Fineprint
Scan terms of service for risk. Returns 0-100 score, verdict, agent-friendliness, verbatim quotes.
Install
Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).
ghcr.io/fineprintcorp/fineprint-mcp:1.0.1claude mcp add fineprint -e 'FINEPRINT_API_KEY=<your fineprint_api_key>' -e 'FINEPRINT_API_URL=https://fineprint-production-4588.up.railway.app' -- docker run -i --rm ghcr.io/fineprintcorp/fineprint-mcp:1.0.1
{
"mcpServers": {
"fineprint": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/fineprintcorp/fineprint-mcp:1.0.1"
],
"env": {
"FINEPRINT_API_KEY": "<your fineprint_api_key>",
"FINEPRINT_API_URL": "https://fineprint-production-4588.up.railway.app"
}
}
}
}
Environment variables
FINEPRINT_API_KEYrequired secret API key for the Fineprint scan API. Get a free trial key from the signup form on the Fineprint site. Required for all scan tools.FINEPRINT_API_URLBase URL of the Fineprint API
Documentation
From the project's README on GitHub, refreshed weekly. Links open on GitHub.
Fineprint MCP Server
The pre-commit hook for agents. Never accept terms unread.
This repository contains the MCP server implementation for Fineprint, the terms-of-service risk API for AI agents. The server scans a service's terms before an agent accepts them — signups, subscriptions, vendor agreements — and returns a 0–100 risk score, a pass/flag/block verdict, an agent-friendliness verdict (does the ToS even allow agents?), and every clause anchored to a verbatim quote.
The MCP server
- Implementation:
mcp/mcp_server.py— a FastMCP (Python) server exposing 13 tools covering scans by URL or text, agent-access checks, the public leaderboard, scan retrieval and PDF reports, monitors, and policy evaluation. - Container:
mcp/Dockerfile; published imageghcr.io/fineprintcorp/fineprint-mcp— also listed in the official MCP Registry asio.github.fineprintcorp/fineprint(seeserver.json). - Config:
FINEPRINT_API_URL(defaults to the production API) andFINEPRINT_API_KEY(free key from the API signup; free tier is 25 scans/mo).
Run it locally:
cd mcp
FINEPRINT_API_KEY=<your key> python mcp_server.py
Claude Code:
claude mcp add fineprint --env FINEPRINT_API_KEY=<your key> -- python mcp/mcp_server.py
Or run the published container image — server.json carries the exact
package and environment declaration.
The agent skill
The repository also ships a skill that teaches an agent when to call the server:
- The rule: if you're about to accept terms, create an account, or subscribe to a service — scan first, then decide.
- Check agent-friendliness first:
hostilemeans the ToS bans bots/automated access — and the violation lands on the user, not the agent. Treat likeblock. - Verdict handling:
pass→ proceed ·flag→ surface clauses to the user ·block→ stop and ask. - Three ways to scan: MCP server, REST API (free key, 25 scans/mo), or x402 pay-per-scan ($0.25, no signup; settlement being enabled).
- Check the free leaderboard first before spending a scan.
Install the skill:
npx skills add fineprintcorp/fineprint-skill --skill fineprint -g
Full skill text: SKILL.md. A zero-key demo lives in demo/.
License
MIT (see LICENSE).
Frequently asked questions
What is Fineprint?
Scan terms of service for risk. Returns 0-100 score, verdict, agent-friendliness, verbatim quotes.
How do I install Fineprint?
It runs on your machine. In Claude Code: claude mcp add fineprint -e 'FINEPRINT_API_KEY=<your fineprint_api_key>' -e 'FINEPRINT_API_URL=https://fineprint-production-4588.up.railway.app' -- docker run -i --rm ghcr.io/fineprintcorp/fineprint-mcp:1.0.1. For other clients, paste the JSON configuration from this page into their MCP settings.
Does Fineprint need an API key?
Yes. It expects FINEPRINT_API_KEY, which you set in its configuration.
Is Fineprint open source?
Yes. Its code is on GitHub under the MIT license.
Who maintains Fineprint?
It is published by fineprintcorp. AI.tn lists it but does not maintain or endorse it.
From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.