Skip to main content
C

Caf

@codespar/mcp-caf · v0.1.3

🇧🇷 BrazilIdentity & KYCAuth · API Keyalpha9 tools3 env varsdeprecated on npm

BR identity + trust platform. KYC/KYB, face authentication + liveness, document validation + OCR, Trust Platform orchestration with hosted onboarding flows. Direct competitor to Unico / IDwall / Certta — Trust Platform is the differentiator (template-driven multi-step flows with policy rules).

Deprecated on npm: No live endpoint: api.caf.io does not resolve. See https://github.com/codespar/mcp-dev-latam/tree/main/packages/identity/caf

MIT · deprecated on npm

Limitations

  • The server does not start without its environment variables set, not even to list its tools.
  • The package manifest does not declare 1 of the 3 variables the code reads.
  • The npm package ships no server.json manifest.
Package
@codespar/mcp-caf
Version
0.1.3
npm dist-tag
latest
Category
Identity & KYC
Auth
API Key
Country
🇧🇷 Brazil
License
MIT
Transport
stdio

Quickstart

Before you use it.

This package is deprecated on npm, so this page offers no install command or client config. No live endpoint: api.caf.io does not resolve. See https://github.com/codespar/mcp-dev-latam/tree/main/packages/identity/caf

Environment variables3 variables
CAF_API_BASEAPI base URL — defaults to Caf production. Override for sandbox.optional
CAF_API_KEYAPI key from the Caf dashboardrequiredsecret
CAF_BASE_URLRead by the code; the package manifest does not declare it.

Names read from the package code (@codespar/mcp-caf@0.1.3). Descriptions and flags come from its manifest. Self-hosted, you hold the credentials.

Tools

What your agent can call.

9 tools, as the package's tools/list returns them.

person_check

KYC — validate a CPF, return name + DOB + restrictions + risk indicators. POST /v1/checks/person.

company_check

KYB — validate a CNPJ, return corporate profile, QSA, regularity, sanctions. POST /v1/checks/company.

face_authentication

Face authentication against a base image (typically the document photo). Returns match_score + liveness verdict + spoofing indicators. POST /v1/biometrics/face.

liveness_check

Passive liveness on a selfie (no comparison image). Returns liveness_score + spoofing signals. POST /v1/biometrics/liveness.

document_check

Document validation — OCR + authenticity check on RG / CNH / passport / proof of residence. Returns structured fields + authenticity_score. POST /v1/checks/document.

trust_platform_start

Start a Trust Platform onboarding flow — orchestrated pipeline chaining person/company checks + biometrics + document validation per a dashboard template. Returns flow_id + hosted onboarding URL. POST /v1/trust/flows.

trust_platform_get

Get the status + step-by-step verdicts of a Trust Platform flow. GET /v1/trust/flows/{flow_id}.

list_datasources

List the datasources available to your Caf account (varies per subscription tier). GET /v1/datasources.

get_check_result

Retrieve a previously-run check by ID (person, company, or document). Useful for replay + auditing without re-querying datasources. GET /v1/checks/{check_id}.

Names and descriptions come from the package's tools/list (@codespar/mcp-caf@0.1.3). A kind (read, write, delete) is shown only when the package annotates its tools or each tool was verified one by one; neither exists for this server yet.

Compatibility

MCP is a protocol. Any client that speaks it can mount this server.

The CodeSpar runtime does not route this server. Mount it in your client over stdio.

Protocol

Any MCP client

stdio

Questions

Before you install.

How do I install the Caf MCP server?

The npm package @codespar/mcp-caf is deprecated, so this page shows no install command for it. The registry says: No live endpoint: api.caf.io does not resolve. See https://github.com/codespar/mcp-dev-latam/tree/main/packages/identity/caf

What can my agent do with Caf?

Caf exposes 9 tools for identity & kyc. Your agent calls them directly; the full list is above.

How does Caf authenticate, and how are credentials stored?

Caf uses API Key. Self-hosted, you hold the credentials: the server reads them from its environment variables.

How does Caf handle upstream API changes?

Every server is versioned independently on npm. This one is deprecated (see the notice above), so the page does not suggest pinning a version.

Is Caf open source? How do I report a bug?

Yes. Caf is MIT-licensed and published on npm as @codespar/mcp-caf, source on GitHub (link in the Details panel). Report issues on the package repository; security issues go to security@codespar.dev, and we respond within 24 hours.

Pairs well with

Identity & KYC · same category.

U

Unico

@codespar/mcp-unico · 18 tools

Brazilian identity verification / KYC leader. IDCloud (CPF/CNPJ + document OCR), IDPay (face match, liveness), IDCheck (PEP, sanctions, court records). First entry in the Identity & KYC category. Alpha on npm — devcenter.unico.io is contract-gated; base URLs overridable via env.

Open
O

Onfido

@codespar/mcp-onfido · 20 tools

Global KYC leader (Entrust-owned). Applicants, document upload, live photos, checks (document + facial + watchlist + known-faces), reports. Pairs with Unico (BR-first) for global coverage when commerce touches non-LatAm users.

Open
J

Jumio

@codespar/mcp-jumio · 20 tools

Global KYC enterprise tier — deeper fraud intelligence, longer operator history. Target: banks, large fintechs, regulated commerce. Regional hosts (amer-1 / emea-1 / apac-1). Verified against docs.jumio.ai.

Open

Start in seconds.

This package is deprecated on npm; read the notice above before using it.

Caf — MCP server · 9 tools | CodeSpar