Skip to main content
U

Unico

@codespar/mcp-unico · v0.2.0-alpha.4

🇧🇷 BrazilIdentity & KYCAuth · OAuth2beta18 tools5 env varsprereleasedeprecated on npm

Brazilian identity verification / KYC leader. IDCloud (CPF/CNPJ + document OCR), IDPay (face match, liveness), IDCheck (PEP, sanctions, court records). First entry in the Identity & KYC category. Alpha on npm — devcenter.unico.io is contract-gated; base URLs overridable via env.

Deprecated on npm: No live endpoint: api.unico.co does not resolve. See https://github.com/codespar/mcp-dev-latam/tree/main/packages/identity/unico

MIT · deprecated on npm

Limitations

  • v0.2.0-alpha.4 is a prerelease; npm has no stable release of this package.
Package
@codespar/mcp-unico
Version
0.2.0-alpha.4 · prerelease
npm dist-tag
latest
Category
Identity & KYC
Auth
OAuth2
Country
🇧🇷 Brazil
License
MIT
Transport
stdio · streamable-http

Quickstart

Before you use it.

This package is deprecated on npm, so this page offers no install command or client config. No live endpoint: api.unico.co does not resolve. See https://github.com/codespar/mcp-dev-latam/tree/main/packages/identity/unico

Environment variables5 variables
UNICO_AUTH_URLOptional override for the OAuth token endpoint base URL. Defaults to https://auth.unico.co.optional
UNICO_BASE_URLOptional override for the IDCloud/IDPay/IDCheck API base URL. Defaults to https://api.unico.co.optional
UNICO_CLIENT_IDUnico OAuth client_idrequired
UNICO_CLIENT_SECRETUnico OAuth client_secretrequiredsecret
UNICO_ENVEnvironment: 'sandbox' or 'production'. Defaults to 'sandbox'.optional

Names read from the package code (@codespar/mcp-unico@0.2.0-alpha.4). Descriptions and flags come from its manifest. Self-hosted, you hold the credentials.

Tools

What your agent can call.

18 tools, as the package's tools/list returns them.

validate_cpf

IDCloud: validate a Brazilian CPF with Receita Federal. Returns { valid, status (REGULAR | SUSPENSA | TITULAR FALECIDO | CANCELADA | NULA | PENDENTE), name, situation }. Optional birthdate enables a cross-check against the CPF registry.

validate_cnpj

IDCloud: validate a Brazilian CNPJ with Receita Federal. Returns company status (ATIVA, BAIXADA, SUSPENSA, INAPTA), legal name, trade name, partners (QSA), address, and primary CNAE.

extract_document

IDCloud: OCR + structured field extraction from a Brazilian ID document image. Returns typed fields (name, document number, issuer, birthdate, parents, etc.) plus extraction confidence.

verify_document_authenticity

IDCloud: tamper / forgery detection on a document image. Returns an authenticity score (0-1), a categorical verdict (AUTHENTIC | SUSPICIOUS | FRAUDULENT), and a list of detected anomalies (e.g. font mismatch, copy-paste edits, printed-on-screen capture).

face_match

IDPay: biometric 1:1 comparison between a live selfie and a document photo. Returns a similarity score (0-1) and a boolean match verdict at Unico's production-tuned threshold.

liveness_check

IDPay: passive liveness detection. Confirms the captured subject is a physically present person, not a printed photo, screen replay, mask, or deepfake. Returns { is_live, score, signals[] }.

check_pep

IDCheck: Politically Exposed Person screening. Pass cpf (preferred) or name; returns matches with role, jurisdiction, and source. A subject is PEP if they currently hold — or held in the last 5 years — a prominent public function per Bacen Circular 3,978/2020.

check_watchlists

IDCheck: global sanctions / adverse-media screening. Covers OFAC (US Treasury), UN, EU, HMT (UK), Interpol Red Notices, and curated adverse-media sources. Pass cpf or name; returns hits with list name, entry date, and risk level.

court_records_search

IDCheck: Brazilian judicial-records search. Covers federal and state courts (TRFs, TJs), labor courts (TRTs), and superior courts (STJ, STF). Returns case list with court, class, status, and filing date. Compliance-grade, not for scraping.

get_process_status

IDCheck: poll the status of a verification process previously created via the Unico Web/Mobile SDK or API. Returns { status (CREATED | IN_PROGRESS | FINISHED | EXPIRED | CANCELED), verdict, finished_at, score, reasons[] }. Use this to drive your KYC state machine after the user finishes the SDK capture flow.

batch_get_process_status

IDCheck: batch status lookup. Send up to 100 process_ids per call and receive the same status payload as get_process_status for each. Use this for nightly reconciliation jobs or backfill, not for hot-path polling.

upload_process_document

IDCheck: upload a captured image to a running verification process. Use the appropriate document_side (FRONT, BACK, SELFIE) to match the process template. The image is consumed by Unico's OCR + biometric pipeline; results show up via get_process_status / get_extracted_data once processing finishes.

Names and descriptions come from the package's tools/list (@codespar/mcp-unico@0.2.0-alpha.4). A kind (read, write, delete) is shown only when the package annotates its tools or each tool was verified one by one; neither exists for this server yet.

Compatibility

MCP is a protocol. Any client that speaks it can mount this server.

The CodeSpar runtime does not route this server. Mount it in your client over stdio · streamable-http.

Protocol

Any MCP client

stdio · streamable-http

Questions

Before you install.

How do I install the Unico MCP server?

The npm package @codespar/mcp-unico is deprecated, so this page shows no install command for it. The registry says: No live endpoint: api.unico.co does not resolve. See https://github.com/codespar/mcp-dev-latam/tree/main/packages/identity/unico

What can my agent do with Unico?

Unico exposes 18 tools for identity & kyc. Your agent calls them directly; the full list is above.

How does Unico authenticate, and how are credentials stored?

Unico uses OAuth2. Self-hosted, you hold the credentials: the server reads them from its environment variables.

How does Unico handle upstream API changes?

Every server is versioned independently on npm. This one is deprecated (see the notice above), so the page does not suggest pinning a version.

Is Unico open source? How do I report a bug?

Yes. Unico is MIT-licensed and published on npm as @codespar/mcp-unico, source on GitHub (link in the Details panel). Report issues on the package repository; security issues go to security@codespar.dev, and we respond within 24 hours.

Start in seconds.

This package is deprecated on npm; read the notice above before using it.

Unico — MCP server · 18 tools | CodeSpar