Boldsign for AI agents
BoldSign is an e-signature platform that businesses use to send documents for signing, track signer status, and manage signing templates and brand settings. Connect it once through Arc0, and your agent, or Claude, ChatGPT and Cursor, can use it through one MCP endpoint, limited to what each user approved.
What agents do in Boldsign.
Send a document for signature
Send a document to its recipients for signing after the user approves the final draft.
Check remaining API credits
Read-only lookup of the account's API credit balance before sending another document out for signature.
Require approval before extending expiry
Treat extending a document's expiry date as a change needing confirmation since it affects a signer's deadline.
14 Boldsign actions, graded by risk.
Every Boldsign action is tagged read, write or destructive, so one policy covers the whole app and new actions inherit the right default.
read
0Look things up. Allowed by default.
- No read actions.
write
13Create and change things. Allow, or ask the user first.
- boldsign.brand_getGet Brand Details
- boldsign.brand_listList Brands
- boldsign.file_uploadUpload File (Helper)
- boldsign.document_listList Documents
- boldsign.document_sendSend Document
- boldsign.custom_field_editEdit Custom Field
- boldsign.document_edit_betaEdit Document (Beta)
- boldsign.document_team_listList Team Documents
- boldsign.custom_field_createCreate Custom Field
- boldsign.document_behalf_listList Behalf Documents
- boldsign.document_extend_expiryExtend Document Expiry
- boldsign.plan_get_api_credits_countGet API Credits Count
- boldsign.embedded_request_create_linkCreate Embedded Request Link
destructive
1Delete, cancel or archive. Ask first, or deny outright.
- boldsign.document_remove_authenticationRemove Document Authentication
Boldsign in three steps.
- 01Your users connect BoldsignThey sign in to Boldsign on Arc0 Connect, under your brand, and approve the access you ask for.
- 02You set the rulesReads run, writes like “get Brand Details” can wait for the user, and “remove Document Authentication” can be denied outright.
- 03Any agent can actYour agent calls Boldsign through the Arc0 SDK or MCP, and so can Claude, ChatGPT and Cursor. Every call lands on the audit log.
await arc0.policies.set('boldsign', { read: 'allow', write: 'ask', // brand_get destructive: 'deny', // document_remove_authentication }) # Claude Code: the same connection, one URL $ claude mcp add --transport http arc0 \ https://mcp.arc0.ai/u/u_8f2
How Boldsign connects.
Users sign in to Boldsign on Arc0 Connect and approve the scopes you request. Build with Arc0’s Boldsign OAuth app, or bring your own so the Boldsign consent screen names you. Tokens refresh automatically, and you can export them whenever you want.
The same Boldsign connection serves your agent over MCP and your own backend over REST and the proxy, so a user connects once. How Arc0 handles credentials →
- AUTH
- OAuth 2.0
- CREDENTIALS
- Per-tenant encrypted vault
- MODEL SEES
- Results only, never credentials
- AUDIT LOG
- Every call, on every plan
Use Boldsign from any agent.
Boldsign and Arc0, answered.
Can I use Boldsign with Claude, ChatGPT or Cursor?
Yes. Connect Boldsign to Arc0 once, then add your Arc0 MCP URL to Claude, ChatGPT, Cursor, Claude Code or any other remote-MCP client. Each assistant only gets the Boldsign actions you allow.
How do users connect Boldsign?
Users sign in to Boldsign on Arc0 Connect and approve the scopes you request. Build with Arc0’s Boldsign OAuth app, or bring your own so the Boldsign consent screen names you. Tokens refresh automatically, and you can export them whenever you want.
Which Boldsign actions can my agent take?
14 in total: 0 read, 13 write and 1 destructive, such as “get Brand Details”. Your policies decide which of them each agent may call.
Can I stop my agent from deleting things in Boldsign?
Yes. Actions like “remove Document Authentication” are graded destructive. Set destructive actions to deny, or to ask so the user approves each one, and blocked calls still show up on the audit log.
Can my own backend call Boldsign too?
Yes. The same Boldsign connection is available over REST and through the Arc0 proxy, so your product and your agent share one connection per user.
Plug Boldsign into your agent.
Your users connect Boldsign once, under your brand. Your agent gets 14 actions behind your policies, with every call on the record.
Free to build · MCP + REST · Audit log on every plan