Send for signature from your own systems

Authorization: Bearer es_live_…

# 1. Ask for an upload URL (valid 10 minutes, PDFs up to 20 MB)
curl -s -X POST https://api.easysignit.com/v1/documents/upload-url \
  -H "Authorization: Bearer $EASYSIGN_KEY"
# -> {"upload_id": "...", "url": "https://...", "headers": {"Content-Type": "application/pdf"}, ...}

# 2. PUT the file to that URL with exactly the headers you were given
curl -s -X PUT "$UPLOAD_URL" -H "Content-Type: application/pdf" --data-binary @lease.pdf

# 3. Turn the upload into a document (it is checked and cleaned up first)
curl -s -X POST https://api.easysignit.com/v1/documents \
  -H "Authorization: Bearer $EASYSIGN_KEY" \
  -H "Content-Type: application/json" \
  -d '{"upload_id": "'"$UPLOAD_ID"'", "name": "Lease.pdf"}'
# -> {"document": {"document_id": "doc_...", "pages": [{"width_pt": 612, "height_pt": 792, "rotation": 0}], ...}}

curl -s -X POST https://api.easysignit.com/v1/templates/$TEMPLATE_ID/send \
  -H "Authorization: Bearer $EASYSIGN_KEY" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: order-4821" \
  -d '{
    "recipients": [{"id": "r1", "name": "Jordan Reyes", "email": "jordan@example.com"}],
    "message": "Please review and sign by Friday.",
    "reminder_days": 3,
    "expires_in_days": 7
  }'
# -> 201 {"envelope": {"id": "env_...", "status": "sent", ...}, "warnings": []}

curl -s -X POST https://api.easysignit.com/v1/envelopes \
  -H "Authorization: Bearer $EASYSIGN_KEY" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: lease-2026-0193" \
  -d '{
    "kind": "pdf",
    "document_id": "doc_...",
    "title": "Studio lease",
    "recipients": [
      {"id": "r1", "role": "signer",   "name": "Jordan Reyes", "email": "jordan@example.com", "order": 1},
      {"id": "r2", "role": "approver", "name": "Sam Lee",      "email": "sam@example.com",    "order": 2},
      {"id": "r3", "role": "cc",       "name": "Front desk",   "email": "desk@example.com",   "order": 2}
    ],
    "fields": [
      {"id": "f1", "type": "signature",   "recipient": "r1", "page": 1, "x": 0.12, "y": 0.80, "w": 0.30, "h": 0.06},
      {"id": "f2", "type": "date_signed", "recipient": "r1", "page": 1, "x": 0.55, "y": 0.81, "w": 0.20, "h": 0.04},
      {"id": "f3", "type": "text",        "recipient": "r1", "page": 0, "x": 0.12, "y": 0.30, "w": 0.40, "h": 0.04, "label": "Company"}
    ]
  }'

# Status and recipients
curl -s https://api.easysignit.com/v1/envelopes/env_... -H "Authorization: Bearer $EASYSIGN_KEY"
# -> {"envelope": {"id": "env_...", "status": "completed", "recipients": [...], ...}}

# Short-lived (5 minute) links to the sealed files once status is "completed"
curl -s https://api.easysignit.com/v1/envelopes/env_.../signed-pdf  -H "Authorization: Bearer $EASYSIGN_KEY"
curl -s https://api.easysignit.com/v1/envelopes/env_.../certificate -H "Authorization: Bearer $EASYSIGN_KEY"
# -> {"url": "https://..."}

{
  "id": "evt_...",
  "type": "envelope.completed",
  "created_at": "2026-10-15T19:57:28Z",
  "data": {
    "envelope": { "id": "env_...", "title": "Studio lease", "status": "completed", "recipients": [ ... ] }
  }
}

EasySign-Event-Id: evt_...
EasySign-Timestamp: 1792094248
EasySign-Signature: t=1792094248,v1=5f2c...e81a

import crypto from 'node:crypto';

// rawBody: the request body exactly as received (string or Buffer), before JSON parsing.
export function verifyEasySign(secret, signatureHeader, rawBody, toleranceSec = 300) {
  const parts = {};
  for (const item of signatureHeader.split(',')) {
    const i = item.indexOf('=');
    if (i > 0) parts[item.slice(0, i).trim()] = item.slice(i + 1).trim();
  }
  const t = Number(parts.t);
  if (!Number.isFinite(t) || Math.abs(Date.now() / 1000 - t) > toleranceSec) return false;

  const expected = crypto.createHmac('sha256', secret).update(`${t}.${rawBody}`).digest('hex');
  const a = Buffer.from(expected, 'utf8');
  const b = Buffer.from(parts.v1 || '', 'utf8');
  return a.length === b.length && crypto.timingSafeEqual(a, b);
}

import hashlib
import hmac
import time


def verify_easysign(secret: str, signature_header: str, raw_body: bytes, tolerance: int = 300) -> bool:
    """raw_body: the request body bytes exactly as received, before JSON parsing."""
    parts = dict(item.strip().split("=", 1) for item in signature_header.split(",") if "=" in item)
    try:
        t = int(parts["t"])
    except (KeyError, ValueError):
        return False
    if abs(time.time() - t) > tolerance:
        return False
    expected = hmac.new(secret.encode(), f"{t}.".encode() + raw_body, hashlib.sha256).hexdigest()
    return hmac.compare_digest(expected, parts.get("v1", ""))

claude mcp add --transport http easysign https://api.easysignit.com/mcp \
  --header "Authorization: Bearer es_live_…"

{
  "mcpServers": {
    "easysign": {
      "type": "http",
      "url": "https://api.easysignit.com/mcp",
      "headers": { "Authorization": "Bearer es_live_…" }
    }
  }
}