Connectors · Files & documents
DocuSign MCP server for AI agents.
actionlake is an MCP gateway: one remote MCP server that connects Claude and other MCP clients to DocuSign and the rest of your systems. It gives your agent 414 DocuSign actions (168 reads, 168 writes and 78 that wait for a confirmation) and holds the DocuSign credential itself, so the agent never does. It paces DocuSign's limits and records every call.
100,000 free calls a month. No card, no email, no password: press Start a free sandbox on the next screen and keep the key it shows you.
claude mcp add --transport http actionlake https://connect.actionlake.com/mcpdo { action: "docusign.accounts_get_account", intent: "check which DocuSign account is connected"}# Retrieves the account information for the specified account · read · 1 upstream call- 414actionsin one signed file
- 168readlook, never change
- 168writecreate and update
- 78wait for a yesdestructive, confirmed first
Set up
Connect DocuSign in three steps.
- 01
Add actionlake to Claude.
Run the command once in Claude Code; its consent page can create a free sandbox: 100,000 calls a month, no card. In the Claude app, add a custom connector with the URL below and paste your key on the consent page. Creating a new sandbox from the Claude app is not yet tested by us.
https://connect.actionlake.com/mcp - 02
Connect DocuSign.
Signed token (JWT). You paste the signing key once; actionlake signs a short-lived token for each call. actionlake stores what you paste write-only, sealed under your tenant's key.
integration_keyDocuSign integration keyuser_idImpersonated user GUIDprivate_keyRSA private key, PKCS#8 PEMaccount_base_hostWhere your DocuSign lives: your account base hostaccount_idYour DocuSign account id
account { op: "connections.requirements", service: "docusign" } # free: exactly what to paste, and what is found for you - 03
Make the first call. Check before a write.
Ask in plain words; Claude picks the action. Before anything changes,
checkvalidates the call and prices it, for free.do { action: "docusign.accounts_get_account" }# retrieves the account information for the specified account · read · 1 upstream callcheck { action: "docusign.users_post_users", input: { … } }# free: inputs, permissions, cost and confirmations, nothing sent
DocuSign at a glance
- Sign-in
- Signed token (JWT). You paste the signing key once; actionlake signs a short-lived token for each call.
- You provide
integration_keyuser_idprivate_key- Setup fields
account_base_hostaccount_id- Limits we pace to
- 1,000 calls an hour, per connection
- API covered
- DocuSign API 2.1, at your DocuSign instance's API base URL, which you enter when connecting (path /restapi/v2.1)
- Built from
- DocuSign's documentation, read 15 September 2026OpenAPI spec (GitHub)
- Service file
- Version 2.0.0, signed (Ed25519)
- Cached reads
- 166 of 168 reads, for up to an hour; a write clears what it affects
- Ready-made plans
- 10 in the store
- Shared entities
- 6, so ask can line DocuSign up with your other systems
- Data
- Processed and stored in Sydney, Australia. No US region yet
Capabilities
What an AI agent can do in DocuSign.
414 actions in 16 areas. Every one carries its effect, so a key can allow the reads and hold the rest.
- 168readlook, never change
- 168writecreate and update
- 78destructivewait for a confirmation
Signature
23485 read · 105 write · 44 destructive
Search for specific sets of envelopes by using search filters · Gets the list of templates · Gets PowerForm senders · Registers the current user as a notary
Settings
2612 read · 11 write · 3 destructive
Returns a list of stamps available in the account · Returns information about the specified stamp · Deletes an account stamp · Deletes the image for a stamp
Users
259 read · 11 write · 5 destructive
Retrieves the list of users for the specified account. You can filter the users list to get specific users · Adds new users to the specified account · Gets the user information for a specified user using a userId (GUID). To find a user based on their email a... · Updates user information for the specified user
Webhooks
229 read · 7 write · 6 destructive
Returns all users from the configured Connect service · Returns users from the configured Connect service · Generates a new connect HMAC Secret · get connect
Groups
196 read · 8 write · 5 destructive
Gets information about groups associated with the account · Gets a list of the Signing Groups in an account · Creates one or more groups for the account · Creates a signing group
Accounts
169 read · 4 write · 3 destructive
Reserved: Gets the shared item status for one or more users · Reserved: Sets the shared access information for users · Gets a list of unsupported file types · Gets the supported languages for envelope recipients
Branding
136 read · 4 write · 3 destructive
Returns metadata about the branding resources for an account · Exports a brand · Gets a brand logo · Returns a branding resource file
Storage
125 read · 4 write · 3 destructive
Retrieves a list of all the items in a specified folder from the specified cloud storage provider · Gets a list of items from a cloud storage provider · Retrieves metadata about a chunked upload · Deletes a chunked upload
8 more areas · 47 actions
- Workspaces 11
- Billing 8
- Diagnostics 7
- Contacts 5
- Roles 5
- Folders 4
- Payments 4
- Invoicing 3
Top actions
The DocuSign API, shaped for agents.
