-
Notifications
You must be signed in to change notification settings - Fork 230
Add Docusign third-party MCP plugin #204
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Merged
Merged
Changes from all commits
Commits
Show all changes
2 commits
Select commit
Hold shift + click to select a range
File filter
Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,49 @@ | ||
| { | ||
| "name": "docusign", | ||
| "displayName": "Docusign", | ||
| "version": "1.0.0", | ||
| "description": "Connect Cursor to Docusign — work with eSignature envelopes and templates, Maestro workflows, and Navigator agreements — via Docusign's official remote MCP server (beta).", | ||
| "author": { | ||
| "name": "Cursor", | ||
| "email": "plugins@cursor.com" | ||
| }, | ||
| "homepage": "https://developers.docusign.com/platform/mcp-server/", | ||
| "repository": "https://github.com/cursor/plugins", | ||
| "license": "MIT", | ||
| "logo": "assets/logo.png", | ||
| "keywords": [ | ||
| "docusign", | ||
| "esignature", | ||
| "agreements", | ||
| "mcp", | ||
| "envelopes", | ||
| "contracts" | ||
| ], | ||
| "category": "integrations", | ||
| "tags": [ | ||
| "mcp", | ||
| "docusign", | ||
| "agreements", | ||
| "esignature" | ||
| ], | ||
| "variables": { | ||
| "type": "object", | ||
| "properties": { | ||
| "CLIENT_ID": { | ||
| "type": "string", | ||
| "title": "Docusign Integration Key", | ||
| "description": "Integration Key from Docusign Apps and Keys (Settings → Apps and Keys → your app)." | ||
| }, | ||
| "CLIENT_SECRET": { | ||
| "type": "string", | ||
| "title": "Docusign Secret Key", | ||
| "description": "Secret Key from the same Docusign Apps and Keys app." | ||
| } | ||
| }, | ||
| "required": [ | ||
| "CLIENT_ID", | ||
| "CLIENT_SECRET" | ||
| ] | ||
| }, | ||
| "mcpServers": "./mcp.json" | ||
| } | ||
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,9 @@ | ||
| # Changelog | ||
|
|
||
| All notable changes to this plugin will be documented here. | ||
|
|
||
| ## 1.0.0 — initial release | ||
|
|
||
| - Logo: Docusign's developer-center app icon. | ||
| - Added the `docusign` MCP server pointing at `https://mcp.docusign.com/mcp`. | ||
| - Declared `CLIENT_ID` and `CLIENT_SECRET` plugin variables and forwarded them through MCP auth. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,21 @@ | ||
| MIT License | ||
|
|
||
| Copyright (c) 2026 Cursor | ||
|
|
||
| Permission is hereby granted, free of charge, to any person obtaining a copy | ||
| of this software and associated documentation files (the "Software"), to deal | ||
| in the Software without restriction, including without limitation the rights | ||
| to use, copy, modify, merge, publish, distribute, sublicense, and/or sell | ||
| copies of the Software, and to permit persons to whom the Software is | ||
| furnished to do so, subject to the following conditions: | ||
|
|
||
| The above copyright notice and this permission notice shall be included in all | ||
| copies or substantial portions of the Software. | ||
|
|
||
| THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR | ||
| IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, | ||
| FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE | ||
| AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER | ||
| LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, | ||
| OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE | ||
| SOFTWARE. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,69 @@ | ||
| # Docusign | ||
|
|
||
| Cursor plugin that connects agents to [Docusign](https://www.docusign.com) through Docusign's official remote [Model Context Protocol](https://modelcontextprotocol.io/) server (beta). | ||
|
|
||
| Work with eSignature envelopes and templates, Maestro workflows, and Navigator agreement data from the signed-in Docusign account. | ||
