FinePrint AI Legal Risk & Contract Audit MCP Server

io.github.RitualDev-Lab由 GitHub 帳號 RitualDev-Lab 發布v0.1.1更新於 Nov 7, 2026

Zero-cost in-memory legal terms, API policy & NDA scanner for autonomous coding agents

發布方自己的服務:audit.domains - Domain Valuation

概覽

AI 產生的概覽

在本機記憶體中執行的合約風險掃描器,為編碼代理評估法律合約、NDA 與租約風險並產生修訂建議。

可以做什麼
  • 掃描合約文字或 PDF、DOCX、Markdown 檔案中的法律風險條款
  • 依 60 餘條啟發式風險特徵將合約評為 A 至 F 級
  • 依賠償、責任上限、智慧財產歸屬、續約與管轄等類別列出問題
  • 產生建議修訂條款與高階摘要評分卡
  • 以 Markdown 差異或 DOCX 修訂模式匯出紅線稿
適用情境
適合在簽署前審閱供應商條款、NDA、主服務協議或商業租約,也適合讓編碼代理檢查 API 與供應商政策條款。想先做一輪風險初篩、又不願把檔案上傳到雲端服務的團隊可用。
執行需求
以本機 stdio 程序執行,透過 npm 套件安裝;README 另提到預編譯二進位檔與 Python SDK。README 稱使用 Gemini 1.5 Flash 進行法律推理與修訂產生,這意味著需要 Gemini API 金鑰,但清單未宣告任何環境變數或驗證方式。僅支援桌面端。
安裝前請注意
README 聲稱全程記憶體處理、保護隱私,但同時把 Gemini 1.5 Flash 列為評分與修訂流程的一環,合約文字可能離開本機,處理機密文件前應先確認。輸出為啟發式與 AI 產生結果,不構成法律意見。README 所述攔截電子簽章 webhook、鎖定簽署以及批次掃描雲端硬碟的企業功能屬於另外的付費產品。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 FinePrint AI Legal Risk & Contract Audit MCP Server,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only,透過 STDIO。 STDIO 服務會啟動本機處理程序,因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

📜 FinePrint AI

In-Memory Contract, Lease & NDA Scanner & Redline Generator

[GitHub Release] [CLI Tool] [Python SDK] [NPM Package] [License] [Zero VPS Cost]

FinePrint AI is an in-memory, privacy-preserving legal contract auditor and redline synthesizer. Equipped with 60+ heuristic legal risk signatures, an in-memory PDF AST parser, and Gemini 1.5 Flash, FinePrint scans Master Services Agreements (MSAs), NDAs, commercial leases, and vendor terms to grade contract risk from A (Acceptable) to F (Unacceptable) and generate attorney-grade redline amendments in seconds with zero cloud server overhead ($0 VPS).

Download Release • CLI Quickstart • Python SDK • Architecture • Risk Categories • Enterprise Features • Examples


⚡ The Problem: The Fine Print Trap

Reviewing commercial contracts is slow, error-prone, and expensive ($500–$1,200/hr for outside counsel):

  • Uncapped Indemnification: Hidden clauses forcing vendors or customers to bear unlimited financial liability for third-party IP claims.
  • Asymmetric Liability Caps: One-sided limitations where the vendor's liability is capped at $100 while the customer remains fully exposed.
  • Auto-Renewal Traps: Multi-year automatic renewals requiring 90- to 120-day advance cancellation notice.
  • Unfavorable Offshore Jurisdictions: Mandatory arbitration clauses buried in remote or offshore court systems.
  • Privacy & Client Confidentiality: Uploading non-public corporate contracts or NDAs to generic cloud AI services violates confidentiality terms.

FinePrint AI performs all text extraction and AST clause chunking locally in-memory, ensuring your private legal agreements are never leaked or stored.


🏛️ Architecture

FinePrint operates on an air-gapped, zero-knowledge in-memory architecture:

mermaid
flowchart TD    subgraph Inputs["Document Input Layer"]        PDF["PDF Agreement (In-Memory Buffer)"]        DOCX["Word Document (.docx)"]        Markdown["Markdown / Plaintext Contract"]    end
    subgraph CoreEngine["In-Memory Legal Review Engine (< 1.2s)"]        ASTParser["In-Memory PDF AST & Layout Parser\n(Preserves Clause Hierarchy & Section Numbers)"]        ClauseChunker["Semantic Legal Clause Segmenter"]        RuleEngine["60+ Heuristic Risk Signatures Engine\n(Indemnities, Liability Caps, IP, Jurisdictions)"]        AIScorer["Gemini 1.5 Flash Legal Reasoning & Redline Generator"]        GradeCalc["Deterministic Risk Grade Calculator (A through F)"]    end
    subgraph Exporters["Attorney Redline Output Layer"]        ScoreReport["Executive Summary & Category Scorecard (A-F)"]        MarkdownDiff["Markdown Side-by-Side Diff Redline"]        DOCXTrack["DOCX Track Changes Redline"]        WebhookAlert["Approval / Signing Gate Lock Event"]    end
    subgraph ZeroCostEdge["Serverless Edge (api.fineprint.io)"]        CFWorkers["Cloudflare Workers (DocuSign / GitHub PR Webhook Interceptor)"]    end
    Inputs --> ASTParser    ASTParser --> ClauseChunker    ClauseChunker --> RuleEngine & AIScorer    RuleEngine & AIScorer --> GradeCalc    GradeCalc --> ScoreReport & MarkdownDiff & DOCXTrack    CFWorkers -.->|Automated Webhook Contract Auditing| WebhookAlert

