MCP Radar
MCP-Server

mcp-eu-ai-act

io.github.ark-forge/mcp-eu-ai-act
Recht & Compliance Sicherheit Öffentlich und erreichbar MCP 2025-11-25

Was dieses MCP kann

Scans projects for EU AI Act and GDPR obligations, generates compliance reports and templates, identifies gaps, and provides remediation roadmaps.

Funktionen

Tools

16 Tools
certify_compliance_report
Make your compliance report tamper-proof for Art. 12 audit trail — pass the report JSON, get back a proof_id and a public verification URL you can hand to auditors. Certified plan required. Run generate_report() first to produce the report.
Eingabeschema 
{'type': 'object', 'title': 'certify_compliance_reportArguments', 'required': ['report_data', 'trust_layer_key'], 'properties': {'report_data': {'type': 'string', 'title': 'Report Data', 'description': 'JSON string of the compliance report to certify.'}, 'trust_layer_key': {'type': 'string', 'title': 'Trust Layer Key', 'description': 'ArkForge Trust Layer API key.'}}}
check_compliance
Check whether your project passes or fails each EU AI Act requirement — no arguments, 5 seconds. See exactly which articles you violate (Art. 52 transparency, Art. 11 documentation, Art. 14 human oversight, Art. 15 robustness) and get step-by-step fix instructions for every gap. Call combined_compliance_report() for EU AI Act + GDPR together.
Eingabeschema 
{'type': 'object', '$defs': {'RiskCategory': {'enum': ['unacceptable', 'high', 'limited', 'minimal'], 'type': 'string', 'title': 'RiskCategory', 'description': 'EU AI Act risk categories'}}, 'title': 'check_complianceArguments', 'properties': {'project_path': {'type': 'string', 'title': 'Project Path', 'default': '.', 'description': "Path to the project root. Omit entirely or pass '.' to check the current working directory."}, 'risk_category': {'$ref': '#/$defs/RiskCategory', 'default': 'limited', 'description': "EU AI Act risk category: 'minimal', 'limited' (default, fits most AI apps), 'high', or 'unacceptable'."}}}
combined_compliance_report
Run this before your next deploy. One call reveals every EU AI Act + GDPR gap in your codebase — no arguments, no setup, under 10 seconds, free. Detects AI frameworks and personal data flows, flags where both laws overlap, returns pass/fail per article with a prioritized fix list. EU AI Act fines up to 35M EUR, GDPR up to 20M EUR. Replaces separate scan_project() and gdpr_scan_project() calls.
Eingabeschema 
{'type': 'object', '$defs': {'RiskCategory': {'enum': ['unacceptable', 'high', 'limited', 'minimal'], 'type': 'string', 'title': 'RiskCategory', 'description': 'EU AI Act risk categories'}, 'ProcessingRole': {'enum': ['controller', 'processor', 'minimal_processing'], 'type': 'string', 'title': 'ProcessingRole', 'description': 'GDPR processing roles'}}, 'title': 'combined_compliance_reportArguments', 'properties': {'project_path': {'type': 'string', 'title': 'Project Path', 'default': '.', 'description': "Path to the project root. Omit entirely or pass '.' to scan the current working directory — no arguments required."}, 'risk_category': {'$ref': '#/$defs/RiskCategory', 'default': 'limited', 'description': "EU AI Act risk category: 'minimal', 'limited' (default, fits most AI apps), 'high', or 'unacceptable'."}, 'processing_role': {'$ref': '#/$defs/ProcessingRole', 'default': 'controller', 'description': "GDPR processing role: 'controller' (default, most common), 'processor', or 'minimal_processing'."}}}
gdpr_check_compliance
Check whether your project passes or fails each GDPR requirement — no arguments. See pass/fail for lawful basis (Art. 6), consent (Art. 7), data subject rights (Art. 15–22), security (Art. 32), and breach notification (Art. 33–34) with fix instructions for every gap. GDPR fines reach 20M EUR or 4% turnover. For EU AI Act + GDPR together, call combined_compliance_report().
Eingabeschema 
{'type': 'object', '$defs': {'ProcessingRole': {'enum': ['controller', 'processor', 'minimal_processing'], 'type': 'string', 'title': 'ProcessingRole', 'description': 'GDPR processing roles'}}, 'title': 'gdpr_check_complianceArguments', 'properties': {'project_path': {'type': 'string', 'title': 'Project Path', 'default': '.', 'description': "Path to the project root. Leave empty or pass '.' to check the current directory."}, 'processing_role': {'$ref': '#/$defs/ProcessingRole', 'default': 'controller', 'description': 'GDPR role: controller, processor, or minimal_processing.'}}}
