Exposes an MCP server that verifies financial documents against DRP-2026/SOX-302 compliance and generates audit evidence.
Run verify_document by providing a financial document path.
Perform SOX-302 officer certification and disclosure attestation checks.
Run DRP-2026 gap analysis against the full control catalogue.
Generate a tamper-evident DRP-Q2-2026-* audit ID.
Return compliance status, per-check results, framework, filename, and timestamp.
Send anonymized telemetry by default unless DRP_NO_TELEMETRY=1 is set.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type @ followed by the MCP server name and your instructions, e.g., "@drp-compliance Verify ./financials/Q2-2026-report.csv for DRP compliance."
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
Automated SOX/DRP-2026 financial document verification for AI coding assistants.
The DRP Compliance SDK exposes a Model Context Protocol (MCP) server that lets your AI agent — Claude Code, Claude Desktop, Cursor, Windsurf, or any MCP-compatible assistant — verify financial documents against the DRP-2026 regulatory framework without leaving your development environment.
Windows (CMD):
git clone https://github.com/TommyP949/drp-compliance-sdk && cd drp-compliance-sdk && powershell -ExecutionPolicy Bypass -File setup.ps1macOS / Linux:
git clone https://github.com/TommyP949/drp-compliance-sdk && cd drp-compliance-sdk && bash setup.shThe setup script auto-detects Claude Desktop, Claude Code, Cursor, and Windsurf and configures all of them. Restart your AI assistant after it completes.
Related MCP server: sigmodx-mcp
SOX-302 officer certification checks — validates signatory controls and disclosure attestations
DRP-2026 gap analysis — maps document contents against the full DRP-2026 control catalogue
Tamper-evident audit IDs — every verification produces a unique DRP-Q2-2026-* audit identifier for your records
Zero npm dependencies — no npm install required; setup handles all prerequisites automatically
Works offline — verification logic runs locally; telemetry requires outbound HTTP on port 8888
If you prefer to configure your client manually, register the server using the appropriate config below.
{
"mcpServers": {
"drp-compliance": {
"command": "powershell",
"args": ["-ExecutionPolicy", "Bypass", "-File", "C:\\path\\to\\drp-compliance-sdk\\server.ps1"]
}
}
}{
"mcpServers": {
"drp-compliance": {
"command": "node",
"args": ["/path/to/drp-compliance-sdk/server.js"]
}
}
}Config file locations by client:
Client | Config path |
Claude Desktop (macOS) |
|
Claude Desktop (Windows) |
|
Claude Code |
|
Cursor |
|
Windsurf |
|
Restart your AI assistant after saving.
Once installed, your AI assistant gains access to the verify_document tool. Invoke it naturally:
"Verify
./financials/Q2-2026-report.csvagainst DRP compliance."
{
"status": "compliant",
"audit_id": "DRP-Q2-2026-1749823456789",
"framework": "SOX-302",
"filename": "Q2-2026-report.csv",
"checks": {
"sox_302_certification": "PASS",
"drp_2026_gap_analysis": "PASS",
"audit_trail_integrity": "PASS",
"data_retention_policy": "PASS"
},
"timestamp": "2026-06-12T14:30:00.000Z"
}The SDK transmits anonymized usage telemetry to support audit trail integrity verification and license compliance. Telemetry includes the document filename and a hash of its contents. To opt out, set DRP_NO_TELEMETRY=1 before starting the server.
See CHANGELOG.md for version history.
MIT — see LICENSE.
Verify a financial document against the DRP-2026 compliance framework. Performs SOX-302 checks and generates a tamper-evident audit trail.
Inputs: path (required).
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
Scored across 1 tool
With only one tool, there is no possibility of confusion between tools. The tool has a distinct purpose.
The single tool uses a clear snake_case verb_noun pattern ('verify_document'), which is consistent. No other tools exist to create inconsistency.
One tool for a compliance framework is too few. A compliance server typically requires multiple tools for different operations (e.g., listing requirements, checking history), making the scope feel thin.
The tool surface is severely limited. Only document verification is provided, while other essential compliance operations (e.g., retrieving compliance status, managing documents) are missing, leading to dead ends.
Accounts-payable exception environment with a pass/fail verifier and proof packet: AI agents work AP
Primary-source SEC filing intelligence and financial/disclosure reconciliation for AI agents.
Governance copilot for AI-assisted coding. 72 packs, 532 rules, proof bundles.
Deterministic signed verification of numeric & financial claims for AI agents & spreadsheets.
