IssueBadge MCP Server
IssueBadge MCP server lets AI agents validate their IssueBadge API key, browse badge templates, and issue verifiable certificates/badges to recipients by email.
Validate credentials —
validate_keychecks whether an IssueBadge API key is working.List badge templates —
get_all_badgesreturns the organization's badges (id, name, description, created date), with an optional limit (max 100).Issue a badge/certificate —
issue_badgecreates a digital certificate for a recipient bybadge_id+ name, optionally with email, phone, and custom metadata; it emails the recipient and returns an issue id and public verification URL.Avoid duplicates —
issue_badgetakes anidempotency_keyso repeated calls don't issue multiple certificates, and a failed call can be safely checked before retrying with a new key.Create badge templates (stdio/local only) —
create_badgebuilds a new badge with name, description, issuing organization, optional logo, expiration date, and custom fields (text/email/number/date) that can later be issued.Two deployment modes — remote streamable-HTTP endpoint with
Authorization: Bearer <key>auth, or local stdio vianpx issuebadge-mcp-serverwithISSUEBADGE_API_KEY; also supports OAuth 2.1 for hosts like ChatGPT/Claude connectors, plus a certificate-rendering widget.Privacy-friendly — stateless, key read per request and never stored or logged; only
app.issuebadge.comis contacted.
Uses .env files for configuration management, allowing customization of API credentials and server settings.
Enables integration with GitHub for issue tracking, discussions, and reporting bugs for the MCP server through GitHub Issues and GitHub Discussions.
Supports Laravel Sanctum authentication for secure API communication with the IssueBadge platform.
Built on Node.js runtime, allowing for deployment in Node.js environments with version 18+ required.
Available as an npm package for easy installation and dependency management with npm version 8+ required.
Uses TypeScript for type-safe implementation, providing better code quality and developer experience when extending or modifying the MCP server.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@IssueBadge MCP ServerCreate a Python certification badge for completing our data science course"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
IssueBadge MCP server
Issue verifiable certificates and badges from any AI agent. This Model Context Protocol server lets Cursor, Claude, VS Code and other MCP clients list your IssueBadge badge templates and send a certificate to a recipient by name and email.
Two ways to run it:
Remote (recommended) | Local (stdio) | |
Endpoint |
|
|
Auth |
|
|
Tools |
| the same + |
Storage | none, stateless | none |
You need an IssueBadge API key: app.issuebadge.com → Developer → API key (https://app.issuebadge.com/developer/index).
Install
Cursor
Install IssueBadge from the Cursor Marketplace and paste your API key when prompted. Or add it by hand in Settings → MCP:
{
"mcpServers": {
"issuebadge": {
"type": "streamable-http",
"url": "https://issuebadge-mcp.issuebadge.workers.dev/mcp",
"headers": { "Authorization": "Bearer YOUR_ISSUEBADGE_API_KEY" }
}
}
}Claude Code
claude mcp add --transport http issuebadge https://issuebadge-mcp.issuebadge.workers.dev/mcp \
--header "Authorization: Bearer YOUR_ISSUEBADGE_API_KEY"This repo is also a Claude Code plugin (.claude-plugin/plugin.json) and ships an issuebadge skill that teaches the agent the list → confirm → issue workflow. The plugin's .mcp.json reads the key from the ISSUEBADGE_API_KEY environment variable, so export it before starting Claude Code.
Claude Desktop / any stdio client
{
"mcpServers": {
"issuebadge": {
"command": "npx",
"args": ["-y", "issuebadge-mcp-server"],
"env": { "ISSUEBADGE_API_KEY": "YOUR_ISSUEBADGE_API_KEY" }
}
}
}VS Code (Copilot agent mode)
.vscode/mcp.json:
{
"servers": {
"issuebadge": {
"type": "http",
"url": "https://issuebadge-mcp.issuebadge.workers.dev/mcp",
"headers": { "Authorization": "Bearer YOUR_ISSUEBADGE_API_KEY" }
}
}
}Related MCP server: Command Executor MCP Server
Tools
Tool | Input | Returns |
| – |
|
|
|
|
|
|
|
|
| IssueBadge API response |
issue_badge emails the certificate to the recipient and returns a public verification URL. Every call with a new idempotency_key issues a new certificate (one is generated as mcp-<uuid> if you omit it). The API rejects a reused key, so after a failed call check whether the certificate was issued before calling again with a new key.
