MEOK CRA Annex Iv Classifier MCP
meok-cra-annex-iv-classifier-mcp
なぜこれが存在するのか
EUサイバーレジリエンス法(Reg 2024/2847)の附属書IVは、AI組み込み製品を含む、EUで販売されるデジタル要素を持つすべての製品が満たさなければならない9つのカテゴリーにわたる基本的なセキュリティ要件を定義しています。多くのチームはCRAを「セキュリティチームが来年対応すること」として扱っています。それは間違いです。適合性の自己評価と技術文書の要件は決して単純ではなく、罰則(最大1,500万ユーロまたは全世界売上高の2.5%)は現実のものです。
製品のアーキテクチャを9つの附属書IVカテゴリーにマッピングし、ギャップを特定し、署名付きの自己評価パックを作成する実用的なAI呼び出し可能な分類器は、これまでインフラとして欠けていました。このMCPはそのギャップを埋めるものです。
Related MCP server: Dataprivacy AI MCP
実際の使用例
EUで販売を行うあるIoTメーカーは、2027年12月の適用開始日を見据えて、CRA適合性自己評価の準備を行いました。彼らは以下をインストールしました:
pip install meok-cra-annex-iv-classifier-mcpClaudeへのプロンプト:
「当社のスマートサーモスタット製品(ファームウェアはC言語、クラウドバックエンドはGo、モバイルアプリはSwift/Kotlin)を、9つのCRA附属書IVの必須セキュリティ要件に照らして分類してください。ギャップを特定し、通知機関に提出可能な署名付き自己評価パックを作成してください。」
出力:カテゴリーごとの制御マッピング、3つのフラグ付きギャップ(セキュアアップデートメカニズム、脆弱性開示ポリシー、データ最小化)、およびHMAC署名付きの最終パックを含む27ページの評価書。これによって、本来であれば同じ成果物のために予約されていたであろう約1万8千ポンドの外部コンサルティング費用を節約できました。
meok-cra-annex-iv-classifier-mcp
EUサイバーレジリエンス法製品分類器 — 附属書III + 附属書IV指定 + 附属書I要件監査 + 署名付き証明書。
デジタル要素を持つ製品(PDE)をCRA階層に分類します。2027年12月11日の完全適用期限(脆弱性および重大なインシデントの報告は2026年9月から既に施行)に向けて構築されています。
MEOK AI Labsによる提供。
なぜこのMCPなのか
2025年11月下旬に採択された実施規則(EU)2025/2392により、クラスI、クラスII、および附属書IVの製品カテゴリーの最初のセットが指定されました。IoTベンダー、チップメーカー、スマートメーターメーカー、OTチームは、今すぐ防御可能な分類を行う必要があります。分類を遅らせるたびに、後から遡及的に支払うことになる適合性作業が増えていきます。
分類対象
デフォルトクラス — ほとんどの消費者向け/ビジネス向けソフトウェア(自己評価、罰金最大500万ユーロ / 1%)
重要クラスI(附属書III(1)) — IAM、パスワードマネージャー、ブラウザ、VPN、OS、ルーター、スマートホーム — 自己評価または通知機関(1,000万ユーロ / 2%)
重要クラスII(附属書III(2)) — ハイパーバイザー、ファイアウォール、IDS/IPS、耐タンパー性µC/µP — 通知機関による評価が必須(1,500万ユーロ / 2.5%)
重要(附属書IV) — スマートカードセキュアエレメント、スマートメーターゲートウェイ、ハードウェアセキュリティボックス — 欧州サイバーセキュリティ認証が必須(1,500万ユーロ / 2.5%)
ツール
classify_product— 説明と特性によるヒューリスティック分類audit_essential_requirements— 15の附属書Iサイバーセキュリティ要件に対するスコアリングgenerate_doc_template— 附属書VIII技術文書のスケルトンsign_classification_cert— プロ版:公開検証URL付きのHMAC-SHA256署名済み分類証明書
インストール
pip install meok-cra-annex-iv-classifier-mcpプラン
無料 — 1日10件の分類
プロ £199/月 — 無制限 + 署名付き証明書 + 毎月の附属書III/IV更新アラート — 購読する
エンタープライズ £1,499/月 — 複数製品 + カスタム指定ルール
製品ごと £199の証明書 — 1回限りの署名付き分類
コード MEOKEAT を使用すると、最初の3ヶ月間が25%オフになります。
ソース
規則(EU)2024/2847(CRA)
実施規則(EU)2025/2392(最初の附属書III/IV指定)
ENISA CRA実装ガイダンス
関連するMEOK MCP
cra-compliance-mcp— 完全なCRAコンプライアンス監査ai-bom-mcp— 附属書VIIIのためのSBOM生成meok-attestation-verify— 署名付き証明書の検証
ライセンス
MIT — MEOK AI Labs, 2026.
