Gocertius
Bridges Claude to EAD Trust's GoCertius platform for legally certified digital evidence workflows. Exposes 39 tools covering the full lifecycle: create evidence groups and records with SHA-256 verification, upload files via presigned S3 URLs, manage dossiers (bundles of evidence), send certified notifications, and run certified chat sessions. Authentication uses OpenID Connect with refresh tokens. Ships with Claude Code slash commands for each workflow (evidence, dossier, notification, chat). Available via npm, Docker Hub, the MCP registry, Smithery, and as an n8n community node. Targets compliance teams, legal ops, and regulated workflows where timestamped, immutable proof of communication or file handling matters.
- tools
- 31
- auth
- Secret needed
- transport
- STDIO
- env vars
- 13
- last updated
- Sep 8, 2026
Tools
31 toolsPublic tool metadata for what this MCP can expose to an agent.
evidence_createRegisters a NEW evidence record inside an evidence group.
Registers a NEW evidence record inside an evidence group.
No parameter schema in public metadata yet.
evidence_listLists all evidence records in a specific evidence group.
Lists all evidence records in a specific evidence group.
No parameter schema in public metadata yet.
evidence_sealSeals an evidence group and triggers qualified TSP timestamping.
Seals an evidence group and triggers qualified TSP timestamping.
No parameter schema in public metadata yet.
evidence_getRetrieves a specific evidence record.
Retrieves a specific evidence record.
No parameter schema in public metadata yet.
evidence_group_createCreates an evidence group inside a case file.
Creates an evidence group inside a case file.
No parameter schema in public metadata yet.
evidence_group_listLists all evidence groups in a case file with their current status (OPEN, CLOSING, CLOSED).
Lists all evidence groups in a case file with their current status (OPEN, CLOSING, CLOSED).
No parameter schema in public metadata yet.
dossier_createCreates a dossier to aggregate certified evidence groups into a single tamper-evident PDF.
Creates a dossier to aggregate certified evidence groups into a single tamper-evident PDF.
No parameter schema in public metadata yet.
dossier_updateUpdates the metadata of an existing dossier (name, template fields, expiry).
Updates the metadata of an existing dossier (name, template fields, expiry).
No parameter schema in public metadata yet.
dossier_certifyCertifies a dossier, generating a tamper-evident PDF and locking all linked evidence.
Certifies a dossier, generating a tamper-evident PDF and locking all linked evidence.
No parameter schema in public metadata yet.
dossier_listLists all dossiers in a case file with their status and metadata.
Lists all dossiers in a case file with their status and metadata.
No parameter schema in public metadata yet.
dossier_list_by_userLists every dossier belonging to a user, across all of their case files.
Lists every dossier belonging to a user, across all of their case files.
No parameter schema in public metadata yet.
dossier_getRetrieves the full details of a specific dossier including status, linked evidence, and download URLs.
Retrieves the full details of a specific dossier including status, linked evidence, and download URLs.
No parameter schema in public metadata yet.
dossier_template_listLists available dossier templates.
Lists available dossier templates.
No parameter schema in public metadata yet.
dossier_previewReturns an HTML preview URL of a dossier before certification.
Returns an HTML preview URL of a dossier before certification.
No parameter schema in public metadata yet.
dossier_document_urlReturns the download URL for the certified dossier PDF.
Returns the download URL for the certified dossier PDF.
No parameter schema in public metadata yet.
dossier_package_urlReturns the download URL for the full dossier package (PDF + evidence files).
Returns the download URL for the full dossier package (PDF + evidence files).
No parameter schema in public metadata yet.
dossier_visibilityUpdates the visibility (public/private) of a certified dossier.
Updates the visibility (public/private) of a certified dossier.
No parameter schema in public metadata yet.
dossier_deleteDeletes a dossier.
Deletes a dossier.
No parameter schema in public metadata yet.
dossier_group_certifyCreates AND certifies a dossier from a single sealed evidence group in one call (express path).
Creates AND certifies a dossier from a single sealed evidence group in one call (express path).
No parameter schema in public metadata yet.
dossier_evidence_linkLinks evidence records from a sealed evidence group to a dossier.
Links evidence records from a sealed evidence group to a dossier.
No parameter schema in public metadata yet.
dossier_evidence_list_to_linkLists evidence items that are available to be linked to a dossier (CLOSED groups not yet linked).
Lists evidence items that are available to be linked to a dossier (CLOSED groups not yet linked).
No parameter schema in public metadata yet.
dossier_evidence_listLists the evidence items linked to ONE evidence group of a dossier.
Lists the evidence items linked to ONE evidence group of a dossier.
No parameter schema in public metadata yet.
dossier_evidence_list_by_dossierLists every evidence item linked to a dossier, across all of its evidence groups.
Lists every evidence item linked to a dossier, across all of its evidence groups.
