Skip to main content
Glama

IssueBadge MCP server

Issue verifiable certificates and badges from any AI agent. This Model Context Protocol server lets Cursor, Claude, VS Code and other MCP clients list your IssueBadge badge templates and send a certificate to a recipient by name and email.

Two ways to run it:

Remote (recommended)

Local (stdio)

Endpoint

https://issuebadge-mcp.issuebadge.workers.dev/mcp

npx issuebadge-mcp-server

Auth

Authorization: Bearer <API key> header

ISSUEBADGE_API_KEY env var

Tools

validate_key, get_all_badges, issue_badge, create_qr_code, list_qr_codes, get_qr_code, update_qr_code, get_qr_code_scans, delete_qr_code

the same + create_badge

Storage

none, stateless

none

You need an IssueBadge API key: app.issuebadge.com → Developer → API key (https://app.issuebadge.com/developer/index).

Install

Cursor

Install IssueBadge from the Cursor Marketplace and paste your API key when prompted. Or add it by hand in Settings → MCP:

{
  "mcpServers": {
    "issuebadge": {
      "type": "streamable-http",
      "url": "https://issuebadge-mcp.issuebadge.workers.dev/mcp",
      "headers": { "Authorization": "Bearer YOUR_ISSUEBADGE_API_KEY" }
    }
  }
}

Claude Code

claude mcp add --transport http issuebadge https://issuebadge-mcp.issuebadge.workers.dev/mcp \
  --header "Authorization: Bearer YOUR_ISSUEBADGE_API_KEY"

This repo is also a Claude Code plugin (.claude-plugin/plugin.json) and ships an issuebadge skill that teaches the agent the list → confirm → issue workflow. The plugin's .mcp.json reads the key from the ISSUEBADGE_API_KEY environment variable, so export it before starting Claude Code.

Claude Desktop / any stdio client

{
  "mcpServers": {
    "issuebadge": {
      "command": "npx",
      "args": ["-y", "issuebadge-mcp-server"],
      "env": { "ISSUEBADGE_API_KEY": "YOUR_ISSUEBADGE_API_KEY" }
    }
  }
}

VS Code (Copilot agent mode)

.vscode/mcp.json:

{
  "servers": {
    "issuebadge": {
      "type": "http",
      "url": "https://issuebadge-mcp.issuebadge.workers.dev/mcp",
      "headers": { "Authorization": "Bearer YOUR_ISSUEBADGE_API_KEY" }
    }
  }
}

Related MCP server: Command Executor MCP Server

Tools

Tool

Input

Returns

validate_key

–

{ valid, message }

get_all_badges

limit?

{ badges: [{ id, name, description?, created_at? }] }

issue_badge

badge_id, name, email?, phone?, idempotency_key?, metadata?

{ issue_id, certificate_url, idempotency_key }

create_badge (stdio only)

name, description, issuing_organization_name, idempotency_key, optional badge_logo_path, custom_fields, …

IssueBadge API response

issue_badge emails the certificate to the recipient and returns a public verification URL. Every call with a new idempotency_key issues a new certificate (one is generated as mcp-<uuid> if you omit it). The API rejects a reused key, so after a failed call check whether the certificate was issued before calling again with a new key.

Example prompt once installed: "Issue the Course Completion certificate to Jane Doe, jane@example.com."

Dynamic QR codes

Tool

Input

Returns

create_qr_code

name, type, data, is_active?

the QR code (code, scan_url, image_url, image_base64) + a PNG image block

list_qr_codes

type?, limit?

{ qr_codes: [...], total }

get_qr_code

code

the QR code + PNG image block

update_qr_code

code, name?, data?, is_active?

the updated QR code

get_qr_code_scans

code, limit?

{ code, scan_count, scans: [{ scanned_at, ip_address, user_agent, referer }], total }

delete_qr_code

code

{ deleted: true, code }

Types: url, vcard, paypal, wifi, email, phone, sms, maps, event, facebook, twitter, youtube, text, mecard. The image encodes an IssueBadge redirect (scan_url), so update_qr_code changes where a printed code goes without reprinting it. data holds the type's fields, for example { "url": "https://…" }, { "ssid", "password", "security" } for wifi, or { "latitude", "longitude" } for maps.

Example prompt: "Create a QR code named Menu that opens https://example.com/menu and show it to me."

ChatGPT and OAuth

The remote server also speaks OAuth 2.1 for hosts that cannot send an API key (ChatGPT apps, Claude connectors): a request without a bearer gets 401 + WWW-Authenticate: Bearer resource_metadata=…, /.well-known/oauth-protected-resource points at https://app.issuebadge.com (PKCE S256, dynamic client registration), and the issued access token is forwarded exactly like an API key. issue_badge carries a widget (ui://widget/certificate.html, MCP Apps / ChatGPT Apps SDK) that renders the certificate card. See CHATGPT.md.

