Ead Enterprise Suite

io.github.g-digital-by-Garrigues/ead-enterprise-suite · v2.0.0

MCP server for EAD Enterprise Suite - signatures, evidence, notifications, dossiers via AI agents.

Source code Set it up

Connect Runs on your machine

Terminal

claude mcp add ead-enterprise-suite -e MCP_ALLOW_INSECURE_FILE_URL=<MCP_ALLOW_INSECURE_FILE_URL> -e MCP_ALLOW_UNVERIFIED_BEARER=<MCP_ALLOW_UNVERIFIED_BEARER> -e MCP_ALLOWED_HOSTS=<MCP_ALLOWED_HOSTS> -e MCP_ALLOWED_ORIGINS=<MCP_ALLOWED_ORIGINS> -e MCP_API_BASE_URL=<MCP_API_BASE_URL> -e MCP_AUTH_USER_KEY=<MCP_AUTH_USER_KEY> -e MCP_HTTP_HOST=<MCP_HTTP_HOST> -e MCP_HTTP_MAX_BODY_BYTES=<MCP_HTTP_MAX_BODY_BYTES> -e MCP_HTTP_PUBLIC=<MCP_HTTP_PUBLIC> -e MCP_SVC_CLIENT_ID=<MCP_SVC_CLIENT_ID> -e MCP_SVC_CLIENT_SECRET=<MCP_SVC_CLIENT_SECRET> -e MCP_SVC_INTROSPECT_URL=<MCP_SVC_INTROSPECT_URL> -e PORT=<PORT> -- npx -y @g-digital/[email protected]

claude_desktop_config.json

{
  "mcpServers": {
    "ead-enterprise-suite": {
      "command": "npx",
      "args": [
        "-y",
        "@g-digital/[email protected]"
      ],
      "env": {
        "MCP_ALLOW_INSECURE_FILE_URL": "<MCP_ALLOW_INSECURE_FILE_URL>",
        "MCP_ALLOW_UNVERIFIED_BEARER": "<MCP_ALLOW_UNVERIFIED_BEARER>",
        "MCP_ALLOWED_HOSTS": "<MCP_ALLOWED_HOSTS>",
        "MCP_ALLOWED_ORIGINS": "<MCP_ALLOWED_ORIGINS>",
        "MCP_API_BASE_URL": "<MCP_API_BASE_URL>",
        "MCP_AUTH_USER_KEY": "<MCP_AUTH_USER_KEY>",
        "MCP_HTTP_HOST": "<MCP_HTTP_HOST>",
        "MCP_HTTP_MAX_BODY_BYTES": "<MCP_HTTP_MAX_BODY_BYTES>",
        "MCP_HTTP_PUBLIC": "<MCP_HTTP_PUBLIC>",
        "MCP_SVC_CLIENT_ID": "<MCP_SVC_CLIENT_ID>",
        "MCP_SVC_CLIENT_SECRET": "<MCP_SVC_CLIENT_SECRET>",
        "MCP_SVC_INTROSPECT_URL": "<MCP_SVC_INTROSPECT_URL>",
        "PORT": "<PORT>"
      }
    }
  }
}

~/.cursor/mcp.json

{
  "mcpServers": {
    "ead-enterprise-suite": {
      "command": "npx",
      "args": [
        "-y",
        "@g-digital/[email protected]"
      ],
      "env": {
        "MCP_ALLOW_INSECURE_FILE_URL": "<MCP_ALLOW_INSECURE_FILE_URL>",
        "MCP_ALLOW_UNVERIFIED_BEARER": "<MCP_ALLOW_UNVERIFIED_BEARER>",
        "MCP_ALLOWED_HOSTS": "<MCP_ALLOWED_HOSTS>",
        "MCP_ALLOWED_ORIGINS": "<MCP_ALLOWED_ORIGINS>",
        "MCP_API_BASE_URL": "<MCP_API_BASE_URL>",
        "MCP_AUTH_USER_KEY": "<MCP_AUTH_USER_KEY>",
        "MCP_HTTP_HOST": "<MCP_HTTP_HOST>",
        "MCP_HTTP_MAX_BODY_BYTES": "<MCP_HTTP_MAX_BODY_BYTES>",
        "MCP_HTTP_PUBLIC": "<MCP_HTTP_PUBLIC>",
        "MCP_SVC_CLIENT_ID": "<MCP_SVC_CLIENT_ID>",
        "MCP_SVC_CLIENT_SECRET": "<MCP_SVC_CLIENT_SECRET>",
        "MCP_SVC_INTROSPECT_URL": "<MCP_SVC_INTROSPECT_URL>",
        "PORT": "<PORT>"
      }
    }
  }
}