No parameter schema in public metadata yet.
dossier_evidence_getRetrieves details of a specific evidence item linked to a dossier.
Retrieves details of a specific evidence item linked to a dossier.
No parameter schema in public metadata yet.
dossier_evidence_deleteRemoves an evidence item from a dossier.
Removes an evidence item from a dossier.
No parameter schema in public metadata yet.
notification_document_addAttaches a document to a notification.
Attaches a document to a notification.
No parameter schema in public metadata yet.
notification_request_createCreates a certified notification request.
Creates a certified notification request.
No parameter schema in public metadata yet.
notification_request_sendSends the certified notification to all added receivers.
Sends the certified notification to all added receivers.
No parameter schema in public metadata yet.
notification_request_statusChecks the delivery status of a certified notification.
Checks the delivery status of a certified notification.
No parameter schema in public metadata yet.
notification_receiver_addAdds a recipient to a notification request.
Adds a recipient to a notification request.
No parameter schema in public metadata yet.
notification_certificate_getGenerates or retrieves a PDF certificate for a specific receiver proving delivery and/or reading of the notification.
Generates or retrieves a PDF certificate for a specific receiver proving delivery and/or reading of the notification.
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageConfiguration
MCP_ALLOW_INSECURE_FILE_URLSet to "true" to allow plain http:// fileUrl downloads in evidence_create (default https-only). Private/internal addresses are rejected regardless (resolution-time check; see the documented DNS TOCTOU limitation in the hosted-deployment runbook).
MCP_ALLOW_UNVERIFIED_BEAREREscape hatch for MCP_HTTP_PUBLIC=true WITHOUT inbound-token introspection: set to "true" ONLY when an upstream gateway already verifies Bearer tokens. The server logs a prominent warning and forwards tokens upstream unverified.
MCP_ALLOWED_HOSTSComma-separated allowed Host headers. Empty = Host validation disabled (default). When set, requests with a Host outside the list are rejected.
MCP_ALLOWED_ORIGINSComma-separated allowed browser Origins (DNS-rebinding defense). Empty = reject any request carrying an Origin header; non-browser clients (CLI/SDK) send no Origin and are always allowed. Use '*' to allow all.
MCP_API_BASE_URL*Upstream API root. Required: your user key is exchanged for a session token against this host, and the server will not start without it.
MCP_AUTH_USER_KEY*secretLong-lived GoCertius user key, exchanged automatically for a short-lived session token. Use it for headless or automated access instead of an account password. (See https://www.gocertius.io for credential acquisition.)
MCP_HTTP_HOSTInterface the HTTP transport binds to. Default 127.0.0.1 (localhost only). Set 0.0.0.0 to expose on all interfaces (containers do this automatically).
MCP_HTTP_MAX_BODY_BYTESMaximum accepted POST /mcp request-body size in bytes (default 16777216 = 16 MiB — sized so base64 file uploads within the documented tool limits fit). Oversized requests get a 413 JSON-RPC error before/while reading — closes a memory-exhaustion DoS vector in public deployments.
MCP_HTTP_PUBLICSet to "true" for public/multi-tenant deployments. Activates Host validation and refuses to start unless (1) MCP_ALLOWED_ORIGINS or MCP_ALLOWED_HOSTS is set AND (2) inbound Bearer introspection is configured (MCP_SVC_INTROSPECT_URL + MCP_SVC_CLIENT_ID/SECRET) or MCP_ALLOW_UNVERIF
MCP_SVC_CLIENT_IDClient ID this server presents to the introspection endpoint above (its resource-server credentials). Only needed alongside MCP_SVC_INTROSPECT_URL; it does not authenticate you to GoCertius.
MCP_SVC_CLIENT_SECRETsecretClient secret this server presents to the introspection endpoint above (its resource-server credentials). Only needed alongside MCP_SVC_INTROSPECT_URL; it does not authenticate you to GoCertius. (See https://www.gocertius.io for credential acquisition.)
MCP_SVC_INTROSPECT_URLRFC 7662 token introspection URL for inbound Bearer verification in HTTP mode. Opt-in, and required when MCP_HTTP_PUBLIC=true. Leave empty for stdio (local) use.
PORTHTTP port when running in hosted (HTTP) mode; ignored in stdio mode
Readme
GoCertius MCP Server
MCP server for GoCertius: certified evidence, dossiers, notifications and chats via AI agents.
Quick start
npx -y @g-digital/mcp-gocertius
Or see ONBOARDING.md for a step-by-step setup guide (≤ 5 minutes).
Where to install
This MCP is published to every major MCP distribution channel by the g-digital MCP distribution pipeline. Pick whichever fits your stack:
Details
- Repository
- github.com/g-digital-by-garrigues/gocertius_mcp
- Package
@g-digital/mcp-gocertius- Transport
- STDIO
- Auth
- Required
- Registry
- MCP registry, active