The ids your agent types, what each does, and the one name it shares with other systems. 188 of DocuSign's 196 action names are shared with at least one other connector, so an agent learns them once.
| Action | What it does | Effect | Same name in |
|---|---|---|---|
docusign.users_get_usersRetrieves the list of users for the specified account. You can filter the users list to get specific users | Retrieves the list of users for the specified account. You can filter the users list to get specific users. | read | identity.user.list474 connectors |
docusign.folders_get_foldersReturns a list of the account's folders | Returns a list of the account's folders. | read | content.folder.list62 connectors |
docusign.users_post_usersAdds new users to the specified account | Adds new users to the specified account. | write | identity.user.create262 connectors |
docusign.groups_get_groupsGets information about groups associated with the account | Gets information about groups associated with the account. | read | identity.group.list262 connectors |
docusign.envelopes_get_envelopesSearch for specific sets of envelopes by using search filters | Search for specific sets of envelopes by using search filters. | read | content.signature_request.list10 connectors |
docusign.templates_get_templatesGets the list of templates | Gets the list of templates. | read | content.signature_template.list7 connectors |
docusign.user_put_userUpdates user information for the specified user | Updates user information for the specified user. | write | identity.user.update280 connectors |
docusign.folders_get_folder_itemsGets information about items in a specified folder | Gets information about items in a specified folder. | read | content.folder.get47 connectors |
docusign.users_delete_usersCloses one or more users in the account | Closes one or more users in the account. | destructive | identity.user.delete253 connectors |
docusign.signing_groups_get_signing_groupsGets a list of the Signing Groups in an account | Gets a list of the Signing Groups in an account. | read | identity.group.list262 connectors |
docusign.envelopes_put_statusGets envelope statuses for a set of envelopes | Gets envelope statuses for a set of envelopes. | read | content.signature_request.list10 connectors |
docusign.templates_post_templatesCreates one or more templates | Creates one or more templates. | write | content.signature_template.create5 connectors |
Try it
Prompts to paste into Claude.
Each one names the DocuSign actions it will call, so you know what it reads and what it changes before you send it.
- Readread
List the payments recorded in DocuSign this month, largest first.
calls
docusign.billing_payments_get_payment_list - Planread
Report the account security and retention posture in DocuSign.
calls
docusign.password_rules_get_password_rulesdocusign.permission_profiles_get_permission_profilesdocusign.account_identity_verification_get_account_identity_verificationdocusign.envelope_purge_configuration_get_envelope_purge_configurationdocusign.shared_access_get_shared_access - Planwrite
Review a brand and roll it out to a group in DocuSign. Ask me before anything is sent or changed.
calls
docusign.brands_get_brandsdocusign.brand_get_branddocusign.brand_resources_get_brand_resources_listdocusign.brand_put_branddocusign.brands_put_group_brands - Writewrite
Adds new users to the specified account in DocuSign. Show me exactly what you will send before you save it.
calls
docusign.users_post_users
The plan store
Ready-made plans for DocuSign.
10 plans in the store. Install one and your agent runs it by name; the reply says which connections are still missing. A schedule can run a plan on a timetable. There are no triggers or webhooks, by design.
Audit templates and their recipients
Use it when Someone wants an inventory of DocuSign templates with the signer roles each one defines.
Collect documents and comments from completed envelopes
Use it when An auditor or records process needs documents and comment history for recently completed envelopes.
Harvest PowerForm submissions for a date window
Use it when Someone needs the responses collected by a PowerForm over a period, tied back to signers.
Report the account security and retention posture
Use it when A security or compliance reviewer asks how the DocuSign account is configured.
Send an envelope and wait until it is signed
Use it when A document must be sent for signature and the caller wants the plan to block until signing finishes.
Review past due invoices before recording a payment
Use it when The account is in arrears and someone wants the outstanding invoices reviewed and paid after sign-off.
A person decides
Post a payment against the past due DocuSign invoices listed above.
Watch a bulk send batch and act on the result
Use it when A bulk send batch is running and the caller wants it watched and then corrected or resent.
