Ebenova Scope Guard - AI Contract Scope Violation Detector

Name: Ebenova Scope Guard - AI Contract Scope Violation Detector
Author: dgtalquantumleap-ai

Local

github.com/dgtalquantumleap-aiLegal & Government0Updated 22w ago

Repository

About Ebenova Scope Guard - AI Contract Scope Violation Detector

Ebenova Scope Guard is Signova's contract-scope analysis tool for freelancers, agencies, and small businesses. It detects requests that exceed agreed scope and supports change-order generation; the broader platform also offers legal document generation and other MCP servers.

Key features

01Detect requests outside contract scope
02Generate change-order content
03Provide legal-document drafting MCP tools
04Provide business and contract analysis tools

Use cases

01Assess whether a client request exceeds a contract
02Prepare a change order for scope changes
03Use legal-document tools from an AI agent
04Analyze business and contract information with tools

MCP support

Signova offers MCP servers for legal drafting, business and contract analysis, and scope detection, as well as an HTTP MCP endpoint. Its Scope Guard server exposes scope detection and change-order generation tools to AI agents.

#legal #contracts #scope-creep #freelance #compliance #ai #africa

Configuration

Local server config is the same for every client. Copy it into your client’s MCP config file.

mcp.json · Universal config

{
  "mcpServers": {
    "signova": {
      "command": "npx",
      "args": [
        "-y",
        "@ebenova/scope-guard-mcp"
      ],
      "env": {
        "EBENOVA_API_KEY": "<EBENOVA_API_KEY>"
      }
    }
  }
}

Run commandnpx -y @ebenova/scope-guard-mcp

Environment variables to set

EBENOVA_API_KEYSecret

Local servers need a runtime on your machine (e.g. Node.js 18+). Config file locations differ by client; see your client’s docs.

Packages

npm@ebenova/scope-guard-mcpstdio

Tools

Saved tool list · updated 3w ago

Parameter	Type	Required	Description
inputSchema	object	Yes
inputSchema.contract_text	string	Yes	Your full contract text (minimum 50 characters)
inputSchema.client_message	string	Yes	The client message to analyze for scope violations
inputSchema.communication_channel	enum	No	Channel where the message was receivedemail \| whatsapp \| slack \| sms \| other

Details

From the project README

Signova — AI-Powered Legal Document Platform

getsignova.com · ebenova.dev · api.ebenova.dev

Signova generates professional legal documents, contracts, invoices, and compliance reports using AI — built for freelancers, agencies, and small businesses who need legal protection without lawyer fees.

Overview

Signova ships three surfaces from a single codebase:

Consumer web app at getsignova.com — pay-per-document generation, promo redemption, buyer capture
Developer platform at ebenova.dev + api.ebenova.dev — subscription API with keys, usage tracking, and Stripe billing
MCP servers — Model Context Protocol servers that expose the same legal/insights/scope tooling to AI agents (Claude Desktop, Cursor, etc.)

The platform generates 34 document types (NDAs, contracts, offer letters, privacy policies, invoices, change orders, etc.) with jurisdiction-aware drafting for Canada (PIPEDA + Quebec Law 25), the United States (CCPA/CPRA + state privacy laws), the United Kingdom (UK GDPR), the European Union (GDPR), Nigeria (NDPA 2023), South Africa (POPIA), Kenya (DPA 2019), and Ghana (DPA 2012) — all with geo-aware currency detection and locale-specific drafting via Anthropic Claude.

Live URLs

Surface	URL
Consumer site	https://www.getsignova.com
Developer site	https://www.ebenova.dev
API base	https://api.ebenova.dev
OpenAPI spec (file)	`openapi.yaml`

Architecture

Browser / AI Agent
      │
      ▼
Vercel Edge (vercel.json routing + redirects)
      │
      ├─ Static SPA:  Vite build of src/  →  React 19 + React Router 7
      │
      └─ Serverless:  api/*.js  (Node.js functions)
             │
             ├─ Upstash Redis        (API keys, usage, promo state, rate limits)
             ├─ Anthropic Claude     (document generation, scope analysis)
             ├─ Stripe               (consumer checkout + API subscriptions)
             ├─ Resend               (transactional email, waitlist, receipts)
             ├─ Paystack / OxaPay    (Africa + crypto payments)
             └─ Groq                 (fast previews, insight drafts)

Deployed on Vercel (project signova, owner ebenovasolu-5755s-projects). Cron jobs defined in vercel.json drive /v1/insights/poll (every 15 min) and /api/cron/ots-upgrade (every 2 hours).

