# `io.github.open-agreements/open-agreements` on anlyon.dev

> Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX].
> No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour.

- Page: https://anlyon.dev/servers/io.github.open-agreements/open-agreements
- JSON: https://anlyon.dev/api/v1/servers/io.github.open-agreements/open-agreements
- Version: 0.10.2 (active)
- Publisher: io.github.open-agreements (GitHub account)
- Runs: remote (streamable-http), local (npm)
- Sign-in to list tools: none
- Repository: https://github.com/open-agreements/open-agreements
- Metadata from the official MCP Registry, synced 2026-10-21T18:43:01.999Z

Title and description, as the publisher wrote them:

```untrusted-server-text
Open Agreements
Fill standard legal agreement templates (NDAs, SAFEs, NVCA docs, employment) as DOCX files.
```

Scanned 2026-10-21T19:25:50.365Z over streamable-http.

**4 tools: 1 change things and 3 only read.**

| Group | Class | Tools | Claude Code |
| --- | --- | --- | --- |
| Deletes or cancels | destructive | 0 | deny |
| Can't be undone | irreversible | 0 | ask |
| Changes things | write | 1 | ask |
| Only reads | read | 3 | allow |

## Findings

No check matched anything in these tool definitions.


## Changes things (1)

Creates or changes something that can be changed back. Claude Code: ask.

### `fill_template`

- The name "fill_template" says "fill": a word for a change.

Description, as the server wrote it:

```untrusted-server-text
Fill a legal agreement template with field values and return a document via URL or MCP resource preview metadata. For field-selector templates (e.g. NVCA), also generates a redline (track-changes) document comparing the filled output against the standard form.
```

## Only reads (3)

Looks things up and changes nothing. Claude Code: allow.

### `get_template`

- The name "get_template" says "get": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Fetch a single template definition with full field metadata.
```

### `list_templates`

- The name "list_templates" says "list": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
List all available legal agreement templates as a paginated compact catalog. Returns lightweight metadata for discovery — call get_template for full per-field detail. Templates are returned in stable lexicographic order by template_id. For finding templates by topic, jurisdiction, or source, use search_templates instead.
```

### `search_templates`

- The name "search_templates" says "search": a word for reading.

Description, as the server wrote it:

```untrusted-server-text
Search for legal agreement templates by keyword. Uses BM25 ranking to find the most relevant templates matching your query. Searches across template names, descriptions, categories, sources, and field definitions. Use this instead of list_templates when you know what kind of agreement you need.
```

## Claude Code permissions

For `.claude/settings.json`, assuming the server is installed as `open-agreements`:

```json
{
  "permissions": {
    "allow": [
      "mcp__open-agreements__list_templates",
      "mcp__open-agreements__search_templates",
      "mcp__open-agreements__get_template"
    ],
    "ask": [
      "mcp__open-agreements__fill_template"
    ],
    "deny": []
  }
}
```