MCP server

The ZippedScript MCP server lets AI assistants that support the Model Context Protocol (Claude Desktop, Claude Code, Cursor and others) call the API for you. Every public route in these docs and in the Swagger docs is available as a tool, and requests are made with your own API key.

Connect to the hosted server

Add https://app.zippedscript.com/mcp to your MCP client as a remote (streamable HTTP) server, and send your API key in the Authorization header as Token <api_key> (see Get started to get one). Every request runs as you, with your company's permissions and rate limits. Requests without an Authorization header are rejected with 401.

For example, with Claude Code:

claude mcp add --transport http zippedscript https://app.zippedscript.com/mcp \
  --header "Authorization: Token {{api_key}}"

Or in a client's JSON config:

{
  "mcpServers": {
    "zippedscript": {
      "type": "http",
      "url": "https://app.zippedscript.com/mcp",
      "headers": {
        "Authorization": "Token {{api_key}}"
      }
    }
  }
}

Tools

Each tool calls one API route and is named after the route's Swagger operationId. Tool arguments are:

• Path and query parameters, by name (for example verification_id, page, page_size, status)
• body: the JSON request body, for routes that take one
• For file uploads (employment_consent_create, reference_checks_consent_create, direct_diploma_reader_create): a list of local file paths to upload, under the file field's name. Paths must be readable on the MCP server's filesystem.

The tool returns the API's JSON response. When the API returns an error, the tool result is marked as an error and contains status_code and the API's error body.

Area	Tools
Authentication	user_login_create, user_api_key_list, user_api_key_destroy_create, user_api_key_destroy_all_create
Institutions	institution_list, institution_read, institution_countries_list
Verifications	verification_list, verification_create, verification_read, verification_update, verification_delete, verification_submit_create, verification_restart_create, verification_cancel_create
Employment	employment_list, employment_create, employment_read, employment_delete, employment_check_request_id_read, employment_verify_create, employment_consent_create, employment_cancel_create, employment_unlock_create, employment_unlockable_list, employment_contacts_search_list, employment_emails_search_list
Reference checks	reference_checks_list, reference_checks_create, reference_checks_read, reference_checks_update, reference_checks_delete, reference_checks_check_request_id_read, reference_checks_verify_create, reference_checks_consent_create, reference_checks_cancel_create, reference_checks_token_read
Degree Direct	direct_institutions_list, direct_institutions_read, direct_search_list, direct_search_read, direct_search_delete, direct_name_localization_lookup_list, direct_diploma_reader_create, direct_red_seal_list, direct_red_seal_create, direct_ar_create, direct_au_create, direct_bg_create, direct_cz_create, direct_ec_create, direct_id_create, direct_md_create, direct_mx_create, direct_pe_create, direct_ru_create, direct_ua_create, direct_us_create

Tools that only read data (GET routes) are marked read-only, and DELETE routes are marked destructive, so MCP clients can ask before running them.

Diploma reader

direct_diploma_reader_create calls POST /direct/diploma-reader/ to extract structured data from a Russian diploma image. Pass image as a list containing one file path:

{
  "image": ["/path/to/diploma.jpg"]
}

The image must be JPEG, PNG, GIF or WebP and no larger than 5 MB. The tool returns the diploma classification, surname, institution, document series and number, dates and warnings. See Degree Direct: Diploma Reader for when to use it, response fields, permissions, errors and how to use the extracted details in a Russia search.