Tech Stack

Layer	Technology
Frontend	React 19, Vite 7, React Router 7, Phosphor Icons
Backend	Vercel Serverless Functions (Node.js, ESM)
Validation	Zod 3
Data	Upstash Redis (serverless REST)
AI	Anthropic Claude (primary), Groq (previews/drafts)
Payments	Stripe (primary), Paystack (NGN), OxaPay (crypto), Flutterwave
Email	Resend
Analytics	Vercel Analytics, Vercel Speed Insights
MCP	`@modelcontextprotocol/sdk`
Testing	Vitest, @testing-library/react, jsdom

Features

Document generation

34 document types: NDA, freelance/service/consulting agreements, employment offer letters, privacy policy, terms of service, invoices, change orders, scope analysis, and more
Jurisdiction-aware drafting across Canada, USA (with state-level awareness), UK, EU, Nigeria, South Africa, Kenya, and Ghana
Free Groq-powered preview (api/generate-preview.js), premium Claude output on payment verification (api/generate.js, api/v1/documents/generate.js)
Conversation-to-document extraction (api/v1/extract/conversation.js)

Promo system

Promo codes bypass payment to unlock one free document. State is stored in Upstash Redis (promo_uses:CODE counters, promo_ratelimit:IP per-IP hourly limiter). IP rate limit: 5 attempts/hour. All codes defined in api/promo-redeem.js.

Code	Description	Max uses	Expires
`SIGNOVA10`	General discount	500	2026-12-31
`OLUMIDE`	Founder access (unlimited testing)	9,999	2027-12-31
`AFRICA`	Taryl African Founders Community	1,200	2026-12-31
`KREDO`	Kredo partnership	20	2026-12-31
`MEST2026`	MEST cohort	100	2026-12-31
`CCHUBNIG`	CcHUB Nigeria	200	2026-12-31
`BAOBAB26`	Baobab Network cohort	80	2026-12-31
`ACCLAFRICA`	Accelerate Africa cohort	50	2026-12-31
`TEF2026`	Tony Elumelu Foundation	1,000	2026-12-31
`ROSEMARY`	Single-use promo	10	2026-12-31

Billing (Stripe)

Consumer pay-per-document checkout (api/stripe-checkout.js, api/stripe-verify.js, api/stripe-webhook.js)
Subscription plans for the API: Starter $29, Growth $79, Scale $199 (api/v1/billing/checkout.js)
Insights add-on plans: Starter $49, Growth $99, Scale $249 — activated commercial feature
Stripe Customer Portal (api/v1/billing/portal.js), webhook handler (api/v1/billing/webhook.js)
Scope Guard Pro checkout (api/scope-guard-checkout.js) — activated commercial feature

MCP servers

Three first-party MCP servers live under mcp-servers/:

Server	Purpose
`mcp-servers/legal-docs`	Document drafting tools for AI agents (NDAs, contracts, invoices, change orders)
`mcp-servers/insights`	Business-intelligence / contract analytics tools
`mcp-servers/scope-guard`	Scope-creep detection and change-order generation

Each has its own package.json, server.json, and Dockerfile, and publishes independently to npm / the MCP registry / Smithery / Glama.

The site itself also exposes an HTTP MCP endpoint at api/mcp.js.

API authentication

Authenticated endpoints under /v1/* use two distinct credentials:

Bearer API keys (Authorization: Bearer sk_live_...) — end-user keys validated against Upstash Redis via lib/api-auth.js. Used for document generation, extract, scope, vigil, contracts, insights, invoices.
Admin/setup secret (EBENOVA_ADMIN_SECRET) — gates /v1/keys/create so only operators can provision new customer keys. ADMIN_API_TOKEN similarly gates /v1/admin/revenue. BYPASS_ADMIN_SECRET gates api/create-bypass.js. CRON_SECRET / POLL_CRON_SECRET authenticate Vercel cron invocations.