Privacy and security

Self-host the remote server

git clone https://github.com/issuebadge/mcp-server && cd mcp-server
npm install
npm test
npx wrangler deploy --config worker/wrangler.toml   # needs a Cloudflare account

GET /health returns { ok: true }. Point ISSUEBADGE_BASE_URL at a different API host for the stdio server if you run IssueBadge elsewhere.

Development

npm install
npm test          # vitest: client, tools, worker (mocked IssueBadge API)
npm run build     # tsc → dist/ (stdio bin)
npm run dev:worker

Layout: src/issuebadge.ts (API client), src/tools.ts (tool registry shared by both hosts), src/stdio.ts (npm bin), src/createBadge.ts (stdio-only tool), worker/index.ts (Cloudflare Worker), .cursor-plugin/ + mcp.json (Cursor plugin), .claude-plugin/ + .mcp.json (Claude Code plugin), skills/issuebadge/SKILL.md, server.json (MCP Registry).

License

MIT

Available Tools

4 tools
create_badgeB

Create a new badge template with optional custom fields and branding. This badge can then be issued to recipients.

ParametersJSON Schema
NameRequiredDescriptionDefault
nameYesBadge name (e.g., "Web Development Certificate")
descriptionYesBadge description (e.g., "Awarded for completing the full-stack web development course")
issuing_organization_nameYesName of the issuing organization (e.g., "Tech Academy")
idempotency_keyYesUnique key to prevent duplicate badge creation (e.g., "badge_webdev_2024_001")
nicknameNoOptional badge nickname or short name
left_panel_descriptionNoAdditional description for the left panel of the certificate
organization_idNoExisting organization ID (optional, will create new organization if not provided)
commentNoAdditional comments or notes about the badge
expire_dateNoBadge expiration date in YYYY-MM-DD format (optional)
badge_logo_pathNoPath to badge logo file (jpeg,png,jpg,gif,svg, max 2MB)
custom_fieldsNoCustom fields for this badge (e.g., completion date, score, instructor)

TDQS

B3.3/5.0
Behavior2/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description carries the full burden. It mentions the tool creates a badge template with optional fields, but lacks critical behavioral details such as required permissions, whether creation is idempotent (hinted by idempotency_key but not explained), rate limits, or what happens on failure. The description does not contradict annotations since none exist.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is front-loaded with the core purpose in the first sentence, and the second sentence adds useful context about subsequent issuance. It is appropriately sized with two sentences and no redundant information, though it could be slightly more structured for clarity.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness2/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the complexity (11 parameters, no annotations, no output schema), the description is incomplete. It lacks details on behavioral traits like permissions or error handling, does not explain the return value or what happens after creation, and relies heavily on the schema for parameter documentation without compensating for missing contextual information.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents all 11 parameters thoroughly. The description adds minimal value by mentioning 'optional custom fields and branding,' which loosely maps to custom_fields and badge_logo_path, but does not provide additional syntax, format, or usage details beyond what the schema provides.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the action ('Create a new badge template') and the resource ('badge'), specifying it includes optional custom fields and branding. It distinguishes from siblings by focusing on template creation rather than retrieval (get_all_badges), issuance (issue_badge), or validation (validate_key).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage by mentioning the badge can be issued to recipients afterward, which suggests a workflow context. However, it does not explicitly state when to use this tool versus alternatives like issue_badge or get_all_badges, nor does it mention prerequisites or exclusions.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_all_badgesB

Retrieve all available badges for the authenticated organization. Returns a list of badges with their IDs and names.

ParametersJSON Schema
NameRequiredDescriptionDefault
limitNoMaximum number of badges to return (default: 100, max: 100)

TDQS

B3.3/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden of behavioral disclosure. It adds some context by specifying that it returns a list with IDs and names, which is useful beyond the input schema. However, it lacks details on authentication requirements, rate limits, pagination, or error handling, leaving gaps for a tool that interacts with organizational data.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences that are front-loaded and efficient, with no wasted words. The first sentence states the purpose, and the second adds key behavioral context about the return format, making it appropriately sized and structured.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's simplicity (one optional parameter, no output schema, no annotations), the description is adequate but has clear gaps. It explains the return format but doesn't cover authentication, error cases, or how the tool fits into the broader context with sibling tools. For a retrieval tool, this is minimal viable but not fully comprehensive.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema has 100% description coverage, with the 'limit' parameter fully documented in the schema. The description does not add any parameter-specific information beyond what the schema provides, such as default behavior or usage tips. This meets the baseline of 3 since the schema handles the heavy lifting.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the verb ('Retrieve') and resource ('all available badges for the authenticated organization'), making the purpose unambiguous. It distinguishes from siblings like 'create_badge' and 'issue_badge' by focusing on retrieval rather than creation or issuance. However, it doesn't explicitly differentiate from 'validate_key', which might be a different operation.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines2/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides no guidance on when to use this tool versus alternatives. It doesn't mention when to use 'get_all_badges' over other retrieval methods or tools, nor does it specify any prerequisites or exclusions. The context is implied but not explicit.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

issue_badgeA

Issue a badge to a recipient. This creates a digital certificate and sends notification email with verification URL.

