# Docusign (slim)

> Docusign is an e-signature and agreement management service. Its eSignature REST API creates envelopes from documents or templates, sends them to signers, embeds signing in an app and reports status. A hosted MCP server exposes a subset as tools.

- Full: https://www.anchorterminal.com/tools/docusign.md (~8,400 tokens) · this version ~2,280 tokens · JSON https://www.anchorterminal.com/tools/docusign.json · canonical https://www.anchorterminal.com/tools/docusign
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · Updated: 2026-10-08

**B · 62.5/100 · rank #301 of 629 · #5 in Contracts, proposals & e-signatures · not agent-ready · confidence medium**


Assessment: The eSignature REST API has public Swagger and OpenAPI files on GitHub, OAuth 2.0, a free developer sandbox and Connect webhooks, and the MCP server reached general availability on 30 September 2026. Production needs a paid plan from $50 a month and a Go-Live review, and the status site lists 34 incidents since 9 July 2026.

## Facts

- Kind: HTTP API · vendor: Docusign, Inc. · category: Contracts, proposals & e-signatures · legal entity: Docusign, Inc. · provenance 85/100
- Endpoint: `https://mcp.docusign.com/mcp` (HTTP)
- Auth: OAuth · pricing: Paid · x402: no · licence: Proprietary service under Docusign's Master Services Agreement. The OpenAPI specifications repository and the eSignature SDKs on GitHub are MIT
- Probe metrics: not measured yet (probes haven't run)
- Surface graded: eSignature REST API v2.1, with the hosted MCP server noted alongside. Other APIs include Workflow Builder, Agreement Manager, Web Forms, Connected Fields, Click, Admin, Monitor and Rooms
- Base URLs: Demo https://demo.docusign.net/restapi/v2.1/, production https://{server}.docusign.net/restapi/v2.1/ where {server} is the account's data centre (for example NA2, CA or EU). Newer APIs at https://api.docusign.com/v1/. Auth at account-d.docusign.com (demo) and account.docusign.com
- MCP server: Streamable HTTP at https://mcp.docusign.com/mcp (production) and https://mcp-d.docusign.com/mcp (demo). General availability on 30 September 2026 per the docs. 42 tools listed for demo, 29 of them in production. OAuth metadata shows authorisation code with PKCE (S256) and no registration endpoint
- MCP tools: createEnvelope, createEnvelopeWithDocuments, getEnvelope, getEnvelopes, listRecipients, updateEnvelope, updateEnvelopeRecipients, sendReminder, getTemplates, getAccount, getUser, getUsers, getUserInfo, eight Workflow Builder tools, three CLM workflow tools, getAllAgreements and getAgreementDetails. Workflow Builder and Agreement Manager tools need an IAM subscription
- Credentials: OAuth 2.0 only. authorisation code grant (confidential, or public with PKCE), JWT Grant for service integrations (RSA key pair, one-hour access token, no refresh token) and Implicit Grant, which the docs advise against. Refresh tokens typically last 30 days. Each app has an integration key
- Go-Live: An integration key is built in the developer account, then promoted after a review of its API activity. Production needs a paid account and an administrator. Manual reviews typically take 24 to 48 hours. Public integrations must join the partner programme
- Rate limits: 3,000 requests an hour per account across all apps, reset on the hour. Burst limit of 500 calls per 30 seconds in production and 200 in the developer environment. One status GET per envelope per 15 minutes. /oauth/userinfo 25,000 an hour per user and 50,000 per integration key
- Errors: JSON body with `errorCode` (upper-case constant) and `message`. 429 for hourly, burst and polling limits since a change announced on 23 June 2026. Multi-item calls return 200 or 201 with `errorDetails` per failed item
- Webhooks: Connect at account or organisation level, or `eventNotification` per envelope. JSON SIM event model (Connect 2.0), HMAC signatures, OAuth, mutual TLS, a retry queue and failure logs. Listeners should answer 200 within five seconds
- Audit trail: GET /envelopes/{envelopeId}/audit_events returns an envelope's history. MCP calls are recorded in the existing eSignature API audit logs, with no MCP-specific log
- Pricing: Developer API plans on ecom.docusign.com (US page). Starter $50 a month ($600 billed annually) from 40 envelopes a month, Intermediate $300 ($3,600) from 100, Advanced $480 ($5,760) with PowerForms, Bulk Send and Connect. Enhanced plans through sales with a five-user minimum
- SDKs: C#, Java, Node.js, PHP, Python and Ruby. npm docusign-esign 10.0.0 (16 July 2026, eSignature v2.1-26.2.01.01), PyPI docusign-esign 6.1.0 (13 March 2026) with release candidates up to 10.0.0rc1 in June. MIT
- Specs: github.com/docusign/OpenAPI-Specifications, MIT, last commit 3 July 2026. eSignature v2.1 and v2 as Swagger 2.0, Agreement Manager and Workflow Builder as OpenAPI 3.0.3, plus Admin, Click, Monitor, Navigator, Rooms, Web Forms, Workspaces, Maestro and the Connect schema
- Certifications: ISO 27001:2022, SOC 1 Type 2, SOC 2 Type 2, PCI DSS, C5 and IRAP, with HIPAA and 21 CFR Part 11 support stated, per docusign.com/trust/compliance
- Status: health.docusign.com, Docusign's own status centre, with incidents by site (NA1 to NA4, EU, AU, CA, JP1, DEMO and others) and post-mortems on some. 111 incidents in the feed since 3 December 2025
- Data handling: Data protection attachment of 4 September 2024, privacy notice effective 9 October 2025, AI attachment of 8 July 2026. Customer data stored in Australia, the United States, the European Union or Canada per the privacy notice
- Prices: Starter plan $50 per month (plan); Intermediate plan $300 per month (plan); Advanced plan $480 per month (plan)

