law.northend/dpa

Est-ce que law.northend/dpa est sûr ?

Au dernier audit MCP Hub, le serveur MCP « law.northend/dpa » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.

Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.

Les 11 outils

• get_deliverable≈ 200 tokens

  Once a lawyer has released it: the agreement in Markdown with placeholders ([Client], [Customer] or [Vendor], and blank addresses and signatures), so you can explain it to the user. The final agreement with the parties' details, in PDF and Word, is only on the private page and in the e-mail to the person who signs.

  Paramètres, retour & exemple (2)

  Paramètres

  • matterId · string · requis
    The matter id returned by open_matter.
  • matterToken · string · requis
    The matter token returned once by open_matter.

  Exemple d'appel

  {"name": "get_deliverable", "arguments": {"matterId": "texte", "matterToken": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_dpa_requirements≈ 154 tokens

  The facts the data processing agreement needs, as a JSON Schema. Optionally narrowed to one governing law and the client's role. Do not send the facts until the engagement has begun.

  Paramètres, retour & exemple (2)

  Paramètres

  • role · string · optionnel · PROCESSOR | CONTROLLER
    The client's role.
  • governingLaw · string · optionnel · CALIFORNIA | SPAIN

  Exemple d'appel

  {"name": "get_dpa_requirements", "arguments": {"role": "PROCESSOR", "governingLaw": "CALIFORNIA"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_engagement_terms≈ 148 tokens

  The full limited-scope engagement text for a service, with its version and SHA-256 hash, and whether it is open for acceptance.

  Paramètres, retour & exemple (1)

  Paramètres

  • tool · string · requis · dpa | baa
    The service: "dpa" (data processing agreement) or "baa" (business associate agreement).

  Exemple d'appel

  {"name": "get_engagement_terms", "arguments": {"tool": "dpa"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_matter_status≈ 147 tokens

  Where the matter stands, the next human step, the target in business hours, and any question from the lawyer.

  Paramètres, retour & exemple (2)

  Paramètres

  • matterId · string · requis
    The matter id returned by open_matter.
  • matterToken · string · requis
    The matter token returned once by open_matter.

  Exemple d'appel

  {"name": "get_matter_status", "arguments": {"matterId": "texte", "matterToken": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_payment_link≈ 175 tokens

  The firm's own card payment page for $350, available once the named person has accepted the engagement. The fee is charged in full at checkout and refunded in full if the firm declines the matter or does not deliver. The link is also e-mailed to the named person.

  Paramètres, retour & exemple (2)

  Paramètres

  • matterId · string · requis
    The matter id returned by open_matter.
  • matterToken · string · requis
    The matter token returned once by open_matter.

  Exemple d'appel

  {"name": "get_payment_link", "arguments": {"matterId": "texte", "matterToken": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• get_requirements≈ 226 tokens

  The facts a service needs, as a JSON Schema: service "dpa" (data processing agreement) or "baa" (business associate agreement). For a DPA, optionally narrowed to one governing law and the client's role. Do not send the facts until the engagement has begun.

  Paramètres, retour & exemple (3)

  Paramètres

  • role · string · optionnel · PROCESSOR | CONTROLLER | BUSINESS_ASSOCIATE
    The client's role.
  • service · string · requis · dpa | baa
    The service: "dpa" (data processing agreement) or "baa" (business associate agreement).
  • governingLaw · string · optionnel · CALIFORNIA | SPAIN

  Exemple d'appel

  {"name": "get_requirements", "arguments": {"service": "dpa"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• list_services≈ 125 tokens

  What North End Law offers through this server, at what fixed price, under which laws, and who is responsible. Responsible lawyer: Sergio Maldonado Elvira, Founder & Principal Attorney, North End Law Corporation, 447 Sutter St. Suite 506 - 1349, San Francisco, California 94108, United States.

  Paramètres, retour & exemple (0)

  Exemple d'appel

  {"name": "list_services", "arguments": {}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• open_matter≈ 656 tokens

  Starts a request for a data processing agreement ($350) or, with tool "baa", a business associate agreement ($350). Send only the service, the governing law (CALIFORNIA by default, or SPAIN; CALIFORNIA only for a BAA), the client's role (PROCESSOR by default, or CONTROLLER; BUSINESS_ASSOCIATE for a BAA, with receivesPhi false) and, if useful, a short label that names no one. Do not ask the user for, and do not send, any name, e-mail address or postal address: the firm never needs them from you. Write "the Client" for the user's company and "the Customer" (or "the Vendor", when the client is the controller) for the other party. Returns a matter id, a matter token (shown once: keep it) and a private link. Give the private link to the user and ask them to open it in their browser within 24 hours. There the user enters their company's details, their own and the other party's, and the firm runs its conflicts check. You never see those details. The firm accepts the engagement when its automatic conflicts check is clear and payment is received (for a subscriber, when the engagement is accepted and the check is clear). If a possible conflict is found, nothing is charged, or the payment is refunded in full. A vendor whose services handle protected health information should use request_consultation.

