This guide is part of MCP by industry, within The MCP Guide. Not legal or compliance advice. Request a free MCP readiness review.
MCP lets an AI assistant search your document management system, pull research from a legal research platform and check signing status on agreements, all from one conversation. As of November 2026, several major legal vendors publish MCP servers or connectors. The ethics rules have not changed: the lawyer stays responsible for the work and for client confidences.
MCP (Model Context Protocol) is an open standard for connecting AI apps to other software through MCP servers. If you need the basics first, read What Is MCP?.
This guide covers what MCP can do for a law firm, which legal servers are documented, how ABA Formal Opinion 512 applies and what to keep with lawyers. Facts were checked on 2 November 2026. It is not legal ethics advice: your firm's general counsel or ethics partner, and your state bar's guidance, decide what is permitted.
Key Takeaways
- iManage says its MCP Server keeps AI access "permission-bound, and fully logged" and respects existing ethical walls.
- Anthropic's legal launch in May 2026 named MCP connectors from iManage, NetDocuments, Thomson Reuters, Docusign, Box, Everlaw, Relativity and others.
- Thomson Reuters offers its CoCounsel Legal connector as a pilot and requires a CoCounsel Legal subscription.
- ABA Formal Opinion 512 says boilerplate engagement-letter language "is not sufficient" for informed consent when client information goes into a self-learning AI tool.
- Lawyers who bill hourly must bill actual time, even when AI makes a task faster.
What MCP can do in a law firm
The best early uses are search and first drafts over material the firm already controls:
- Precedent search. Find prior clauses, briefs or memos in the document management system, scoped to the matters you can already see.
- Research hand-off. Send a legal research question to a research platform and get a cited answer back in the same conversation.
- Agreement status. Check which envelopes are waiting for signature and draft reminders.
- Matter summaries. Summarize a folder of discovery documents or a deal room index for a partner briefing.
- Intake prep. Organize facts from an intake form into a draft conflicts-check request.
Each saves search and formatting time. Every output still needs a lawyer's review before it reaches a client, a court or the other side.
Which legal MCP servers exist
Document management
iManage announced its MCP Server on 14 May 2026. iManage says it lets AI systems "securely access governed iManage content," with access that is "permission-bound, and fully logged" and "respecting existing ethical walls and access controls." It names Harvey, Legora, ChatGPT, Claude and Microsoft Copilot as tools that can connect.
NetDocuments is also listed as a connector in Anthropic's legal launch, described as search and drafting from precedents.
Legal research
Thomson Reuters publishes a CoCounsel Legal MCP connector for Claude. Its help page says:
- Legal requests go through one tool, "Ask CoCounsel," and supporting tools start a session, upload and list files, and retrieve deliverables.
- "You need an active Thomson Reuters account with a CoCounsel Legal package subscription."
- "Thomson Reuters offers this connector as a pilot" and may "modify, suspend, or withdraw it at any time."
- Its terms restrict use of Thomson Reuters content with other professional AI tools.
The wider legal connector list
Anthropic's legal industry post, dated 12 May 2026, lists connectors grouped by job:
| Job | Connectors named |
|---|---|
| Contracts and signing | Definely, Docusign, Ironclad |
| Deal rooms | Box, Datasite |
| Document management | iManage, NetDocuments |
| E-discovery | Consilio, Everlaw, Relativity |
| Legal research | Thomson Reuters CoCounsel Legal, Legal Data Hunter, Midpage, Trellis |
| Legal AI assistants | Harvey, Solve Intelligence |
Our Docusign MCP server profile covers signing tools in detail. For the others, read each vendor's own documentation before you connect.
Practice management
We did not find a practice management vendor's own MCP documentation that we could open and verify on 2 November 2026. Community servers for practice management tools exist. Treat them as untrusted until your IT team reviews them, because they would hold billing data, client names and matter details.
ABA Formal Opinion 512 and MCP
The ABA issued Formal Opinion 512 on generative AI tools on 29 July 2024. It does not mention MCP, but it applies to any AI tool a lawyer uses. The points that matter most for connected AI:
Competence (Model Rule 1.1)
The opinion says relying on AI output without "an appropriate degree of independent verification or review of its output" could violate the duty of competence. Connecting a research platform does not change this. Check the citations.