gdpr_generate_report
Generate the GDPR report your DPO needs — no arguments. Combines personal data inventory, gap analysis, and remediation steps in one structured document for DPO review, audit prep, or regulatory response. For EU AI Act + GDPR together, call combined_compliance_report().
Eingabeschema 
{'type': 'object', '$defs': {'ProcessingRole': {'enum': ['controller', 'processor', 'minimal_processing'], 'type': 'string', 'title': 'ProcessingRole', 'description': 'GDPR processing roles'}}, 'title': 'gdpr_generate_reportArguments', 'properties': {'project_path': {'type': 'string', 'title': 'Project Path', 'default': '.', 'description': "Path to the project root. Leave empty or pass '.' to scan the current directory."}, 'processing_role': {'$ref': '#/$defs/ProcessingRole', 'default': 'controller', 'description': 'GDPR role: controller, processor, or minimal_processing.'}}}
gdpr_generate_templates
Get pre-filled GDPR templates your organization actually needs — no arguments. Privacy Policy, DPIA, Records of Processing Activities (ROPA), and Data Breach Procedure tailored to your processing role. Fill in [bracketed] sections. Run gdpr_check_compliance() first to see which documents you're missing.
Eingabeschema 
{'type': 'object', '$defs': {'ProcessingRole': {'enum': ['controller', 'processor', 'minimal_processing'], 'type': 'string', 'title': 'ProcessingRole', 'description': 'GDPR processing roles'}}, 'title': 'gdpr_generate_templatesArguments', 'properties': {'processing_role': {'$ref': '#/$defs/ProcessingRole', 'default': 'controller', 'description': 'GDPR role: controller, processor, or minimal_processing.'}}}
gdpr_scan_project
Find every file in your project that touches personal data — no arguments, 5 seconds, free. Detects PII fields, cookies, tracking pixels, analytics SDKs, and consent flows. Returns flagged files with data categories and applicable GDPR articles. GDPR fines reach 20M EUR or 4% turnover. For EU AI Act + GDPR together, call combined_compliance_report().
Eingabeschema 
{'type': 'object', 'title': 'gdpr_scan_projectArguments', 'properties': {'project_path': {'type': 'string', 'title': 'Project Path', 'default': '.', 'description': "Path to the project root. Leave empty or pass '.' to scan the current directory."}}}
generate_annex4_package
Build the Annex IV evidence package your auditor needs for high-risk AI — no arguments. All 8 mandatory sections auto-populated from your project scan, SHA-256 integrity hash included. High-risk rules apply Aug 2026. Pro plan required.
Eingabeschema 
{'type': 'object', 'title': 'generate_annex4_packageArguments', 'properties': {'project_path': {'type': 'string', 'title': 'Project Path', 'default': '.', 'description': "Path to the project root. Leave empty or pass '.' to scan the current directory."}, 'trust_layer_key': {'type': 'string', 'title': 'Trust Layer Key', 'default': '', 'description': 'ArkForge Trust Layer API key. Required if sign_with_trust_layer is True.'}, 'sign_with_trust_layer': {'type': 'boolean', 'title': 'Sign With Trust Layer', 'default': False, 'description': 'Certify the package via Trust Layer for Art. 12 audit trail.'}}}
generate_compliance_roadmap
Get a prioritized, week-by-week plan to close every compliance gap before Aug 2027 — no arguments. Auto-scans your project, ranks fixes by impact, sequences quick wins first, tells you whether your deadline is achievable. Pro plan required — run check_compliance() for a free gap summary.
Eingabeschema 
{'type': 'object', '$defs': {'RiskCategory': {'enum': ['unacceptable', 'high', 'limited', 'minimal'], 'type': 'string', 'title': 'RiskCategory', 'description': 'EU AI Act risk categories'}}, 'title': 'generate_compliance_roadmapArguments', 'properties': {'deadline': {'type': 'string', 'title': 'Deadline', 'default': '2027-08-02', 'description': 'Target compliance deadline in ISO format.'}, 'project_path': {'type': 'string', 'title': 'Project Path', 'default': '.', 'description': "Path to the project root. Leave empty or pass '.' to scan the current directory."}, 'risk_category': {'$ref': '#/$defs/RiskCategory', 'default': 'high', 'description': 'EU AI Act risk category.'}}}
generate_compliance_templates