配布チャネル
PyPI:
pip install meok-cra-annex-iv-classifier-mcp(本パッケージ)Apify Store (イベントごとの支払い): https://apify.com/knowing_yucca/meok-cra-classifier
GitHub (ソース): https://github.com/CSOAI-ORG/MEOK-LABS/tree/main/mcps/meok-cra-annex-iv-classifier-mcp
Available Tools
4 toolsaudit_essential_requirementsA
Audit a product against the 15 Annex I + II essential requirements. Pass comma-separated requirement IDs that are satisfied (e.g. "1.1,1.2,2.1").
| Name | Required | Description | Default |
|---|---|---|---|
| api_key | No | ||
| product_name | Yes | ||
| requirements_satisfied_csv | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations provided, so description carries full burden. It states the action (audit) and input format but omits side effects, idempotency, or whether it modifies state. 'Audit' suggests read-only, but not explicit.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, zero waste. Front-loaded with purpose, followed by parameter format hint. Each sentence serves a clear function.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Output schema exists but unseen. Description covers purpose and key parameter format. Missing usage context, prerequisites, or error scenarios. Adequate for a straightforward audit but not rich.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema has 0% coverage (only titles). Description adds meaning to 'requirements_satisfied_csv' by specifying format (comma-separated IDs) and example. However, 'api_key' and 'product_name' remain minimally described. Compensates significantly but not fully.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Verb 'audit' combined with specific resource '15 Annex I + II essential requirements' clearly states what the tool does. Differentiates from siblings (classify, generate doc, sign cert) which have distinct purposes.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Implies usage for auditing compliance against essential requirements, but no explicit when-to-use, when-not-to-use, or alternatives. The examples suggest typical input format but no contextual guidance relative to sibling tools.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
classify_productC
Classify a product with digital elements (PDE) into the CRA class hierarchy.
Returns: suggested class, conformity path, fines exposure, next steps.
| Name | Required | Description | Default |
|---|---|---|---|
| api_key | No | ||
| product_name | Yes | ||
| product_description | Yes | ||
| intended_for_consumer_use | No | ||
| has_remote_data_processing | No | ||
| intended_for_critical_infrastructure | No |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description must fully disclose behavioral traits. It mentions return values (suggested class, conformity path, fines exposure, next steps) but does not state whether the tool is read-only, whether it requires authentication, or any side effects. The lack of detail on behavior limits transparency.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is very short (two sentences) and front-loads the purpose. It is efficient, but the returns section could be more structured. Overall, it is concise without unnecessary words.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the tool has 6 parameters, 0% schema descriptions, no annotations, and an output schema exists, the description is incomplete. It does not explain what 'CRA class hierarchy' is, how the parameters influence classification, or any usage context. The output schema existence slightly reduces the burden, but the description still lacks crucial information for proper invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has 0% description coverage, meaning no parameter descriptions are provided. The tool description also does not explain the meaning of any parameters beyond their names. For example, 'api_key' and 'product_description' are self-explanatory, but 'intended_for_consumer_use' and similar booleans lack context. The description fails to add value over the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'Classify' and the resource 'product with digital elements (PDE)' into 'CRA class hierarchy'. It is distinct from sibling tools like audit_essential_requirements, generate_doc_template, and sign_classification_cert, which focus on auditing, document generation, and certification.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description provides no guidance on when to use this tool versus alternatives, no prerequisites, and no exclusions. It only states what it does, leaving the agent to infer usage context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
generate_doc_templateC
Generate the Annex VIII technical documentation skeleton for a given class.