ParametersJSON Schema
NameRequiredDescriptionDefault
badge_idYesEncrypted badge ID from badge creation (get this from get_all_badges or create_badge)
nameYesRecipient's full name (will appear on the certificate)
emailNoRecipient's email address (optional, but recommended for notifications)
phoneNoRecipient's phone number (optional)
idempotency_keyYesUnique key to prevent duplicate issuance (e.g., "issue_john_doe_2024_001")
metadataNoCustom field values and additional metadata (e.g., completion_date, score, etc.)

TDQS

A3.7/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries full burden. It discloses key behavioral traits: creation of a digital certificate and sending of notification emails with verification URLs. However, it doesn't mention permissions needed, rate limits, whether the operation is idempotent (though idempotency_key parameter hints at this), or error handling. The description adds value but leaves gaps for a mutation tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two concise sentences that front-load the core purpose and outcomes. Every word earns its place with no redundancy or fluff, making it highly efficient for quick comprehension.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a mutation tool with 6 parameters, no annotations, and no output schema, the description is adequate but incomplete. It covers the main action and outcomes but lacks details on permissions, errors, or return values. Given the complexity and missing structured data, it should provide more behavioral context to be fully helpful.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so the schema already documents all 6 parameters thoroughly. The description doesn't add any parameter-specific details beyond what's in the schema (e.g., it doesn't explain badge_id sourcing further or metadata usage). Baseline 3 is appropriate when schema does the heavy lifting.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the specific action ('issue a badge'), the target ('to a recipient'), and the outcomes ('creates a digital certificate and sends notification email with verification URL'). It distinguishes from sibling tools like create_badge (which creates badge definitions) and get_all_badges (which lists badges).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage context (issuing badges to recipients) but doesn't explicitly state when to use this tool versus alternatives like create_badge. It mentions getting badge_id from get_all_badges or create_badge, which provides some guidance but not explicit when/when-not rules or comparisons to siblings like validate_key.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

validate_keyA

Validate an IssueBadge API key for authentication. Use this to test if your API credentials are working correctly.

ParametersJSON Schema
NameRequiredDescriptionDefault
api_keyYesThe API key to validate (usually starts with a number and pipe, e.g., "1|abc123...")

TDQS

A4.2/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden of behavioral disclosure. It states the tool validates API keys for authentication testing, which implies a read-only, non-destructive operation. However, it doesn't disclose important behavioral details like rate limits, error responses, or what specific validation checks are performed (e.g., format validation, authentication against server).

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is perfectly concise with two sentences that each earn their place. The first sentence states the purpose and resource, while the second provides explicit usage guidance. There's zero wasted text, and the information is front-loaded with the core functionality.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a single-parameter authentication validation tool with no output schema, the description provides good context about what the tool does and when to use it. However, it doesn't describe what the validation result looks like (e.g., returns success/failure, error messages) or any prerequisites beyond having an API key. Given the tool's relative simplicity, the description is mostly complete but could benefit from output information.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, with the single parameter 'api_key' well-documented in the schema. The description doesn't add any parameter-specific information beyond what the schema already provides about the API key format and purpose. The baseline score of 3 is appropriate when the schema does the heavy lifting for parameter documentation.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the specific action ('validate') and resource ('IssueBadge API key') with explicit purpose ('for authentication' and 'test if your API credentials are working correctly'). It distinguishes from siblings like create_badge, get_all_badges, and issue_badge by focusing solely on authentication testing rather than badge operations.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description explicitly states when to use this tool: 'Use this to test if your API credentials are working correctly.' This provides clear context for usage (authentication testing) and implicitly distinguishes it from sibling tools that perform badge-related operations rather than credential validation.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 4 tool updates
    • First observedcreate_badge
    • First observedget_all_badges
    • First observedissue_badge
    • First observedvalidate_key

TDQS

A3.9/5.0

Scored across 4 tools

Disambiguation5/5

Each tool has a clearly distinct purpose: create_badge (template creation), get_all_badges (list retrieval), issue_badge (awarding to recipients), and validate_key (authentication testing). There is no overlap in functionality, making tool selection straightforward for an agent.

Naming Consistency5/5

All tool names follow a consistent verb_noun pattern (create_badge, get_all_badges, issue_badge, validate_key), using snake_case throughout. This predictability enhances usability and reduces cognitive load for agents.

Tool Count5/5

With 4 tools, the server is well-scoped for its purpose of managing digital badges. Each tool serves a distinct and essential function (create, list, issue, authenticate), with no unnecessary or redundant tools, making the count appropriate.

Completeness4/5

The tool set covers core CRUD operations for badges (create and list) and key actions (issue and validate), but lacks update and delete capabilities for badges. This minor gap might require workarounds but does not severely hinder basic workflows.

Maintenance

ActivityMaintained
ResponsivenessNo issues

Related MCP Connectors

Related MCP Servers