.vscode/mcp.json

{
  "servers": {
    "ead-enterprise-suite": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@g-digital/[email protected]"
      ],
      "env": {
        "MCP_ALLOW_INSECURE_FILE_URL": "<MCP_ALLOW_INSECURE_FILE_URL>",
        "MCP_ALLOW_UNVERIFIED_BEARER": "<MCP_ALLOW_UNVERIFIED_BEARER>",
        "MCP_ALLOWED_HOSTS": "<MCP_ALLOWED_HOSTS>",
        "MCP_ALLOWED_ORIGINS": "<MCP_ALLOWED_ORIGINS>",
        "MCP_API_BASE_URL": "<MCP_API_BASE_URL>",
        "MCP_AUTH_USER_KEY": "<MCP_AUTH_USER_KEY>",
        "MCP_HTTP_HOST": "<MCP_HTTP_HOST>",
        "MCP_HTTP_MAX_BODY_BYTES": "<MCP_HTTP_MAX_BODY_BYTES>",
        "MCP_HTTP_PUBLIC": "<MCP_HTTP_PUBLIC>",
        "MCP_SVC_CLIENT_ID": "<MCP_SVC_CLIENT_ID>",
        "MCP_SVC_CLIENT_SECRET": "<MCP_SVC_CLIENT_SECRET>",
        "MCP_SVC_INTROSPECT_URL": "<MCP_SVC_INTROSPECT_URL>",
        "PORT": "<PORT>"
      }
    }
  }
}

Replace the values in angle brackets with your own. Keys stay on your machine; we never see them.

Tools

This server runs locally, so its tools are listed by your MCP client once it starts.

Environment variables

Name	Description
`MCP_ALLOW_INSECURE_FILE_URL` Optional	Set to "true" to allow plain http:// fileUrl downloads in evidence_create (default https-only). Private/internal addresses are rejected regardless (resolution-time check; see the documented DNS TOCTOU limitation in the hosted-deployment runbook).
`MCP_ALLOW_UNVERIFIED_BEARER` Optional	Escape hatch for MCP_HTTP_PUBLIC=true WITHOUT inbound-token introspection: set to "true" ONLY when an upstream gateway already verifies Bearer tokens. The server logs a prominent warning and forwards tokens upstream unverified.
`MCP_ALLOWED_HOSTS` Optional	Comma-separated allowed Host headers. Empty = Host validation disabled (default). When set, requests with a Host outside the list are rejected.
`MCP_ALLOWED_ORIGINS` Optional	Comma-separated allowed browser Origins (DNS-rebinding defense). Empty = reject any request carrying an Origin header; non-browser clients (CLI/SDK) send no Origin and are always allowed. Use '*' to allow all.
`MCP_API_BASE_URL` Required	Upstream API root. Required: your user key is exchanged for a session token against this host, and the server will not start without it.
`MCP_AUTH_USER_KEY` Required, secret	Long-lived EAD Enterprise Suite user key, exchanged automatically for a short-lived session token. Use it for headless or automated access instead of an account password. (See https://www.eadtrust.eu/soluciones-legaltech/enterprise-suite/ for credential acquisition.)
`MCP_HTTP_HOST` Optional	Interface the HTTP transport binds to. Default 127.0.0.1 (localhost only). Set 0.0.0.0 to expose on all interfaces (containers do this automatically).
`MCP_HTTP_MAX_BODY_BYTES` Optional	Maximum accepted POST /mcp request-body size in bytes (default 16777216 = 16 MiB — sized so base64 file uploads within the documented tool limits fit). Oversized requests get a 413 JSON-RPC error before/while reading — closes a memory-exhaustion DoS vector in public deployments. Note: base64 file s…
`MCP_HTTP_PUBLIC` Optional	Set to "true" for public/multi-tenant deployments. Activates Host validation and refuses to start unless (1) MCP_ALLOWED_ORIGINS or MCP_ALLOWED_HOSTS is set AND (2) inbound Bearer introspection is configured (MCP_SVC_INTROSPECT_URL + MCP_SVC_CLIENT_ID/SECRET) or MCP_ALLOW_UNVERIFIED_BEARER=true is…
`MCP_SVC_CLIENT_ID` Optional	Client ID this server presents to the introspection endpoint above (its resource-server credentials). Only needed alongside MCP_SVC_INTROSPECT_URL; it does not authenticate you to EAD Enterprise Suite.
`MCP_SVC_CLIENT_SECRET` Optional, secret	Client secret this server presents to the introspection endpoint above (its resource-server credentials). Only needed alongside MCP_SVC_INTROSPECT_URL; it does not authenticate you to EAD Enterprise Suite. (See https://www.eadtrust.eu/soluciones-legaltech/enterprise-suite/ for credential acquisitio…
`MCP_SVC_INTROSPECT_URL` Optional	RFC 7662 token introspection URL for inbound Bearer verification in HTTP mode. Opt-in, and required when MCP_HTTP_PUBLIC=true. Leave empty for stdio (local) use.
`PORT` Optional	HTTP port when running in hosted (HTTP) mode; ignored in stdio mode

Details

Package	`@g-digital/[email protected]` (NPM, stdio)
First published	8 Sep 2026
Last updated	8 Sep 2026
Registry name	`io.github.g-digital-by-Garrigues/ead-enterprise-suite`

More ai and media servers See all

Live status

Local install

Installed and run on your own machine, so there is no public endpoint to check.

Pair it with live search

Agents that use Ead Enterprise Suite often also need current facts. NestDaddy MCP gives your AI today's internet: web search, real-time breaking news and full page reading in one connector.

See NestDaddy MCP

For maintainers

[![NestDaddy MCP](https://nestdaddy.com/mcp/servers/io-github-g-digital-by-garrigues-ead-enterprise-suite/badge.svg)](https://nestdaddy.com/mcp/servers/io-github-g-digital-by-garrigues-ead-enterprise-suite)

Add the badge to your README. It turns green while your server passes our daily check. Listing details come from the official MCP registry; update them there.

Listing data from the official MCP registry. Status and tools from NestDaddy's daily check. Browse all MCP servers.