Example prompt once installed: "Issue the Course Completion certificate to Jane Doe, jane@example.com."
Dynamic QR codes
Tool | Input | Returns |
|
| the QR code ( |
|
|
|
|
| the QR code + PNG image block |
|
| the updated QR code |
|
|
|
|
|
|
Types: url, vcard, paypal, wifi, email, phone, sms, maps, event, facebook, twitter, youtube, text, mecard. The image encodes an IssueBadge redirect (scan_url), so update_qr_code changes where a printed code goes without reprinting it. data holds the type's fields, for example { "url": "https://…" }, { "ssid", "password", "security" } for wifi, or { "latitude", "longitude" } for maps.
Example prompt: "Create a QR code named Menu that opens https://example.com/menu and show it to me."
ChatGPT and OAuth
The remote server also speaks OAuth 2.1 for hosts that cannot send an API key (ChatGPT apps, Claude connectors): a
request without a bearer gets 401 + WWW-Authenticate: Bearer resource_metadata=…, /.well-known/oauth-protected-resource
points at https://app.issuebadge.com (PKCE S256, dynamic client registration), and the issued access token is forwarded
exactly like an API key. issue_badge carries a widget (ui://widget/certificate.html, MCP Apps / ChatGPT Apps SDK)
that renders the certificate card. See CHATGPT.md.
Privacy and security
The remote server is stateless. Your API key is read from the
Authorizationheader of each request, forwarded toapp.issuebadge.com, and never stored or logged. Requests without a key get401.The only host contacted is
app.issuebadge.com. Recipient name, email and the badge id are sent there to create the certificate.Privacy policy: https://issuebadge.com/h/policy · Terms: https://issuebadge.com/h/terms · Support: https://issuebadge.com/h/contact
Self-host the remote server
git clone https://github.com/issuebadge/mcp-server && cd mcp-server
npm install
npm test
npx wrangler deploy --config worker/wrangler.toml # needs a Cloudflare accountGET /health returns { ok: true }. Point ISSUEBADGE_BASE_URL at a different API host for the stdio server if you run IssueBadge elsewhere.
Development
npm install
npm test # vitest: client, tools, worker (mocked IssueBadge API)
npm run build # tsc → dist/ (stdio bin)
npm run dev:workerLayout: src/issuebadge.ts (API client), src/tools.ts (tool registry shared by both hosts), src/stdio.ts (npm bin), src/createBadge.ts (stdio-only tool), worker/index.ts (Cloudflare Worker), .cursor-plugin/ + mcp.json (Cursor plugin), .claude-plugin/ + .mcp.json (Claude Code plugin), skills/issuebadge/SKILL.md, server.json (MCP Registry).
License
MIT
Available Tools
4 toolscreate_badgeB
Create a new badge template with optional custom fields and branding. This badge can then be issued to recipients.
| Name | Required | Description | Default |
|---|---|---|---|
| name | Yes | Badge name (e.g., "Web Development Certificate") | |
| description | Yes | Badge description (e.g., "Awarded for completing the full-stack web development course") | |
| issuing_organization_name | Yes | Name of the issuing organization (e.g., "Tech Academy") | |
| idempotency_key | Yes | Unique key to prevent duplicate badge creation (e.g., "badge_webdev_2024_001") | |
| nickname | No | Optional badge nickname or short name | |
| left_panel_description | No | Additional description for the left panel of the certificate | |
| organization_id | No | Existing organization ID (optional, will create new organization if not provided) | |
| comment | No | Additional comments or notes about the badge | |
| expire_date | No | Badge expiration date in YYYY-MM-DD format (optional) | |
| badge_logo_path | No | Path to badge logo file (jpeg,png,jpg,gif,svg, max 2MB) | |
| custom_fields | No | Custom fields for this badge (e.g., completion date, score, instructor) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries the full burden. It mentions the tool creates a badge template with optional fields, but lacks critical behavioral details such as required permissions, whether creation is idempotent (hinted by idempotency_key but not explained), rate limits, or what happens on failure. The description does not contradict annotations since none exist.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is front-loaded with the core purpose in the first sentence, and the second sentence adds useful context about subsequent issuance. It is appropriately sized with two sentences and no redundant information, though it could be slightly more structured for clarity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the complexity (11 parameters, no annotations, no output schema), the description is incomplete. It lacks details on behavioral traits like permissions or error handling, does not explain the return value or what happens after creation, and relies heavily on the schema for parameter documentation without compensating for missing contextual information.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents all 11 parameters thoroughly. The description adds minimal value by mentioning 'optional custom fields and branding,' which loosely maps to custom_fields and badge_logo_path, but does not provide additional syntax, format, or usage details beyond what the schema provides.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the action ('Create a new badge template') and the resource ('badge'), specifying it includes optional custom fields and branding. It distinguishes from siblings by focusing on template creation rather than retrieval (get_all_badges), issuance (issue_badge), or validation (validate_key).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage by mentioning the badge can be issued to recipients afterward, which suggests a workflow context. However, it does not explicitly state when to use this tool versus alternatives like issue_badge or get_all_badges, nor does it mention prerequisites or exclusions.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_all_badgesB
Retrieve all available badges for the authenticated organization. Returns a list of badges with their IDs and names.