Confidentiality (Model Rule 1.6)
The opinion says that for self-learning AI tools, "a client's informed consent is required prior to inputting information relating to the representation." It adds that "merely adding general, boiler-plate provisions to engagement letters" is not enough.
It also says lawyers "should read and understand the Terms of Use, privacy policy, and related contractual terms" of any AI tool they use. With MCP, that means the AI client and every connected server. A conversation can move matter data between several vendors.
Fees (Model Rule 1.5)
The opinion says lawyers who bill hourly "must bill for their actual time." If AI drafts in minutes what used to take an hour, the bill reflects the minutes plus review time.
Supervision (Model Rules 5.1 and 5.3)
The opinion also covers supervising lawyers and staff who use AI tools. In practice that means a written policy on which connectors are approved and who may use them. Our AI acceptable use policy guide is a starting point for that document.
State bars have issued their own guidance, and it varies. Check your jurisdiction.
Security risks specific to firms
Two MCP risks are sharper in law firms than elsewhere:
- Ethical walls across connectors. A document management system may enforce a wall, but a second connector, such as a deal room or a shared drive, may not. Map every connected source against your wall list.
- Prompt injection from opposing documents. Discovery documents and contracts from the other side are untrusted content. Hidden instructions in them can try to steer the AI. Read Prompt Injection Through MCP Tool Results before you point an AI at a production set.
Example prompts
- "Find our three most recent asset purchase agreements with an earn-out clause and summarize how each defined the earn-out period."
- "Ask CoCounsel for the current standard for preliminary injunctions in the Ninth Circuit, with citations."
- "List envelopes sent this week that are still waiting for the client's signature."
- "Summarize the index of the data room for the Acme matter by document category."
Each prompt uses material the firm already controls or licenses. None asks the AI to decide anything for a client.
A starter stack
| Layer | Starting choice | Why |
|---|---|---|
| AI client | A business plan with admin-managed connectors | Partners approve which connectors exist |
| Documents | Your DMS vendor's own MCP server | Inherits permissions and ethical walls |
| Research | Your research vendor's connector, if licensed | Cited, vendor-supported answers |
| Signing | Docusign or similar, read tools first | Status checks before any sending |
| Logging | DMS audit log plus AI client logs | Show who accessed what, and when |
Score any new server with our server risk checklist.
What to keep with lawyers
- Legal advice and conclusions to clients.
- Anything filed with a court, including citation checks.
- Sending documents for signature or to opposing counsel.
- Decisions about client consent to AI use.
- Conflicts decisions.
- Billing judgments.
The MCP specification says clients "SHOULD" present confirmation prompts so a human stays in the loop, per the tools section of the 2026-07-28 spec. Turn those prompts on for every write action.
Next step
Our MCP readiness audit maps your systems, ethical walls and data flows before you connect an AI. If your firm needs a custom, read-only server over an internal knowledge base, see MCP development. For a side-by-side list, read Best MCP Servers for Legal Teams.
More in the MCP Guide
Free tools: MCP Readiness Quiz · MCP Server Finder
Latest research: State of MCP: October 2026
Frequently asked questions
Does ABA Formal Opinion 512 ban using AI with client data?
No. It says lawyers must consider their duties of competence, confidentiality, communication, supervision and reasonable fees. For self-learning tools it requires informed client consent before inputting representation information. Your ethics counsel and state bar guidance decide how that applies to a given tool.
Does an MCP connection respect ethical walls?
Only if the server enforces them. iManage says its MCP Server respects existing ethical walls and access controls. Other connectors may not have the same controls, so check each one against your wall list before connecting it.
Is CoCounsel available through MCP?
Thomson Reuters offers a CoCounsel Legal connector for Claude as a pilot. Its help page says you need a CoCounsel Legal package subscription and that a Claude administrator must add the connector for the organization first.
Can an AI file documents or send them for signature through MCP?
Some connectors include write tools, such as sending envelopes for signature. Keep those behind a human confirmation step, and start with read-only tools. A lawyer should approve anything that leaves the firm.
Is there an official Clio MCP server?
Yes. Clio's own connector runs at https://mcp.api.clio.com/mcp and was added to Claude's directory in October 2026. It needs a Clio Work license. Community Clio servers also exist, so check the publisher before connecting practice management data. See our Clio MCP server profile.
