Connect

8 clients · secrets stay placeholders

JSON (mcpServers)Claude CodeCodexOpenCodeCursorVS CodeGemini CLIGoose

{
  "mcpServers": {
    "open-agreements": {
      "type": "http",
      "url": "https://openagreements.org/api/mcp"
    }
  }
}

claude mcp add --transport http open-agreements https://openagreements.org/api/mcp

[mcp_servers.open-agreements]
url = "https://openagreements.org/api/mcp"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "open-agreements": {
      "type": "remote",
      "url": "https://openagreements.org/api/mcp",
      "enabled": true
    }
  }
}

{
  "mcpServers": {
    "open-agreements": {
      "type": "http",
      "url": "https://openagreements.org/api/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=open-agreements&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vb3BlbmFncmVlbWVudHMub3JnL2FwaS9tY3AifQ%3D%3D"
}

{
  "servers": {
    "open-agreements": {
      "type": "http",
      "url": "https://openagreements.org/api/mcp"
    }
  }
}

{
  "mcpServers": {
    "open-agreements": {
      "httpUrl": "https://openagreements.org/api/mcp"
    }
  }
}

extensions:
  "open-agreements":
    enabled: true
    name: "open-agreements"
    type: streamable_http
    uri: "https://openagreements.org/api/mcp"
    timeout: 300

Quality 79 / 100good

protocol75 · weight 25

warn
protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
n/a
protocol.statelessonly applies to 2026-07-28 servers
pass
protocol.transportstreamable HTTP
n/a
protocol.list_ttlonly applies to 2026-07-28 servers

authorizationn/a · weight 15

n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
n/a
auth.secret_in_urlno templated URL

tool hygiene86 · weight 30

pass
tools.descriptionsevery tool has a description
pass
tools.description_lengthdescriptions are concise
pass
tools.schemasevery tool has an object input schema
pass
tools.annotations4 of 4 tools declare readOnlyHint or destructiveHint
fail
tools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: search_templates (idempotentHint, openWorldHint); fill_template (idempotentHint, openWorldHint); list_templates (idempotentHint, openWorldHint); …
pass
tools.token_costabout 764 tokens to load every tool
pass
tools.api_dumptools are not a one-to-one API dump

stability100 · weight 15

pass
stability.changesno tool changes in 30 days
pass
stability.rug_pullno tool changed its meaning under the same name

dependencies50 · weight 15

fail
deps.known_vulns5 advisories to act on (malicious, or rated high or critical with a fix available): GHSA-7q85-xj36-vmfc in [email protected] (indirect, fixed in 0.6.1), GHSA-8238-w5pm-2374 in [email protected] (indirect, fixed in 0.6.1), GHSA-j5f4-cc29-5x44 in [email protected] (indirect, fixed in 0.6.1), ...; 3 more of lower severity or without a fix
n/a
deps.mcp_sdk_versionthe official MCP SDK is not in the dependency graph
pass
deps.resolvable@open-agreements/[email protected] resolved: 25 packages

4 tools, about 764 tokens to load them all · tool set 9a7a48aa1c11 · checked 2026-10-19 13:05 UTC

Tool changes

No tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 94 / 100

provenance90

liveness100

freshness85

hygiene100

+repository +namespace-matches-repo +website +reachable +uptime-100% ~updated-39d-ago

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Dependencies

@open-agreements/[email protected] npm24 dependencies, resolved · advisories checked 2026-10-19

advisory	severity	package	fixed in
GHSA-7q85-xj36-vmfcadm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS)	high	`[email protected]`indirect	fixed in `0.6.1`
GHSA-8238-w5pm-2374adm-zip: Unhandled error event in async DEFLATE decompression crashes Node.js process (DoS)	high	`[email protected]`indirect	fixed in `0.6.1`
GHSA-j5f4-cc29-5x44adm-zip extraction preserves SUID/SGID bits from untrusted ZIPs -> local privilege escalation	high	`[email protected]`indirect	fixed in `0.6.1`
GHSA-rcw4-f5rp-g42vadm-zip: Decompression-bomb protection (fix for CVE-2026-39244) can be bypassed by declaring uncompressed size as 0	high	`[email protected]`indirect	fixed in `0.6.1`
GHSA-xcpc-8h2w-3j85adm-zip: Crafted ZIP file triggers 4GB memory allocation	high	`[email protected]`indirect	fixed in `0.6.0`
GHSA-c6fg-446q-cg94adm-zip: getDataAsync() bypasses the maxOutputLength size guard enforced by the synchronous getData() path	moderate	`[email protected]`indirect	fixed in `0.6.1`
GHSA-p634-w6r4-rjp2adm-zip: Duplicate ZIP entry names: getEntry() and extractAllTo() resolve to different content	moderate	`[email protected]`indirect	fixed in `0.6.1`
GHSA-vwc7-r8mq-g2x9adm-zip extraction follows destination symlinks, allowing arbitrary file overwrite	moderate	`[email protected]`indirect	no fix yet

Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.

Endpoints

remote	auth	reachable	uptime 30d	p50	protocol	last ok
`https://openagreements.org/api/mcp` streamable-http	none	yes	100%	206 ms	2025-11-25	2026-10-19

package	registry	version	runtime	secrets
`@open-agreements/contract-templates-mcp`	npm	0.10.2	npx

Tools (4)

`fill_template`	Fill a legal agreement template with field values and return a document via URL or MCP resource preview metadata. For field-selector templates (e.g. NVCA), also generates a redline (track-changes) document comparing the filled output against the standard form.
`get_template`read-only	Fetch a single template definition with full field metadata.
`list_templates`read-only	List all available legal agreement templates as a paginated compact catalog. Returns lightweight metadata for discovery — call get_template for full per-field detail. Templates are returned in stable lexicographic order by template_id. For finding templates by topic, jurisdiction, or source, use search_templates instead.
`search_templates`read-only	Search for legal agreement templates by keyword. Uses BM25 ranking to find the most relevant templates matching your query. Searches across template names, descriptions, categories, sources, and field definitions. Use this instead of list_templates when you know what kind of agreement you need.

Schemas: list_tools.

Similar MCP servers

Official server.json

{
  "name": "io.github.open-agreements/open-agreements",
  "title": "Open Agreements",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://openagreements.org/api/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "0.10.2",
  "packages": [
    {
      "version": "0.10.2",
      "transport": {
        "type": "stdio"
      },
      "identifier": "@open-agreements/contract-templates-mcp",
      "runtimeHint": "npx",
      "registryType": "npm"
    }
  ],
  "repository": {
    "id": "open-agreements/open-agreements",
    "url": "https://github.com/open-agreements/open-agreements",
    "source": "github"
  },
  "websiteUrl": "https://openagreements.org",
  "description": "Fill standard legal agreement templates (NDAs, SAFEs, NVCA docs, employment) as DOCX files."
}