british-cybersecurity-mcp
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@british-cybersecurity-mcp search for ransomware advisories"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
British Cybersecurity MCP
The British cybersecurity corpus is now served through the Ansvar Gateway. Connect your AI assistant (Claude, Copilot, Cursor, or any MCP client) to
https://gateway.ansvar.eu/mcp— one OAuth connection, free tier available, covering this corpus plus EU regulations, national law across 28 audited jurisdictions (Europe + the US), and CVE/security intelligence, every result with a verbatim source citation. Start at https://ansvar.eu/docs/quickstart
Connect
Claude Code (one line):
claude mcp add ansvar --transport http https://gateway.ansvar.eu/mcpClaude Desktop / Cursor — add to claude_desktop_config.json (or mcp.json):
{
"mcpServers": {
"ansvar": {
"type": "url",
"url": "https://gateway.ansvar.eu/mcp"
}
}
}Claude.ai — Settings → Connectors → Add custom connector → paste https://gateway.ansvar.eu/mcp
First request opens an OAuth signup flow (setup details: ansvar.eu/docs/quickstart). After signup, your client is bound to your account; tier (free / premium / team / company) determines fan-out, quota, and which downstream MCPs are reachable.
Self-host this MCP
You can also clone this repo and build the corpus yourself. The schema, fetcher, and tool implementations all live here. What is not in the repo is the pre-built database — TDM and standards-licensing constraints on the upstream sources mean we host the corpus on Ansvar infrastructure rather than redistribute it as a public artifact.
Build your own: run this repo's ingestion script (entry-point varies per
repo — typically scripts/ingest.sh, npm run ingest, or make ingest;
check the repo root).
British cybersecurity data for AI compliance tools.
Query British cybersecurity data -- regulations, decisions, and requirements from NCSC (National Cyber Security Centre) -- directly from Claude, Cursor, or any MCP-compatible client.
Built by Ansvar Systems -- Stockholm, Sweden
Related MCP server: Estonian Cybersecurity MCP
Available Tools (7)
Tool | Description |
| Full-text search across NCSC guidance documents. Covers Cyber Essentials, 10 Steps to Cyber Security, Cyber Assessmen... |
| Get a specific NCSC guidance document by reference (e.g., |
| Search NCSC security advisories and alerts. Returns advisories with severity, affected products, and CVE references w... |
| Get a specific NCSC security advisory by reference (e.g., |
| List all NCSC frameworks and guidance series covered in this MCP, including Cyber Essentials, 10 Steps to Cyber Secur... |
| List all data sources used by this MCP server, with URLs and descriptions. |
| Return metadata about this MCP server: version, data source, coverage, and tool list. |
All tools return structured data with source references and timestamps.
Data Sources and Freshness
All content is sourced from official British regulatory publications:
NCSC (National Cyber Security Centre) -- Official regulatory authority
Data Currency
Database updates are periodic and may lag official publications
Freshness checks run via GitHub Actions workflows
Last-updated timestamps in tool responses indicate data age
See sources.yml for full provenance metadata.
Security
This project uses multiple layers of automated security scanning:
Scanner | What It Does | Schedule |
CodeQL | Static analysis for security vulnerabilities | Weekly + PRs |
Semgrep | SAST scanning (OWASP top 10, secrets, TypeScript) | Every push |
Gitleaks | Secret detection across git history | Every push |
Trivy | CVE scanning on filesystem and npm dependencies | Daily |
Docker Security | Container image scanning + SBOM generation | Daily |
Socket.dev | Supply chain attack detection | PRs |
Dependabot | Automated dependency updates | Weekly |
See SECURITY.md for the full policy and vulnerability reporting.
Important Disclaimers
Not Regulatory Advice
THIS TOOL IS NOT REGULATORY OR LEGAL ADVICE
Regulatory data is sourced from official publications by NCSC (National Cyber Security Centre). However:
This is a research tool, not a substitute for professional regulatory counsel
Verify all references against primary sources before making compliance decisions
Coverage may be incomplete -- do not rely solely on this for regulatory research
Before using professionally, read: DISCLAIMER.md | PRIVACY.md
Confidentiality
Queries go through the Claude API. For privileged or confidential matters, use on-premise deployment. See PRIVACY.md for details.
