← Back to search

io.github.oktopeak/filevine-mcp

oktopeak Scanned 9d ago

Open-source MCP server connecting Claude to Filevine practice management. Built by Oktopeak.

MCP Registry ↗
B
79.9 / 100

Versions

1.0.1latest
first seen Jun 5, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 15

authenticate
annotations: none low

Exchange your Filevine Personal Access Token (PAT) for an access token. Must be called once before using other Filevine tools. Requires FILEVINE_CLIENT_ID, FILEVINE_CLIENT_SECRET, and FILEVINE_PAT in .env

auth-status
annotations: none low

Check whether the server is authenticated with Filevine and when the token expires.

logout
annotations: none low

Remove the stored Filevine tokens from disk.

list-documents
annotations: none low

List all documents for a specific case. Returns metadata, URLs, and file info — not the binary content.

case_id string
list-cases
annotations: none low

List cases (projects) from Filevine, optionally filtered by status or search term.

get-case
annotations: none low

Get detailed information about a specific case (project) by ID.

case_id string
list-notes
annotations: none low

List all notes for a specific case.

case_id string
create-note
annotations: none low

Create a new note on a case. Useful for logging AI summaries, findings, or follow-up items.

case_id string
discover-schema
annotations: none low

Discover the firm

get-collection
annotations: none low

Get custom collection data (medical records, liens, settlements, etc.) for a case. Use discover-schema first to find available selectors.

case_id string
list-tasks
annotations: none low

List all tasks for a specific case, optionally filtered by status.

case_id string
create-task
annotations: none low

Create a new task on a case. Note: targetDate field may be ignored by Filevine API (known issue as of Aug 2025).

title string case_id string
search-contacts
annotations: none low

Search for contacts across all cases by name or email.

get-contact
annotations: none low

Get detailed information about a specific contact by ID.

contact_id string
list-case-contacts
annotations: none low

List all contacts assigned to a specific case.

case_id string

Permissions 2

network medium
Server uses network capabilities via: fetch()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 43

low
Tool 'authenticate' has no annotations annotation_checker · 100%
low
Tool 'auth-status' has no annotations annotation_checker · 100%
low
Tool 'logout' has no annotations annotation_checker · 100%
low
Tool 'list-documents' has no annotations annotation_checker · 100%
low
Tool 'list-cases' has no annotations annotation_checker · 100%
low
Tool 'get-case' has no annotations annotation_checker · 100%
low
Tool 'list-notes' has no annotations annotation_checker · 100%
low
Tool 'create-note' has no annotations annotation_checker · 100%
low
Tool 'discover-schema' has no annotations annotation_checker · 100%
low
Tool 'get-collection' has no annotations annotation_checker · 100%
low
Tool 'list-tasks' has no annotations annotation_checker · 100%
low
Tool 'create-task' has no annotations annotation_checker · 100%
low
Tool 'search-contacts' has no annotations annotation_checker · 100%
low
Tool 'get-contact' has no annotations annotation_checker · 100%
low
Tool 'list-case-contacts' has no annotations annotation_checker · 100%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.29.0 (GHSA-6qxp-vccf-f47h) dependency_analyzer · 95%
medium
Hex string literal (>50 chars) in oktopeak-filevine-mcp-81be16b/src/auth/__tests__/token-store.test.ts:16 entropy_analyzer · 70%
medium
Hex string literal (>50 chars) in oktopeak-filevine-mcp-81be16b/src/auth/__tests__/token-store.test.ts:88 entropy_analyzer · 70%
info
package.json metadata manifest_parser · 100%
info
Tool: authenticate manifest_parser · 70%
info
Tool: auth-status manifest_parser · 70%
info
Tool: logout manifest_parser · 70%
info
Tool: list-documents manifest_parser · 70%
info
Tool: list-cases manifest_parser · 70%
info
Tool: get-case manifest_parser · 70%
info
Tool: list-notes manifest_parser · 70%
info
Tool: create-note manifest_parser · 70%
info
Tool: discover-schema manifest_parser · 70%
info
Tool: get-collection manifest_parser · 70%
info
Tool: list-tasks manifest_parser · 70%
info
Tool: create-task manifest_parser · 70%
info
Tool: search-contacts manifest_parser · 70%
info
Tool: get-contact manifest_parser · 70%
info
Tool: list-case-contacts manifest_parser · 70%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (5) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 407 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%