@verfi/mcp-server

MCP server for Verfi — TCPA consent verification tools for AI agents.

Tools

Related MCP server: Smallest MCP Server

Setup

Claude Desktop

Add to ~/Library/Application Support/Claude/claude_desktop_config.json:

{
  "mcpServers": {
    "verfi": {
      "command": "npx",
      "args": ["-y", "@verfi/mcp-server"],
      "env": {
        "VERFI_API_KEY": "sk_your_secret_key_here"
      }
    }
  }
}

Cursor / Windsurf

Add to your MCP config:

{
  "verfi": {
    "command": "npx",
    "args": ["-y", "@verfi/mcp-server"],
    "env": {
      "VERFI_API_KEY": "sk_your_secret_key_here"
    }
  }
}

Environment Variables

Agent Plugin

This repo also ships a portable Agent Plugins v1.0.0 package in plugin/ that bundles this MCP server together with the Verfi consent-verification skill. Compatible clients (Cursor, Claude, OpenAI, etc.) can discover and load both from one directory. See plugin/README.md.

Quick Start

Developer: "Check if lead VF-a1b2c3d4 has valid TCPA consent"

Agent calls: verfi_verify_consent({ verfiID: "VF-a1b2c3d4" })

→ { consent_valid: true, tcpa_compliant: true, proof_url: "..." }

API Key Scopes

Your API key's scopes determine which tools are available:

• sessions:search → verfi_search_session, verfi_get_claim_status

• sessions:proof → verfi_get_proof, verfi_verify_consent

• sessions:claim → verfi_claim_session

• sessions:unclaim → verfi_unclaim_session

• sessions:expiration → verfi_update_expiration

Generate API keys in the Verfi dashboard under Integration > API Keys.

License

MIT

Building a lead-router integration

Start at https://verfi.io/docs/agent-plugin or read the web-session integration contract. Direct REST does not require MCP installation.

Updated source adds verfi_get_claim_status (sessions:search) and claim options requireRecording, requireVerticals, requireVerifiedScore, minQualityScore, requirePII, emailHash, phoneHash, requireClaimMode, and idempotencyKey. These require the updated server, not just new skill files. Inspect tools/list; use REST or npm install && npm run build followed by node /absolute/path/dist/index.js until the updated npm package is released/installed. Required PII can be enforced in the claim using requirePII with corresponding exact-capture hashes; verfi_search_session remains optional diagnostics. Verify the selected API OpenAPI supports the new fields before enabling them. Version 0.3.0 is the source release for these fields; repository changes do not establish npm publication. Proof summaries do not perform a combined acceptance decision; when verfi_verify_consent checks hashes it also needs sessions:search.