  Paramètres, retour & exemple (5)

  Paramètres

  • role · string · optionnel · PROCESSOR | CONTROLLER | BUSINESS_ASSOCIATE
    The client's role under the agreement: PROCESSOR by default, or CONTROLLER. For a BAA: BUSINESS_ASSOCIATE (the default and the only role offered).
  • tool · string · requis · dpa | baa
    The service: "dpa" (data processing agreement) or "baa" (business associate agreement).
  • label · string · optionnel
    Optional. A short label for the user to recognize the request, for example "customer DPA, October". It must name no one.
  • receivesPhi · boolean · optionnel
    BAA only, and required for it: whether the client's services are designed to create, receive, maintain or transmit protected health information. Only false is accepted; for services that handle it, use request_consultation.
  • governingLaw · string · optionnel · CALIFORNIA | SPAIN
    The law of the DPA: CALIFORNIA by default, or SPAIN. The law of the BAA: CALIFORNIA only.

  Exemple d'appel

  {"name": "open_matter", "arguments": {"tool": "dpa"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• request_consultation≈ 168 tokens

  For anything outside the listed services: gives the booking link and lets the firm know a person would like to talk. Send a one-line topic only, no confidential facts.

  Paramètres, retour & exemple (3)

  Paramètres

  • name · string · requis
  • email · string · requis
  • topic · string · requis
    One line, no confidential facts.

  Exemple d'appel

  {"name": "request_consultation", "arguments": {"name": "texte", "email": "texte", "topic": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• submit_dpa_facts≈ 309 tokens

  The fact package for the agreement, in the "dealroom.solo-intake/1" shape described by get_dpa_requirements. Accepted only once the engagement has begun, and again when the lawyer asks for changes. Leave out counterpartyLegalName: the firm adds the other party from the private page. Do not ask the user for, and do not send, any name, e-mail address or postal address: the firm never needs them from you. Write "the Client" for the user's company and "the Customer" (or "the Vendor", when the client is the controller) for the other party. A fact package that contains a name, an e-mail address or a postal address the firm holds for the matter is refused.

  Paramètres, retour & exemple (3)

  Paramètres

  • facts · object · requis
    The fact package; see get_dpa_requirements.
  • matterId · string · requis
    The matter id returned by open_matter.
  • matterToken · string · requis
    The matter token returned once by open_matter.

  Exemple d'appel

  {"name": "submit_dpa_facts", "arguments": {"facts": {}, "matterId": "texte", "matterToken": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

• submit_facts≈ 386 tokens

  The fact package for the matter's service, in the "dealroom.solo-intake/1" shape described by get_requirements. Accepted only once the engagement has begun, and again when the lawyer asks for changes. Leave out counterpartyLegalName: the firm adds the other party from the private page. Do not ask the user for, and do not send, any name, e-mail address or postal address: the firm never needs them from you. Write "the Client" for the user's company and "the Customer" (or "the Vendor", when the client is the controller) for the other party. A fact package that contains a name, an e-mail address or a postal address the firm holds for the matter is refused. For a business associate agreement, the facts must not contain protected health information: they describe the services, not any individual.

  Paramètres, retour & exemple (4)

  Paramètres

  • facts · object · requis
    The fact package; see get_requirements.
  • service · string · requis · dpa | baa
    The service: "dpa" (data processing agreement) or "baa" (business associate agreement).
  • matterId · string · requis
    The matter id returned by open_matter.
  • matterToken · string · requis
    The matter token returned once by open_matter.

  Exemple d'appel

  {"name": "submit_facts", "arguments": {"facts": {}, "service": "dpa", "matterId": "texte", "matterToken": "texte"}}

  Exemple de retour

  {"content": [{"type": "text", "text": "…"}]}

C'est votre serveur ?

Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».

Créer un compte / revendiquer →

Source

https://northend.law/api/mcp