
FinePrint AI Legal Risk & Contract Audit MCP Server
io.github.RitualDev-LabPublished by GitHub account RitualDev-Labv0.1.1Updated Nov 7, 2026
Zero-cost in-memory legal terms, API policy & NDA scanner for autonomous coding agents
The publisher's own server: audit.domains - Domain Valuation
Overview
Local in-memory scanner that grades legal contracts, NDAs and leases for risk and drafts redline amendments for coding agents.
- What you can do
- Scan contract text or files (PDF, DOCX, Markdown) for legal risk clauses
- Grade agreements from A to F against 60+ heuristic risk signatures
- Report flagged issues by category such as indemnification, liability caps, IP assignment, renewal and jurisdiction
- Generate proposed redline amendments and executive scorecards
- Export redlines as Markdown diffs or DOCX track changes
- When to use it
- Useful when an assistant needs to review vendor terms, NDAs, MSAs or commercial leases before signing, or when a coding agent should check API and vendor policy terms. It suits teams that want a first-pass risk screen without sending documents to a cloud service.
- Requirements
- Runs as a local stdio process, installed from the npm package; the README also mentions a pre-compiled binary and a Python SDK. The README states that Gemini 1.5 Flash is used for legal reasoning and redline generation, which implies a Gemini API key, though the manifest declares no environment variables or authentication. Desktop only.
Installation
In SourceWeft
- Open FinePrint AI Legal Risk & Contract Audit MCP Server in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.
Other MCP clients
Follow the launch instructions in the repository.
README
📜 FinePrint AI
In-Memory Contract, Lease & NDA Scanner & Redline Generator
[GitHub Release] [CLI Tool] [Python SDK] [NPM Package] [License] [Zero VPS Cost]
FinePrint AI is an in-memory, privacy-preserving legal contract auditor and redline synthesizer. Equipped with 60+ heuristic legal risk signatures, an in-memory PDF AST parser, and Gemini 1.5 Flash, FinePrint scans Master Services Agreements (MSAs), NDAs, commercial leases, and vendor terms to grade contract risk from A (Acceptable) to F (Unacceptable) and generate attorney-grade redline amendments in seconds with zero cloud server overhead ($0 VPS).
Download Release • CLI Quickstart • Python SDK • Architecture • Risk Categories • Enterprise Features • Examples
⚡ The Problem: The Fine Print Trap
Reviewing commercial contracts is slow, error-prone, and expensive ($500–$1,200/hr for outside counsel):
- Uncapped Indemnification: Hidden clauses forcing vendors or customers to bear unlimited financial liability for third-party IP claims.
- Asymmetric Liability Caps: One-sided limitations where the vendor's liability is capped at $100 while the customer remains fully exposed.
- Auto-Renewal Traps: Multi-year automatic renewals requiring 90- to 120-day advance cancellation notice.
- Unfavorable Offshore Jurisdictions: Mandatory arbitration clauses buried in remote or offshore court systems.
- Privacy & Client Confidentiality: Uploading non-public corporate contracts or NDAs to generic cloud AI services violates confidentiality terms.
FinePrint AI performs all text extraction and AST clause chunking locally in-memory, ensuring your private legal agreements are never leaked or stored.
🏛️ Architecture
FinePrint operates on an air-gapped, zero-knowledge in-memory architecture:
🎯 60+ Legal Risk Categories
🚀 Quickstart
1. CLI Quickstart
Download the pre-compiled binary from Latest Releases or install via npm:
Run an automated audit on any contract or lease:
Export an executive scorecard:
2. Python SDK Quickstart (pip install fineprint)
Ideal for legal tech engineering, DocuSign webhooks, and contract data pipelines:
See examples/audit_contract.py for a complete runnable Python walkthrough.
3. Node.js / TypeScript SDK
🏢 Enterprise Features ($50K–$250K ACV Capabilities)
- 📜 Corporate Legal Playbook Customizer: Upload company-specific fallback terms and non-negotiables (e.g. Acme Corp mandates New York governing law, $5M cyber insurance, and strikes all customer indemnities). FinePrint scores incoming vendor contracts against your unique corporate playbook.
- 🗄️ Bulk Contract Repository Auditing (Legacy Contract Scanner): Batch scan thousands of legacy NDAs, MSAs, and commercial leases stored across Google Drive, Dropbox, or AWS S3 to uncover latent liabilities, expiring renewal dates, and uncapped indemnifications in bulk.
- ✍️ e-Signature Interceptor & Approval Workflows (DocuSign / PandaDoc Webhooks): Intercepts contracts before execution: if a contract receives an 'F' (Unacceptable) rating, the workflow automatically locks signature execution and routes the redline proposal to senior legal counsel for sign-off.
📊 Performance Benchmarks
- Analysis Latency: $< 1.2\text{ seconds}$ on 40-page commercial PDF agreements.
- Privacy: 100% in-memory processing; zero persistent document storage.
- Infrastructure Cost: $0.00 / month ($0 VPS, $0 server maintenance).
- Test Verification: 50 / 50 passing tests across Node.js, AST parsers, and Python 3.8+.
🤝 Community & Support
- Feature Requests & Bug Reports: Open an issue in our Public Issue Tracker.
- Enterprise Licensing: Contact
[email protected]for corporate playbook customization, DocuSign interceptors, and bulk legacy audits. - Core Development: Developed and maintained by RitualDev Studio.
Source: README.md at commit d8e3612
Tools
0Version history
1- v0.1.1LatestNov 7, 2026
Score
40% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
- Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
- Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts
Declare a license in the repository or the registry entry.
Other Audit integrations
audit.domains - Domain Valuation
domains.auditOfficial publisher
Deterministic domain-name valuation: fair-value intervals, comparable recorded sales, availability checks, and a verified for-sale listing market.
Revenue Agent — OpenAPI Audit & Change Detection
news.prhOfficial publisher
A remote MCP endpoint that audits OpenAPI specifications and detects API changes, charging $0.10 USDC per analysis via x402 on Base.

Mcp Supply Audit
Published by GitHub account kimmawla
Audits MCP servers as supply-chain artifacts — registry entries, PyPI/npm packages, client configs and tool definitions — using read-only static checks.

Arquestra Audit
Published by GitHub account pablo-ramossanchez
Audit a data file before publishing: one light per figure. Your data never reaches the server.

PDF Accessibility Audit
Published by GitHub account Veduis
Local-first PDF accessibility audits with cited findings and an offline HTML report.