What authentication does the Xodo Sign (Eversign) E-Signature API use?

The API uses an API key passed as an apiKey credential against the api.eversign.com base URL. Through Jentic, the key is stored encrypted in your Jentic One instance and never enters agent context - agents receive scoped execution rights, not the raw key.

Can I send the same NDA to many signers with the Xodo Sign (Eversign) E-Signature API?

Yes. Save the NDA once as a template via the document endpoint with type=templates, then create a new document from that template for each recipient. List templates with GET /document?type=templates and reference the template hash in subsequent POST /document calls.

What are the rate limits for the Xodo Sign (Eversign) E-Signature API?

The OpenAPI spec does not declare quantitative rate limits; Xodo Sign throttles based on plan tier. Inspect 429 responses and the Retry-After header in production, and contact Xodo Sign support to confirm your account's limits before high-volume bulk sending.

How do I send a document for signature through Jentic?

Run pip install jentic, then use the async pattern: await client.search('send a document for electronic signature'), await client.load(...), await client.execute(...). The search returns the POST /document operation with its input schema so the agent can pass a signers array and document fields directly.

Can I cancel a Xodo Sign signature document after sending it?

Yes. Call POST /document_cancel with the document hash. Cancelled documents stop sending reminders and cannot be signed; use /document_trash afterwards if you also want them removed from the active list.

Can I limit what my agent is allowed to do with the Xodo Sign E-Signature API?

Yes. Because you run Jentic One yourself, your own rules decide which Xodo Sign operations and credentials the agent may use. This API identifies documents through request payloads rather than URL path IDs, so you scope by operation: grant only the calls the agent needs, such as creating a document with POST /document or nudging a signer with POST /send_reminder. Destructive operations like POST /document_cancel and POST /document_trash stay off-limits unless you explicitly add them.