A
licenseA
qualityD
maintenanceScans codebases for AI system usage and generates EU AI Act compliance reports.
4
64 npm
MIT
mcp-eu-ai-act
Server Details
EU AI Act + GDPR compliance scanner. One call, no arguments, 10 seconds. 22 AI frameworks detected.
If you are the author of this connector, you can claim ownership by verifying the domain or GitHub account it belongs to. Claimed connector authors can inspect health checks, view analytics, and manage their listing.
- Status
- Healthy
- Uptime
- 100.0% over the last 24 hours
- Last Tested
- Transport
- Streamable HTTP · MCP 2025-11-25
- URL
- Repository
- ark-forge/mcp-eu-ai-act
- GitHub Stars
- 11
- Server Listing
- eu-ai-act-scanner
- ChatGPT
- –
- Claude
- –
TDQS
A3.5/5.0
Scored across 16 tools
Disambiguation3/5
Multiple tools overlap heavily: scan_project, check_compliance, and combined_compliance_report all assess EU AI Act compliance, while gdpr_scan_project and gdpr_check_compliance mirror them for GDPR. Descriptions do cross-reference each other (e.g., 'call combined_compliance_report() instead'), which helps, but an agent still faces a real choice about which scan/check to invoke first.
Naming Consistency4/5
Most tools follow a clean snake_case verb_noun pattern (check_compliance, generate_report, scan_project, register_free_key, validate_api_key). The gdpr_ prefix is applied consistently across the GDPR subset. Minor deviations like 'combined_compliance_report' (adjective-first) and domain-prefixed names slightly break the pattern but remain readable.
Tool Count3/5
At 16 tools this sits at the upper edge of a well-scoped set and feels heavy for a compliance checker. Several tools could plausibly be consolidated (scan_project/check_compliance/combined_compliance_report, plus two template generators and two report generators), and account/pricing tools add further surface.
Completeness4/5
The surface covers the compliance lifecycle well—scan, gap check, risk categorization, report generation, templates, roadmap, Annex IV evidence package, and certification—for both EU AI Act and GDPR. Minor gaps exist: no tool to retrieve or verify a previously issued proof_id, and no way to update or re-run prior results.
Available Tools
16 toolscertify_compliance_reportAInspect
Make your compliance report tamper-proof for Art. 12 audit trail — pass the report JSON, get back a proof_id and a public verification URL you can hand to auditors. Certified plan required. Run generate_report() first to produce the report.
Inputs: report_data (required), trust_layer_key (required).
check_complianceAInspect
Check whether your project passes or fails each EU AI Act requirement — no arguments, 5 seconds. See exactly which articles you violate (Art. 52 transparency, Art. 11 documentation, Art. 14 human oversight, Art. 15 robustness) and get step-by-step fix instructions for every gap. Call combined_compliance_report() for EU AI Act + GDPR together.
Inputs: project_path, risk_category.
combined_compliance_reportAInspect
Run this before your next deploy. One call reveals every EU AI Act + GDPR gap in your codebase — no arguments, no setup, under 10 seconds, free. Detects AI frameworks and personal data flows, flags where both laws overlap, returns pass/fail per article with a prioritized fix list. EU AI Act fines up to 35M EUR, GDPR up to 20M EUR. Replaces separate scan_project() and gdpr_scan_project() calls.
Inputs: project_path, risk_category, processing_role.
gdpr_check_complianceCInspect
Check whether your project passes or fails each GDPR requirement — no arguments. See pass/fail for lawful basis (Art. 6), consent (Art. 7), data subject rights (Art. 15–22), security (Art. 32), and breach notification (Art. 33–34) with fix instructions for every gap. GDPR fines reach 20M EUR or 4% turnover. For EU AI Act + GDPR together, call combined_compliance_report().
Inputs: project_path, processing_role.
gdpr_generate_reportAInspect
Generate the GDPR report your DPO needs — no arguments. Combines personal data inventory, gap analysis, and remediation steps in one structured document for DPO review, audit prep, or regulatory response. For EU AI Act + GDPR together, call combined_compliance_report().
Inputs: project_path, processing_role.
gdpr_generate_templatesAInspect
Get pre-filled GDPR templates your organization actually needs — no arguments. Privacy Policy, DPIA, Records of Processing Activities (ROPA), and Data Breach Procedure tailored to your processing role. Fill in [bracketed] sections. Run gdpr_check_compliance() first to see which documents you're missing.
