# Soxton Incorporation MCP

Use this service to prepare and submit Delaware C-corporation incorporations.

## Connection

- MCP endpoint: https://app.soxton.ai/api/mcp
- OAuth protected-resource metadata: https://app.soxton.ai/.well-known/oauth-protected-resource/api/mcp
- Authorization server: https://nqmohoafhbtrcrxnwccf.supabase.co/auth/v1
- Authenticate with OAuth 2.1 and PKCE (S256). Discover the authorization server from the protected-resource metadata, then register following the MCP 2026-07-28 client-registration priority: Client ID Metadata Documents where the authorization server advertises them, Dynamic Client Registration only as a fallback.
- Request only the `email` scope (the sole entry in scopes_supported); requesting `openid` fails at token exchange.

## Scope

- Handle Delaware C-corporations only.
- Handle solo-founder and multi-founder incorporations only.
- Do not use this service for LLCs or founders under 18.
- The one-time filing fee is $400.

## Tools

- `create_incorporation`: Call this to start or continue the authenticated user’s current Delaware C-corporation draft. It does not submit, sign, or collect payment. Drafts stay editable, and prior submissions remain available through list_incorporation_filings. The founder’s taxpayer identification number is optional; sending it as taxpayerIdentificationNumber speeds processing, and otherwise Soxton collects it on its hosted page. Never send signature data, payment credentials, tokens, or secrets; those fields are ignored. incorporationId is always the caller-scoped stable value "current".
- `get_incorporation`: Read the authenticated user’s current Delaware C-corporation draft and its redacted readiness summary. It never returns a database row ID, TIN digits, signatures, credentials, tokens, or secrets. Omit incorporationId or use the caller-scoped stable value "current"; use list_incorporation_filings for prior submissions. The status reflects Soxton’s progress preparing and submitting the filing, not confirmation that the State of Delaware has accepted the certificate.
- `update_incorporation`: Call this to apply a merge patch to the authenticated user’s current Delaware C-corporation draft; it does not submit, sign, or collect payment. Omitted fields stay unchanged, legal nulls clear values, nested objects merge, and founders arrays replace wholesale. Drafts stay editable, and prior submissions remain available through list_incorporation_filings. The founder’s taxpayer identification number is optional; sending it as taxpayerIdentificationNumber speeds processing, and otherwise Soxton collects it on its hosted page. Never send signature data, payment credentials, tokens, or secrets; those fields are ignored. Omit incorporationId or use "current".
- `get_incorporation_requirements`: Call this before preparation to check missing fields, validation issues, completeness, and human signature/payment actions for the authenticated user’s current Delaware C-corporation draft. It is read-only and does not prepare or submit a filing. It never returns TIN digits, signatures, payment credentials, tokens, or secrets. Omit incorporationId or use "current".
- `prepare_incorporation_submission`: Revalidate and review the authenticated user’s current Delaware C-corporation draft, returning a revision-bound submissionVersion and, when signing is configured, the exact attestation and a short-lived consentToken. It has no side effects and does not file, sign, or charge anything. Display the attestation text to the human verbatim before signing. Never send SSNs, TINs, signature images, payment credentials, unrelated tokens, or secrets. Omit incorporationId or use "current".
- `sign_incorporation`: Display the attestation text from prepare_incorporation_submission to the human verbatim, obtain the human’s affirmative response and typed full legal name, and then affix the requester’s conformed signature in the human’s own name. The human may only sign in their own name. On the multi-founder path, the requester must be a founder on the draft matched by their authenticated account email; other founders sign through the email flow. Pass intentToSign: true only when the human actually affirmed—never on the agent’s own inference. Asserting consent the human did not give is a misuse of this tool.
- `submit_incorporation`: Call this with the unchanged submissionVersion after sign_incorporation to hand the authenticated user to Soxton’s hosted review page. The tool does not itself sign, collect payment, or submit the incorporation; for an MCP-signed draft, the hosted page is payment-only after the human reviews everything. Never send SSNs, TINs, signature images, payment credentials, unrelated tokens, or secrets. Retries safely detect the resulting paid filing request.
- `list_incorporation_filings`: Call this to inspect the authenticated user’s non-cancelled Delaware C-corporation filing tickets and document availability. It is read-only and returns document names, types, and statuses only—never file contents, signed URLs, TINs, signatures, payment credentials, tokens, or secrets. The status reflects Soxton’s progress preparing and submitting the filing, not confirmation that the State of Delaware has accepted the certificate.

## Workflow

1. Call `create_incorporation` with `path` (`solo-founder` or `multi-founder`) to start the current draft.
2. Call `update_incorporation` until the user’s ordinary draft data is complete. Call `get_incorporation` whenever you need the current redacted draft.
3. Call `get_incorporation_requirements` and resolve every ordinary missing field or validation issue.
4. Call `prepare_incorporation_submission` and retain its `submissionVersion` and `consentToken`.
5. Display the returned attestation text to the human verbatim. Obtain the human’s affirmative response and typed full legal name, then call `sign_incorporation`; pass `intentToSign: true` only after actual affirmation and never infer consent.
6. Call `submit_incorporation` with the same `submissionVersion`.
7. Give the user the returned hosted review URL. Its pattern is https://app.soxton.ai/incorporation/{solo-founder|multi-founder}.
8. For an MCP-signed draft, the hosted Soxton review page lets the human review everything and complete only the $400 payment. Other founders on the multi-founder path still sign through the email flow.
9. After the human finishes, retry or re-call `submit_incorporation` to confirm completion.
10. Call `list_incorporation_filings` to inspect filing progress and document availability.

A founder’s taxpayer identification number is optional and speeds processing when supplied through create_incorporation or update_incorporation; otherwise Soxton collects it on its own domain. Never send signature images, payment credentials, or unrelated tokens or secrets through any tool.

Filing status reflects Soxton’s progress preparing and submitting the filing, NOT confirmation that Delaware has accepted the certificate.