| Name | Required | Description | Default |
|---|---|---|---|
| limit | No | Maximum number of badges to return (default: 100, max: 100) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It adds some context by specifying that it returns a list with IDs and names, which is useful beyond the input schema. However, it lacks details on authentication requirements, rate limits, pagination, or error handling, leaving gaps for a tool that interacts with organizational data.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two sentences that are front-loaded and efficient, with no wasted words. The first sentence states the purpose, and the second adds key behavioral context about the return format, making it appropriately sized and structured.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool's simplicity (one optional parameter, no output schema, no annotations), the description is adequate but has clear gaps. It explains the return format but doesn't cover authentication, error cases, or how the tool fits into the broader context with sibling tools. For a retrieval tool, this is minimal viable but not fully comprehensive.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has 100% description coverage, with the 'limit' parameter fully documented in the schema. The description does not add any parameter-specific information beyond what the schema provides, such as default behavior or usage tips. This meets the baseline of 3 since the schema handles the heavy lifting.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb ('Retrieve') and resource ('all available badges for the authenticated organization'), making the purpose unambiguous. It distinguishes from siblings like 'create_badge' and 'issue_badge' by focusing on retrieval rather than creation or issuance. However, it doesn't explicitly differentiate from 'validate_key', which might be a different operation.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives. It doesn't mention when to use 'get_all_badges' over other retrieval methods or tools, nor does it specify any prerequisites or exclusions. The context is implied but not explicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
issue_badgeA
Issue a badge to a recipient. This creates a digital certificate and sends notification email with verification URL.
| Name | Required | Description | Default |
|---|---|---|---|
| badge_id | Yes | Encrypted badge ID from badge creation (get this from get_all_badges or create_badge) | |
| name | Yes | Recipient's full name (will appear on the certificate) | |
| No | Recipient's email address (optional, but recommended for notifications) | ||
| phone | No | Recipient's phone number (optional) | |
| idempotency_key | Yes | Unique key to prevent duplicate issuance (e.g., "issue_john_doe_2024_001") | |
| metadata | No | Custom field values and additional metadata (e.g., completion_date, score, etc.) |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries full burden. It discloses key behavioral traits: creation of a digital certificate and sending of notification emails with verification URLs. However, it doesn't mention permissions needed, rate limits, whether the operation is idempotent (though idempotency_key parameter hints at this), or error handling. The description adds value but leaves gaps for a mutation tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is two concise sentences that front-load the core purpose and outcomes. Every word earns its place with no redundancy or fluff, making it highly efficient for quick comprehension.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a mutation tool with 6 parameters, no annotations, and no output schema, the description is adequate but incomplete. It covers the main action and outcomes but lacks details on permissions, errors, or return values. Given the complexity and missing structured data, it should provide more behavioral context to be fully helpful.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so the schema already documents all 6 parameters thoroughly. The description doesn't add any parameter-specific details beyond what's in the schema (e.g., it doesn't explain badge_id sourcing further or metadata usage). Baseline 3 is appropriate when schema does the heavy lifting.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the specific action ('issue a badge'), the target ('to a recipient'), and the outcomes ('creates a digital certificate and sends notification email with verification URL'). It distinguishes from sibling tools like create_badge (which creates badge definitions) and get_all_badges (which lists badges).
