Search / law.northend/dpa
protogridR0· no sign-inData processing agreement, $350 flat fee, reviewed and released by a lawyer.
v1.0.0 · active · website · descriptor JSON · versions
{
"mcpServers": {
"dpa": {
"type": "http",
"url": "https://northend.law/api/mcp"
}
}
}claude mcp add --transport http dpa https://northend.law/api/mcp[mcp_servers.dpa]
url = "https://northend.law/api/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"dpa": {
"type": "remote",
"url": "https://northend.law/api/mcp",
"enabled": true
}
}
}{
"mcpServers": {
"dpa": {
"type": "http",
"url": "https://northend.law/api/mcp"
}
},
"deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=dpa&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vbm9ydGhlbmQubGF3L2FwaS9tY3AifQ%3D%3D"
}{
"servers": {
"dpa": {
"type": "http",
"url": "https://northend.law/api/mcp"
}
}
}{
"mcpServers": {
"dpa": {
"httpUrl": "https://northend.law/api/mcp"
}
}
}extensions:
"dpa":
enabled: true
name: "dpa"
type: streamable_http
uri: "https://northend.law/api/mcp"
timeout: 300
protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28protocol.statelessonly applies to 2026-07-28 serversprotocol.transportstreamable HTTPprotocol.list_ttlonly applies to 2026-07-28 serversauth.prm, auth.as_metadata, auth.cimdno remote uses OAuthauth.secret_in_urlno templated URLtools.descriptionsevery tool has a descriptiontools.description_length1 tools have descriptions over 1,024 characters, which crowds the contexttools.schemasevery tool has an object input schematools.annotationsonly 6 of 11 tools declare readOnlyHint or destructiveHinttools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: get_engagement_terms (destructiveHint, idempotentHint); get_payment_link (readOnlyHint, destructiveHint, idempotentHint, openWorldHint); get_dpa_requirements (destructiveHint, idempotentHint, openWorldHint); …tools.token_costabout 2,376 tokens to load every tooltools.api_dumptools are not a one-to-one API dumpstability.changes9 tool changes in 30 daysstability.rug_pull2 tools kept their name but changed most of their description in 30 days; review before trusting themdeps.known_vulns, deps.mcp_sdk_version, deps.resolvableno npm or PyPI packageget_deliverablechangeddescriptionmeaning changedOnce a lawyer has released it: the data processing agreement in Markdown, PDF and Word. The named person also receives a link by e-mail. A business associate agreement comes in the same formats.
Once a lawyer has released it: the agreement in Markdown with placeholders ([Client], [Customer] or [Vendor], and blank addresses and signatures), so you can explain it to the user. The final agreement with the parties' details, in PDF and Word, is only on the private page and in the e-mail to the person who signs.
submit_dpa_factschangeddescriptionmeaning changedThe fact package for the agreement, in the "dealroom.solo-intake/1" shape described by get_dpa_requirements. Accepted only once the engagement has begun, and again when the lawyer asks for changes. The counterparty must be one the firm checked for conflicts.
The fact package for the agreement, in the "dealroom.solo-intake/1" shape described by get_dpa_requirements. Accepted only once the engagement has begun, and again when the lawyer asks for changes. Leave out counterpartyLegalName: the firm adds the other party from the private page. Do not ask the user for, and do not send, any name, e-mail address or postal address: the firm never needs them from you. Write "the Client" for the user's company and "the Customer" (or "the Vendor", when the client is the controller) for the other party. A fact package that contains a name, an e-mail address or a postal address the firm holds for the matter is refused.
submit_factschangeddescriptionThe fact package for the matter's service, in the "dealroom.solo-intake/1" shape described by get_requirements. Accepted only once the engagement has begun, and again when the lawyer asks for changes. The counterparty must be one the firm checked for conflicts. For a business associate agreement, the facts must not contain protected health information: they describe the services, not any individual.
