fastdocumenso

Async Documenso v2 API client built on fastspec, with a pyskill for AI-assisted e-signature workflows.

Install

pip install -e .

Set your Documenso API token (from User settings → API tokens):

In SolveIt, set your env var DOCUMENSO_API_KEY=your-token

Usage

from fastdocumenso import documenso_client

cli = documenso_client()

# Create an envelope with a PDF, recipient, and signature field — all in one call
env = await cli.envelope.envelope_create(
    payload={'title': 'My NDA', 'type': 'DOCUMENT',
             'recipients': [{'email': 'a@b.com', 'name': 'A', 'role': 'SIGNER',
                             'fields': [{'type': 'SIGNATURE', 'page': 1, 'positionX': 60,
                                         'positionY': 80, 'width': 25, 'height': 5}]}]},
    files=('doc.pdf', pdf_bytes, 'application/pdf'))

# Send the signing email
res = await cli.envelope.envelope_distribute(envelope_id=env['id'])
print(res['recipients'][0]['signingUrl'])  # the signer's link

# Check status and download the signed document
d = await cli.envelope.envelope_get(envelope_id=env['id'])
signed = await cli.envelope.envelope_item_download(envelope_item_id=d['envelopeItems'][0]['id'])

Operations

The regular client exposes all 89 operations in the Documenso v2 spec, so developers can experiment with the complete API. The AI skill trusts only these read+create+sign operations when run through safepyrun:

Group	Operations
envelope	create, get, find, recipient_create_many, field_create_many, distribute, item_download, audit_log_find

To change the AI allowlist, edit the allow(...) call in fastdocumenso/skill.py.

Updating the spec

The spec snapshot is fetched from https://app.documenso.com/api/v2/openapi.json. When the API changes, re-run:

python scripts/update_spec.py

Note: update_spec.py also patches file_params for 5 envelope/document ops, since Documenso's spec uses empty schemas instead of format: binary for file uploads.

AI agent use

This package registers a pyskill (fastdocumenso.skill). AI hosts (solveit, etc.) can discover it via list_pyskills() and load it to automate signing workflows. The skill exports a preconfigured documenso client containing the complete API for inspection, but safepyrun trusts only the operations listed above; delete and cancel calls remain blocked.