# Docuflex Muse connector

From musedirectory.ai, the independent directory of Meta Muse connectors. Not affiliated with Meta.

## Docuflex

Create, send and track e-signature envelopes, and check US e-sign law basics.

- Record: https://musedirectory.ai/connector/docuflex
- Category: Productivity
- Developer: Docuflex (https://docuflex.net/ai/)
- Muse status: Extra setup. Not in Muse's Connectors list yet. Muse can still use it: its page gives you a request to paste into Muse.
- Health: Working, 395ms, checked 2026-11-11T20:01:16Z
- Endpoint: https://docuflex.net/mcp
- Auth: No account needed; Pricing: unknown
- Screening: Screened, no issues found (2026-11-11T20:01:16Z)
- Source: Found in the official MCP Registry (net.docuflex/esign) https://registry.modelcontextprotocol.io/v0/servers?search=net.docuflex%2Fesign

Connects to the Docuflex e-signature API so Muse can build envelopes from PDFs, add signers and signature tabs, send or void them, check status, pull hash-chained audit trails, and look up ESIGN and UETA basics for a US state. Requires a Docuflex API key.

Example request: "Send the vendor agreement to my lawyer for signature and let me know when she signs it."

How to connect: Not in Muse's Connectors list yet, but Muse can still use it. Paste this into Muse: "Use Docuflex to help me. It is a free service with an MCP server at https://docuflex.net/mcp. It does not need an API key. Ask me before you share anything with it." Muse asks before it shares anything with the app's site. Meta does not review apps used this way, so only use ones you trust. We tested this in the Muse app on September 24, 2026: Muse used an app's link directly this way and returned a live answer.

Tools:
- docuflex_overview: Product summary, how to get an API key, base URLs, auth, limits and links.
- docuflex_api_reference: List the operations (method, path, summary) for one resource group from the OpenAPI spec: envelopes, signing, verify, templates, bulk-send, connect, uploads, api-keys, oauth, accounts, library, admin.
- esign_law_lookup: High-level ESIGN / UETA / ESRA summary for a US state, the document types the federal act excludes, and what Docuflex records. Not legal advice.
- whoami: Works with an OAuth2 bearer token (user principal). Plain API keys are account-scoped and get 403 here; then use the account id from Account settings in the Docuflex app and pass it as account_id or x-docuflex-account.
- create_envelope: Create a Docuflex envelope. documents: inline base64 PDFs or staged uploadIds. recipients: name, email, routingOrder (1 = first), optional type (signer default, cc, certified_delivery, in_person_signer...). tabs: type (signature, initial, date_signed, text, checkbox...), page (1-
- send_envelope: Transition a draft to sent.
- void_envelope: Void a sent envelope with a reason.
- get_envelope: Envelope status, recipients, documents.
- list_envelopes: Most recent envelopes for the account.
- get_signing_url: Short-lived signing URL for a current-tier recipient (embedded signing). Provide the recipient's email or clientUserId as used on the envelope and a returnUrl.
- get_audit_trail: Hash-chained audit events for an envelope, oldest first.
- verify_envelope: No key needed. Returns status, sealed-document hashes, certificate hash and audit-chain verification for an envelope id. Never returns document content.
- request_access: Send a message to the Docuflex team (commercial terms, higher limits, questions). Only when the user explicitly asks and provides their own email. Limited to 5 per hour per IP.

Screening checks:
- MCP handshake: pass (Answered in 395ms)
- Domain against threat feeds (Cloudflare security DNS): pass (docuflex.net not flagged)
- Published packages against the OSV malicious-package database: n/a (No npm or PyPI package published)
- Hidden instructions or invisible characters in tool text: warn (docuflex_api_reference: Tool text tells the model to take extra steps)
- Inputs asking for passwords, card numbers or seed phrases: pass (None found)
- Domain and redirects: pass (Domain registered 132 days ago)
- AI review of purpose and tool behavior: pass (request_access description tells the model when to call it, a guardrail rather than poisoning; API key passed as a tool parameter, normal for this kind of API)