The fact package for the matter's service, in the "dealroom.solo-intake/1" shape described by get_requirements. Accepted only once the engagement has begun, and again when the lawyer asks for changes. Leave out counterpartyLegalName: the firm adds the other party from the private page. Do not ask the user for, and do not send, any name, e-mail address or postal address: the firm never needs them from you. Write "the Client" for the user's company and "the Customer" (or "the Vendor", when the client is the controller) for the other party. A fact package that contains a name, an e-mail address or a postal address the firm holds for the matter is refused. For a business associate agreement, the facts must not contain protected health information: they describe the services, not any individual.
open_matterchangeddescription, input schemaStarts a request for a data processing agreement ($350). Needs the client's legal name, entity type, place of incorporation and registered address; the person who will bind the client (name, title, work e-mail); every counterparty's legal name; adverse parties or "none"; the governing law (CALIFORNIA by default, or SPAIN); the client's role (PROCESSOR by default, or CONTROLLER). Returns a matter id and a matter token, shown once: keep it. The firm accepts the engagement when its automatic conflicts check is clear and payment is received (for a subscriber, when the engagement is accepted and the check is clear). If a possible conflict is found, nothing is charged, or the payment is refunded in full. For a business associate agreement (tool "baa", $350): the client must be established in the United States, the governing law is CALIFORNIA, the client's role is BUSINESS_ASSOCIATE, and receivesPhi must be false; a vendor whose services handle protected health information should use request_consultation.
Starts a request for a data processing agreement ($350) or, with tool "baa", a business associate agreement ($350). Send only the service, the governing law (CALIFORNIA by default, or SPAIN; CALIFORNIA only for a BAA), the client's role (PROCESSOR by default, or CONTROLLER; BUSINESS_ASSOCIATE for a BAA, with receivesPhi false) and, if useful, a short label that names no one. Do not ask the user for, and do not send, any name, e-mail address or postal address: the firm never needs them from you. Write "the Client" for the user's company and "the Customer" (or "the Vendor", when the client is the controller) for the other party. Returns a matter id, a matter token (shown once: keep it) and a private link. Give the private link to the user and ask them to open it in their browser within 24 hours. There the user enters their company's details, their own and the other party's, and the firm runs its conflicts check. You never see those details. The firm accepts the engagement when its automatic conflicts check is clear and payment is received (for a subscriber, when the engagement is accepted and the check is clear). If a possible conflict is found, nothing is charged, or the payment is refunded in full. A vendor whose services handle protected health information should use request_consultation.
get_deliverablechangeddescriptionOnce a lawyer has released it: the data processing agreement in Markdown, PDF and Word. The named person also receives a link by e-mail.
Once a lawyer has released it: the data processing agreement in Markdown, PDF and Word. The named person also receives a link by e-mail. A business associate agreement comes in the same formats.
submit_factsaddedThe fact package for the matter's service, in the "dealroom.solo-intake/1" shape described by get_requirements. Accepted only once the engagement has begun, and again when the lawyer asks for changes. The counterparty must be one the firm checked for conflicts. For a business associate agreement, the facts must not contain protected health information: they describe the services, not any individual.
open_matterchangeddescription, input schemaStarts a request for a data processing agreement ($350). Needs the client's legal name, entity type, place of incorporation and registered address; the person who will bind the client (name, title, work e-mail); every counterparty's legal name; adverse parties or "none"; the governing law (CALIFORNIA by default, or SPAIN); the client's role (PROCESSOR by default, or CONTROLLER). Returns a matter id and a matter token, shown once: keep it. The firm accepts the engagement when its automatic conflicts check is clear and payment is received (for a subscriber, when the engagement is accepted and the check is clear). If a possible conflict is found, nothing is charged, or the payment is refunded in full.
Starts a request for a data processing agreement ($350). Needs the client's legal name, entity type, place of incorporation and registered address; the person who will bind the client (name, title, work e-mail); every counterparty's legal name; adverse parties or "none"; the governing law (CALIFORNIA by default, or SPAIN); the client's role (PROCESSOR by default, or CONTROLLER). Returns a matter id and a matter token, shown once: keep it. The firm accepts the engagement when its automatic conflicts check is clear and payment is received (for a subscriber, when the engagement is accepted and the check is clear). If a possible conflict is found, nothing is charged, or the payment is refunded in full. For a business associate agreement (tool "baa", $350): the client must be established in the United States, the governing law is CALIFORNIA, the client's role is BUSINESS_ASSOCIATE, and receivesPhi must be false; a vendor whose services handle protected health information should use request_consultation.
get_engagement_termschangedinput schemaget_requirementsaddedThe facts a service needs, as a JSON Schema: service "dpa" (data processing agreement) or "baa" (business associate agreement). For a DPA, optionally narrowed to one governing law and the client's role. Do not send the facts until the engagement has begun.
