eu-ai-act-mcp
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {
"listChanged": true
} |
| prompts | {
"listChanged": true
} |
| resources | {
"listChanged": true
} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| euaiact_classify_systemA | Classify an AI system's risk level under the EU AI Act (Regulation 2024/1689). HOW TO CALL: derive the structured |
| euaiact_check_deadlinesA | Returns key implementation milestones and deadlines for the EU AI Act with days remaining, a |
| euaiact_get_obligationsA | Returns specific compliance obligations for providers or deployers based on AI system risk level. |
| euaiact_answer_questionA | Search frequently asked questions about the EU AI Act and get best-match answers with article references. Covers classification, deadlines, roles, governance, documentation, risk assessment, penalties, GPAI systemic risk, FRIA, transparency, and sector-specific guidance. |
| euaiact_calculate_penaltyA | Calculates the maximum possible fine for an EU AI Act violation based on violation type, global annual turnover, SME status and SMC (small mid-cap) status. Implements the Art. 99 penalty framework including the SME/startup lower-of rule (Art. 99(6), tiers 99(3)-(5)) and the narrower SMC rule (Art. 99(6a), tiers 99(4)-(5) only; no SMC cap on Art. 5 fines and none under Art. 101). Returns a comparative block so the agent can show the SME reduction to the user. |
| euaiact_get_articleA | Retrieve an operational summary of a specific article of the EU AI Act (Regulation 2024/1689), plus a stable EUR-Lex URL to the canonical text. Supports a subset of the most-cited articles (Art. 3, 4, 5, 6, 9-17, 26, 27, 43, 47, 49, 50, 51, 53, 55, 72, 73, 99, 100, 113). For articles outside this subset the tool returns the EUR-Lex base URL. The summary is not statutory text: follow the URL and verify the official provision before quoting it. |
| euaiact_check_gpai_systemic_riskA | Determine whether a general-purpose AI model qualifies as a GPAI model with systemic risk under Art. 51. This tool uses an adjudicated conservative boundary at or above 10^25 cumulative training FLOPs for the Art. 51(2) presumption. The Commission may also designate models with equivalent capabilities or impact under Art. 51(1)(b). Returns baseline GPAI obligations under Art. 53 plus systemic-risk-only obligations under Art. 55, and the Art. 52 notification duty. |
| euaiact_assess_art6_3_exceptionB | Walk through the Art. 6(3) exception for Annex III high-risk AI systems. An Annex III system is NOT high-risk only if the provider affirmatively assesses no significant risk to health, safety, or fundamental rights, AND the system falls under one of the four conditions: (a) narrow procedural task, (b) improves prior human activity, (c) detects patterns without replacing human assessment, (d) preparatory task. Set no_significant_risk_to_health_safety_fundamental_rights=true only when that threshold has been assessed. CRITICAL: The exception does NOT apply if the system performs profiling of natural persons (Art. 6(3), third subparagraph). Providers invoking the exception must document the assessment (Art. 6(4)) and still register in the EU database (Art. 49(2)). |
| euaiact_annex_iv_checklistA | The nine titles and descriptions summarise Annex IV. |
| euaiact_assess_systemA | Assess one normalized EU AI Act system profile against the pinned sealed corpus. Returns separate legal-classification, impact, and implementation-readiness blocks with field-level facts, decisive missing facts, complete finding provenance, warnings, and recommended atomic follow-up calls. Sparse inputs fail closed. Impact never changes legal classification, and classification never implies implementation readiness. HOW TO BUILD THE PROFILE: every fact is an object {fact_id, value, origin, verification, evidence_reference_ids}. For a fact the user told you, use origin "explicit_structured_input", verification "caller_asserted", evidence_reference_ids [] and any unique lowercase fact_id such as "identity.system_name". A useful minimum is identity.system_name, intended_use.intended_purpose (intended_use also needs reasonably_foreseeable_uses, which may be []), role_facts.roles, geography with jurisdictions, affected_person_groups and one of used_in_eu, placed_on_eu_market or output_used_in_eu, and decision_context.decision_consequence. Set annex_iii.domain and annex_iii.annex_iii_point only when the system itself performs a use Annex III lists for that area, never because it operates in that sector. Supply only facts you were given: a missing decisive fact comes back in missing_facts with the question to ask. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
| classify-my-system | Classify an AI system under the EU AI Act risk framework. Provide a description and the tool will determine if it's prohibited, high-risk, limited risk, or minimal risk. Provide structured signals (domain, uses_biometrics, etc.) for deterministic classification on canonical cases. |
| compliance-checklist | Generate a compliance checklist for an AI system based on its risk level and your role (provider or deployer). |
| penalty-risk-assessment | Calculate potential fines for EU AI Act non-compliance based on violation type and company size. |
| ground-citation | Ground a citation to a specific EU AI Act article by retrieving an operational summary and EUR-Lex URL, then verifying definitive wording in the official source. |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
| EU AI Act Timeline | Key implementation milestones and deadlines of the EU AI Act (Regulation 2024/1689). |
| EU AI Act Risk Levels | Overview of the four AI Act risk categories: prohibited, high-risk, limited risk, and minimal risk. |
| EU AI Act Annex III - High-Risk Categories | Full Annex III high-risk AI system categories (1-8) with descriptions, examples, and relevant articles. Source: Regulation (EU) 2024/1689 as amended, Annex III; reused under Commission Decision 2011/833/EU conditions. |
| EU AI Act Annex IV - Technical Documentation | The nine titles and descriptions summarise Annex IV. `sub_items` are non-binding implementation prompts, are not verbatim Annex IV text, and do not create additional legal requirements. Under Article 11(1), SMEs, including start-ups, and SMCs may provide the Annex IV elements in a simplified manner only by using the Commission form referred to in that paragraph. |
| EU AI Act Digital Omnibus | Source-state-aware view of the Digital Omnibus on AI (COM(2025) 836; political agreement 2026-05-07; adopted by the European Parliament 2026-06-16 and the Council 2026-06-29). Current status: Enacted law (published in the Official Journal). Each item carries its source status. Includes the source registry. |
TDQS
Scored across 10 tools
Most tools target a distinct legal concept: classification, system assessment, penalties, deadlines, GPAI systemic risk, articles, and obligations. The only meaningful overlap is between euaiact_classify_system and euaiact_assess_system, since both can return legal classification, but their differing input modes and detailed descriptions keep them separable.
All tools share the euaiact_ prefix and mostly follow a verb_noun snake_case pattern, such as answer_question, classify_system, calculate_penalty, and check_deadlines. The main deviation is euaiact_annex_iv_checklist, which is a noun phrase, though it remains clear and readable.
Ten tools is well-scoped for an EU AI Act compliance server. Each tool covers a major workflow—FAQ lookup, classification, assessment, Annex IV, Art. 6(3), penalties, deadlines, GPAI, article retrieval, and obligations—without redundant or overwhelming coverage.
The server covers the core compliance lifecycle: risk classification, system assessment, exceptions, obligations, penalties, deadlines, and GPAI-specific checks. Minor gaps include article lookup only supporting a subset of articles and no generic search over all provisions, but most user-facing compliance workflows are supported.