problem
AI agents can write code, analyze data, and chat. But they can't operate a business — collect payments, issue invoices, ship products, or notify customers. Especially not in Latin America, where every service has its own API, auth pattern, and quirks (mTLS for BACEN Pix v2, JWT-RSA for STP-SPEI, AFIP web services, contract-gated developer portals, and on).
Meanwhile, four agentic payment protocols are shipping in parallel — checkout protocols (Stripe ACP, Google UCP), authorization layers (AP2), and micropayment rails (x402) — and none of them compose cleanly with each other or with the regional rails businesses actually run on.
MCP Dev LATAM bridges both gaps. Traditional LATAM services + the new agentic payment protocols, all accessible through a single MCP interface.
The Solution
Each MCP server in this repo wraps a real provider — payments, fiscal, logistics, messaging, banking, ERP, identity, fraud, crypto, and the agentic protocols — so your agent can operate a complete business workflow.
🛒 Customer places order
→ 💳 Agent charges via Pix (Asaas / Mercado Pago / Zoop)
→ 📄 Agent issues NFe (Nuvem Fiscal / Focus NFe / NFe.io)
→ 📦 Agent generates shipping label (Melhor Envio / Skydropx)
→ 📱 Agent sends tracking via WhatsApp (Z-API / WhatsApp Cloud)
→ 📊 Agent records in ERP (Omie / Bling / Tiny)
→ 🏦 Agent reconciles balance (Stark Bank / Itaú / BTG)Six systems. Zero human intervention. One agent.
Agentic Payment Protocols
Four servers for the emerging agentic payment stack:
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Jumio: common questions
- Is Jumio MCP server safe?
- Mostly: it is graded B (82/100). Read the Jumio safety report
- How do I install Jumio?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Jumio need an API key?
- Yes. The registry entry asks for
JUMIO_API_SECRET. - Is Jumio maintained?
- The last commit was 67 days ago (2026-08-29). The latest release is v0.2.2.
- How does Jumio compare with other MCP servers?
- safety score 82/100 (higher than 63% of 48,255 servers); tools 20 (the typical server has 7); tools that change things 25% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.