Rate limits and monthly document caps are enforced per key in Redis.

Note: there is no live /docs HTML endpoint today. Consume the OpenAPI spec directly via openapi.yaml.

Local development

Prerequisites

Node.js 20+ (ESM)
Upstash Redis database (free tier)
Anthropic API key
Stripe account (only needed to exercise paid flows)
Resend API key (optional, for email)

Setup

git clone <repo-url>
cd signova
npm install
cp .env.example .env
# edit .env with your keys

Scripts

npm run dev            # Vite dev server
npm run build          # Production build
npm run preview        # Preview built SPA
npm run lint           # ESLint
npm test               # Vitest
npm run test:coverage  # Vitest with coverage
npm run check:css      # Validate CSS design tokens
npm run keygen         # Generate API/admin secrets

Running the serverless api/ functions locally requires the Vercel CLI:

npm i -g vercel
vercel dev

Environment variables

See .env.example for the full template.

Required (core)

Variable	Purpose
`ANTHROPIC_API_KEY`	Primary AI generation
`UPSTASH_REDIS_REST_URL`	Redis REST URL
`UPSTASH_REDIS_REST_TOKEN`	Redis auth token
`EBENOVA_ADMIN_SECRET`	Protects `/v1/keys/create`
`PROMO_SECRET`	HMAC secret for signed promo tokens

Stripe (required for paid flows)

Variable	Purpose
`STRIPE_SECRET_KEY`	Stripe API
`STRIPE_WEBHOOK_SECRET`	Webhook signature verification
`STRIPE_PRICE_STARTER` / `_GROWTH` / `_SCALE`	Main API plan price IDs
`STRIPE_PRICE_INSIGHTS_STARTER` / `_GROWTH` / `_SCALE`	Insights add-on price IDs

Optional (email, alt-payments, misc)

Variable	Purpose
`RESEND_API_KEY`	Transactional email
`ALERT_EMAIL`	Where insight alerts are sent (defaults to `[email protected]`)
`GROQ_API_KEY`	Fast preview + draft generation
`OXAPAY_MERCHANT_KEY`	Crypto checkout
`PAYSTACK_SECRET_KEY` / `PAYSTACK_PUBLIC_KEY`	NGN card checkout
`FLUTTERWAVE_SECRET_KEY` / `FLUTTERWAVE_PUBLIC_KEY`	African card checkout
`NEXT_PUBLIC_APP_URL`	Magic-link base URL (defaults to `https://www.getsignova.com`)
`CORS_ALLOWED_ORIGINS`	Comma-separated CORS allowlist
`LOG_LEVEL`	`DEBUG` / `INFO` / `WARN` / `ERROR`
`NODE_ENV`	`development` / `production`

Admin, cron, integrations (optional)

Variable	Purpose
`ADMIN_API_TOKEN`	Gates `/v1/admin/revenue`
`ADMIN_SECRET`	Gates `api/admin/index-doc.js`
`BYPASS_ADMIN_SECRET`	Gates `api/create-bypass.js`
`CRON_SECRET`	Authenticates `/api/cron/ots-upgrade`
`POLL_CRON_SECRET`	Authenticates `/v1/insights/poll`
`FIELDOPS_API_URL` / `FIELDOPS_INTERNAL_KEY`	FieldOps bookings bridge
`VIGIL_API_URL`	Vigil compliance backend

Deployment

The project is deployed on Vercel:

Project: signova
Owner: ebenovasolu-5755s-projects
Domains routed via vercel.json redirects: apex getsignova.com → www.getsignova.com, apex ebenova.dev → www.ebenova.dev
Cron jobs configured in vercel.json

vercel          # preview deploy
vercel --prod   # production deploy

Configure environment variables in Vercel → Project Settings → Environment Variables (mirror the list above).