🎯 60+ Legal Risk Categories

Risk CategoryWhat FinePrint AI Detects & FlagsRecommended Remediation
IndemnificationUncapped customer/vendor indemnity, IP infringement warranties, indemnifying gross negligence.Mutual caps tied to 12-month fees, standard carve-outs for client fault.
Liability CapsAsymmetric caps ($0–$100 vendor cap vs unlimited customer cap), waiver of consequential damages without reciprocity.Mutual aggregate liability cap capped at 12–24 months of total contract value.
IP AssignmentOverbroad work-for-hire claims, assignment of pre-existing background IP, assignment of moral rights.Retention of background IP; license granted strictly for agreement scope.
Termination & RenewalSneak evergreen auto-renewal clauses requiring >60 days written notice, termination without cause penalties.Standard 30-day non-renewal notice, prorated refunds upon breach.
Non-Compete & SolicitationUnreasonable duration (>1 year), worldwide geographic restrictions, restrictions on general job postings.Limited non-solicitation of direct project personnel; striking non-compete.
Governing Law & DisputesOffshore jurisdictions (Cayman, Delaware exclusivity for foreign entities), waiver of jury trial, unilateral arbitration fees.Neutral state governing law (NY/CA/UK) with mutual venue and prevailing party fee recovery.

🚀 Quickstart

1. CLI Quickstart

Download the pre-compiled binary from Latest Releases or install via npm:

bash
npm install -g @ritualdev/fineprint

Run an automated audit on any contract or lease:

bash
fineprint review ./examples/sample_vendor_agreement.md --output redline.md

Export an executive scorecard:

bash
fineprint score ./examples/sample_vendor_agreement.md --json

2. Python SDK Quickstart (pip install fineprint)

Ideal for legal tech engineering, DocuSign webhooks, and contract data pipelines:

python
from fineprint import ContractScanner
scanner = ContractScanner()report = scanner.analyze_text("""Vendor shall indemnify Client against all claims without cap or limitation.Vendor's total aggregate liability shall not exceed $100.""")
print(f"Risk Grade: {report['grade']}")  # e.g. Grade F (Unacceptable)for issue in report['violations']:    print(f"⚠️ {issue['category']}: {issue['explanation']}")    print(f"   Proposed Amendment: {issue['recommended_clause']}")

See examples/audit_contract.py for a complete runnable Python walkthrough.


3. Node.js / TypeScript SDK

bash
npm install @ritualdev/fineprint
typescript
import { ContractAnalyzer } from '@ritualdev/fineprint';
const analyzer = new ContractAnalyzer();const audit = await analyzer.auditFile('./vendor-agreement.pdf');
console.log(`Risk Score: ${audit.overallScore}/100 (Grade: ${audit.grade})`);console.log(`Flagged ${audit.redlines.length} high-risk provisions.`);

🏢 Enterprise Features ($50K–$250K ACV Capabilities)

  • 📜 Corporate Legal Playbook Customizer: Upload company-specific fallback terms and non-negotiables (e.g. Acme Corp mandates New York governing law, $5M cyber insurance, and strikes all customer indemnities). FinePrint scores incoming vendor contracts against your unique corporate playbook.
  • 🗄️ Bulk Contract Repository Auditing (Legacy Contract Scanner): Batch scan thousands of legacy NDAs, MSAs, and commercial leases stored across Google Drive, Dropbox, or AWS S3 to uncover latent liabilities, expiring renewal dates, and uncapped indemnifications in bulk.
  • ✍️ e-Signature Interceptor & Approval Workflows (DocuSign / PandaDoc Webhooks): Intercepts contracts before execution: if a contract receives an 'F' (Unacceptable) rating, the workflow automatically locks signature execution and routes the redline proposal to senior legal counsel for sign-off.

📊 Performance Benchmarks

  • Analysis Latency: $< 1.2\text{ seconds}$ on 40-page commercial PDF agreements.
  • Privacy: 100% in-memory processing; zero persistent document storage.
  • Infrastructure Cost: $0.00 / month ($0 VPS, $0 server maintenance).
  • Test Verification: 50 / 50 passing tests across Node.js, AST parsers, and Python 3.8+.

🤝 Community & Support

  • Feature Requests & Bug Reports: Open an issue in our Public Issue Tracker.
  • Enterprise Licensing: Contact [email protected] for corporate playbook customization, DocuSign interceptors, and bulk legacy audits.
  • Core Development: Developed and maintained by RitualDev Studio.

Copyright © 2026 RitualDev Studio. Proprietary Commercial Software. All Rights Reserved.

來源:README.md,提交 d8e3612

工具

0
SourceWeft 尚未在沙箱中啟動過該軟體包,因此其工具未知。

版本歷史

1
  1. v0.1.1最新Nov 7, 2026

評分

已滿足適用檢查項的 40%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分

    請保持端點能夠回應 MCP 握手;SourceWeft 每 30 天探測一次。

  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭,或保持端點能夠回應探測,以便判定其認證方式。

  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list,或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分

    請在儲存庫或註冊中心條目中宣告授權條款。

其他 Audit 整合