Skip to content

AI Law Framework

by ailawframework.com · remote · no sign-in to list tools · v1.1.0 · published by com.ailawframework

Decide whether AI may be used for a legal task, who drafts and who checks. Australian law.

Changes · 5

14 tools: 5 change things and 9 only read.

Scanned Oct 21, 2026

4 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http ai-law-framework https://ailawframework.com/mcp

Findings

Matches of fixed checks, with the text they matched.

4 warn
  • The server marks "start_task" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "start_task" says "start": a word for a change.

    What this check looks for
  • The server marks "record_answers" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "add": a word for a change.

    What this check looks for
  • The server marks "record_research" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "add": a word for a change.

    What this check looks for
  • The server marks "plan_human_work" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

    Matched text

    annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "set": a word for a change.

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

14 tools

Changes things 5Claude Code: ask
  • assess_and_decideScores the AI option on adoption, efficiency and governance (step 2), caps governance by the recorded evidence, scores the manual route, and returns the decision, its reasons and t…No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Scores the AI option on adoption, efficiency and governance (step 2), caps governance by the recorded evidence, scores the manual route, and returns the decision, its reasons and the order of preference.

    Annotations the server declares

    • title: Assess and decide
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • plan_human_workSets the level of each of the seven stages of the task (step 3) from the recorded answers, research and decision, and returns what the lawyer and the AI may and may not do at each …1 finding

    Why it is in this group

    • The description's first verb is "set": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "plan_human_work" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "set": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Sets the level of each of the seven stages of the task (step 3) from the recorded answers, research and decision, and returns what the lawyer and the AI may and may not do at each stage.

    Annotations the server declares

    • title: Plan the human work
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • record_answersAdds the user’s answers to the clarifying questions to the work record.1 finding

    Why it is in this group

    • The description's first verb is "add": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "record_answers" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "add": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Adds the user’s answers to the clarifying questions to the work record. Returns the questions still open, or, once all are answered, the research the task requires.

    Annotations the server declares

    • title: Record the user’s answers
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • record_researchAdds research findings, each with its source, quote and confirmation status, to the work record.1 finding

    Why it is in this group

    • The description's first verb is "add": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "record_research" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "add": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Adds research findings, each with its source, quote and confirmation status, to the work record. Returns the required research still missing, or the scoring anchors and the governance ceiling the evidence sets.

    Annotations the server declares

    • title: Record research findings
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • start_taskOpens a work record for one legal task and returns the clarifying questions the framework needs answered (step 1, define the task), less any already answered in `answers`.1 finding

    Why it is in this group

    • The name "start_task" says "start": a word for a change.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.

    Findings

    • Warn

      The server marks "start_task" read-only (readOnlyHint: true), and its own name, description or input give the class "write".

      Matched text

      annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "start_task" says "start": a word for a change.

      What this check looks for
    Description, as the server wrote it
    Opens a work record for one legal task and returns the clarifying questions the framework needs answered (step 1, define the task), less any already answered in `answers`. The first two are the country and, in Australia, the state or territory: ask them first. Read the skill ailf://skills/ai-law-framework before the first call.

    Annotations the server declares

    • title: Start a task under the framework
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Only reads 9Claude Code: allow
  • get_frameworkReturns the AI Law Framework’s rules: the five steps, the three pillars and their anchors, the decision rule, the four levels, the seven stages and their matrix, and the rules that…No findings

    Why it is in this group

    • The name "get_framework" says "get": a word for reading.
    Description, as the server wrote it
    Returns the AI Law Framework’s rules: the five steps, the three pillars and their anchors, the decision rule, the four levels, the seven stages and their matrix, and the rules that admit no exception.

    Annotations the server declares

    • title: Read the framework
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_jurisdiction_guidanceReturns the framework’s notes for one jurisdiction, and which stored AI instruments apply to a task in a court or tribunal.No findings

    Why it is in this group

    • The name "get_jurisdiction_guidance" says "get": a word for reading.
    Description, as the server wrote it
    Returns the framework’s notes for one jurisdiction, and which stored AI instruments apply to a task in a court or tribunal. Name the forum, or court "no" when no court is involved. A gap means no instrument is stored for that forum.

