Zoho Sign
The Zoho Sign connector lets AI agents manage e-signature workflows — creating documents, sending them for signing, monitoring status, and downloading completed copies. It uses OAuth 2.0 so your credentials are stored encrypted in MCPGate's vault and are never exposed to the AI client.
Required scopes#
MCPGate requests the following OAuth scopes when you connect a Zoho Sign account.
| Scope | Purpose |
|---|---|
| ZohoSign.documents.ALL | Create, send, recall, and delete signing documents |
| ZohoSign.requests.ALL | Manage signing requests and track status |
Tool reference#
The Zoho Sign connector exposes 10 tools. Use the MCP Apps page to enable or disable individual tools per app, and the Guardrails page to add fine-grained rules on top.
| Tool | Category | Description |
|---|---|---|
| zohosign_list_documents | read | List all documents in Zoho Sign |
| zohosign_get_document | read | Get details of a specific document in Zoho Sign |
| zohosign_get_signing_status | read | Get the signing status of a document in Zoho Sign |
| zohosign_download_document | read | Download a completed document from Zoho Sign |
| zohosign_list_templates | read | List all document templates in Zoho Sign |
| zohosign_create_document | write | Create a new document for signing in Zoho Sign |
| zohosign_send_for_signing | write | Send a document out for signing in Zoho Sign |
| zohosign_create_from_template | write | Create a document from a template in Zoho Sign |
| zohosign_recall_document | write | Recall a document that was sent for signing in Zoho Sign |
| zohosign_delete_document | delete | Delete a document from Zoho Sign |
Sending documents notifies external signers
zohosign_send_for_signing emails the signing request to all designated signers immediately. Always deny this tool in development apps and test with internal email addresses before enabling in production.Common guardrail recipes#
Read-only access#
Apply the read_only preset to enable the five read tools and deny all write and delete tools. Suitable for contract tracking agents that monitor signing status and download completed documents without initiating new requests.
Contribute preset#
Use the contribute preset to enable all tools except zohosign_delete_document. This lets agents create documents, dispatch signing requests, and recall them if needed, while preserving completed documents in the archive.
Full access#
The full_access preset enables all 10 tools. Apply a allow_values guardrail to zohosign_send_for_signing targeting the signer email field to restrict which external parties the agent may send documents to.
Troubleshooting#
- Document must be in Draft state to send —
zohosign_send_for_signingonly works on documents in "Draft" status. Callzohosign_create_documentfirst, then send. You cannot re-send a completed or declined document. - Recall only works before completion —
zohosign_recall_documentcancels a pending signing request. If all signers have already signed, the document is complete and cannot be recalled. - Template field mapping — When using
zohosign_create_from_template, all required merge fields defined in the template must be provided. Missing fields will cause the API to return a validation error.