FinePrint AI Legal Risk & Contract Audit MCP Server

io.github.RitualDev-LabPublished by GitHub account RitualDev-Labv0.1.1Updated Nov 7, 2026

Zero-cost in-memory legal terms, API policy & NDA scanner for autonomous coding agents

The publisher's own server: audit.domains - Domain Valuation

Overview

AI-generated overview

Local in-memory scanner that grades legal contracts, NDAs and leases for risk and drafts redline amendments for coding agents.

What you can do
  • Scan contract text or files (PDF, DOCX, Markdown) for legal risk clauses
  • Grade agreements from A to F against 60+ heuristic risk signatures
  • Report flagged issues by category such as indemnification, liability caps, IP assignment, renewal and jurisdiction
  • Generate proposed redline amendments and executive scorecards
  • Export redlines as Markdown diffs or DOCX track changes
When to use it
Useful when an assistant needs to review vendor terms, NDAs, MSAs or commercial leases before signing, or when a coding agent should check API and vendor policy terms. It suits teams that want a first-pass risk screen without sending documents to a cloud service.
Requirements
Runs as a local stdio process, installed from the npm package; the README also mentions a pre-compiled binary and a Python SDK. The README states that Gemini 1.5 Flash is used for legal reasoning and redline generation, which implies a Gemini API key, though the manifest declares no environment variables or authentication. Desktop only.
Before you install
The README claims fully in-memory, privacy-preserving processing, but it also names Gemini 1.5 Flash as part of the scoring and redline pipeline, so contract text may leave the machine; verify this before using confidential documents. Output is heuristic and AI-generated and is not legal advice. The README describes enterprise features that intercept e-signature webhooks and lock signing, and bulk scanning of cloud drives, which are separate paid offerings.

Installation

In SourceWeft

  1. Open FinePrint AI Legal Risk & Contract Audit MCP Server in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

📜 FinePrint AI

In-Memory Contract, Lease & NDA Scanner & Redline Generator

[GitHub Release] [CLI Tool] [Python SDK] [NPM Package] [License] [Zero VPS Cost]

FinePrint AI is an in-memory, privacy-preserving legal contract auditor and redline synthesizer. Equipped with 60+ heuristic legal risk signatures, an in-memory PDF AST parser, and Gemini 1.5 Flash, FinePrint scans Master Services Agreements (MSAs), NDAs, commercial leases, and vendor terms to grade contract risk from A (Acceptable) to F (Unacceptable) and generate attorney-grade redline amendments in seconds with zero cloud server overhead ($0 VPS).

Download Release • CLI Quickstart • Python SDK • Architecture • Risk Categories • Enterprise Features • Examples


⚡ The Problem: The Fine Print Trap

Reviewing commercial contracts is slow, error-prone, and expensive ($500–$1,200/hr for outside counsel):

  • Uncapped Indemnification: Hidden clauses forcing vendors or customers to bear unlimited financial liability for third-party IP claims.
  • Asymmetric Liability Caps: One-sided limitations where the vendor's liability is capped at $100 while the customer remains fully exposed.
  • Auto-Renewal Traps: Multi-year automatic renewals requiring 90- to 120-day advance cancellation notice.
  • Unfavorable Offshore Jurisdictions: Mandatory arbitration clauses buried in remote or offshore court systems.
  • Privacy & Client Confidentiality: Uploading non-public corporate contracts or NDAs to generic cloud AI services violates confidentiality terms.

FinePrint AI performs all text extraction and AST clause chunking locally in-memory, ensuring your private legal agreements are never leaked or stored.


🏛️ Architecture

FinePrint operates on an air-gapped, zero-knowledge in-memory architecture:

mermaid
flowchart TD    subgraph Inputs["Document Input Layer"]        PDF["PDF Agreement (In-Memory Buffer)"]        DOCX["Word Document (.docx)"]        Markdown["Markdown / Plaintext Contract"]    end
    subgraph CoreEngine["In-Memory Legal Review Engine (< 1.2s)"]        ASTParser["In-Memory PDF AST & Layout Parser\n(Preserves Clause Hierarchy & Section Numbers)"]        ClauseChunker["Semantic Legal Clause Segmenter"]        RuleEngine["60+ Heuristic Risk Signatures Engine\n(Indemnities, Liability Caps, IP, Jurisdictions)"]        AIScorer["Gemini 1.5 Flash Legal Reasoning & Redline Generator"]        GradeCalc["Deterministic Risk Grade Calculator (A through F)"]    end
    subgraph Exporters["Attorney Redline Output Layer"]        ScoreReport["Executive Summary & Category Scorecard (A-F)"]        MarkdownDiff["Markdown Side-by-Side Diff Redline"]        DOCXTrack["DOCX Track Changes Redline"]        WebhookAlert["Approval / Signing Gate Lock Event"]    end
    subgraph ZeroCostEdge["Serverless Edge (api.fineprint.io)"]        CFWorkers["Cloudflare Workers (DocuSign / GitHub PR Webhook Interceptor)"]    end
    Inputs --> ASTParser    ASTParser --> ClauseChunker    ClauseChunker --> RuleEngine & AIScorer    RuleEngine & AIScorer --> GradeCalc    GradeCalc --> ScoreReport & MarkdownDiff & DOCXTrack    CFWorkers -.->|Automated Webhook Contract Auditing| WebhookAlert