    Annotations the server declares

    • title: Get a jurisdiction’s guidance
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_precedentReturns one published precedent’s details: summary, when to use it, authorities, the AI-use guidance (level, what AI may and must not do, what the lawyer checks), licence, the date…No findings

    Why it is in this group

    • The name "get_precedent" says "get": a word for reading.
    Description, as the server wrote it
    Returns one published precedent’s details: summary, when to use it, authorities, the AI-use guidance (level, what AI may and must not do, what the lawyer checks), licence, the date it states the law as at and how the library maintains it. The text itself is available through the signed-in firm connector.

    Annotations the server declares

    • title: Get a precedent’s details
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_software_profileReturns the framework’s research on one AI product and plan: its facts, the governance considerations found, and the cited sources with their review dates.No findings

    Why it is in this group

    • The name "get_software_profile" says "get": a word for reading.
    Description, as the server wrote it
    Returns the framework’s research on one AI product and plan: its facts, the governance considerations found, and the cited sources with their review dates. Accepts a profile id or a product name.

    Annotations the server declares

    • title: Get a software profile
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_startedFor a new user, or when asked what this is: what the AI Law Framework decides, the first questions it asks (country, then state or territory), the five steps, the skills and starti…No findings

    Why it is in this group

    • The name "get_started" says "get": a word for reading.
    Description, as the server wrote it
    For a new user, or when asked what this is: what the AI Law Framework decides, the first questions it asks (country, then state or territory), the five steps, the skills and starting prompts, and a fictional sample matter the user can run to see a finished work record.

    Annotations the server declares

    • title: Get started with the framework
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_task_guidanceReturns one task from the practice library: how AI may be used, its level, what the lawyer must review, its checkpoints, restrictions and sources, and its jurisdiction versions.No findings

    Why it is in this group

    • The name "get_task_guidance" says "get": a word for reading.
    Description, as the server wrote it
    Returns one task from the practice library: how AI may be used, its level, what the lawyer must review, its checkpoints, restrictions and sources, and its jurisdiction versions.

    Annotations the server declares

    • title: Get a task’s guidance
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • search_librarySearches the framework’s published practice areas, tasks, jurisdiction versions, jurisdictions, firm-wide obligations and software profiles.No findings

    Why it is in this group

    • The name "search_library" says "search": a word for reading.
    Description, as the server wrote it
    Searches the framework’s published practice areas, tasks, jurisdiction versions, jurisdictions, firm-wide obligations and software profiles. Returns titles, ids and ailawframework.com links.

    Annotations the server declares

    • title: Search the practice library
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • search_precedentsSearches the published precedent library (letters, agreements, clauses, checklists, forms, policies and more for every practice area) by title, summary and when to use it.No findings

    Why it is in this group

    • The name "search_precedents" says "search": a word for reading.
    Description, as the server wrote it
    Searches the published precedent library (letters, agreements, clauses, checklists, forms, policies and more for every practice area) by title, summary and when to use it. Returns ids, titles, kinds, practice area ids, jurisdictions and the date each states the law as at. The full text is available through the signed-in firm connector.

    Annotations the server declares

    • title: Search the precedent library
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • work_recordReturns the work record as markdown (steps 4 and 5): the task, the evidence, the decision, the plan, what the AI did, and the checks, approval and release left for the lawyer.No findings

    Why it is in this group

    • The description's first verb is "return": a word for reading.
    Description, as the server wrote it
    Returns the work record as markdown (steps 4 and 5): the task, the evidence, the decision, the plan, what the AI did, and the checks, approval and release left for the lawyer.

    Annotations the server declares

    • title: Produce the work record
    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http ai-law-framework https://ailawframework.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__ai-law-framework__work_record",
      "mcp__ai-law-framework__search_library",
      "mcp__ai-law-framework__get_task_guidance",
      "mcp__ai-law-framework__get_jurisdiction_guidance",
      "mcp__ai-law-framework__get_software_profile",
      "mcp__ai-law-framework__search_precedents",
      "mcp__ai-law-framework__get_precedent",
      "mcp__ai-law-framework__get_started",
      "mcp__ai-law-framework__get_framework"
    ],
    "ask": [
      "mcp__ai-law-framework__start_task",
      "mcp__ai-law-framework__record_answers",
      "mcp__ai-law-framework__record_research",
      "mcp__ai-law-framework__assess_and_decide",
      "mcp__ai-law-framework__plan_human_work"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as ai-law-framework. Review it before you use it.