|
|
||
| ## Install | ||
|
|
||
| 1. Open **Cursor Settings → Plugins**. | ||
| 2. Search for **Docusign**. | ||
| 3. Click **Install**, then set the Integration Key and Secret Key (below) and complete the Docusign sign-in prompt. | ||
|
|
||
| Or run `/add-plugin docusign` in chat. | ||
|
|
||
| ## MCP | ||
|
|
||
| ```json | ||
| { | ||
| "mcpServers": { | ||
| "docusign": { | ||
| "type": "http", | ||
| "url": "https://mcp.docusign.com/mcp", | ||
| "auth": { | ||
| "CLIENT_ID": "${CLIENT_ID}", | ||
| "CLIENT_SECRET": "${CLIENT_SECRET}" | ||
| } | ||
| } | ||
| } | ||
| } | ||
| ``` | ||
|
|
||
| ## Setup | ||
|
|
||
| Docusign MCP requires a confidential OAuth app (Authorization Code Grant). Create an Integration Key before anyone can connect. | ||
|
|
||
| 1. Sign in to your [Docusign account](https://www.docusign.com/) (or [developer account](https://developers.docusign.com/)) and open **Settings → Apps and Keys**. | ||
| 2. Add an app, copy the **Integration Key**, and generate a **Secret Key**. | ||
| 3. Register both redirect URIs on that app: | ||
| - Desktop: `http://localhost:8787/callback` | ||
| - Web and Cloud Agents: `https://www.cursor.com/agents/mcp/oauth/callback` | ||
| 4. In **Dashboard → Plugins → Configure**, set **Docusign Integration Key** and **Docusign Secret Key** from that app. | ||
| 5. Complete the Docusign OAuth login when Cursor prompts. | ||
|
|
||
| On a team marketplace an admin can set the credentials once for everyone; each member still completes their own Docusign OAuth login, so tool calls run with that member's permissions. | ||
|
|
||
| ## Demo vs production | ||
|
|
||
| This plugin points at the production MCP URL. For developer/demo accounts, change the `url` in `mcp.json` to `https://mcp-d.docusign.com/mcp` after install. | ||
|
|
||
| | Environment | URL | | ||
| | --- | --- | | ||
| | Production (default) | `https://mcp.docusign.com/mcp` | | ||
| | Demo (developer accounts) | `https://mcp-d.docusign.com/mcp` | | ||
|
|
||
| ## Notes | ||
|
|
||
| - The MCP server is in beta. Expect changes as Docusign adds tools and refines the surface. | ||
| - Only **Confidential Authorization Code Grant** tokens are supported — not JWT, Implicit, or Public Authorization Code Grant. | ||
|
|
||
| ## Docs | ||
|
|
||
| - Docusign MCP server (beta): https://developers.docusign.com/platform/mcp-server/ | ||
| - Confidential Authorization Code Grant: https://developers.docusign.com/platform/auth/confidential-authcode-get-token | ||
|
|
||
| Logo is Docusign's developer-center app icon (192×192) from https://developers.docusign.com/. | ||
|
|
||
| ## License | ||
|
|
||
| MIT |
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,12 @@ | ||
| { | ||
| "mcpServers": { | ||
| "docusign": { | ||
| "type": "http", | ||
| "url": "https://mcp.docusign.com/mcp", | ||
| "auth": { | ||
| "CLIENT_ID": "${CLIENT_ID}", | ||
| "CLIENT_SECRET": "${CLIENT_SECRET}" | ||
| } | ||
| } | ||
| } | ||
| } |
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Missing MCP URL variable
Medium Severity · Logic Bug
The PR description says the plugin declares
DOCUSIGN_MCP_URLalongsideCLIENT_IDandCLIENT_SECRET, butplugin.jsononly exposes the OAuth credentials andmcp.jsonhardcodes the production URL. Demo/developer accounts needhttps://mcp-d.docusign.com/mcp, and without a configure-time URL variable (Salesforce’sSALESFORCE_MCP_URLpattern) those users cannot select the demo endpoint through plugin configuration—especially on team marketplaces where post-installmcp.jsonedits are not a reliable path.Additional Locations (2)
third_party/docusign/mcp.json#L4-L5third_party/docusign/README.md#L45-L53Reviewed by Cursor Bugbot for commit f290d82. Configure here.