Developers
A programmable agreement backend.
SignIT exposes its operations as MCP tools and a small HTTP surface. Build with an AI client, or integrate directly.
Surfaces
MCP server
Tools, prompts, and a resource over stdio or streamable HTTP, authenticated per organization.
Inbound email API
An HMAC-signed endpoint fed by a thin Cloudflare Email Worker. The gateway is the trust boundary.
Public intake API
/api/contact and
/api/private-alpha — bot-protected and rate-limited.
Principles
- Every request is authenticated at the boundary; nothing downstream trusts unverified input.
- Organization scope is explicit and never inferred from ambiguous signals.
- State changes are idempotent and safe to retry.
- Consequential operations are proposals until a human approves them.
Full client setup and token issuance are covered in onboarding once you are approved for the alpha.