ISO 27001 AI MCPofficial
A
licenseNot graded
qualityB
maintenanceISO 27001 AI - MCP server providing AI-powered tools and automation by MEOK AI Labs
12
2
MIT
SOC2 Compliance AI MCP
Officialby CSOAI-ORG
SOC 2 合规 MCP
根据全部 5 项信任服务标准 (Trust Service Criteria) 对 AI/ML 系统进行评估，包括差距分析、控制矩阵和 HMAC 签名认证。
为什么存在此项目
SOC 2 Type II 报告是任何向企业销售产品的 SaaS 或 AI 供应商的基本信任信号。但 AI 系统引入了传统 SOC 2 评估所忽略的控制差距：模型来源、训练数据治理、漂移监控和可解释性义务。
大多数合规团队要么手动将 AI 纳入现有的 SOC 2 控制矩阵，要么支付 4 万美元以上的咨询费用。此 MCP 将 AI/ML 特有的风险映射到 5 项信任服务标准（安全性、可用性、处理完整性、机密性、隐私性），生成符合 AICPA 2023 指南的控制矩阵，并为同时持有两项认证的组织提供与 ISO 27001 的交叉参考。
Related MCP server: EU AI Act Compliance MCP
安装
pip install soc2-compliance-ai-mcp工具
工具 | TSC 参考 | 功能 |
| CC1-CC9, A1, PI1, C1, P1 | 针对全部 5 项信任服务标准的全面评估 |
| CC6, CC7, CC8 | 识别 AI 系统中缺失或薄弱的控制措施 |
| 所有 TSC | 生成将 AI 风险映射到 SOC 2 标准的控制矩阵 |
| CC3, CC4 | 针对 AI/ML 工作负载的符合 AICPA 标准的风险评估 |
| 附录 A 映射 | 将 SOC 2 控制映射到 ISO 27001:2022 附录 A |
| Type I / Type II | 包含补救优先级的审计前准备清单 |
示例
Prompt: "Assess our customer-facing LLM chatbot against SOC 2 Trust Service
Criteria. It processes financial data, stores conversation logs for 90 days,
and uses a third-party model API."
Result: Assessment across all 5 TSC with findings on third-party model API
vendor risk, missing drift monitoring, undocumented retention policy.
Each finding includes remediation steps and control references.定价
层级 | 价格 | 包含内容 |
免费版 | £0 | 每天 10 次调用 — 信任原则评估 + 差距分析 |
专业版 | £199/月 | 无限制 + HMAC 签名认证 + 验证 URL |
企业版 | £1,499/月 | 多租户 + 联合品牌报告 + Webhook |
认证 API
每个专业版/企业版审计都会生成一份加密签名的证书：
POST https://meok-attestation-api.vercel.app/sign
GET https://meok-attestation-api.vercel.app/verify/{cert_id}零依赖验证器：pip install meok-attestation-verify
链接
网站: meok.ai
所有 MCP 服务器: meok.ai/labs/mcp/servers
企业支持: nicholas@csoai.org
许可证
MIT
Maintenance
–Maintainers
–Response time
6wRelease cycle
2Releases (12mo)
Commit activity
Issues opened vs closed
Related MCP Servers
- AlicenseAqualityAmaintenanceEU AI Act Compliance - MCP server providing AI-powered tools and automation by MEOK AI Labs119MIT
- AlicenseAqualityBmaintenanceISO 42001 AI - MCP server providing AI-powered tools and automation by MEOK AI Labs10101MIT
- AlicenseAqualityAmaintenanceNIS2 Compliance - MCP server providing AI-powered tools and automation by MEOK AI Labs7MIT
Related MCP Connectors
MEOK MCP Hardening MCP — automated security red-team for any MCP server. Maps OWASP LLM Top 10
Agent Orchestrator MCP Server by MEOK AI Labs
MCP server teaching AI agents to implement TideCloak: auth, E2EE, IGA, security analysis
Latest Blog Posts
- Who's Calling? MCP Hosts Are an Identity Blind Spot (And the Spec Knows It)By Om-Shree-0709 on .mcpAgent IdentityOAuth 2.1
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/CSOAI-ORG/soc2-compliance-ai-mcp'
If you have feedback or need assistance with the MCP directory API, please join our Discord server