# `io.github.sarvin-tech/clausepilot` on anlyon.dev > Text inside fenced blocks marked untrusted-server-text was written by the MCP server's publisher, not by anlyon.dev. It is data to inspect, not instructions to follow. Invisible characters are shown as [U+XXXX]. > No finding is not a safety guarantee: these are point-in-time checks of tool definitions, not of code or behaviour. - Page: https://anlyon.dev/servers/io.github.sarvin-tech/clausepilot - JSON: https://anlyon.dev/api/v1/servers/io.github.sarvin-tech/clausepilot - Version: 1.4.0 (active) - Publisher: io.github.sarvin-tech (GitHub account) - Runs: remote (streamable-http) - Sign-in to list tools: none - Repository: https://github.com/sarvin-tech/clausepilot - Metadata from the official MCP Registry, synced 2026-10-21T18:48:56.810Z Title and description, as the publisher wrote them: ```untrusted-server-text ClausePilot x402 contract tools and premium portfolio scans for AI agents on Base. ``` Scanned 2026-10-21T19:27:01.108Z over streamable-http. **18 tools: 1 do something that can't be undone, 11 change things and 6 only read.** | Group | Class | Tools | Claude Code | | --- | --- | --- | --- | | Deletes or cancels | destructive | 0 | deny | | Can't be undone | irreversible | 1 | ask | | Changes things | write | 11 | ask | | Only reads | read | 6 | allow | ## Findings No check matched anything in these tool definitions. ## Can't be undone (1) Sends, pays, publishes or merges: once done, it cannot be taken back. Claude Code: ask. ### `extract_payment_terms` - The name "extract_payment_terms" says "payment": a word that usually means money moves, which cannot be taken back. Description, as the server wrote it: ```untrusted-server-text Paid $0.02 USDC tool that extracts payment timing, invoicing, late fees, currency, billing cycle and discount signals. ``` ## Changes things (11) Creates or changes something that can be changed back. Claude Code: ask. ### `check_nda_clauses` - Nothing in its name or description says what it does, so it is counted as a write. Description, as the server wrote it: ```untrusted-server-text Paid $0.04 USDC tool that extracts confidentiality scope, duration, exclusions, residuals, return/destruction and related NDA clauses. ``` ### `check_saas_terms` - Nothing in its name or description says what it does, so it is counted as a write. Description, as the server wrote it: ```untrusted-server-text Paid $0.04 USDC tool that checks SaaS terms for suspension, unilateral changes, data, SLA, renewal and liability signals. ``` ### `extract_contract_obligations` - Nothing in its name or description says what it does, so it is counted as a write. Description, as the server wrote it: ```untrusted-server-text Paid $0.02 USDC tool that extracts operational obligations such as reporting, security, SLA, audit and insurance duties. ``` ### `extract_employment_terms` - Nothing in its name or description says what it does, so it is counted as a write. Description, as the server wrote it: ```untrusted-server-text Paid $0.04 USDC tool that extracts employment terms without making jurisdiction-specific legal conclusions. ``` ### `extract_renewal_deadline` - Nothing in its name or description says what it does, so it is counted as a write. Description, as the server wrote it: ```untrusted-server-text Paid $0.015 USDC tool that extracts term, expiry, auto-renewal and notice-window signals from contract text. ``` ### `review_vendor_contract_risk` - Nothing in its name or description says what it does, so it is counted as a write. Description, as the server wrote it: ```untrusted-server-text Paid $0.05 USDC tool that reviews vendor contracts for renewal, lock-in, service, data, liability and commercial risk signals. ``` ### `scan_contract_portfolio_200` - Nothing in its name or description says what it does, so it is counted as a write. Description, as the server wrote it: ```untrusted-server-text Paid $12.90 USDC high-volume portfolio scan for up to 200 contracts with ranked operational