Development
Setup
git clone https://github.com/Ansvar-Systems/british-cybersecurity-mcp
cd british-cybersecurity-mcp
npm install
npm run build
npm testRunning Locally
npm run dev # Start MCP server
npx @anthropic/mcp-inspector node dist/index.js # Test with MCP InspectorData Management
npm run build:db # Rebuild SQLite database from seed data
npm run check-updates # Check for new regulatory dataMore Ansvar MCPs
Full fleet coverage at ansvar.eu/coverage.
Contributing
Contributions welcome! See CONTRIBUTING.md for guidelines.
License
Apache License 2.0. See LICENSE for details.
Data Licenses
Regulatory data sourced from official government publications. See sources.yml for per-source licensing details.
About Ansvar Systems
We build AI-powered compliance and legal research tools for the European market. Our MCP fleet provides structured, verified regulatory data to AI assistants -- so compliance professionals can work with accurate sources instead of guessing.
ansvar.eu -- Stockholm, Sweden
Available Tools
8 toolsgb_cyber_aboutA
Return metadata about this MCP server: version, data source, coverage, and tool list.
Inputs: no named parameters.
gb_cyber_check_data_freshnessA
Check the current state of the database: document counts for guidance, advisories, and frameworks. Use this to verify data is loaded and assess coverage before making compliance decisions.
Inputs: no named parameters.
gb_cyber_get_advisoryA
Get a specific NCSC security advisory by reference (e.g., 'NCSC-ADV-2024-001').
Inputs: reference (required).
gb_cyber_get_guidanceA
Get a specific NCSC guidance document by reference (e.g., 'NCSC-CE-2024', 'NCSC-10STEPS-2023', 'NCSC-CAF-3.2').
Inputs: document_id (required).
gb_cyber_list_frameworksA
List all NCSC frameworks and guidance series covered in this MCP, including Cyber Essentials, 10 Steps to Cyber Security, and the Cyber Assessment Framework (CAF).
Inputs: no named parameters.
gb_cyber_list_sourcesA
List all data sources used by this MCP server, with URLs and descriptions.
Inputs: no named parameters.
gb_cyber_search_advisoriesA
Search NCSC security advisories and alerts. Returns advisories with severity, affected products, and CVE references where available.
Inputs: query (required), limit, severity.
gb_cyber_search_guidanceA
Full-text search across NCSC guidance documents. Covers Cyber Essentials, 10 Steps to Cyber Security, Cyber Assessment Framework (CAF), board-level guidance, and technical publications. Returns matching documents with reference, title, series, and summary.
Inputs: query (required), type, limit, series, +1 more.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
TDQS
Scored across 8 tools
Each tool has a clearly distinct purpose: searching vs. retrieving advisories, listing frameworks/sources, checking data freshness, and searching/retrieving guidance. No overlap or ambiguity.
All tools follow a consistent 'gb_cyber_' prefix and verb_noun pattern (e.g., search_advisories, get_advisory, list_frameworks). The tool 'about' is slightly different but still adheres to the same style.
8 tools is well-scoped for a cybersecurity advisory and guidance server. Each tool performs a necessary function without redundancy, and the count aligns with the server's focused purpose.
The tool set covers search and retrieval for both advisories and guidance, plus metadata and data freshness checks. A minor gap is the lack of a dedicated 'list_all_advisories' tool, but search can approximate that.
Maintenance
Related MCP Connectors
data.gov.uk MCP — UK national open-data portal (CKAN API).
The world's public data, one API. License-cleared public data sources for agents, via MCP and REST.
Companies House MCP — UK statutory company registry (BYO key)
Cited, standards-aware compliance overlay for AI assistants (ISO, NIST, FedRAMP, IRAP), over MCP.
Related MCP Servers
- AlicenseBqualityDmaintenanceEnables cyber defenders to query ATT\&CK techniques, list tactics, map incidents to techniques, look up threat actor groups and mitigations, all via the MCP protocol.5MIT
- AlicenseAqualityFmaintenanceQuery Estonian cybersecurity data -- regulations, decisions, and requirements from RIA/CERT-EE -- directly from any MCP-compatible client.6Apache 2.0
- AlicenseAqualityFmaintenanceEnables querying Portuguese cybersecurity regulations, guidance, advisories, and frameworks from CNCS via MCP-compatible clients.6Apache 2.0
- AlicenseAqualityFmaintenanceEnables querying Swiss cybersecurity regulations, guidance, advisories, and frameworks from NCSC.ch via any MCP-compatible client.6Apache 2.0