Mcp Legal Doc Analyzer

io.github.dbsectrainerPublished by GitHub account dbsectrainerv1.0.1Updated Nov 4, 2026

Domain-specific MCP tooling for legal document workflows

Overview

AI-generated overview

Local MCP server that lets an assistant extract clauses, flag risks, check compliance and compare versions of contract documents (PDF, DOCX, TXT).

What you can do
  • Extract and label clauses from contracts with confidence scores, and summarize key provisions in plain English
  • Flag risky provisions against compliance templates and run pass/fail checklist validation
  • Compare two document versions at the clause level and list available templates
  • Export a self-contained HTML analysis report or the audit log as JSON or CSV
  • Batch-analyze a portfolio of contract files with per-file results and an aggregate summary
When to use it
Useful when you review contracts or legal documents and want clause extraction, risk flagging, compliance checklists, version diffs and printable reports without sending documents to an external service. It is an analysis aid, not legal advice, so outputs still need review by a qualified legal professional.
Requirements
Runs locally over stdio via npx; needs Node.js v20.19 or newer and npm. Optional flags set a custom templates directory, SQLite database path, confidence threshold, clause-pattern file, bulk concurrency, OCR (extra peer dependencies) or HTTP mode. An API key environment variable is declared as required.
Before you install
Documents are parsed locally and analysis history is stored in a local SQLite database by default, so database exports may contain confidential material. Extraction relies on pattern matching and heuristics and can be incomplete or wrong for non-standard formats. The server declares a required API key environment variable, and the README does not explain what it is used for.

Installation

In SourceWeft

  1. Open Mcp Legal Doc Analyzer in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

MCP Legal Document Analyzer

npm mcp-legal-doc-analyzer package

Domain-specific MCP tooling for legal document workflows. Extract key clauses from contracts, flag risky provisions against configurable rule templates, compare document versions at the clause level, and check compliance against standard checklists — all locally, without documents leaving your machine.

Tool reference | Configuration | Contributing | Troubleshooting

Key features

  • Clause extraction: Identifies and labels clause boundaries (termination, liability, IP, governing law, and more) from PDF, DOCX, and plain-text files.
  • Risk flagging: Checks extracted clauses against YAML rule templates and returns severity-ranked findings.
  • Compliance checking: Validates documents against structured checklists (NDA, employment agreement, SaaS terms) with pass/fail per requirement.
  • Version diffing: Compares two versions of a document at the clause level — not raw text lines.
  • Configurable templates: Rule sets are YAML files that legal professionals can review and edit without writing code.
  • Local-only processing: All parsing and analysis runs on-device; documents are never transmitted externally.

Disclaimers

mcp-legal-doc-analyzer is an analysis aid, not legal advice. Outputs should be reviewed by a qualified legal professional before making decisions. Clause extraction uses pattern matching and heuristics; results may be incomplete or incorrect for non-standard document formats. Low-confidence extractions are flagged explicitly.

Document contents are processed locally and stored in a local SQLite database. Do not share database exports containing confidential documents.

Requirements

  • Node.js v20.19 or newer.
  • npm.

Getting started

Add the following config to your MCP client:

json
{  "mcpServers": {    "legal-analyzer": {      "command": "npx",      "args": ["-y", "mcp-legal-doc-analyzer@latest"]    }  }}

To load custom compliance templates from a directory:

json
{  "mcpServers": {    "legal-analyzer": {      "command": "npx",      "args": ["-y", "mcp-legal-doc-analyzer@latest", "--templates=~/legal/my-templates"]    }  }}

MCP Client configuration

Amp · Claude Code · Cline · Cursor · VS Code · Windsurf · Zed

Your first prompt

Provide a PDF or DOCX contract file, then enter:

Extract the key clauses from this NDA and flag any risky provisions.

Your client should return a list of extracted clauses and a risk report ranked by severity.

Tools

Document analysis (4 tools)

  • extract_clauses — identify and label clause boundaries with confidence scores; supports .pdf, .docx, .txt
  • flag_risks — severity-ranked risk findings against a compliance template
  • check_compliance — structured pass/fail checklist validation per rule
  • summarize_terms — plain-English bullet-point summary of key provisions

Comparison (1 tool)

  • compare_versions — clause-level diff between two document versions

Templates (1 tool)

  • list_templates — enumerate all available compliance templates

Export & bulk (3 tools)

  • export_analysis_report — self-contained HTML report with clause table and risk findings; suitable for printing
  • export_audit_log — export the analysis audit log in JSON or CSV format with optional date-range filtering
  • bulk_analyze — process a portfolio of contract files in batch with progress notifications

Bundled templates

Nine compliance templates are included out of the box:

  1. NDA
  2. Employment Agreement
  3. SaaS Customer Agreement
  4. Software License Agreement
  5. Vendor Agreement
  6. Consulting Agreement
  7. Data Processing Agreement
  8. IP Assignment
  9. Loan Agreement

Use list_templates to enumerate all available templates at runtime, including any custom templates loaded via --templates.

Configuration

--templates / --templates-dir

Directory to load custom YAML compliance rule templates from. Templates in this directory are merged with the built-in set.

Type: string

--db / --db-path

Path to the SQLite database file used to store document analysis history.

