# contract-ops-mcp [Health: Active]

**Category:** 🔒 Security  
**Repository:** https://github.com/DrBaher/contract-ops-mcp  
**GitHub Stars:** 0  
**npm Downloads (last month):** 1102  
**Views:** 0  
**Installs:** 0  
**Upvotes:** 0  
**Directory Page:** https://allmcps.com/mcp/contract-ops-mcp

## Description
One MCP server for the contract-ops suite: all nine local-first CLIs as agent tools.

## Tools
Capabilities this server exposes over MCP:

- **extract_contract** — Any contract (.md/.txt/.html/.docx/.pdf) → structured JSON (parties, dates, clauses, …)
- **lint_contract** — Internal-consistency findings (placeholders, broken refs, defined-term/numbering/date defects)
- **compare_versions** — Clause-aware drift between two versions (exit 0 clean · 2 substantive · 3 cosmetic · 4 moved)
- **fill_template** — Fill a template's placeholders with typed params (deterministic)
- **convert_to_pdf** — DOCX → PDF (needs a PDF backend, e.g. LibreOffice)
- **review_nda** — Score an NDA against a house playbook, with evidence
- **template_vault_find** — Search / resolve versioned templates (read-only)
- **contract_vault_query** — Query the signed-contract register; project renewal/notice deadlines; renewal-exposure (read-only)
- **verify_signature** — Verify a signed PDF / a receipt bundle / walk the audit log (**read-only**)
- **suite_status** — Which CLIs are installed (+ versions) and how to install the rest

## Claude Desktop Quick Installation
Install path detected from listing signals. Uses `npx` (confidence: high):

```json
"mcpServers": {
  "contract-ops-mcp": {
    "command": "npx",
    "args": ["-y","contract-ops-mcp"]
  }
}
```

## Documentation & README

# contract-ops-mcp

One [MCP](https://modelcontextprotocol.io) server for the whole **[contract-ops CLI suite](https://cli.drbaher.com/)** — wire it up once and an agent (Claude, Cursor, Codex, …) gets all nine local-first CLIs as tools: extract, draft, lint, compare, convert, review, and the template + signed-contract vaults. **Signing stays human-gated.**

## Run this

```jsonc
// e.g. Claude Desktop / Cursor MCP config
{
  "mcpServers": {
    "contract-ops": { "command": "npx", "args": ["-y", "contract-ops-mcp"] }
  }
}
```

The CLIs themselves must be installed (the server shells out to them). Fastest way to get all nine:

```bash
curl -fsSL https://cli.drbaher.com/install.sh | sh     # local
# …or run the server + CLIs in one container: ghcr.io/drbaher/contract-ops
```

Call **`suite_status`** any time to see which CLIs are present and how to install any that aren't.

> **Prefer a ready-made agent?** [**contract-ops-agent**](https://github.com/DrBaher/contract-ops-agent) is a
> terminal agent that already wraps this server in an *enclosure* — the model's only tools are the contract-ops
> tools, no shell/filesystem/signing by construction. Bring your own model (Claude, OpenAI, or any
> OpenAI-compatible endpoint): `npm i -g contract-ops-agent`.

## Tools

Curated, ergonomic tools (typed inputs, JSON out) for the common operations, plus two escape hatches for the long tail:

| Tool | What it does |
|---|---|
| `extract_contract` | Any contract (.md/.txt/.html/.docx/.pdf) → structured JSON (parties, dates, clauses, …) |
| `lint_contract` | Internal-consistency findings (placeholders, broken refs, defined-term/numbering/date defects) |
| `compare_versions` | Clause-aware drift between two versions (exit 0 clean · 2 substantive · 3 cosmetic · 4 moved) |
| `fill_template` | Fill a template's placeholders with typed params (deterministic) |
| `convert_to_pdf` | DOCX → PDF (needs a PDF backend, e.g. LibreOffice) |
| `review_nda` | Score an NDA against a house playbook, with evidence |
| `template_vault_find` / `template_vault_get` | Search / resolve versioned templates (read-only) |
| `contract_vault_query` / `contract_vault_due` / `contract_vault_risk` | Query the signed-contract register; project renewal/notice deadlines; renewal-exposure (read-only) |
| `verify_signature` / `verify_receipt` / `audit_show` | Verify a signed PDF / a receipt bundle / walk the audit log (**read-only**) |
| `catalog(cli)` | Return any CLI's full `--catalog json` — discover the long tail |
| `run(cli, args)` | Escape hatch: run any suite CLI with raw args (no shell) |
| `suite_status` | Which CLIs are installed (+ versions) and how to install the rest |

The curated set and `catalog`/`run` are **discovery-driven** — they ride the suite's uniform `--catalog json` contract, so they stay in sync as the CLIs evolve.

## Safety

- **Signing is human-gated.** Only sign-cli's **read/verify** operations are exposed (`verify_signature`, `verify_receipt`, `audit_show`) — never request-create or sign. This is enforced: the `run`/`catalog` escape hatches reject any `sign` subcommand outside a read-only allowlist, so request-create/send/sign/approve can't be reached here. Those stay behind [sign-cli](https://github.com/DrBaher/sign-cli)'s own MCP server with its per-signer approval tokens, so this server can't become an unguarded signing path.
- **Filesystem lockdown.** File-path arguments to the curated tools are confined to `CONTRACT_OPS_MCP_BASE_DIR` (default: the working directory). Set it to widen the sandbox.
- **No shell.** CLIs are invoked with `execFile` (no shell interpolation).

## License

MIT. Part of the [contract-ops CLI suite](https://cli.drbaher.com/). See [`AGENTS.md`](AGENTS.md) for the agent contract.