Inputs: processing_role.
gdpr_scan_projectAInspect
Find every file in your project that touches personal data — no arguments, 5 seconds, free. Detects PII fields, cookies, tracking pixels, analytics SDKs, and consent flows. Returns flagged files with data categories and applicable GDPR articles. GDPR fines reach 20M EUR or 4% turnover. For EU AI Act + GDPR together, call combined_compliance_report().
Inputs: project_path.
generate_annex4_packageBInspect
Build the Annex IV evidence package your auditor needs for high-risk AI — no arguments. All 8 mandatory sections auto-populated from your project scan, SHA-256 integrity hash included. High-risk rules apply Aug 2026. Pro plan required.
Inputs: project_path, trust_layer_key, sign_with_trust_layer.
generate_compliance_roadmapAInspect
Get a prioritized, week-by-week plan to close every compliance gap before Aug 2027 — no arguments. Auto-scans your project, ranks fixes by impact, sequences quick wins first, tells you whether your deadline is achievable. Pro plan required — run check_compliance() for a free gap summary.
Inputs: deadline, project_path, risk_category.
generate_compliance_templatesAInspect
Stop writing compliance docs from scratch — get pre-filled templates for risk management, technical documentation, transparency notice, and human oversight policy tailored to your risk category. High-risk systems get all 6 mandatory documents. Save to docs/, fill in [bracketed] sections. Run check_compliance() first to see which documents you're missing.
Inputs: risk_category.
generate_reportAInspect
Generate the compliance report your legal team is asking for — no arguments. One call auto-detects AI frameworks, runs gap analysis, and produces a structured remediation plan ready for legal review or DPIA attachment. No API key needed.
Inputs: project_path, risk_category.
get_pricingAInspect
See pricing and features for every plan — Free (10 scans/day, full reports), Pro (29 EUR/mo, unlimited + CI/CD), Certified (cryptographic audit trail). No arguments. Call register_free_key() to activate your free API key.
Inputs: no named parameters.
register_free_keyAInspect
Activate a free API key — unlocks scan history and CI/CD integration. Pass the user's email, no password or credit card. IMPORTANT: ask the user to type their email first, wait for their reply, then call this with the exact email they typed. Do NOT pass a placeholder or fabricated email.
Inputs: email (required).
scan_projectAInspect
Find out in 5 seconds if your project triggers EU AI Act obligations — no arguments, no setup. Scans for 22 AI/ML frameworks (OpenAI, Anthropic, LangChain, HuggingFace, PyTorch, TensorFlow, scikit-learn…), returns your risk category and the legal actions required before you ship. Enforcement live since Feb 2025 — fines up to 35M EUR. For EU AI Act + GDPR together, call combined_compliance_report() instead.
Inputs: project_path, follow_imports.
suggest_risk_categoryAInspect
Describe what your AI system does in plain language — get back your EU AI Act risk tier, the articles that apply, and your first compliance step. Returns matched category (minimal/limited/high/unacceptable) with confidence level and triggering risk indicators. No project scan needed, no API key.
Inputs: system_description (required).
validate_api_keyAInspect
Check your API key status — returns plan tier (free/pro/certified), email, and usage stats (total scans, last scan date).
Inputs: api_key (required).
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
Related MCP Connectors
Deterministic, sourced EU compliance checks: NIS2, DORA, GDPR, Cyber Resilience Act and AI Act.
AI inventory and EU AI Act compliance. Find AI tools and use cases, check new AI uses before launch.
EU AI Act sovereignty scanning. Provider residency, registration status, audit trail support.
The compliance specialist your AI calls: ISO 27001, SOC 2, GDPR, NIS 2, DORA and more.
Related MCP Servers
- AlicenseNot gradedqualityCmaintenanceVendor sovereignty scanner for EU AI Act compliance. Scans provider stacks for CLOUD Act exposure, data residency, and GDPR DPA status across 55 providers, then suggests EU-native alternatives. Free, no account required.7 npm1MIT
- AlicenseNot gradedqualityDmaintenanceThe only Multi-LLM Compliance Engine (GPT-4o + Claude + DeepSeek). Auto-fix GDPR/LGPD risks and more 15 frameworks. code.guard.eu3 npm1MIT
- AlicenseAqualityDmaintenanceProvides automated EU AI Act compliance tools, including risk classification, role determination, transparency disclosures, content watermarking, deepfake labeling, and security threat detection.1634Apache 2.0
Try in Browser
Claude Code, inside the Godot 4 editorFlockbay puts an AI agent in the real Godot 4 editor: it writes GDScript, runs your game and fixes what breaks. Free, or bring your own Claude Code or Codex.flockbay.comAd
Glama MCP Gateway
Add one secure layer between your agents and this server.