A person decides
Apply the requested status change to this bulk send batch.
Review a brand and roll it out to a group
Use it when A brand has been prepared and must be reviewed then applied to a group's envelopes.
A person decides
Update this brand and make it the signing brand for the named group.
Triage Connect webhook failures and purge the logs
Use it when Connect webhook deliveries are failing and someone needs the causes gathered before clearing the log.
A person decides
Permanently delete the reviewed Connect failure log entry.
Offboard a user and revoke their authorizations
Use it when A user is leaving and their DocuSign delegations and storage links must be revoked.
A person decides
Revoke all DocuSign authorizations and cloud storage links for this departing user.
account { op: "plans.install", slug: "docusign-template-inventory-audit" }
# then ask for it by name; a schedule can run it on a timetableGovernance for DocuSign
Destructive actions wait for a yes.
78 DocuSign actions are destructive. The first 10:
- Closes one or more users in the account
docusign.users_delete_users - Deletes an existing user group
docusign.groups_delete_groups - Deletes one or more signing groups
docusign.signing_groups_delete_signing_groups - Deletes multiple contacts from an account
docusign.contacts_delete_contacts - Deletes a contact
docusign.contacts_delete_contact_with_id - Deletes a chunked upload
docusign.chunked_uploads_delete_chunked_upload - Deletes an account stamp
docusign.account_signatures_delete_account_signature - Deletes the image for a stamp
docusign.account_signatures_delete_account_signature_image - Deletes files or sub-folders from a workspace
docusign.workspace_folder_delete_workspace_items - Deletes a permission profile from an account
docusign.permission_profiles_delete_permission_profiles
A destructive action runs only with confirm: true. Under the human policy the agent cannot confirm for itself: the run stops until a named person approves, in the console or from a signed link in an email. The cap on a key is refused before the call is sent, never after.
Closes one or more users in the account?
intent: the user asked me to closes one or more users in the account
account { op: "keys.create", name: "docusign-agent", allowed_actions: ["docusign.*"], cap_calls: 2000, confirm_policy: "human_for_writes", approval_rules: [ { match: "docusign.users_delete_users", approver: "[email protected]" }, { match: "docusign.groups_delete_groups", approver: "[email protected]" }, { match: "docusign.signing_groups_delete_signing_groups", approver: "[email protected]" } ]}Cost
What DocuSign costs on actionlake.
Every DocuSign action is one upstream call, the only thing actionlake bills. Searching, check, cost, account and any call DocuSign refused with 401, 403, 429 or a 5xx are free. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.
- 1upstream call per actionall 414 DocuSign actions
- 20actions pageeach page of a long list is one call
- 166reads can be cacheda cache hit costs nothing
- 100,000calls a month, freepaid plans from US$49 a month for 250,000
Action index
Every DocuSign action.
414 actions by area: the id your agent calls, what it does, and its effect.
Signature234
docusign.envelopes_get_envelopesSearch for specific sets of envelopes by using search filtersreaddocusign.notary_post_notaryRegisters the current user as a notarywritedocusign.power_forms_get_power_forms_sendersGets PowerForm sendersreaddocusign.templates_get_templatesGets the list of templatesreaddocusign.account_identity_verification_get_account_identity_verificationRetrieves the Identity Verification workflows available to an accountreaddocusign.attachments_delete_attachmentsDeletes one or more envelope attachments from a draft envelopedestructive- and 228 more in this area
Settings26
docusign.account_signatures_delete_account_signatureDeletes an account stampdestructivedocusign.account_signatures_delete_account_signature_imageDeletes the image for a stampdestructivedocusign.account_signatures_get_account_signatureReturns information about the specified stampreaddocusign.account_signatures_get_account_signaturesReturns a list of stamps available in the accountreaddocusign.account_custom_fields_delete_account_custom_fieldsDeletes an account custom fielddestructivedocusign.account_custom_fields_get_account_custom_fieldsGets a list of custom fieldsread- and 20 more in this area
Users25
docusign.user_get_userGets the user information for a specified user using a userId (GUID). To find a user based on their email a...readdocusign.user_put_userUpdates user information for the specified userwritedocusign.users_get_usersRetrieves the list of users for the specified account. You can filter the users list to get specific usersreaddocusign.users_post_usersAdds new users to the specified accountwritedocusign.user_custom_settings_delete_custom_settingsDeletes custom user settings for a specified userdestructivedocusign.user_custom_settings_get_custom_settingsRetrieves the custom user settings for a specified userread- and 19 more in this area