Testing

Current status — be honest about what ships vs. what is planned:

Area	Status
`lib/sanitize.js`	Done
`lib/parse-body.js`	Done
`lib/cors-middleware.js`	Done
API endpoint integration tests	Planned
React component tests	Planned

Run with npm test (Vitest). npm run test:coverage emits a v8 coverage report.

Project structure

signova/
├── api/                   # Vercel serverless functions
│   ├── v1/                # Versioned API (auth, billing, documents, insights,
│   │                      #   vigil, scope, contracts, extract, invoices, keys, admin)
│   ├── admin/             # Admin-only operator endpoints
│   ├── cron/              # Scheduled tasks (ots-upgrade)
│   ├── generate.js        # Premium document generation (Claude)
│   ├── generate-preview.js# Free preview generation (Groq)
│   ├── promo-redeem.js    # Promo code redemption (10 codes)
│   ├── stripe-*.js        # Consumer Stripe flow
│   ├── paystack-*.js      # Paystack flow
│   ├── oxapay-*.js        # OxaPay crypto flow
│   ├── mcp.js             # HTTP MCP endpoint
│   └── ...
├── lib/                   # Shared server libraries (auth, CORS, Redis, validators,
│                          #   sanitize, parse-body, logger, analytics)
├── src/                   # React SPA (pages, components, lib, styles)
├── mcp-servers/
│   ├── legal-docs/        # Legal document MCP server (publishable)
│   ├── insights/          # Insights MCP server (publishable)
│   └── scope-guard/       # Scope-guard MCP server
├── tests/                 # Vitest test suite
├── scripts/               # Dev utilities (keygen, CSS token check, etc.)
├── openapi.yaml           # OpenAPI 3.1.0 specification
└── vercel.json            # Vercel routing, redirects, cron

Related repositories

ebenova-legal-docs-mcp — published distribution of the legal-docs MCP server (npm, MCP Registry, Smithery, Glama, MCPize)

License

Support

Email: [email protected]
Site: getsignova.com

Legal disclaimer

Documents generated by Signova are for informational purposes only and do not constitute legal advice. Always consult a qualified attorney before relying on AI-generated legal documents.

Comments

Markdown supported

Details

Author: dgtalquantumleap-ai
Transports: stdio
Listed on: Apr 14, 2026
Last updated: 22w ago

Report

Similar servers

Legal & Government

Contractor Licence Changes

github.com/modelcontextprotocol

7.4k

Did this contractor's licence change? Observed lapses and reinstatements, not a snapshot

Licensed House Painters

github.com/modelcontextprotocol

7.4k

Find licensed house painters in 11 US states, with dated license status from state boards

EdgarTools

github.com/dgunning

2.8k

Open-source SEC EDGAR toolkit. 11 tools and 7 research prompts covering every major filing type — 10-K, 10-Q, 8-K, Form 4 insider trades, 13F institutional holdings, Form D private placements, Form ADV investment advisers, DEF 14A proxy statements, SC 13D/G ownership, and NPORT.

Korean Law MCP

github.com

2.8k

Korean law: statutes, precedents, ordinances, treaties and citation verification (법제처 API).

New to MCP?

From what the protocol is to installing your first server, these answers cover most first questions.

Read the getting-started guide

An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.

Ebenova Scope Guard - AI Contract Scope Violation Detector

About Ebenova Scope Guard - AI Contract Scope Violation Detector

Key features

Use cases

MCP support

Configuration

Tools

Details

Signova — AI-Powered Legal Document Platform

Overview

Live URLs

Architecture

Tech Stack

Features

Document generation

Promo system

Billing (Stripe)

MCP servers

API authentication

Local development

Prerequisites

Setup

Scripts

Environment variables

Required (core)

Stripe (required for paid flows)

Optional (email, alt-payments, misc)

Admin, cron, integrations (optional)

Deployment

Testing

Project structure

Related repositories

License

Support

Legal disclaimer

Comments

New to MCP?

What is MCP (Model Context Protocol)?

How do MCP servers differ from clients?

Should I use a local or a remote server?

How do I install a server in Claude, Cursor and others?

Are listed projects reviewed? What does “Verified” mean?

My project is listed. How do I claim it?