FinePrint AI Legal Risk & Contract Audit MCP Server

io.github.RitualDev-Lab由 GitHub 账号 RitualDev-Lab 发布v0.1.1更新于 Nov 7, 2026

Zero-cost in-memory legal terms, API policy & NDA scanner for autonomous coding agents

发布方自己的服务:audit.domains - Domain Valuation

概览

AI 生成的概览

本地内存中运行的合同风险扫描器,为编码代理评估法律合同、NDA 与租约风险并生成修订建议。

可以做什么
  • 扫描合同文本或 PDF、DOCX、Markdown 文件中的法律风险条款
  • 依据 60 余条启发式风险特征将合同评为 A 至 F 级
  • 按赔偿、责任上限、知识产权归属、续约与管辖等类别列出问题
  • 生成建议修订条款与高管摘要评分卡
  • 以 Markdown 差异或 DOCX 修订模式导出红线稿
适用场景
适合在签署前审阅供应商条款、NDA、主服务协议或商业租约,也适合让编码代理检查 API 与供应商政策条款。希望先做一轮风险初筛、又不愿把文件上传到云端服务的团队可用。
运行要求
以本地 stdio 进程运行,通过 npm 包安装;README 还提到预编译二进制与 Python SDK。README 称使用 Gemini 1.5 Flash 进行法律推理与修订生成,这意味着需要 Gemini API 密钥,但清单未声明任何环境变量或认证方式。仅支持桌面端。
安装前请注意
README 声称全程内存处理、保护隐私,但同时把 Gemini 1.5 Flash 列为评分与修订流程的一环,合同文本可能离开本机,处理机密文件前应核实。输出为启发式与 AI 生成结果,不构成法律意见。README 所述拦截电子签名 webhook、锁定签署以及批量扫描云盘的企业功能属于另外的付费产品。

安装

在 SourceWeft 中

  1. 打开 控制台中的 FinePrint AI Legal Risk & Contract Audit MCP Server,将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Desktop only,通过 STDIO。 STDIO 服务会启动本地进程,因此需要 SourceWeft 桌面宿主。

其他 MCP 客户端

参照 仓库 中的启动说明。

README

📜 FinePrint AI

In-Memory Contract, Lease & NDA Scanner & Redline Generator

[GitHub Release] [CLI Tool] [Python SDK] [NPM Package] [License] [Zero VPS Cost]

FinePrint AI is an in-memory, privacy-preserving legal contract auditor and redline synthesizer. Equipped with 60+ heuristic legal risk signatures, an in-memory PDF AST parser, and Gemini 1.5 Flash, FinePrint scans Master Services Agreements (MSAs), NDAs, commercial leases, and vendor terms to grade contract risk from A (Acceptable) to F (Unacceptable) and generate attorney-grade redline amendments in seconds with zero cloud server overhead ($0 VPS).

Download Release • CLI Quickstart • Python SDK • Architecture • Risk Categories • Enterprise Features • Examples


⚡ The Problem: The Fine Print Trap

Reviewing commercial contracts is slow, error-prone, and expensive ($500–$1,200/hr for outside counsel):

  • Uncapped Indemnification: Hidden clauses forcing vendors or customers to bear unlimited financial liability for third-party IP claims.
  • Asymmetric Liability Caps: One-sided limitations where the vendor's liability is capped at $100 while the customer remains fully exposed.
  • Auto-Renewal Traps: Multi-year automatic renewals requiring 90- to 120-day advance cancellation notice.
  • Unfavorable Offshore Jurisdictions: Mandatory arbitration clauses buried in remote or offshore court systems.
  • Privacy & Client Confidentiality: Uploading non-public corporate contracts or NDAs to generic cloud AI services violates confidentiality terms.

FinePrint AI performs all text extraction and AST clause chunking locally in-memory, ensuring your private legal agreements are never leaked or stored.


🏛️ Architecture

FinePrint operates on an air-gapped, zero-knowledge in-memory architecture:

mermaid
flowchart TD    subgraph Inputs["Document Input Layer"]        PDF["PDF Agreement (In-Memory Buffer)"]        DOCX["Word Document (.docx)"]        Markdown["Markdown / Plaintext Contract"]    end
    subgraph CoreEngine["In-Memory Legal Review Engine (< 1.2s)"]        ASTParser["In-Memory PDF AST & Layout Parser\n(Preserves Clause Hierarchy & Section Numbers)"]        ClauseChunker["Semantic Legal Clause Segmenter"]        RuleEngine["60+ Heuristic Risk Signatures Engine\n(Indemnities, Liability Caps, IP, Jurisdictions)"]        AIScorer["Gemini 1.5 Flash Legal Reasoning & Redline Generator"]        GradeCalc["Deterministic Risk Grade Calculator (A through F)"]    end
    subgraph Exporters["Attorney Redline Output Layer"]        ScoreReport["Executive Summary & Category Scorecard (A-F)"]        MarkdownDiff["Markdown Side-by-Side Diff Redline"]        DOCXTrack["DOCX Track Changes Redline"]        WebhookAlert["Approval / Signing Gate Lock Event"]    end
    subgraph ZeroCostEdge["Serverless Edge (api.fineprint.io)"]        CFWorkers["Cloudflare Workers (DocuSign / GitHub PR Webhook Interceptor)"]    end
    Inputs --> ASTParser    ASTParser --> ClauseChunker    ClauseChunker --> RuleEngine & AIScorer    RuleEngine & AIScorer --> GradeCalc    GradeCalc --> ScoreReport & MarkdownDiff & DOCXTrack    CFWorkers -.->|Automated Webhook Contract Auditing| WebhookAlert