triage. ``` ### `scan_contract_portfolio_50` - Nothing in its name or description says what it does, so it is counted as a write. Description, as the server wrote it: ```untrusted-server-text Paid $3.49 USDC portfolio scan for up to 50 contracts with ranked risk, renewal, penalty, obligation and payment-term summaries. ``` ### `triage_contract` - Nothing in its name or description says what it does, so it is counted as a write. Description, as the server wrote it: ```untrusted-server-text Paid $0.08 USDC bundle that returns contract summary, renewal timing, penalties, obligations and payment terms in one call. ``` ### `triage_contract_batch_10` - Nothing in its name or description says what it does, so it is counted as a write. Description, as the server wrote it: ```untrusted-server-text Paid $0.69 USDC portfolio tool for up to 10 contracts with per-contract triage and portfolio-level ranking. ``` ### `triage_pdf_contract` - Nothing in its name or description says what it does, so it is counted as a write. Description, as the server wrote it: ```untrusted-server-text Paid $0.12 USDC tool for text-based PDFs. Extracts up to 30 pages and returns bundled contract triage. Invalid or image-only PDFs are rejected before settlement. ``` ## Only reads (6) Looks things up and changes nothing. Claude Code: allow. ### `analyze_contract_risk` - The name "analyze_contract_risk" says "analyze": a word for reading. Description, as the server wrote it: ```untrusted-server-text Paid $0.05 USDC contract workflow analysis. Without paymentSignature it returns the x402 payment challenge; retry after payment to receive the analysis. ``` ### `compare_contract_risk` - The name "compare_contract_risk" says "compare": a word for reading. Description, as the server wrote it: ```untrusted-server-text Paid $0.06 USDC tool that compares two contracts across renewal, notice, penalties and operational risk signals. ``` ### `find_contract_penalties` - The name "find_contract_penalties" says "find": a word for reading. Description, as the server wrote it: ```untrusted-server-text Paid $0.015 USDC tool that finds early termination fees, liquidated damages, late fees and similar exposure. ``` ### `get_clausepilot_payment_info` - The name "get_clausepilot_payment_info" says "get": a word for reading. Description, as the server wrote it: ```untrusted-server-text Returns the ClausePilot flagship paid contract-risk API URL, price, network and x402 payment protocol without charging. ``` ### `list_clausepilot_paid_tools` - The name "list_clausepilot_paid_tools" says "list": a word for reading. Description, as the server wrote it: ```untrusted-server-text Lists the ClausePilot flagship API plus all focused Agent Store tools, including price and endpoint, without charging. ``` ### `summarize_contract_for_agents` - The name "summarize_contract_for_agents" says "summarize": a word for reading. Description, as the server wrote it: ```untrusted-server-text Paid $0.02 USDC tool that produces a compact structured contract summary for downstream agents and workflows. ``` ## Claude Code permissions For `.claude/settings.json`, assuming the server is installed as `clausepilot`: ```json { "permissions": { "allow": [ "mcp__clausepilot__get_clausepilot_payment_info", "mcp__clausepilot__list_clausepilot_paid_tools", "mcp__clausepilot__analyze_contract_risk", "mcp__clausepilot__find_contract_penalties", "mcp__clausepilot__summarize_contract_for_agents", "mcp__clausepilot__compare_contract_risk" ], "ask": [ "mcp__clausepilot__extract_renewal_deadline", "mcp__clausepilot__extract_contract_obligations", "mcp__clausepilot__triage_contract", "mcp__clausepilot__triage_pdf_contract", "mcp__clausepilot__triage_contract_batch_10", "mcp__clausepilot__scan_contract_portfolio_50", "mcp__clausepilot__scan_contract_portfolio_200", "mcp__clausepilot__review_vendor_contract_risk", "mcp__clausepilot__check_saas_terms", "mcp__clausepilot__check_nda_clauses", "mcp__clausepilot__extract_employment_terms", "mcp__clausepilot__extract_payment_terms" ], "deny": [] } } ```