Full history: list_changes · trend: quality JSON.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
+dns-namespace +website +reachable +uptime-100% +updated-14d-ago -no-repository
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
| remote | auth | reachable | uptime 30d | p50 | protocol | last ok |
|---|---|---|---|---|---|---|
https://northend.law/api/mcp streamable-http | none | yes | 100% | 275 ms | 2025-11-25 | 2026-10-20 |
get_deliverableread-only | Once a lawyer has released it: the agreement in Markdown with placeholders ([Client], [Customer] or [Vendor], and blank addresses and signatures), so you can explain it to the user. The final agreement with the parties' details, in PDF and Word, is only on the private page and in the e-mail to the person who signs. |
get_dpa_requirementsread-only | The facts the data processing agreement needs, as a JSON Schema. Optionally narrowed to one governing law and the client's role. Do not send the facts until the engagement has begun. |
get_engagement_termsread-only | The full limited-scope engagement text for a service, with its version and SHA-256 hash, and whether it is open for acceptance. |
get_matter_statusread-only | Where the matter stands, the next human step, the target in business hours, and any question from the lawyer. |
get_payment_link | The firm's own card payment page for $350, available once the named person has accepted the engagement. The fee is charged in full at checkout and refunded in full if the firm declines the matter or does not deliver. The link is also e-mailed to the named person. |
get_requirementsread-only | The facts a service needs, as a JSON Schema: service "dpa" (data processing agreement) or "baa" (business associate agreement). For a DPA, optionally narrowed to one governing law and the client's role. Do not send the facts until the engagement has begun. |
list_servicesread-only | What North End Law offers through this server, at what fixed price, under which laws, and who is responsible. Responsible lawyer: Sergio Maldonado Elvira, Founder & Principal Attorney, North End Law Corporation, 447 Sutter St. Suite 506 - 1349, San Francisco, California 94108, United States. |
open_matter | Starts a request for a data processing agreement ($350) or, with tool "baa", a business associate agreement ($350). Send only the service, the governing law (CALIFORNIA by default, or SPAIN; CALIFORNIA only for a BAA), the client's role (PROCESSOR by default, or CONTROLLER; BUSINESS_ASSOCIATE for a BAA, with receivesPhi false) and, if useful, a short label that names no one. Do not ask the user for, and do not send, any name, e-mail address or postal address: the firm never needs them from you. Write "the Client" for the user's company and "the Customer" (or "the Vendor", when the client is the controller) for the other party. Returns a matter id, a matter token (shown once: keep it) and a private link. Give the private link to the user and ask them to open it in their browser within 24 hours. There the user enters their company's details, their own and the other party's, and the firm runs its conflicts check. You never see those details. The firm accepts the engagement when its automatic conflicts check is clear and payment is received (for a subscriber, when the engagement is accepted and the check is clear). If a possible conflict is found, nothing is charged, or the payment is refunded in full. A vendor whose services handle protected health information should use request_consultation. |
request_consultation | For anything outside the listed services: gives the booking link and lets the firm know a person would like to talk. Send a one-line topic only, no confidential facts. |
submit_dpa_facts | The fact package for the agreement, in the "dealroom.solo-intake/1" shape described by get_dpa_requirements. Accepted only once the engagement has begun, and again when the lawyer asks for changes. Leave out counterpartyLegalName: the firm adds the other party from the private page. Do not ask the user for, and do not send, any name, e-mail address or postal address: the firm never needs them from you. Write "the Client" for the user's company and "the Customer" (or "the Vendor", when the client is the controller) for the other party. A fact package that contains a name, an e-mail address or a postal address the firm holds for the matter is refused. |
submit_facts | The fact package for the matter's service, in the "dealroom.solo-intake/1" shape described by get_requirements. Accepted only once the engagement has begun, and again when the lawyer asks for changes. Leave out counterpartyLegalName: the firm adds the other party from the private page. Do not ask the user for, and do not send, any name, e-mail address or postal address: the firm never needs them from you. Write "the Client" for the user's company and "the Customer" (or "the Vendor", when the client is the controller) for the other party. A fact package that contains a name, an e-mail address or a postal address the firm holds for the matter is refused. For a business associate agreement, the facts must not contain protected health information: they describe the services, not any individual. |
Schemas: list_tools.
{
"name": "law.northend/dpa",
"title": "North End Law",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"remotes": [
{
"url": "https://northend.law/api/mcp",
"type": "streamable-http"
}
],
"version": "1.0.0",
"websiteUrl": "https://northend.law/agents",
"description": "Data processing agreement, $350 flat fee, reviewed and released by a lawyer."
}