Skip to main content

Set up the SpotDraft MCP server

Give AI agents access to your contract lifecycle data in SpotDraft: contracts and their content, key pointers, approvals and activity logs, templates, counterparties, workspace users and roles, and legal intake requests. The recommended server also enables the write tools, so an agent can upload a contract version, send a contract out, raise approvals, comment, and file intake requests. Tool customization then narrows that set to what each team should reach.

Prerequisites​

  • A MintMCP admin account
  • A SpotDraft workspace, and confirmation of which region hosts it
  • A SpotDraft login for each connecting user, since the server shows an agent only the contracts that user can already open
  • Access to the Legal Intake module, for the legal intake tools

Add SpotDraft to MintMCP​

SpotDraft runs one server per data region, so MintMCP lists one recommended server each for SpotDraft - US, SpotDraft - EU, and SpotDraft - India. Install the one that matches where your workspace lives, because an entry for another region will not authenticate your users. Your SpotDraft CSM or support can confirm which region hosts you.

SpotDraft supports dynamic client registration, so MintMCP registers its own OAuth client automatically and you don't create an app in SpotDraft or paste a client ID and secret.

  1. In MintMCP, go to MCP store and open the Recommended servers tab.
  2. Select the SpotDraft entry for your region to open the configuration panel.
  3. Click Install.

Each user signs in with their SpotDraft credentials the first time they call a SpotDraft tool, and their existing workspace permissions carry over from there.

What the connector exposes​

Read access covers the contract record end to end: the contract list and each contract's status, content, key pointers, approvals, activity log, download link, and related agreements, plus templates and their metadata, counterparties, the workspace's own facets and contract types, and users and roles. Legal intake requests read the same way for workspaces that have the module.

Write access is on from the moment you install, and it covers four things an agent can do to a contract and one it can do to intake:

CapabilityWhat an agent can do
Version a contractUpload a new version of an existing contract
Move a contract forwardSend it to counterparties for signature
Route for approvalRaise approval requests on a contract
CommentAdd comments to a contract
Manage legal intakeCreate, update, and delete intake requests

Use tool customization to drop any of these for a given audience. SpotDraft maintains the underlying tool list in its MCP server documentation, which changes as SpotDraft ships new capabilities.

Security considerations​

  • Every call runs as the signed-in SpotDraft user, so contract visibility, field access, and role gates apply unchanged, and MintMCP's audit log attributes each tool call to that user.
  • The recommended server enables write access, so an agent can change contract state as the connecting user. Use tool customization to drop writing entirely for a read-only audience, and to drop reads that go further than you want, such as downloading a contract file for teams that should read summaries only.
  • Contract content reaches the agent as text, which puts commercial terms, pricing, and counterparty details in front of whichever model the user runs. Scope access policies accordingly.
  • Shared credentials are not appropriate here, because one account would run every user at that account's contract visibility and drop per-user attribution.

Troubleshooting​

  • 403 on anything that writes: the connector URL lost its ?enable_write=true parameter, so restore it in the connector's server URL.
  • Authentication fails for every user: the connector points at a SpotDraft server that doesn't host your workspace, so confirm which one does with your CSM.
  • A contract returns no readable content: SpotDraft serves extracted text, so a scanned PDF that was never OCR'd has none to return.
  • Legal intake is missing or errors: the workspace doesn't have the Legal Intake module, or the user lacks access to it.

For workspace setup questions, contact your SpotDraft CSM or SpotDraft support.

Next steps​