Maverick Docusign Mcp

Search, read, and manage DocuSign envelopes, recipients, templates, documents, and signing status through a local MCP wrapper. Use when the user asks about DocuSign signing workflows.

DocuSign

Quick start

This skill is a thin pass-through to a local stdio MCP server. mcporter spawns the skill's Python server on each call, refreshes the OAuth access token when needed, and injects the fresh token into the server env.

mcporter --config {baseDir}/mcporter.json list maverick-docusign --schema

For structured output:

mcporter --config {baseDir}/mcporter.json call --output json maverick-docusign.<tool> key=value

Safety

Write operations that create, send, void, update, or modify envelopes, recipients, templates, and documents can affect real signing workflows. Confirm clear user intent before invoking write tools — search and read tools are safe to call freely while exploring. Read envelope status, recipients, tabs, and document details before updating anything.

Authentication

Credentials are provisioned at setup time by scripts/setup.sh (a thin delegator to scripts/init-mcporter-oauth.sh) and stored in mcporter's local vault. The setup hook requires these credential env vars:

• MAVERICK_DOCUSIGN_MCP_REFRESH_TOKEN
• MAVERICK_DOCUSIGN_MCP_CLIENT_ID
• MAVERICK_DOCUSIGN_MCP_CLIENT_SECRET
• MAVERICK_DOCUSIGN_MCP_ACCESS_TOKEN

For refresh-aware seeding, setup also reads optional expiry metadata env vars when the provisioner supplies them:

• MAVERICK_DOCUSIGN_MCP_EXPIRES_AT
• MAVERICK_DOCUSIGN_MCP_EXPIRES_IN
• MAVERICK_DOCUSIGN_MCP_REFRESH_TOKEN_EXPIRES_AT

mcporter refreshes expired DocuSign access tokens through DocuSign's token endpoint before spawning the stdio server, then injects the token into MAVERICK_DOCUSIGN_MCP_ACCESS_TOKEN. If calls keep returning auth errors after retry, the OAuth grant has likely been revoked or expired; reconnect the integration.

Data flow

Tool calls run locally: mcporter spawns this skill's Python MCP server as a subprocess, and that server forwards DocuSign API requests with the refreshed OAuth bearer token. DocuSign sees the envelope, recipient, template, document, and signing-status data referenced by each call. Use this skill for DocuSign-related work only; do not pass unrelated sensitive content through these tools.

Dependencies

• mcporter (github.com/steipete/mcporter) — MCP CLI used to invoke the local MCP server. Auto-installed via npm install -g --ignore-scripts mcporter if missing on PATH (see install spec in frontmatter). The install spec uses unpinned mcporter (npm latest); operators with strict supply-chain controls should override the install to pin a specific version.
• uv (docs.astral.sh/uv) — runs the Python wrapper and local MCP server from their inline dependency metadata.