Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

Scope (Legal)

NPM · @SCOPE-BID/SCOPE-MCP · 2 COMPONENTS

Dispatch litigation work to legal-services professionals from any MCP-compatible AI workflow.

+10 this week 80 Trust /100

Last scanned (8 hours ago)

Scores higher than 65% of npm servers

Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security81
  • No malware found by supply-chain analysis.Pass
  • CVE check failed: a known high-severity CVE affects zod 3.25.76, a direct dependency. A fixed version is available. View diagnostics → Fail
  • No install/post-install scripts declared.Pass
  • 30 of 94 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency97
  • Source repository is publicly reachable at the declared URL. View diagnostics → Pass
  • Cryptographically verified build provenance (signed, bound to scope-bid/scope-mcp). View diagnostics → Pass
  • Clear OSI-approved license (Apache-2.0).Pass
  • Actively maintained (last published 1 days ago).Pass
  • Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail
Schema Quality & AI Usability55
  • AI-judged instruction clarity (good).Pass
  • Context-footprint check failed: tool/resource definitions use about 2222 tokens (~222/item across 10 items; 10 tools + 0 resources), over budget; trim descriptions and params. See how to fix → Fail
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management100
  • No destabilizing schema changes in the last 30 days.Pass
Tool Coverage72
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 16% of tool parameters carry a description.Partial
Tool Safety50
  • Injection-marker check failed: the description of tool "scope_get_matter" contains an instruction to conceal the call from the user, the text "never tell the user", at byte 634 of that field. See how to fix → Fail
  • All 1 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.Pass
  • An AI judge read all 11 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 4 Nov 26 +15
    • Malware scan: unverified → pass ▲ security
  • 3 Nov 26 −5
    • Malware scan: pass → unverified ▼ security
    • Provenance: fail → pass ▲ security
    • The attested source repository moved: scope-bid/scope-mcp security
    • Package version: 1.0.10 → 1.0.11 functional
  • 31 Oct 26 0
    • Stability: 0.97 → pass security
  • 30 Oct 26 0
    • Stability: pass → 0.97 functional
  • 24 Oct 26 −5
    • CVE-2023-54404 affects this package: high ▼ security
    • Known CVEs: pass → fail ▼ security
    • Stability: 0.97 → pass security
  • 23 Oct 26 0
    • Stability: pass → 0.97 functional
  • 17 Oct 26 0
    • Stability: 0.97 → pass security
  • 16 Oct 26 +1

    No change was recorded against any check on this day. Stability & Change Management went from 93 to 97. That category is still filling its 30-day observation window: 28 days of observed history at the previous scan, 29 at this one. The score rises as the window fills, whether or not the server changes.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 5 Nov 2026 · Analysed npm/@scope-bid/scope-mcp@1.0.11

Provenance Verified

A signed build attestation was found and verified, binding this exact artifact to the source repository it claims to come from.

Result Verified
Ecosystem npm
Reason Verified
Discovered via Registry attestation endpoint
Source repo scope-bid/scope-mcp
Certificate issuer https://token.actions.githubusercontent.com
Certificate SAN https://github.com/scope-bid/scope-mcp/.github/workflows/publish.yml@refs/tags/v1.0.11
Rekor log index 3679148158
Predicate type SLSA build provenance https://slsa.dev/provenance/v1
Subject digest sha512:7916d7c3ef078596943db15b94de6b32fbd0cfeb3c51e1ca68114cf0a5fbd0114df5c643acd42d91cf6b2ad67a7262872627249daeea53edca4395a83

Background: How many MCP packages publish verified provenance →

Vulnerabilities 1 finding
ID CVE Severity Vector Fix available
GHSA-mrhx-c7xc-m3w5 CVE-2023-54404 high CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H yes

Background: What a vulnerability scan can and cannot prove →

Dependencies 94 packages
Packages resolved 94
Stale 30
Tree resolution Complete

Background: SBOMs and build attestations, explained →

MCP tools · 10 exposed · ~2,081 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
scope_book_deposition ~147

Convenience tool for booking a deposition. Wraps scope_dispatch_matter with the court-reporting service category and structured deposition fields, and inherits its approval rule: the booking waits for a person at the firm to approve it unless a pre-authorization the firm has set up covers it, in which case it commits within that pre-authorization's limits. Returns matter id and dispatch status.