- Scores: Reliability 57, Performance pending, Schema & documentation 70, Agent ergonomics 70, Security & auth 64, Payments & pricing 30, Task success pending, Maintenance & community 81, Transparency & trust 72 · total over the 7 assessed categories
- Why: Reliability, Read with the hosted lines and scored on the eSignature REST API, with the MCP server noted. · Schema & documentation, Spec files for eSignature v2.1 (Swagger 2.0, 213 paths, 414 operations) and ten other APIs are public under MIT in docusign/OpenAPI-Specific… · Agent ergonomics, Envelope listing takes `count` (up to 1,000) and an `include` parameter to add recipients, folders and other detail, but there's no field se… · Security & auth, OAuth 2.0 with scopes, authorisation code grant with PKCE or a secret, and JWT Grant with an RSA key pair and one-hour tokens. · Payments & pricing, Read with the hosted rubric. · Maintenance & community, The MCP server's general availability on 30 September 2026 is the latest dated change found (30). · Transparency & trust, The service is closed under a Master Services Agreement dated 14 November 2022. The spec files and SDKs are MIT (15).
- Sources: 27, open questions: 7, both in the full twin
- Capabilities: esign.send, esign.templates, esign.embed, esign.status, contracts.generate
- JSON: https://www.anchorterminal.com/api/v1/tools/docusign.json
- Verify (for the vendor): the badge `https://www.anchorterminal.com/badges/docusign.svg` or a link to https://www.anchorterminal.com/tools/docusign from a page on docusign.com or one of its subdomains, or the README of github.com/docusign/OpenAPI-Specifications, then `POST https://www.anchorterminal.com/api/v1/verify` `{"slug", "url"}` or `verify_listing` at /mcp; re-checked weekly, no effect on the grade. Snippets in the full twin.

## Before you call it

1. Call /oauth/userinfo once after sign-in, cache `base_uri` and the account ID, and send every eSignature call to that host under /restapi/v2.1
2. Create and send an envelope in one Envelopes:create call with `status` set to `sent`. Docusign asks for five calls or fewer per envelope
3. Subscribe to Connect or set `eventNotification` for status. Polling one envelope more than once every 15 minutes is flagged and can fail the Go-Live review
4. Set `transactionId` on envelope creation so a retry after a lost response can find the envelope. The ID is valid for seven days
5. Read `X-RateLimit-Reset` and `X-BurstLimit-Remaining`, and stop calling until the reset after a 429

## Connect

```bash
npm install docusign-esign -save
```
Full config and headless snippets are in the full page. Through letme (picks today, calling later): https://letme.dev/docusign

## Similar tools

| Tool | Grade | Score | Shared capabilities | Slim |
| --- | --- | --- | --- | --- |
| airSlate SignNow | B | 68.5 | esign.send, esign.templates, esign.embed, esign.status, contracts.generate | https://www.anchorterminal.com/tools/signnow.min.md |
| PandaDoc | B | 63.1 | esign.send, esign.templates, esign.embed, esign.status, contracts.generate | https://www.anchorterminal.com/tools/pandadoc.min.md |
| Dropbox Sign | B | 68.9 | esign.send, esign.templates, esign.embed, esign.status | https://www.anchorterminal.com/tools/dropbox-sign.min.md |
| Documenso | B | 62.8 | esign.send, esign.templates, esign.status, esign.embed | https://www.anchorterminal.com/tools/documenso.min.md |


## Panel reviews (0, desk reviews from public material, no calls made)