Server data from the Official MCP Registry
Chinese labor & service contract risk assessment with 25 categories and local law differences.
About
Chinese labor & service contract risk assessment with 25 categories and local law differences.
Security Report
This is a contract risk review MCP server built with FastMCP that performs intelligent analysis of labor and service contracts. The code demonstrates reasonable security practices with proper environment variable usage for API credentials and no embedded secrets. However, there are several moderate concerns: the server makes external LLM API calls with user-provided contract text (which may contain sensitive PII despite masking attempts), lacks comprehensive input validation on API responses, and has broad network permissions. The code quality is generally good, but error handling could be more specific and the PII masking regex patterns have limitations. Supply chain analysis found 3 known vulnerabilities in dependencies (1 critical, 1 high severity).
3 files analyzed · 12 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
Permissions Required
This plugin requests these system permissions. Most are normal for its category.
What You'll Need
Set these up before or after installing:
Environment variable: LLM_API_KEY
Environment variable: LLM_BASE_URL
Environment variable: LLM_MODEL
How to Install
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-justingyang218-contract-risk-review-mcp": {
"env": {
"LLM_MODEL": "your-llm-model-here",
"LLM_API_KEY": "your-llm-api-key-here",
"LLM_BASE_URL": "your-llm-base-url-here"
},
"args": [
"-y",
"github:justingyang218/contract-risk-review-mcp"
],
"command": "npx"
}
}
}Documentation
View on GitHubFrom the project's GitHub README.
劳动&劳务合同风险排查 MCP Server
基于 FastMCP 构建的合同风险审查 MCP 服务,可被任何支持 MCP 协议的客户端(DeepSeek Harness、Claude Code、Cursor、Windsurf 等)调用。
✨ 功能特性
- 单份合同审查:对劳动合同(16类风险)或劳务合同(9类风险)进行全面智能审查
- 批量合同审查:支持多份合同批量审查,自动生成总览表
- 风险知识库查询:查询指定类别的风险审查要点、法律依据
- 地方法规查询:查询北京/上海/广东/浙江/江苏的地方法规差异
- 自动合同类型识别:智能判断是劳动合同还是劳务合同
- 个人信息脱敏:自动对身份证号、手机号、银行卡号进行脱敏处理
📦 安装
pip install -r requirements.txt
⚙️ 配置
环境变量
| 变量名 | 必填 | 默认值 | 说明 |
|---|---|---|---|
LLM_API_KEY | ✅ 是 | - | 大模型 API 密钥 |
LLM_BASE_URL | ❌ 否 | https://api.openai.com/v1 | API 端点地址(OpenAI 兼容接口) |
LLM_MODEL | ❌ 否 | gpt-4o-mini | 模型名称 |
LLM_TEMPERATURE | ❌ 否 | 0.1 | 采样温度 |
配置示例
export LLM_API_KEY="sk-xxxxxxxxxxxxxx"
export LLM_BASE_URL="https://api.deepseek.com/v1"
export LLM_MODEL="deepseek-chat"
💡 支持任何 OpenAI 兼容的 API 接口(DeepSeek、通义千问、智谱 AI、Ollama 等)
🚀 运行
方式一:STDIO 模式(本地工具/桌面客户端)
python server.py
# 或显式指定
python server.py stdio
方式二:HTTP 模式(网络服务)
python server.py http 0.0.0.0 8000
启动后访问 http://localhost:8000/mcp 即可使用。
方式三:使用 fastmcp CLI
# 开发调试
fastmcp dev server.py
# 安装到 Claude Desktop
fastmcp install server.py
🔌 MCP Tools
1. review_contract
对合同文本进行完整的风险审查。
参数:
contract_text(string, 必填):合同文本内容contract_type(string, 可选):合同类型,auto/labor/service,默认auto
示例:
review_contract(contract_text="劳动合同文本...", contract_type="auto")
2. batch_review
批量审查多份合同。
参数:
contracts_text(string, 必填):多份合同文本separator(string, 可选):分隔符,默认---合同分割线---
示例:
batch_review(contracts_text="合同1\n---合同分割线---\n合同2", separator="---合同分割线---")
3. get_risk_knowledge
查询指定类别的风险知识库。
参数:
category(string, 必填):风险类别,如"试用期"、"竞业限制"、"人身损害赔偿"
示例:
get_risk_knowledge(category="竞业限制")
4. get_local_regulations
查询指定地区的法规差异。
参数:
region(string, 必填):地区,北京/上海/广东/浙江/江苏topic(string, 必填):主题,如竞业补偿/加班费基数/最低工资/产假/婚假
示例:
get_local_regulations(region="上海", topic="竞业补偿")
📚 MCP Resources
| URI | 说明 |
|---|---|
risk-knowledge://categories | 所有风险类别清单 |
risk-knowledge://labor | 劳动关系16类风险清单 |
risk-knowledge://service | 劳务关系9类风险清单 |
local-regions://list | 支持的地区列表 |
💬 MCP Prompts
| 名称 | 说明 |
|---|---|
contract_review_prompt | 完整合同审查提示模板 |
batch_review_prompt | 批量审查提示模板 |
🔗 集成到客户端
Claude Desktop
在 claude_desktop_config.json 中添加:
{
"mcpServers": {
"contract-risk-review": {
"command": "python",
"args": ["/path/to/server.py"],
"env": {
"LLM_API_KEY": "your-api-key",
"LLM_BASE_URL": "https://api.openai.com/v1",
"LLM_MODEL": "gpt-4o-mini"
}
}
}
}
Cursor / Windsurf
在 IDE 的 MCP 配置中添加上述 stdio 配置即可。
HTTP/SSE 客户端
配置 MCP 服务器地址为 http://localhost:8000/mcp。
📁 目录结构
contract-risk-review-mcp/
├── server.py # MCP Server 主文件
├── requirements.txt # 依赖清单
├── README.md # 使用说明
└── knowledge/ # 知识库
├── risk-knowledge-base.md # 劳动关系16类风险知识库
├── service-contract-risks.md # 劳务关系9类风险知识库
├── local-regulations.md # 地方法规差异知识库
└── categories-index.md # 风险类别索引
⚠️ 免责声明
本工具仅提供合同风险参考、条款修改建议以及法规依据,不构成正式法律意见,不能替代执业律师的专业审核。涉及劳动仲裁、重大权益纠纷,请务必咨询执业律师。
📝 更新日志
v1.0.0
- 初始版本
- 支持劳动合同 16 类风险审查
- 支持劳务合同 9 类风险审查
- 支持批量审查、知识库查询、地方法规查询
- 支持 STDIO 和 HTTP/SSE 两种传输模式
Reviews
No reviews yet
Be the first to review this server!
More Developer Tools MCP Servers
Git
Freeby Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
Fetch
Freeby Modelcontextprotocol · Developer Tools
Web content fetching and conversion for efficient LLM usage
Toleno
Freeby Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
mcp-creator-python
Freeby mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.
MCP Marketplace
Freeby mcp-marketplace · Developer Tools
Search and install MCP servers from inside your AI client.
MarkItDown
Freeby Microsoft · Content & Media
Convert files (PDF, Word, Excel, images, audio) to Markdown for LLM consumption