Stop writing compliance docs from scratch — get pre-filled templates for risk management, technical documentation, transparency notice, and human oversight policy tailored to your risk category. High-risk systems get all 6 mandatory documents. Save to docs/, fill in [bracketed] sections. Run check_compliance() first to see which documents you're missing.
Eingabeschema 
{'type': 'object', '$defs': {'RiskCategory': {'enum': ['unacceptable', 'high', 'limited', 'minimal'], 'type': 'string', 'title': 'RiskCategory', 'description': 'EU AI Act risk categories'}}, 'title': 'generate_compliance_templatesArguments', 'properties': {'risk_category': {'$ref': '#/$defs/RiskCategory', 'default': 'high', 'description': "EU AI Act risk category. Templates are most useful for 'high' risk."}}}
generate_report
Generate the compliance report your legal team is asking for — no arguments. One call auto-detects AI frameworks, runs gap analysis, and produces a structured remediation plan ready for legal review or DPIA attachment. No API key needed.
Eingabeschema 
{'type': 'object', '$defs': {'RiskCategory': {'enum': ['unacceptable', 'high', 'limited', 'minimal'], 'type': 'string', 'title': 'RiskCategory', 'description': 'EU AI Act risk categories'}}, 'title': 'generate_reportArguments', 'properties': {'project_path': {'type': 'string', 'title': 'Project Path', 'default': '.', 'description': "Path to the project root. Omit entirely or pass '.' to scan the current working directory."}, 'risk_category': {'$ref': '#/$defs/RiskCategory', 'default': 'limited', 'description': "EU AI Act risk category: 'minimal', 'limited' (default), 'high', or 'unacceptable'."}}}
get_pricing
See pricing and features for every plan — Free (10 scans/day, full reports), Pro (29 EUR/mo, unlimited + CI/CD), Certified (cryptographic audit trail). No arguments. Call register_free_key() to activate your free API key.
Eingabeschema 
{'type': 'object', 'title': 'get_pricingArguments', 'properties': {}}
register_free_key
Activate a free API key — unlocks scan history and CI/CD integration. Pass the user's email, no password or credit card. IMPORTANT: ask the user to type their email first, wait for their reply, then call this with the exact email they typed. Do NOT pass a placeholder or fabricated email.
Eingabeschema 
{'type': 'object', 'title': 'register_free_keyArguments', 'required': ['email'], 'properties': {'email': {'type': 'string', 'title': 'Email', 'description': "The user's email address. MUST come from the user's message, not generated by the agent."}}}
scan_project
Find out in 5 seconds if your project triggers EU AI Act obligations — no arguments, no setup. Scans for 22 AI/ML frameworks (OpenAI, Anthropic, LangChain, HuggingFace, PyTorch, TensorFlow, scikit-learn…), returns your risk category and the legal actions required before you ship. Enforcement live since Feb 2025 — fines up to 35M EUR. For EU AI Act + GDPR together, call combined_compliance_report() instead.
Eingabeschema 
{'type': 'object', 'title': 'scan_projectArguments', 'properties': {'project_path': {'type': 'string', 'title': 'Project Path', 'default': '.', 'description': "Path to the project root. Omit entirely or pass '.' to scan the current working directory — no path discovery needed."}, 'follow_imports': {'type': 'boolean', 'title': 'Follow Imports', 'default': False, 'description': 'When true, also flag files that transitively import AI-flagged modules. Default false is fine for most projects.'}}}
suggest_risk_category
Describe what your AI system does in plain language — get back your EU AI Act risk tier, the articles that apply, and your first compliance step. Returns matched category (minimal/limited/high/unacceptable) with confidence level and triggering risk indicators. No project scan needed, no API key.
Eingabeschema 
{'type': 'object', 'title': 'suggest_risk_categoryArguments', 'required': ['system_description'], 'properties': {'system_description': {'type': 'string', 'title': 'System Description', 'description': "Short description of what the AI system does, e.g. 'chatbot for customer support' or 'CV screening tool for recruitment'."}}}
validate_api_key
Check your API key status — returns plan tier (free/pro/certified), email, and usage stats (total scans, last scan date).
Eingabeschema 
{'type': 'object', 'title': 'validate_api_keyArguments', 'required': ['api_key'], 'properties': {'api_key': {'type': 'string', 'title': 'Api Key', 'description': 'The API key to validate.'}}}
Verlauf