Type: string Default: ~/.mcp/legal.db

--confidence-threshold

Minimum confidence score (0–1) for extracted clauses to be included in results. Extractions below this threshold are flagged as low-confidence.

Type: number Default: 0.6

--no-history

Disable storing document analysis results in the local database.

Type: boolean Default: false

--clause-patterns

Path to a YAML file defining custom clause detection patterns. See custom-clause-patterns.example.yaml in the source tree for the schema.

Type: string

--bulk-concurrency

Number of files to process in parallel when using bulk_analyze.

Type: number Default: 4

--ocr

Enable OCR fallback for scanned PDFs that contain no extractable text layer. Requires the optional peer dependencies tesseract.js, pdfjs-dist, and canvas.

Type: boolean Default: false

--http-port

Start the server in Streamable HTTP mode on the given port instead of stdio. When set, the server accepts HTTP connections suitable for shared team deployments.

Type: number

Pass flags via the args property in your JSON config:

json
{  "mcpServers": {    "legal-analyzer": {      "command": "npx",      "args": [        "-y",        "mcp-legal-doc-analyzer@latest",        "--confidence-threshold=0.8",        "--templates=~/legal/templates"      ]    }  }}

Verification

Before publishing a new version, verify the server with MCP Inspector to confirm all tools are exposed correctly and the protocol handshake succeeds.

Run npm run build first so the packaged templates in dist/templates are present during verification.

Interactive UI (opens browser):

bash
npm run build && npm run inspect

CLI mode (scripted / CI-friendly):

bash
# List all toolsnpx @modelcontextprotocol/inspector --cli node dist/index.js --method tools/list
# List resources and promptsnpx @modelcontextprotocol/inspector --cli node dist/index.js --method resources/listnpx @modelcontextprotocol/inspector --cli node dist/index.js --method prompts/list
# Call a tool (example — replace with a relevant read-only tool for this plugin)npx @modelcontextprotocol/inspector --cli node dist/index.js \  --method tools/call --tool-name list_templates
# Call a tool with argumentsnpx @modelcontextprotocol/inspector --cli node dist/index.js \  --method tools/call --tool-name list_templates --tool-arg key=value

Run before publishing to catch regressions in tool registration and runtime startup.

Contributing

Compliance rule templates live in src/templates/ as YAML files and can be contributed without touching code. Clause extraction tests must use synthetic or anonymized documents only — never include real contracts in the repository. Never log document content.

bash
npm install && npm test

MCP Registry & Marketplace

This plugin is available on:

Search for mcp-legal-doc-analyzer.

Source: README.md at commit 41438d0

Tools

9

extract_clauses

Extract and label key clauses from a contract document (PDF, DOCX, or TXT). Returns a structured list of clause types (e.g. termination, liability, confidentiality, governing_law, payment_terms, intellectual_property, dispute_resolution, warranty) with confidence scores. Low-confidence results are flagged for human review.

Parametersfile_pathrequired

flag_risks

Analyze a contract against a compliance template and return a severity-ranked list of risk findings. Available templates: NDA, Employment Agreement, SaaS Customer Agreement, Software License Agreement, Vendor Agreement, Consulting Agreement. If no template is specified, the NDA template is used.

Parameterstemplatefile_pathrequired

summarize_terms

Generate a plain-English, bullet-point summary of the key provisions in a contract document. Covers clause types including termination, liability, confidentiality, governing_law, payment_terms, intellectual_property, dispute_resolution, and warranty.

Parametersfile_pathrequired

list_templates

List all available compliance templates that can be used with flag_risks, check_compliance, and export_analysis_report. Bundled templates include: NDA, Employment Agreement, SaaS Customer Agreement, Software License Agreement, Vendor Agreement, Consulting Agreement.

Takes no parameters.

check_compliance

Run a structured checklist validation of a contract against a compliance template. For each rule, returns pass/fail/not_applicable with a finding description. Available templates: NDA, Employment Agreement, SaaS Customer Agreement, Software License Agreement, Vendor Agreement, Consulting Agreement.

Parameterstemplatefile_pathrequired

compare_versions

Compare two versions of a contract document at the clause level. Shows clauses that were added, removed, changed, or unchanged between version A and version B. Supports .pdf, .docx, and .txt files.

Parametersfile_path_arequiredfile_path_brequired

export_analysis_report

Generate a single-file HTML analysis report for a contract. Includes document metadata, extracted clauses with confidence scores, and an optional risk findings table when a template is provided. The HTML is self-contained with inline CSS and is suitable for printing. Available templates: NDA, Employment Agreement, SaaS Customer Agreement, Software License Agreement, Vendor Agreement, Consulting Agreement.

Parameterstemplatefile_pathrequired

export_audit_log

Export the analysis audit log. Supports optional date-range filtering and JSON or CSV output format.

Parametersformatto_datefrom_date

bulk_analyze

Analyze a portfolio of contract files in batch. Processes each file sequentially and returns per-file clause extraction results plus an aggregate summary.

Parametersfile_pathsrequiredoutput_formattemplate_namerequired

Version history

2
  1. v1.0.1LatestNov 4, 2026
  2. v1.0.0Sep 16, 2026

Score

90% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts
  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts