Loading…
Search US court opinions, federal dockets, judges, citations, and oral arguments via CourtListener.
Do not connect
A critical issue was found. Do not connect this server as-is.
Scanned 1 month ago Due for re-check
A server can change after it's graded. Re-run the automated scan to refresh this report.
This grade is deterministic and reproducible: the same server surface always yields the same grade under a given algorithm version. It is a real automated assessment computed by the MCPGrade engine from what the probe actually observed — not a fabricated or opinion score. It is not a manual human pentest, so it can miss context-specific risks.
Every signal below was measured directly by the automated probe. The grade is derived only from evidence like this — nothing is assumed.
The courtlistener-mcp-server MCP server exposes 14 tools, focused primarily on general-purpose capabilities. Its published description reads: "Search US court opinions, federal dockets, judges, citations, and oral arguments via CourtListener". It communicates over Streamable HTTP using the 2025-06-18 protocol revision, and does not require authorization to connect. MCPGrade currently rates courtlistener-mcp-server F — a critical issue was found and the server should not be connected as-is. Its most notable findings include "Cross-tool shadowing" and "Cross-tool shadowing". This report is a deterministic, reproducible automated assessment: the same observed surface always yields the same grade under a given algorithm version, and it is refreshed as new scans arrive and free to read — but it is not a substitute for a manual human security review. Always re-check courtlistener-mcp-server's advertised tools, transport security, and authorization posture before connecting an autonomous agent or sharing sensitive context with it.
Add courtlistener-mcp-server to an MCP client using the endpoint below. Review the grade and findings above before granting an autonomous agent access.
MCP endpoint
https://courtlistener.caseyjhand.com/mcpStreamable HTTP transport. This is the MCP endpoint, not a website — paste it into your MCP client server list rather than a browser.
Captured passively during the read-only scan. Click any value to find servers that match it.
The tools this server advertises via tools/list — names, purposes, and the parameters each accepts, exactly as enumerated read-only.
Full-text search across 9M+ written US court opinions with field-level filtering. Returns opinion cluster summaries with case metadata, citations, matched text snippets, and the individual opinion var
Sorted worst-first. Each finding shows its severity, what it means, its OWASP MCP Top-10 mapping, and a recommended fix — the check id links to the exact methodology row that produced it.
tool: courtlistener_search_opinions
A tool description tries to alter the model’s use of another tool.
, OR, NOT). Use courtlistener_lookup_courts to find court IDs. CourtListener publishes freeRecommendationDescriptions must describe only their own tool.
tool: courtlistener_get_opinion
A tool description tries to alter the model’s use of another tool.
luster IDs from courtlistener_search_opinions, courtlistener_lookup_citation, or docket resulRecommendationDescriptions must describe only their own tool.
tool: courtlistener_search_dockets
A tool description tries to alter the model’s use of another tool.
per docket. Use courtlistener_lookup_courts to find court IDs.RecommendationDescriptions must describe only their own tool.
tool: courtlistener_get_docket
A tool description tries to alter the model’s use of another tool.
docket IDs from courtlistener_search_dockets or from opinion results.RecommendationDescriptions must describe only their own tool.
tool: courtlistener_get_parties
A tool description tries to alter the model’s use of another tool.
docket IDs from courtlistener_search_dockets or courtlistener_get_docket.RecommendationDescriptions must describe only their own tool.
tool: courtlistener_search_judges
A tool description tries to alter the model’s use of another tool.
nt summary. Use courtlistener_get_judge for full appointment history and education recoRecommendationDescriptions must describe only their own tool.
tool: courtlistener_get_judge
A tool description tries to alter the model’s use of another tool.
person IDs from courtlistener_search_judges results.RecommendationDescriptions must describe only their own tool.
tool: courtlistener_search_oral_arguments
A tool description tries to alter the model’s use of another tool.
an be passed to courtlistener_get_judge for biographical context.RecommendationDescriptions must describe only their own tool.
tool: courtlistener_get_oral_argument
A tool description tries to alter the model’s use of another tool.
e audio_id from courtlistener_search_oral_arguments). Returns the case name, panel judge IDs, duratRecommendationDescriptions must describe only their own tool.
tool: courtlistener_search_financial_disclosures
A tool description tries to alter the model’s use of another tool.
(person ID from courtlistener_search_judges) and/or filing year; the year filter is appliedRecommendationDescriptions must describe only their own tool.
tool: courtlistener_get_financial_disclosure
A tool description tries to alter the model’s use of another tool.
ed companion to courtlistener_search_financial_disclosures (which returns only category counts). Pass cateRecommendationDescriptions must describe only their own tool.
tool: (server instructions)
A tool description tries to alter the model’s use of another tool.
o cluster IDs - courtlistener_get_citations traces precedent networks (direction="cited_by"RecommendationDescriptions must describe only their own tool.
The server accepts tool enumeration (and likely invocation) with no authentication.
RecommendationRequire OAuth 2.1 authorization for any server exposing non-public tools.
tool: courtlistener_search_opinions
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: courtlistener_get_citations
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: courtlistener_search_dockets
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: courtlistener_search_judges
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: courtlistener_lookup_courts
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: courtlistener_search_oral_arguments
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
tool: courtlistener_search_financial_disclosures
The server advertises open-world / broadly-scoped capabilities.
annotations.openWorldHint = trueRecommendationScope tools to the minimum needed.
Vantaj uptime monitoring via MCP — manage monitors, heartbeats, incidents, and status pages.
Unified gateway to Algeria's TKAWEN ecosystem: commerce, certification, and AI tools.
Provides access to the Cohereon Doctrine AI safety framework with governance components, tiered access, and agent onboarding.
Agentic rails for complex workflows with receipts, fees, and MCP tool access.
Structural TC39 spec lookup for ECMA-262 and ECMA-402 in AI agents, SHA-pinned and offline-first.
Structural TC39 spec lookup for ECMA-262 and ECMA-402 in AI agents, SHA-pinned and offline-first.
Fetch the full text and metadata for a single opinion cluster by cluster ID. A cluster groups all opinions filed in a case — majority, concurrence, dissent, and per curiam. Returns the cluster metadat
Retrieve the citation network for an opinion cluster. Supports two directions: "cited_by" (opinions that cite this one — measures precedential influence) and "citing" (opinions this one cites — reveal
Resolve legal citations (e.g., "410 U.S. 113", "93 S. Ct. 705") to opinion cluster IDs and case metadata. Enables workflows that start from a known citation rather than a search query. CourtListener e
Search RECAP federal court dockets. Query terms match case name, docket number, party, and attorney names; filters narrow by party name, court, and filing date. RECAP is a crowd-sourced mirror of PACE
Fetch full docket metadata and entry list for a single federal case by docket ID. Returns all available docket entries with document availability status. Documents with is_available=true have a RECAP-
Fetch all parties and attorneys of record for a RECAP federal docket by docket ID. Returns each party's name, role (Plaintiff, Defendant, Petitioner, Respondent, etc.), and their attorneys with contac
Search judge/person records by name, appointing president, court, political affiliation, or demographic. Returns biographical data, current position, and appointment summary. Use courtlistener_get_jud
Fetch full biographical profile for a single judge: positions on record — judicial appointments across all courts plus non-judicial roles — education, political affiliations, and ABA ratings. The posi
List courts with optional filtering by jurisdiction type, active/inactive status, and scraper coverage. Primarily used to discover court IDs for use in search and filter parameters across all other co
Search appellate oral argument audio recordings — the largest public collection of oral argument audio. Returns recording metadata with two direct MP3 links per result (download_url at the originating
Fetch the full detail record for a single oral argument audio recording by its ID (the audio_id from courtlistener_search_oral_arguments). Returns the case name, panel judge IDs, duration, MP3 downloa
Search federal judicial financial disclosure filings — the annual reports judges file on investments, gifts, debts, outside positions, and income. Filter by judge (person ID from courtlistener_search_
Fetch a single judicial financial disclosure by ID with its parsed line-item rows — investments, debts, positions, reimbursements, non-investment and spouse income, agreements, and gifts. This is the