Fingerprint

Fingerprint MCP Server

Features

• Run locally or use managed instance at https://mcp.fpjs.io/mcp
• Event tools: Retrieve and search identification events with full smart signal data
• Management tools: Manage workspace environments and API keys
• Onboarding prompt: Guided setup for integrating Fingerprint into a project
• Supports both stdio and streamable-http transports
• Optional HTTPS with TLS certificates
• OAuth2 login supported
• Public mode for multi-tenant deployments (API keys passed via JWT bearer token)
• Tool filtering to control which tools are exposed
• Configurable via environment variables or CLI flags
• Docker support for easy deployment

Installation

From Source

go install github.com/fingerprintjs/fingerprint-mcp-server@latest

Build Locally

git clone https://github.com/fingerprintjs/fingerprint-mcp-server.git
cd fingerprint-mcp-server
make build

make build runs go generate (to download the OpenAPI spec and generate schema files under internal/schema/) and then builds the binary.

Configuration

The server can be configured via CLI flags or environment variables:

CLI Flag	Environment Variable	Default	Description
--server-api-key	FINGERPRINT_SERVER_API_KEY		Fingerprint Server API key (private mode)
--server-api-url	FINGERPRINT_SERVER_API_URL	api.fpjs.io	Custom Server API URL (omit to use default)
--management-api-key	FINGERPRINT_MANAGEMENT_API_KEY		Fingerprint Management API key (private mode)
--management-api-url	FINGERPRINT_MANAGEMENT_API_URL	management-api.fpjs.io	Custom Management API URL (omit to use default)
--region	FINGERPRINT_REGION	us	API region: us, eu, or ap (private mode)
--transport	MCP_TRANSPORT	stdio	Transport: stdio or streamable-http
--port	MCP_PORT	8080	Port for HTTP/HTTPS server
--tls-cert	MCP_TLS_CERT		Path to TLS certificate file
--tls-key	MCP_TLS_KEY		Path to TLS private key file
--read-only	MCP_READ_ONLY	false	Only expose read tools (shorthand for --tools with read-only tools)
--tools	MCP_TOOLS		Comma-separated list of tool names to register (overrides --read-only)
--public	MCP_PUBLIC	false	Public mode: extract API keys from JWT bearer tokens
--auth-token	MCP_AUTH_TOKEN	(auto-generated in private mode)	Bearer token required to access the server (private mode)
--jwt-public-key	FINGERPRINT_PUBLIC_KEY		PEM-encoded ES256 public key for verifying Fingerprint-issued JWT tokens
--oauth-resource	OAUTH_RESOURCE		URL of this server (for OAuth metadata)
--oauth-auth-server	OAUTH_AUTH_SERVER		URL of the OAuth authorization server
--jwks-url	JWKS_URL		JWKS URL for JWT token verification in public mode

Usage

Private mode vs. Public mode