| Name | Required | Description | Default |
|---|---|---|---|
| api_key | No | ||
| class_key | No | default |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations exist, so description carries full burden. It does not disclose authentication needs (api_key), output format, or whether the operation is safe or destructive. Minimal behavioral context.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single sentence with 10 words, no redundancy. However, it is too brief for a 2-parameter tool with no schema descriptions, sacrificing completeness for brevity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Output schema exists but is not referenced. Parameters lack explanation, and usage context (e.g., what 'skeleton' implies) is missing. Incomplete for an agent to use effectively.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%; description only explains 'class' indirectly via 'for a given class'. The api_key parameter is entirely unexplained. Defaults exist but no semantic cues.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
Description uses specific verb 'generate' and resource 'Annex VIII technical documentation skeleton', clearly distinguishing from sibling tools like audit, classify, or sign.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No explicit guidance on when to use this tool versus alternatives. While siblings differ in actions, the description does not provide context or exclusion criteria.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
sign_classification_certC
Generate a HMAC-SHA256 signed CRA classification certificate (Pro/Enterprise).
| Name | Required | Description | Default |
|---|---|---|---|
| No | |||
| api_key | No | ||
| entity_name | Yes | ||
| findings_csv | No | ||
| product_name | Yes | ||
| annex_i_score | Yes | ||
| classification_class_key | Yes |
Output Schema
| Name | Required | Description |
|---|---|---|
| result | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries full burden. It adds minimal behavioral insight beyond the tool name, only noting the signing algorithm and edition. It fails to disclose side effects, authorization requirements, or idempotency.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single, front-loaded sentence with no wasted words. It is concise and direct, though it sacrifices completeness for brevity.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Despite the existence of an output schema, the description leaves many gaps: parameter meanings, prerequisites, usage context, and behavioral details. It is insufficient for an agent to fully understand and correctly invoke the tool.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 0% (no descriptions), and the description does not explain any of the 7 parameters (e.g., entity_name, annex_i_score). The agent has no semantic understanding of what each parameter represents from the description alone.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the verb 'Generate' and the specific resource 'CRA classification certificate', including the signing algorithm (HMAC-SHA256) and edition (Pro/Enterprise). This differentiates it from sibling tools like classify_product and generate_doc_template.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance is provided on when to use this tool over siblings or in what context. There is no mention of prerequisites, conditions, or exclusions, leaving the agent without direction on appropriate usage.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
4 tool updates
v1.1.7- First observed
audit_essential_requirements - First observed
classify_product - First observed
generate_doc_template - First observed
sign_classification_cert
TDQS
Scored across 4 tools
Each tool has a distinct purpose: auditing requirements, classifying products, generating documentation templates, and signing certificates. No overlap or ambiguity.
All tool names follow a consistent verb_noun pattern using snake_case, making them predictable and easy to understand.
With 4 tools, the server is tightly scoped to the CRA classification domain without unnecessary extras, perfectly matching its purpose.
The tool set covers the entire classification workflow: auditing requirements, classifying, generating docs, and signing certificates, with no obvious gaps.
Maintenance
Related MCP Connectors
MEOK CRA Article 14 Reporter MCP — actively-exploited-vulnerability notification with 24h/72h/14d
AI governance MCP server for EU AI Act compliance and jurisdiction verification
MEOK EU AI Act Article 26(9) Fundamental Rights Impact Assessment generator. Auto-generates FRIA
MEOK EU AI Act Article 13 Instructions for Use generator — provider-side IFU with 7 mandatory Art
Related MCP Servers
- AlicenseAqualityBmaintenanceEU AI Act Compliance - MCP server providing AI-powered tools and automation by MEOK AI Labs116 npm99 PyPI1MIT
- AlicenseNot gradedqualityBmaintenanceDataprivacy AI - MCP server providing AI-powered tools and automation by MEOK AI Labs3 npm24 PyPIMIT
- AlicenseNot gradedqualityBmaintenanceCRM AI - MCP server providing AI-powered tools and automation by MEOK AI Labs6 npm36 PyPIMIT
- AlicenseNot gradedqualityCmaintenanceRegulatory Webhook - MCP server providing AI-powered tools and automation by MEOK AI Labs2 npm30 PyPIMIT