@codespar/mcp-unico

MCP server for Unico — the Brazilian identity verification leader. CPF/CNPJ validation, document OCR, face biometrics, liveness, PEP / watchlist / court-records screening.

First entry in the CodeSpar identity category. Commerce agents onboarding sellers (marketplaces), running high-value transactions, or operating KYC-regulated flows need identity verification — Unico is the BR standard. Paired with @codespar/mcp-onfido for BR-first + global coverage.

Products

Unico sells three separately-contracted products. This server exposes tools for all three; agents should call only what's enabled on your contract (disabled products return 403).

| Product | What it does | |----------|-------------------------------------------------------------------------| | IDCloud | CPF/CNPJ validation with Receita Federal, document OCR, authenticity | | IDPay | Face match + liveness for login and payment authentication | | IDCheck | PEP, sanctions watchlists, Brazilian court records |

Tools (18)

| Tool | Purpose | |---|---| | validate_cpf | IDCloud: validate a Brazilian CPF with Receita Federal. | | validate_cnpj | IDCloud: validate a Brazilian CNPJ with Receita Federal. | | extract_document | IDCloud: OCR + structured field extraction from a Brazilian ID document image. | | verify_document_authenticity | IDCloud: tamper / forgery detection on a document image. | | face_match | IDPay: biometric 1:1 comparison between a live selfie and a document photo. | | liveness_check | IDPay: passive liveness detection. | | check_pep | IDCheck: Politically Exposed Person screening. | | check_watchlists | IDCheck: global sanctions / adverse-media screening. | | court_records_search | IDCheck: Brazilian judicial-records search. | | get_process_status | IDCheck: poll the status of a verification process previously created via the Unico Web/Mobile SDK or API. | | batch_get_process_status | IDCheck: batch status lookup. | | upload_process_document | IDCheck: upload a captured image to a running verification process. | | get_extracted_data | IDCheck: fetch the structured OCR result for a finished process — typed fields (name, document number, issu... | | get_unico_score | IDCheck: Unico Score — Brazil's identity-fraud risk score (0-1000, higher = lower risk) computed from Unico... | | connect_portability_check | Connect: cross-tenant portability check. | | register_webhook | Webhooks: subscribe a callback URL to receive Unico process events (process.created, process.finished, proc... | | list_webhooks | Webhooks: list all webhook subscriptions registered for this tenant. | | delete_webhook | Webhooks: remove a webhook subscription. |

Install

npm install @codespar/mcp-unico@alpha

Environment

UNICO_CLIENT_ID="..."       # OAuth client_id
UNICO_CLIENT_SECRET="..."   # OAuth client_secret
UNICO_ENV="sandbox"         # Optional. 'sandbox' | 'production'. Default: sandbox
UNICO_BASE_URL="..."        # Optional. Default: https://api.unico.co
UNICO_AUTH_URL="..."        # Optional. Default: https://auth.unico.co

Authentication

OAuth 2.0 Client Credentials. The server posts client_id:client_secret as Basic auth to Unico's token endpoint and caches the bearer token in memory until 60 s before expiry. Unico's docs require server-side integration only — never expose these credentials to a browser or mobile client.

Run

# stdio (default)
npx @codespar/mcp-unico

# HTTP
MCP_HTTP=true MCP_PORT=3000 npx @codespar/mcp-unico

Status

Shipped as 0.1.0-alpha.1. Unico's REST contract lives behind the devcenter.unico.io portal and is gated by merchant account. Tool names and argument shapes are stable, but exact endpoint paths may shift once we validate against live credentials — override UNICO_BASE_URL / UNICO_AUTH_URL if your account is served from a different host. PRs welcome once you've seen the real payloads.

Enterprise

Need governance, budget limits, and audit trails for agent payments? CodeSpar Enterprise adds policy engine, payment routing, and compliance templates on top of these MCP servers.

License

MIT