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description implies usage context (issuing badges to recipients) but doesn't explicitly state when to use this tool versus alternatives like create_badge. It mentions getting badge_id from get_all_badges or create_badge, which provides some guidance but not explicit when/when-not rules or comparisons to siblings like validate_key.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
validate_keyA
Validate an IssueBadge API key for authentication. Use this to test if your API credentials are working correctly.
| Name | Required | Description | Default |
|---|---|---|---|
| api_key | Yes | The API key to validate (usually starts with a number and pipe, e.g., "1|abc123...") |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full burden of behavioral disclosure. It states the tool validates API keys for authentication testing, which implies a read-only, non-destructive operation. However, it doesn't disclose important behavioral details like rate limits, error responses, or what specific validation checks are performed (e.g., format validation, authentication against server).
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is perfectly concise with two sentences that each earn their place. The first sentence states the purpose and resource, while the second provides explicit usage guidance. There's zero wasted text, and the information is front-loaded with the core functionality.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a single-parameter authentication validation tool with no output schema, the description provides good context about what the tool does and when to use it. However, it doesn't describe what the validation result looks like (e.g., returns success/failure, error messages) or any prerequisites beyond having an API key. Given the tool's relative simplicity, the description is mostly complete but could benefit from output information.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, with the single parameter 'api_key' well-documented in the schema. The description doesn't add any parameter-specific information beyond what the schema already provides about the API key format and purpose. The baseline score of 3 is appropriate when the schema does the heavy lifting for parameter documentation.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the specific action ('validate') and resource ('IssueBadge API key') with explicit purpose ('for authentication' and 'test if your API credentials are working correctly'). It distinguishes from siblings like create_badge, get_all_badges, and issue_badge by focusing solely on authentication testing rather than badge operations.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explicitly states when to use this tool: 'Use this to test if your API credentials are working correctly.' This provides clear context for usage (authentication testing) and implicitly distinguishes it from sibling tools that perform badge-related operations rather than credential validation.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
4 tool updates
- First observed
create_badge - First observed
get_all_badges - First observed
issue_badge - First observed
validate_key
TDQS
Scored across 4 tools
Each tool has a clearly distinct purpose: create_badge (template creation), get_all_badges (list retrieval), issue_badge (awarding to recipients), and validate_key (authentication testing). There is no overlap in functionality, making tool selection straightforward for an agent.
All tool names follow a consistent verb_noun pattern (create_badge, get_all_badges, issue_badge, validate_key), using snake_case throughout. This predictability enhances usability and reduces cognitive load for agents.
With 4 tools, the server is well-scoped for its purpose of managing digital badges. Each tool serves a distinct and essential function (create, list, issue, authenticate), with no unnecessary or redundant tools, making the count appropriate.
The tool set covers core CRUD operations for badges (create and list) and key actions (issue and validate), but lacks update and delete capabilities for badges. This minor gap might require workarounds but does not severely hinder basic workflows.
Maintenance
Related MCP Connectors
A comprehensive Model Context Protocol (MCP) server that enables AI assistants to interact with yo…
A Model Context Protocol server for Wix AI tools
MCP server for building and testing AI agents with multi-model experimentation and insights.
The Mercado Pago MCP Server implements the Model Context Protocol to provide AI agents and LLMs with access to Mercado Pago's APIs and tools within compatible development environments. It acts as an intermediary that translates Mercado Pago resources into executable functions (tools) that AI applications can invoke to perform actions and automate flows. The server simplifies integration, enables using documentation to implement or improve code, and optimizes operations through natural language interactions without manual implementations.
Related MCP Servers
- FlicenseNot gradedqualityDmaintenanceA versatile Model Context Protocol server that enables AI assistants to manage calendars, track tasks, handle emails, search the web, and control smart home devices.23-
- AlicenseBqualityDmaintenanceA Model Context Protocol server that allows secure execution of pre-approved commands, enabling AI assistants to safely interact with the user's system.16 npm22ISC
- AlicenseNot gradedqualityDmaintenanceA Model Context Protocol server that enables AI assistants to manage meeting data, including creating meeting bots, searching transcripts, and organizing calendar events.30MIT
- AlicenseBqualityDmaintenanceA Model Context Protocol server providing AI assistants with comprehensive project, task, and subtask management capabilities with project-specific storage.2941 npm88MIT