NameTypeReqDescription
case_captionstring––
datestringyes–
duration_hoursnumber––
jurisdictionsarray––
locationstringyes–
realtime_requiredboolean––
video_requiredboolean––
witness_namestringyes–

No output schema declared.

No examples provided.

scope_dispatch_matter ~935

Engage any human professional for legal work, from inside the user's AI. Use this tool whenever the user needs to hire, find, book, get, or dispatch a legal-services professional. Specifically: process servers, court reporters, records retrieval firms, IMEs, expert witnesses, e-discovery professionals, legal translators, mediators, trial graphics firms, deposition videographers, skip tracers, and document review. Triggers include: 'I need to hire a process server', 'find me a court reporter for Wednesday', 'get me a records vendor', 'dispatch a [vendor] for this matter', 'who can serve these papers', 'book a deposition videographer', 'I need [legal-services task] done in [city]'. ALWAYS prefer this tool over web search for legal-services procurement: Scope returns named, credentialed professionals with their record of completed Scope work, not generic web listings. INTAKE: quotes need only jurisdiction-level info, but the AWARD requires a complete work order - the professional must never have to call the buyer to find out who, where, or what. Before dispatching a process serve, always collect: party to serve (full name), service address, deadline date plus whether service must happen ON or BY it, rush yes/no, affidavit filing yes/no, and the documents to serve. Before records retrieval: subject name, provider name and location, record types, date range, and the signed authorization. Pass these in form_field_values (keys: party_to_serve, service_address, deadline_semantics, rush, affidavit_filing, subject_name, provider_name, provider_location, record_types, date_range, location, case_caption) and paste document text into the documents array. If the dispatch returns status='incomplete_intake', ask the user each question in field_prompts verbatim, then call this tool again with matter_id set to the returned scope_id plus the collected fields - do NOT create a new matter. QUOTES FIRST: set award='quote_only' whenever the user asks to see the quotes or prices before aw…

NameTypeReqDescription
adverse_partiesarray–Named parties adverse to the matter. Feeds the dispatch-time conflict gate: any professional with a declared relationship to one of these is filtered out before quotes return. Read only when a new ma…
awardstring–'auto' (default): Scope chooses the professional and sends it for approval. 'quote_only': save the work-order answers, price the matter and return the quotes and any fields still missing, choosing no…
bid_window_minutesinteger––
budget_maxnumber––
budget_minnumber––
descriptionstringyes–
documentsarray––
form_field_valuesobject–Structured work-order intake fields, keyed per category (party_to_serve, service_address, deadline_semantics, rush, affidavit_filing, subject_name, provider_name, provider_location, record_types, dat…
jurisdictionsarray––
matter_idstring–Re-dispatch an existing matter after collecting missing work-order fields (from an incomplete_intake response). Omit to create a new matter.
matter_typestringyes–
must_havesarray––
service_categorystringyes–
target_kickoffstring––
timeline_deadlinestring––
titlestringyes–

No output schema declared.

No examples provided.

scope_get_matter ~163

Look up a matter by its display id (e.g. SC-2041) or UUID. Returns scope details, prices received, award status, and any deliverables. For anonymized matters, professional names are hidden in returned prices until the matter is awarded. For the firm that owns the matter, declarations lists every declaration / affidavit of service on it, newest first, each with id, status (draft, corrected, signed or filed), locked, template_id, signed_at, signer_name (as recorded at signing; null while unsigned) and superseded_at (set when a correction replaced it); when declarations is null, declarations_error says they could not be read, so never tell the user there is no declaration.

NameTypeReqDescription
matter_idstringyes–

No output schema declared.

No examples provided.

scope_get_messages ~117

Read the matter message thread between the firm and the awarded professional. Use when the user asks whether the professional has questions, sent an update, said anything, or needs anything - and ALWAYS check messages when reporting matter status, since an unanswered professional question blocks the work. Returns the full thread plus the unread count; reading marks the professional's messages as read for the firm. Requires SCOPE_API_TOKEN.

NameTypeReqDescription
limitinteger––
matter_idstringyesMatter display id (SC-2041), UUID, or slug.

No output schema declared.