🎯 60+ Legal Risk Categories

Risk CategoryWhat FinePrint AI Detects & FlagsRecommended Remediation
IndemnificationUncapped customer/vendor indemnity, IP infringement warranties, indemnifying gross negligence.Mutual caps tied to 12-month fees, standard carve-outs for client fault.
Liability CapsAsymmetric caps ($0–$100 vendor cap vs unlimited customer cap), waiver of consequential damages without reciprocity.Mutual aggregate liability cap capped at 12–24 months of total contract value.
IP AssignmentOverbroad work-for-hire claims, assignment of pre-existing background IP, assignment of moral rights.Retention of background IP; license granted strictly for agreement scope.
Termination & RenewalSneak evergreen auto-renewal clauses requiring >60 days written notice, termination without cause penalties.Standard 30-day non-renewal notice, prorated refunds upon breach.
Non-Compete & SolicitationUnreasonable duration (>1 year), worldwide geographic restrictions, restrictions on general job postings.Limited non-solicitation of direct project personnel; striking non-compete.
Governing Law & DisputesOffshore jurisdictions (Cayman, Delaware exclusivity for foreign entities), waiver of jury trial, unilateral arbitration fees.Neutral state governing law (NY/CA/UK) with mutual venue and prevailing party fee recovery.

🚀 Quickstart

1. CLI Quickstart

Download the pre-compiled binary from Latest Releases or install via npm:

bash
npm install -g @ritualdev/fineprint

Run an automated audit on any contract or lease:

bash
fineprint review ./examples/sample_vendor_agreement.md --output redline.md

Export an executive scorecard:

bash
fineprint score ./examples/sample_vendor_agreement.md --json

2. Python SDK Quickstart (pip install fineprint)

Ideal for legal tech engineering, DocuSign webhooks, and contract data pipelines:

python
from fineprint import ContractScanner
scanner = ContractScanner()report = scanner.analyze_text("""Vendor shall indemnify Client against all claims without cap or limitation.Vendor's total aggregate liability shall not exceed $100.""")
print(f"Risk Grade: {report['grade']}")  # e.g. Grade F (Unacceptable)for issue in report['violations']:    print(f"⚠️ {issue['category']}: {issue['explanation']}")    print(f"   Proposed Amendment: {issue['recommended_clause']}")

See examples/audit_contract.py for a complete runnable Python walkthrough.


3. Node.js / TypeScript SDK

bash
npm install @ritualdev/fineprint
typescript
import { ContractAnalyzer } from '@ritualdev/fineprint';
const analyzer = new ContractAnalyzer();const audit = await analyzer.auditFile('./vendor-agreement.pdf');
console.log(`Risk Score: ${audit.overallScore}/100 (Grade: ${audit.grade})`);console.log(`Flagged ${audit.redlines.length} high-risk provisions.`);

🏢 Enterprise Features ($50K–$250K ACV Capabilities)

  • 📜 Corporate Legal Playbook Customizer: Upload company-specific fallback terms and non-negotiables (e.g. Acme Corp mandates New York governing law, $5M cyber insurance, and strikes all customer indemnities). FinePrint scores incoming vendor contracts against your unique corporate playbook.
  • 🗄️ Bulk Contract Repository Auditing (Legacy Contract Scanner): Batch scan thousands of legacy NDAs, MSAs, and commercial leases stored across Google Drive, Dropbox, or AWS S3 to uncover latent liabilities, expiring renewal dates, and uncapped indemnifications in bulk.
  • ✍️ e-Signature Interceptor & Approval Workflows (DocuSign / PandaDoc Webhooks): Intercepts contracts before execution: if a contract receives an 'F' (Unacceptable) rating, the workflow automatically locks signature execution and routes the redline proposal to senior legal counsel for sign-off.

📊 Performance Benchmarks

  • Analysis Latency: $< 1.2\text{ seconds}$ on 40-page commercial PDF agreements.
  • Privacy: 100% in-memory processing; zero persistent document storage.
  • Infrastructure Cost: $0.00 / month ($0 VPS, $0 server maintenance).
  • Test Verification: 50 / 50 passing tests across Node.js, AST parsers, and Python 3.8+.

🤝 Community & Support

  • Feature Requests & Bug Reports: Open an issue in our Public Issue Tracker.
  • Enterprise Licensing: Contact [email protected] for corporate playbook customization, DocuSign interceptors, and bulk legacy audits.
  • Core Development: Developed and maintained by RitualDev Studio.

Copyright © 2026 RitualDev Studio. Proprietary Commercial Software. All Rights Reserved.

Source: README.md at commit d8e3612

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v0.1.1LatestNov 7, 2026

Score

40% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

    Declare a license in the repository or the registry entry.

Other Audit integrations