Webhooks22
docusign.connect_get_connect_all_usersReturns all users from the configured Connect servicereaddocusign.connect_get_connect_usersReturns users from the configured Connect servicereaddocusign.connect_hmac_create_connect_secretGenerates a new connect HMAC Secretwritedocusign.connect_hmac_get_connect_secretget connectreaddocusign.connect_delete_connect_configDeletes the specified Connect configurationdestructivedocusign.connect_failures_delete_connect_failure_logDeletes a Connect failure log entrydestructive- and 16 more in this area
Groups19
docusign.groups_get_groupsGets information about groups associated with the accountreaddocusign.groups_post_groupsCreates one or more groups for the accountwritedocusign.signing_groups_get_signing_groupsGets a list of the Signing Groups in an accountreaddocusign.signing_groups_post_signing_groupsCreates a signing groupwritedocusign.brands_delete_group_brandsDeletes brand information from a groupdestructivedocusign.brands_get_group_brandsGets the brand information for a groupread- and 13 more in this area
Accounts16
docusign.shared_access_get_shared_accessReserved: Gets the shared item status for one or more usersreaddocusign.shared_access_put_shared_accessReserved: Sets the shared access information for userswritedocusign.supported_languages_get_supported_languagesGets the supported languages for envelope recipientsreaddocusign.unsupported_file_types_get_unsupported_file_typesGets a list of unsupported file typesreaddocusign.accounts_delete_accountDeletes the specified accountdestructivedocusign.accounts_get_accountRetrieves the account information for the specified accountread- and 10 more in this area
Branding13
docusign.brand_export_get_brand_export_fileExports a brandreaddocusign.brand_logo_get_brand_logoGets a brand logoreaddocusign.brand_resources_get_brand_resourcesReturns a branding resource filereaddocusign.brand_resources_get_brand_resources_listReturns metadata about the branding resources for an accountreaddocusign.brand_delete_brandDeletes a branddestructivedocusign.brand_get_brandGets information about a brandread- and 7 more in this area
Storage12
docusign.chunked_uploads_delete_chunked_uploadDeletes a chunked uploaddestructivedocusign.chunked_uploads_get_chunked_uploadRetrieves metadata about a chunked uploadreaddocusign.cloud_storage_folder_get_cloud_storage_folderGets a list of items from a cloud storage providerreaddocusign.cloud_storage_folder_get_cloud_storage_folder_allRetrieves a list of all the items in a specified folder from the specified cloud storage providerreaddocusign.chunked_uploads_post_chunked_uploadsInitiate a new chunked uploadwritedocusign.chunked_uploads_put_chunked_upload_partAdd a chunk to an existing chunked uploadwrite- and 6 more in this area
Workspaces11
docusign.workspace_folder_delete_workspace_itemsDeletes files or sub-folders from a workspacedestructivedocusign.workspace_folder_get_workspace_folderList workspace folder contentsreaddocusign.workspace_get_workspacesList Workspacesreaddocusign.workspace_post_workspaceCreate a Workspacewritedocusign.workspace_delete_workspaceDelete Workspacedestructivedocusign.workspace_file_get_workspace_fileGets a workspace fileread- and 5 more in this area
Billing8
docusign.billing_plan_get_credit_card_infoGet credit card informationreaddocusign.billing_plan_put_billing_planUpdates an account billing planwritedocusign.billing_plan_put_downgrade_account_billing_planQueues downgrade billing plan request for an accountwritedocusign.billing_plans_get_billing_plansGets a list of available billing plansreaddocusign.billing_plan_get_billing_planGet Account Billing Planreaddocusign.billing_plan_get_downgrade_request_billing_infoReturns downgrade plan information for the specified accountread- and 2 more in this area
Diagnostics7
docusign.api_request_log_get_request_log_settingsGets the API request logging settingsreaddocusign.api_request_log_get_request_logsGets the API request logging log filesreaddocusign.api_request_log_put_request_log_settingsEnables or disables API request logging for troubleshootingwritedocusign.service_information_get_service_informationRetrieves the available REST API versionsreaddocusign.api_request_log_delete_request_logsDeletes the request log filesdestructivedocusign.api_request_log_get_request_logGets a request logging log fileread- and 1 more in this area
Contacts5
docusign.contacts_delete_contact_with_idDeletes a contactdestructivedocusign.contacts_get_contact_by_idGets one or more contactsreaddocusign.contacts_post_contactsAdd contacts to a contacts listwritedocusign.contacts_put_contactsUpdates one or more contactswritedocusign.contacts_delete_contactsDeletes multiple contacts from an accountdestructive