🎯 60+ Legal Risk Categories

Risk CategoryWhat FinePrint AI Detects & FlagsRecommended Remediation
IndemnificationUncapped customer/vendor indemnity, IP infringement warranties, indemnifying gross negligence.Mutual caps tied to 12-month fees, standard carve-outs for client fault.
Liability CapsAsymmetric caps ($0–$100 vendor cap vs unlimited customer cap), waiver of consequential damages without reciprocity.Mutual aggregate liability cap capped at 12–24 months of total contract value.
IP AssignmentOverbroad work-for-hire claims, assignment of pre-existing background IP, assignment of moral rights.Retention of background IP; license granted strictly for agreement scope.
Termination & RenewalSneak evergreen auto-renewal clauses requiring >60 days written notice, termination without cause penalties.Standard 30-day non-renewal notice, prorated refunds upon breach.
Non-Compete & SolicitationUnreasonable duration (>1 year), worldwide geographic restrictions, restrictions on general job postings.Limited non-solicitation of direct project personnel; striking non-compete.
Governing Law & DisputesOffshore jurisdictions (Cayman, Delaware exclusivity for foreign entities), waiver of jury trial, unilateral arbitration fees.Neutral state governing law (NY/CA/UK) with mutual venue and prevailing party fee recovery.

🚀 Quickstart

1. CLI Quickstart

Download the pre-compiled binary from Latest Releases or install via npm:

bash
npm install -g @ritualdev/fineprint

Run an automated audit on any contract or lease:

bash
fineprint review ./examples/sample_vendor_agreement.md --output redline.md

Export an executive scorecard:

bash
fineprint score ./examples/sample_vendor_agreement.md --json

2. Python SDK Quickstart (pip install fineprint)

Ideal for legal tech engineering, DocuSign webhooks, and contract data pipelines:

python
from fineprint import ContractScanner
scanner = ContractScanner()report = scanner.analyze_text("""Vendor shall indemnify Client against all claims without cap or limitation.Vendor's total aggregate liability shall not exceed $100.""")
print(f"Risk Grade: {report['grade']}")  # e.g. Grade F (Unacceptable)for issue in report['violations']:    print(f"⚠️ {issue['category']}: {issue['explanation']}")    print(f"   Proposed Amendment: {issue['recommended_clause']}")

See examples/audit_contract.py for a complete runnable Python walkthrough.


3. Node.js / TypeScript SDK

bash
npm install @ritualdev/fineprint
typescript
import { ContractAnalyzer } from '@ritualdev/fineprint';
const analyzer = new ContractAnalyzer();const audit = await analyzer.auditFile('./vendor-agreement.pdf');
console.log(`Risk Score: ${audit.overallScore}/100 (Grade: ${audit.grade})`);console.log(`Flagged ${audit.redlines.length} high-risk provisions.`);

🏢 Enterprise Features ($50K–$250K ACV Capabilities)

  • 📜 Corporate Legal Playbook Customizer: Upload company-specific fallback terms and non-negotiables (e.g. Acme Corp mandates New York governing law, $5M cyber insurance, and strikes all customer indemnities). FinePrint scores incoming vendor contracts against your unique corporate playbook.
  • 🗄️ Bulk Contract Repository Auditing (Legacy Contract Scanner): Batch scan thousands of legacy NDAs, MSAs, and commercial leases stored across Google Drive, Dropbox, or AWS S3 to uncover latent liabilities, expiring renewal dates, and uncapped indemnifications in bulk.
  • ✍️ e-Signature Interceptor & Approval Workflows (DocuSign / PandaDoc Webhooks): Intercepts contracts before execution: if a contract receives an 'F' (Unacceptable) rating, the workflow automatically locks signature execution and routes the redline proposal to senior legal counsel for sign-off.

📊 Performance Benchmarks

  • Analysis Latency: $< 1.2\text{ seconds}$ on 40-page commercial PDF agreements.
  • Privacy: 100% in-memory processing; zero persistent document storage.
  • Infrastructure Cost: $0.00 / month ($0 VPS, $0 server maintenance).
  • Test Verification: 50 / 50 passing tests across Node.js, AST parsers, and Python 3.8+.

🤝 Community & Support

  • Feature Requests & Bug Reports: Open an issue in our Public Issue Tracker.
  • Enterprise Licensing: Contact [email protected] for corporate playbook customization, DocuSign interceptors, and bulk legacy audits.
  • Core Development: Developed and maintained by RitualDev Studio.

Copyright © 2026 RitualDev Studio. Proprietary Commercial Software. All Rights Reserved.

来源:README.md,提交 d8e3612

工具

0
SourceWeft 尚未在沙箱中启动过该软件包,因此其工具未知。

版本历史

1
  1. v0.1.1最新Nov 7, 2026

评分

已满足适用检查项的 40%

该评分衡量此收录条目的完整程度,依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价,也不表示服务器安全或当前可用:可连通性是带日期的检查结果,评分也不包含安装量或用户评价。

  • 近 30 天内可连通25 分

    请保持端点能够响应 MCP 握手;SourceWeft 每 30 天探测一次。

  • 已声明认证方式10 分

    请在注册中心条目中声明凭据请求头,或保持端点能够响应探测,以便判定其认证方式。

  • 已列出工具15 分

    请让服务器在无凭据时响应 tools/list,或发布可在沙箱中无凭据启动的软件包。

  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分

    请在仓库或注册中心条目中声明许可证。

其他 Audit 集成