Name: fingerprint-mcp-server
Author: fingerprintjs

Fingerprint MCP Server

Run locally or use managed instance at https://mcp.fpjs.io/mcp
Event tools: Retrieve and search identification events with full smart signal data
Management tools: Manage workspace environments and API keys
Onboarding prompt: Guided setup for integrating Fingerprint into a project
Supports both stdio and streamable-http transports
Optional HTTPS with TLS certificates
OAuth2 login supported
Public mode for multi-tenant deployments (API keys passed via JWT bearer token)
Tool filtering to control which tools are exposed
Configurable via environment variables or CLI flags
Docker support for easy deployment

go install github.com/fingerprintjs/fingerprint-mcp-server@latest

git clone https://github.com/fingerprintjs/fingerprint-mcp-server.git
cd fingerprint-mcp-server
make build

make build runs go generate (to download the OpenAPI spec and generate schema files under internal/schema/) and then builds the binary.

The server can be configured via CLI flags or environment variables:

CLI Flag	Environment Variable	Default	Description
`--server-api-key`	`FINGERPRINT_SERVER_API_KEY`		Fingerprint Server API key (private mode)
`--server-api-url`	`FINGERPRINT_SERVER_API_URL`	api.fpjs.io	Custom Server API URL (omit to use default)
`--management-api-key`	`FINGERPRINT_MANAGEMENT_API_KEY`		Fingerprint Management API key (private mode)
`--management-api-url`	`FINGERPRINT_MANAGEMENT_API_URL`	management-api.fpjs.io	Custom Management API URL (omit to use default)
`--region`	`FINGERPRINT_REGION`	`us`	API region: `us`, `eu`, or `ap` (private mode)
`--transport`	`MCP_TRANSPORT`	`stdio`	Transport: `stdio` or `streamable-http`
`--port`	`MCP_PORT`	`8080`	Port for HTTP/HTTPS server
`--tls-cert`	`MCP_TLS_CERT`		Path to TLS certificate file
`--tls-key`	`MCP_TLS_KEY`		Path to TLS private key file
`--read-only`	`MCP_READ_ONLY`	`false`	Only expose read tools (shorthand for `--tools` with read-only tools)
`--tools`	`MCP_TOOLS`		Comma-separated list of tool names to register (overrides `--read-only`)
`--public`	`MCP_PUBLIC`	`false`	Public mode: extract API keys from JWT bearer tokens
`--auth-token`	`MCP_AUTH_TOKEN`	(auto-generated in private mode)	Bearer token required to access the server (private mode)
`--jwt-public-key`	`FINGERPRINT_PUBLIC_KEY`		PEM-encoded ES256 public key for verifying Fingerprint-issued JWT tokens
`--oauth-resource`	`OAUTH_RESOURCE`		URL of this server (for OAuth metadata)
`--oauth-auth-server`	`OAUTH_AUTH_SERVER`		URL of the OAuth authorization server
`--jwks-url`	`JWKS_URL`		JWKS URL for JWT token verification in public mode

fingerprint-mcp-server