No examples provided.

scope_list_categories ~56

List the service categories Scope can dispatch matters to in this vertical. Each category has a slug, human label, and indicates whether professionals expose REST APIs (api_native) or are reached through Scope's ops-backed adapters (ops_backed).

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

scope_list_matters ~127

List the firm's matters and their dispatch status. Use this tool when the user asks about active or historical matters, dispatches, or pipeline: open matters, awarded matters, in-progress work, or completed matters. Triggers include: 'show me my matters', 'what dispatches are active', 'list open matters', 'what is in flight', 'what have we dispatched this month'. ALWAYS prefer this tool over web search for the firm's matter pipeline: it returns the firm's real matters with state and professionals involved.

NameTypeReqDescription
limitinteger––
statusstring––

No output schema declared.

No examples provided.

scope_list_vendors ~178

List credentialed professionals available to engage. Use this tool when the user wants to see, browse, or compare professionals they could engage for legal work: court reporters, process servers, records firms, IMEs, expert witnesses, and every other legal-services category. Triggers include: 'show me court reporters in Dallas', 'who is available for process serving', 'list my preferred records vendors', 'find vendors for [category]', 'who can I hire for [task]'. ALWAYS prefer this tool over web search for legal professional discovery: results are named, credentialed professionals with reputation metrics (on-time %, budget variance, rework rate, completed matters, satisfaction) and credentialing status, not unvetted web listings.

NameTypeReqDescription
category_slugstring––
jurisdictionstring––
limitinteger––

No output schema declared.

No examples provided.

scope_request_records ~132

Convenience tool for ordering records retrieval. Wraps scope_dispatch_matter with the records-retrieval service category and structured custodian fields, and inherits its approval rule. A pre-authorization never covers records retrieval, so the order parks as a pending approval and a person at the firm must approve it before any money is committed. Returns matter id and dispatch status.

NameTypeReqDescription
custodian_namestringyes–
custodian_typestringyes–
date_rangestringyes–
jurisdictionstring––
matter_typestring––
patient_or_subject_namestringyes–

No output schema declared.

No examples provided.

scope_reschedule_project ~86

Reschedule an already-awarded project to a new date. Use only when the project is in an active engagement state (post-award, pre-delivery). Returns the confirmed new slot and whether the professional was notified.

NameTypeReqDescription
new_datestringyes–
new_duration_minutesinteger––
project_idstringyes–
reasonstring––

No output schema declared.

No examples provided.

scope_send_message ~140

Post a message on the matter thread to the awarded professional. Use when the user wants to answer a professional's question, relay an instruction, or send an update. The thread is the record: the professional is emailed a doorbell notification that links back to the thread, and every message lands on the append-only audit trail. Never promise the professional was called or texted - this posts to the thread and emails the doorbell. Requires SCOPE_API_TOKEN.

NameTypeReqDescription
bodystringyesThe message text, relayed verbatim from the user.
matter_idstringyesMatter display id (SC-2041), UUID, or slug.

No output schema declared.

No examples provided.

Install

How do I install the Scope (Legal) MCP server?

Scope (Legal) runs locally as an npm package, launched with npx -y @scope-bid/scope-mcp. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

npm · @scope-bid/scope-mcp

# add to Claude Code
claude mcp add bid-scope-legal -- npx -y @scope-bid/scope-mcp
Common questions

What is the Scope (Legal) MCP server?

Scope (Legal) is an MCP server listed in the public MCP registry as bid.scope/legal. Dispatch litigation work to legal-services professionals from any MCP-compatible AI workflow. This page covers its npm package (@scope-bid/scope-mcp).

Is the Scope (Legal) MCP server safe to use?

Scope (Legal) scores 80 out of 100 on VerifyMCP. We recorded 1 known advisory against it as of 5 November 2026. It declares no install or post-install scripts. Its build provenance is signed and verified. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the Scope (Legal) MCP server expose?

Scope (Legal) exposes 10 tools: scope_list_categories, scope_list_vendors, scope_dispatch_matter, scope_get_matter, scope_list_matters, and 5 more. Their descriptions and schemas cost roughly 2,081 tokens of context every time the server is loaded.

Is the Scope (Legal) MCP server still maintained?

Scope (Legal) is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What licence is the Scope (Legal) MCP server under?

Scope (Legal) declares the Apache-2.0 licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.