NDASentry

io.github.valtirmanPublished by GitHub account valtirmanv1.0.0Updated Nov 2, 2026

Anonymous NDA risk analysis for AI agents. $9 per report. No signup, no data retention.

VerifiedStreamable HTTPWeb executableProductivity & WorkflowBusiness & Commerce

Overview

AI-generated overview

Remote MCP server that lets an assistant screen an NDA PDF for risky or missing clauses, with a free preview and a paid full report.

What you can do
  • Preview an NDA: upload a base64 PDF and get a clause-level summary, missing required clauses, a sample clause and a Stripe payment link.
  • Retrieve the full report: poll a session token after payment to get structured JSON with clause risk levels, evidence, reasoning, aggressive-clause signals, a critique and a recommended action.
  • Route or summarize findings: the flat JSON is meant for agents to filter and act on per the user's concerns.
When to use it
Useful when a user wants a quick, anonymous first pass over a non-disclosure agreement before signing, inside the chat, without creating an account or waiting for a lawyer. Best for screening and triage rather than binding legal interpretation.
Requirements
A remote streamable-HTTP endpoint; no account, API key or headers are declared. The preview tool takes a base64-encoded PDF up to 10 MB. The full report requires paying a per-report fee through a Stripe link in a browser. Self-hosting needs Python and the NDASENTRY_BACKEND_URL setting.
Before you install
Each full report costs money, paid via a Stripe link the user must complete in a browser; the assistant cannot pay. The NDA content is sent to a third-party hosted backend for analysis. Output is explicitly not legal advice. The README says documents are processed in memory and reports are cached in RAM for five minutes, but this is the operator's own claim.

Installation

In SourceWeft

  1. Open NDASentry in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.valtirman%2Fndasentry/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "ndasentry": {
      "type": "http",
      "url": "https://nda-mcp-production.up.railway.app/mcp"
    }
  }
}

README

NDASentry MCP Server

Anonymous NDA risk analysis for AI agents. $9 per report. No signup, no account, no data retention.

NDASentry exposes a multi-stage NDA risk analysis pipeline as MCP tools so any AI agent (Claude Desktop, Cursor, Cline, etc.) can review NDAs on behalf of its user — discover risky clauses, flag missing protections, return a structured risk report — without asking the user to leave the agent, create an account, or wait for a lawyer.

The wedge: every other legal MCP server in this space requires an account, an enterprise login, or attorney-in-the-loop review. NDASentry is designed to be the simplest path for a personal AI agent: call anonymously, pay $9 with a card, get a structured analysis in under a minute.

What it does

Two tools:

  • preview_nda_risk(pdf_base64, filename) — Free preview. Stages the NDA, runs cheap-stage detection (regex-based clause finding, no LLM calls), returns a clause-level summary plus a Stripe payment link. Safe to expose to anonymous agent traffic; zero LLM cost on the preview path.

  • get_nda_report(session_token) — Paid full report. Polls payment status, then runs the full multi-stage LLM pipeline (qualifier, detector, scorer, critic, synthesizer, decision policy) and returns structured JSON with clause-level risk findings, aggressive-clause signals, missing protections, a critique, and a recommended action.

The full pipeline output is designed for agent consumption — flat structured JSON, every clause carries risk level, evidence, and reasoning, so agents can filter, summarize, or route based on what their user cares about.

Quick start (hosted)

Point your MCP client at the public hosted endpoint:

https://nda-mcp-production.up.railway.app/mcp

Claude Desktop config

Add to claude_desktop_config.json:

{  "mcpServers": {    "ndasentry": {      "url": "https://nda-mcp-production.up.railway.app/mcp",      "transport": "streamable-http"    }  }}

Restart Claude Desktop. The two tools will appear in the agent's tool catalog.

Example agent prompt

Review this NDA and tell me if there is anything I should push back on before signing. [attach NDA PDF]

The agent calls preview_nda_risk first, returns a preview plus a payment URL. You pay $9 in your browser. The agent calls get_nda_report and returns the full analysis.

Self-host

For users who want their own instance, or local development:

git clone https://github.com/valtirman/ndasentry-mcp.gitcd ndasentry-mcp/mcp_serverpython -m venv .venv-mcpsource .venv-mcp/bin/activatepip install -r requirements.txt
export NDASENTRY_BACKEND_URL=https://ndasentry.aipython -m mcp_server.server

The server listens on http://localhost:1966/mcp by default. Point your MCP client at it:

{  "mcpServers": {    "ndasentry": {      "url": "http://localhost:1966/mcp",      "transport": "streamable-http"    }  }}

Configuration

Env varDefaultPurpose
NDASENTRY_BACKEND_URLhttp://localhost:8001Backend API that runs the analysis pipeline
PORT1966Port the MCP server binds to
MCP_ALLOWED_HOSTS(empty)Comma-separated production hosts to add to DNS rebinding allowlist
MCP_ALLOWED_ORIGINS(empty)Comma-separated production origins to add to DNS rebinding allowlist

The backend (ndasentry.ai by default for the hosted version) handles document analysis and Stripe payment verification. The MCP server is a thin protocol adapter that does not reimplement any pipeline logic. The same backend serves the web product at https://ndasentry.ai.

Tools reference

preview_nda_risk

Input:

  • pdf_base64 (string): base64-encoded PDF bytes, max 10 MB
  • filename (string): the PDF filename

Output: JSON with session_token, payment_url (Stripe link with the session token bound as client_reference_id), clause_summary, missing_required_clauses, a labeled sample clause showing the shape of a paid analysis, and a disclaimer.

get_nda_report

Input:

  • session_token (string): from the preview_nda_risk response

Output: Full structured AnalysisReport JSON with clauses, risk scores, critique, completeness, qualification, aggressive-clause signals, recommended action, and disclaimer. If payment is not yet complete, returns a polling status response instead.

Disclaimer

NDASentry is a contract risk screening tool, not a law firm. Output is not legal advice and does not create an attorney-client relationship. For binding legal interpretation or high-stakes decisions, consult licensed counsel.

Privacy

The hosted backend at ndasentry.ai is designed around an "evaporates" model:

  • Documents are processed in memory only, never written to disk
  • Reports are cached in RAM for 5 minutes after generation, then deleted
  • No account, no email collection, no document retention

About

Built by Val Tirman at FrontRange Mountain AI LLC. Solo indie effort. The web product runs at https://ndasentry.ai; this MCP server is the agent-facing channel on the same backend.

If you build something with NDASentry MCP, drop a note: [email protected]. Genuinely interested in what agents do with this.

License

MIT — see LICENSE file in the repository root.

Source: README.md at commit 2d410cb

Tools

0
SourceWeft has not read this server's tools yet.

Version history

1
  1. v1.0.0LatestSep 16, 2026

Score

85% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts