AI Law Framework
by ailawframework.com · remote · no sign-in to list tools · v1.1.0 · published by com.ailawframework
Decide whether AI may be used for a legal task, who drafts and who checks. Australian law.
14 tools: 5 change things and 9 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone0Claude Code: ask
- Changes things5Claude Code: ask: see these tools
- Only reads9Claude Code: allow: see these tools
4 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http ai-law-framework https://ailawframework.com/mcpFindings
Matches of fixed checks, with the text they matched.
- Warnstart_task
The server marks "start_task" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "start_task" says "start": a word for a change.
- Warnrecord_answers
The server marks "record_answers" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "add": a word for a change.
- Warnrecord_research
The server marks "record_research" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "add": a word for a change.
- Warnplan_human_work
The server marks "plan_human_work" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "set": a word for a change.
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
14 tools
Changes things 5Claude Code: ask
assess_and_decideScores the AI option on adoption, efficiency and governance (step 2), caps governance by the recorded evidence, scores the manual route, and returns the decision, its reasons and t…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it Scores the AI option on adoption, efficiency and governance (step 2), caps governance by the recorded evidence, scores the manual route, and returns the decision, its reasons and the order of preference.
Annotations the server declares
- title: Assess and decide
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
plan_human_workSets the level of each of the seven stages of the task (step 3) from the recorded answers, research and decision, and returns what the lawyer and the AI may and may not do at each …1 finding
Why it is in this group
- The description's first verb is "set": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "plan_human_work" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "set": a word for a change.
Description, as the server wrote it Sets the level of each of the seven stages of the task (step 3) from the recorded answers, research and decision, and returns what the lawyer and the AI may and may not do at each stage.
Annotations the server declares
- title: Plan the human work
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
record_answersAdds the user’s answers to the clarifying questions to the work record.1 finding
Why it is in this group
- The description's first verb is "add": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "record_answers" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "add": a word for a change.
Description, as the server wrote it Adds the user’s answers to the clarifying questions to the work record. Returns the questions still open, or, once all are answered, the research the task requires.
Annotations the server declares
- title: Record the user’s answers
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
record_researchAdds research findings, each with its source, quote and confirmation status, to the work record.1 finding
Why it is in this group
- The description's first verb is "add": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "record_research" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The description's first verb is "add": a word for a change.
Description, as the server wrote it Adds research findings, each with its source, quote and confirmation status, to the work record. Returns the required research still missing, or the scoring anchors and the governance ceiling the evidence sets.
Annotations the server declares
- title: Record research findings
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
start_taskOpens a work record for one legal task and returns the clarifying questions the framework needs answered (step 1, define the task), less any already answered in `answers`.1 finding
Why it is in this group
- The name "start_task" says "start": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "start_task" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"idempotentHint":true,"openWorldHint":false}; The name "start_task" says "start": a word for a change.
Description, as the server wrote it Opens a work record for one legal task and returns the clarifying questions the framework needs answered (step 1, define the task), less any already answered in `answers`. The first two are the country and, in Australia, the state or territory: ask them first. Read the skill ailf://skills/ai-law-framework before the first call.
Annotations the server declares
- title: Start a task under the framework
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
Only reads 9Claude Code: allow
get_frameworkReturns the AI Law Framework’s rules: the five steps, the three pillars and their anchors, the decision rule, the four levels, the seven stages and their matrix, and the rules that…No findings
Why it is in this group
- The name "get_framework" says "get": a word for reading.
Description, as the server wrote it Returns the AI Law Framework’s rules: the five steps, the three pillars and their anchors, the decision rule, the four levels, the seven stages and their matrix, and the rules that admit no exception.
Annotations the server declares
- title: Read the framework
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_jurisdiction_guidanceReturns the framework’s notes for one jurisdiction, and which stored AI instruments apply to a task in a court or tribunal.No findings
Why it is in this group
- The name "get_jurisdiction_guidance" says "get": a word for reading.
Description, as the server wrote it Returns the framework’s notes for one jurisdiction, and which stored AI instruments apply to a task in a court or tribunal. Name the forum, or court "no" when no court is involved. A gap means no instrument is stored for that forum.
Annotations the server declares
- title: Get a jurisdiction’s guidance
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_precedentReturns one published precedent’s details: summary, when to use it, authorities, the AI-use guidance (level, what AI may and must not do, what the lawyer checks), licence, the date…No findings
Why it is in this group
- The name "get_precedent" says "get": a word for reading.
Description, as the server wrote it Returns one published precedent’s details: summary, when to use it, authorities, the AI-use guidance (level, what AI may and must not do, what the lawyer checks), licence, the date it states the law as at and how the library maintains it. The text itself is available through the signed-in firm connector.
Annotations the server declares
- title: Get a precedent’s details
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_software_profileReturns the framework’s research on one AI product and plan: its facts, the governance considerations found, and the cited sources with their review dates.No findings
Why it is in this group
- The name "get_software_profile" says "get": a word for reading.
Description, as the server wrote it Returns the framework’s research on one AI product and plan: its facts, the governance considerations found, and the cited sources with their review dates. Accepts a profile id or a product name.
Annotations the server declares
- title: Get a software profile
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_startedFor a new user, or when asked what this is: what the AI Law Framework decides, the first questions it asks (country, then state or territory), the five steps, the skills and starti…No findings
Why it is in this group
- The name "get_started" says "get": a word for reading.
Description, as the server wrote it For a new user, or when asked what this is: what the AI Law Framework decides, the first questions it asks (country, then state or territory), the five steps, the skills and starting prompts, and a fictional sample matter the user can run to see a finished work record.
Annotations the server declares
- title: Get started with the framework
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
get_task_guidanceReturns one task from the practice library: how AI may be used, its level, what the lawyer must review, its checkpoints, restrictions and sources, and its jurisdiction versions.No findings
Why it is in this group
- The name "get_task_guidance" says "get": a word for reading.
Description, as the server wrote it Returns one task from the practice library: how AI may be used, its level, what the lawyer must review, its checkpoints, restrictions and sources, and its jurisdiction versions.
Annotations the server declares
- title: Get a task’s guidance
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
search_librarySearches the framework’s published practice areas, tasks, jurisdiction versions, jurisdictions, firm-wide obligations and software profiles.No findings
Why it is in this group
- The name "search_library" says "search": a word for reading.
Description, as the server wrote it Searches the framework’s published practice areas, tasks, jurisdiction versions, jurisdictions, firm-wide obligations and software profiles. Returns titles, ids and ailawframework.com links.
Annotations the server declares
- title: Search the practice library
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
search_precedentsSearches the published precedent library (letters, agreements, clauses, checklists, forms, policies and more for every practice area) by title, summary and when to use it.No findings
Why it is in this group
- The name "search_precedents" says "search": a word for reading.
Description, as the server wrote it Searches the published precedent library (letters, agreements, clauses, checklists, forms, policies and more for every practice area) by title, summary and when to use it. Returns ids, titles, kinds, practice area ids, jurisdictions and the date each states the law as at. The full text is available through the signed-in firm connector.
Annotations the server declares
- title: Search the precedent library
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
work_recordReturns the work record as markdown (steps 4 and 5): the task, the evidence, the decision, the plan, what the AI did, and the checks, approval and release left for the lawyer.No findings
Why it is in this group
- The description's first verb is "return": a word for reading.
Description, as the server wrote it Returns the work record as markdown (steps 4 and 5): the task, the evidence, the decision, the plan, what the AI did, and the checks, approval and release left for the lawyer.
Annotations the server declares
- title: Produce the work record
- readOnlyHint: true
- destructiveHint: false
- idempotentHint: true
- openWorldHint: false
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.1.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http ai-law-framework https://ailawframework.com/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__ai-law-framework__work_record",
"mcp__ai-law-framework__search_library",
"mcp__ai-law-framework__get_task_guidance",
"mcp__ai-law-framework__get_jurisdiction_guidance",
"mcp__ai-law-framework__get_software_profile",
"mcp__ai-law-framework__search_precedents",
"mcp__ai-law-framework__get_precedent",
"mcp__ai-law-framework__get_started",
"mcp__ai-law-framework__get_framework"
],
"ask": [
"mcp__ai-law-framework__start_task",
"mcp__ai-law-framework__record_answers",
"mcp__ai-law-framework__record_research",
"mcp__ai-law-framework__assess_and_decide",
"mcp__ai-law-framework__plan_human_work"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as ai-law-framework. Review it before you use it.