Letzte Tool-Änderungen

Hinzugefügt
get_pricing
17. September 2026 12:40
Hinzugefügt
combined_compliance_report
17. September 2026 12:40
Hinzugefügt
gdpr_generate_templates
17. September 2026 12:40
Hinzugefügt
gdpr_generate_report
17. September 2026 12:40
Hinzugefügt
gdpr_check_compliance
17. September 2026 12:40
Hinzugefügt
gdpr_scan_project
17. September 2026 12:40
Hinzugefügt
register_free_key
17. September 2026 12:40
Hinzugefügt
validate_api_key
17. September 2026 12:40
Hinzugefügt
certify_compliance_report
17. September 2026 12:40
Hinzugefügt
generate_annex4_package
17. September 2026 12:40
Hinzugefügt
generate_compliance_roadmap
17. September 2026 12:40
Hinzugefügt
generate_compliance_templates
17. September 2026 12:40
Hinzugefügt
suggest_risk_category
17. September 2026 12:40
Hinzugefügt
generate_report
17. September 2026 12:40
Hinzugefügt
check_compliance
17. September 2026 12:40
Hinzugefügt
scan_project
17. September 2026 12:40
Entdecken

Ähnliche MCP-Server

DataNexus MCP

com.datanexusmcp/mcp-server

Enables public-data research across domains, patents, government contracts, nonprofits, compliance registries, and software secur…

ampel

io.tooloracle/ampel

Assesses regulated entities and providers against DORA and related ESG, MiCA, and AML requirements, with contract analysis, evide…

predictionguard

io.tooloracle/predictionguard

Analyzes Polymarket and Kalshi markets for insider-trading signals, market integrity risks, sanctions and PEP exposure, conflicts…

Nist Standards

io.github.pipeworx-io/nist-standards

Searches and retrieves NIST SP 800-53 security controls and SP 800-171 CUI requirements, including requirements, guidance, and co…

Sanctions Screening

io.github.pipeworx-io/sanctions-screening

Screens names against US sanctions and export-control lists and retrieves detailed sanctions records.

Dilisense

io.github.pipeworx-io/dilisense

Screens individuals and organizations against sanctions, PEP, criminal, and adverse-watchlist data for AML and KYC checks.

Open Sanctions

io.github.pipeworx-io/open-sanctions

Looks up sanctioned and politically exposed entities, including identifiers, aliases, addresses, sanctions programs, and relation…

Sanctions Io

io.github.pipeworx-io/sanctions-io

Screens individuals and organizations in bulk against sanctions, politically exposed person, and watchlists.