Roles5
docusign.permission_profiles_get_permission_profileReturns a permission profile for an accountreaddocusign.permission_profiles_get_permission_profilesGets a list of permission profilesreaddocusign.permission_profiles_post_permission_profilesCreates a new permission profile for an accountwritedocusign.permission_profiles_put_permission_profilesUpdates a permission profilewritedocusign.permission_profiles_delete_permission_profilesDeletes a permission profile from an accountdestructive
Folders4
docusign.folders_get_folder_itemsGets information about items in a specified folderreaddocusign.folders_get_foldersReturns a list of the account's foldersreaddocusign.folders_put_folder_by_idMoves a set of envelopes from their current folder to another folderwritedocusign.search_folders_get_search_folder_contentsDeprecated. Use Envelopes: listStatusChangesread
Payments4
docusign.billing_payments_get_paymentGets billing payment information for a specific paymentreaddocusign.billing_payments_get_payment_listGets payment information for one or more paymentsreaddocusign.billing_payments_post_paymentPosts a payment to a past due invoicewritedocusign.payment_gateway_accounts_get_all_payment_gateway_accountsList payment gateway accountsread
Invoicing3
docusign.billing_invoices_get_billing_invoiceRetrieves a billing invoicereaddocusign.billing_invoices_get_billing_invoicesGet a List of Billing Invoicesreaddocusign.billing_invoices_get_billing_invoices_past_dueGet a list of past due invoicesread
This index shows a sample of each area. All 414 actions, with their inputs and prices, are in the catalogue, which a free sandbox key can search.
Questions
The DocuSign MCP server, answered.
Is there a DocuSign MCP server for Claude?
Yes. actionlake is an MCP gateway: a remote MCP server that gives Claude, or another MCP client, 414 DocuSign actions across signature, settings, users and webhooks, through the same eight tools it uses for every other connector. actionlake is independent; it is not made or endorsed by DocuSign.
What do I need to connect DocuSign?
DocuSign integration key, Impersonated user GUID and RSA private key, PKCS#8 PEM. Plus your account base host and your account id. The free call account { op: "connections.requirements", service: "docusign" } lists exactly what to paste.
Can an AI agent delete or change things in DocuSign?
Only if its key allows it, and only with an explicit confirmation. 78 DocuSign actions are destructive, including closes one or more users in the account, deletes an existing user group and deletes one or more signing groups. Each runs only with confirm: true. Under the human confirm policy, or an approval rule on the key, the run waits until a named person approves it.
Will an AI agent use up my DocuSign API limit?
actionlake paces every call to the limits in the DocuSign service file: 1,000 calls an hour per connection. Repeated reads are answered from cache (166 DocuSign actions can be), which never reaches DocuSign.
What does a DocuSign action cost?
One upstream call, the only unit actionlake bills. A list that pages bills one call per page (20 DocuSign actions page). Cache hits, searches, dry runs and calls DocuSign refused with 401, 403, 429 or a 5xx are free. The Free plan includes 100,000 calls a month with no card. Paid plans start at US$49 a month for 250,000 calls, with overage from US$0.30 down to US$0.18 per 1,000.
Which DocuSign API does it cover?
The DocuSign API 2.1 at your DocuSign instance's API base URL, which you enter when connecting (path /restapi/v2.1). It is built from DocuSign's documentation as read on 15 September 2026. 414 actions in 16 areas, each one in the signed service file (version 2.0.0).
Does actionlake keep my DocuSign data, and where?
actionlake processes and stores data in Sydney, Australia; there is no US region yet. Reads may be cached for up to an hour, and a write clears the reads it affects. Each run's request and response is kept, sealed, for your plan's trace window: 1 day on Free, 3 days on Starter, 7 days on Pro, 14 days on Team, 30 days on Business and 30 days on Enterprise. Your DocuSign credential is sealed under your tenant's key, never logged and never returned. Your traffic is not used to train models.
Which AI clients can use it?
Claude Code, tested by us end to end, and the Claude app as a custom connector, tested by us with an existing key. Other MCP clients that support remote servers over Streamable HTTP (MCP revisions 2025-06-18 and 2025-11-25) and OAuth dynamic client registration, or a bearer header, should connect the same way; we have not tested them. Or plain REST, under the same action names.
Give your agent DocuSign today.
Start free - 100,000 calls/month, no card. No signup. Hard caps on every key. Cached answers are free.