Skip to main content
Glama
thegridwork

gridwork-wiki

by thegridwork

gridwork-wiki

Compliance knowledge base MCP server — query GDPR, EU AI Act, CCPA/CPRA, software licensing, and web accessibility regulations.

33 compiled articles covering 5 compliance domains, ~39,000 words of structured regulatory knowledge.

Install

npx gridwork-wiki

Claude Desktop

{
  "mcpServers": {
    "gridwork-wiki": {
      "command": "npx",
      "args": ["-y", "gridwork-wiki"]
    }
  }
}

Related MCP server: attestix

Tools

Tool

Description

query_regulation

Ask a compliance question, get relevant articles with key points

search_wiki

Keyword search with domain filtering and relevance scoring

get_article

Read full article content by slug

list_articles

Browse all articles by domain

check_compliance

Describe your system, get applicable regulations

wiki_stats

Knowledge base statistics

Domains

Domain

Articles

Covers

GDPR

10

Data protection, consent, transfers, enforcement, cookies

EU AI Act

8

Risk classification, prohibited practices, GPAI, compliance

CCPA/CPRA

4

Consumer rights, sensitive data, business obligations

US Privacy

2

State privacy law landscape and comparison

Software Licensing

5

Copyleft, compatibility, risk classification, SPDX

Web Accessibility

4

WCAG 2.1, common violations, EAA

Examples

Ask a compliance question:

"What consent is needed for cookies under GDPR?"

Check your system:

"SaaS app using OpenAI API processing EU user data"

Search for specific topics:

Search "AGPL network use" in Software Licensing domain

Part of Gridwork

A suite of compliance tools for the autonomous web.

License

MIT

Available Tools

6 tools
check_complianceA

Quick compliance check — describe your system or situation and get relevant regulatory requirements. Combines search across all domains to identify which regulations apply.

ParametersJSON Schema
NameRequiredDescriptionDefault
descriptionYesDescribe your system, product, or situation (e.g., 'SaaS app using OpenAI API that processes EU user data', 'React app with Google Analytics deployed in California')

TDQS

A4.1/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden. It discloses the core behavior (searches across domains and returns regulations) and the 'quick' nature, but does not elaborate on output format, limitations, or whether it's read-only. This is adequate for a simple tool but not rich in behavioral detail.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, front-loaded sentence with a secondary clarifying sentence. Every word earns its place, and it avoids redundancy with the schema.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a one-parameter tool with a well-explained parameter and no output schema, the description fully covers purpose, usage, and expected outcome. It also hints at scope ('all domains'), making it complete for the agent to select and invoke correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage for the only parameter is 100%, with examples and clear guidance ('Describe your system, product, or situation'). The description echoes this but adds little new meaning beyond the schema, justifying the baseline 3.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's function: 'Quick compliance check' with a specific verb ('get relevant regulatory requirements') and resource (system/situation). It also distinguishes from siblings by noting it 'combines search across all domains', separating it from more targeted tools like query_regulation.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides clear context for when to use it ('Quick compliance check', 'describe your system or situation'), implying it is a broad, fast assessment. However, it does not explicitly name alternatives or state when not to use it, which would merit a 5.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_articleA

Read the full content of a specific wiki article by its slug. Use search_wiki first to find relevant slugs, then get_article to read the full content.

ParametersJSON Schema
NameRequiredDescriptionDefault
slugYesArticle slug (e.g., 'gdpr-legal-bases', 'ai-act-risk-classification', 'license-copyleft')

TDQS

A4.6/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries the full burden. The verb 'read' clearly implies a non-destructive, read-only operation, and the description adds useful workflow context. However, it does not mention potential error cases (e.g., missing slug), rate limits, or what exactly 'full content' includes beyond what a user might expect. Still, for a simple fetch-by-slug tool, the core behavioral trait is clear.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences long, front-loaded with the primary purpose, followed by a precise usage guideline. Every word earns its place; no fluff or repetition of schema fields.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's simplicity (single slug parameter, no output schema), the description covers the core functionality and usage flow. It lacks explicit note about return format or errors, but for a straightforward read operation, the essential information is present. The description is sufficiently complete for an agent to select and invoke it correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The input schema already has excellent parameter descriptions with examples, so the baseline is 3. The description adds extra meaning by explaining that the slug is obtained from search_wiki, which clarifies the parameter's origin and usage. This goes beyond what the schema provides.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses the specific verb 'Read' with a clear resource: 'the full content of a specific wiki article by its slug.' It explicitly distinguishes itself from search_wiki by positioning it as a follow-up step, and from list_articles by emphasizing 'full content.' This makes the tool's purpose unmistakable.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description gives an explicit workflow: 'Use search_wiki first to find relevant slugs, then get_article to read the full content.' This states when to use it and implicitly when not to use it (not for searching/finding articles). It names the primary alternative tool directly.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_articlesA

List all wiki articles, optionally filtered by compliance domain. Returns title, slug, summary, and domain for each article.

ParametersJSON Schema
NameRequiredDescriptionDefault
domainNoFilter to a specific domain, or omit for all articles

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full transparency burden. It discloses the read-only nature (list) and specifies return fields (title, slug, summary, domain). It does not mention potential pagination, sorting, or permissions, but these are not critical for a simple, safe listing operation.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, well-structured sentence that leads with the action, then the optional filter, then the return value. Every word contributes and there is no fluff or repetition.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's simple nature (one optional param, no output schema), the description is complete: it explains the main action, the filter option, and the return fields. No crucial missing context is evident.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema already fully covers the only parameter 'domain' with an enum and description. The description adds minimal extra meaning beyond restating 'compliance domain' and the optional filtering behavior, so the baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb 'List' with a clear resource 'wiki articles', and indicates optional filtering by domain. It distinguishes itself from siblings like search_wiki (searching) and get_article (retrieving a single article) by explicitly listing all articles.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides clear context: use to list all articles, optionally filtered by compliance domain. It doesn't explicitly contrast with alternatives or state when not to use, but the 'list all' scope clearly differentiates it from search/retrieval siblings.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

query_regulationA

Ask a compliance question and get answers from the knowledge base. Searches across GDPR, EU AI Act, CCPA/CPRA, software licensing, and web accessibility articles. Returns relevant articles with key points and cross-references.

ParametersJSON Schema
NameRequiredDescriptionDefault
questionYesThe compliance question to answer (e.g., 'What are the GDPR legal bases for processing?', 'When does the AI Act apply to my chatbot?', 'Is AGPL compatible with MIT?')

TDQS

A4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description must carry the full burden. It discloses return behavior ('Returns relevant articles with key points and cross-references') but does not explicitly state read-only nature or any side effects, permissions, or limitations. The absence of such details is acceptable for a query tool but leaves some ambiguity.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences long, front-loaded with the main action, and contains no filler. Every word contributes to explaining the tool's purpose and output.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with a single parameter and no output schema, the description sufficiently explains what it returns and the scope of content. It could be more complete by explicitly noting it is read-only or how to best phrase questions, but overall it is adequate for the tool's simplicity.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The schema description covers the single parameter 'question' with examples, achieving 100% coverage. The description does not add much beyond the schema and simply restates the purpose, so a baseline score of 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states a specific verb ('Ask') and resource ('compliance question... knowledge base'), and specifies the covered regulatory domains (GDPR, EU AI Act, CCPA/CPRA, software licensing, web accessibility). This distinguishes it from generic search tools like 'search_wiki'.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It provides clear context for when to use the tool: when you have a compliance question. It does not explicitly name alternatives or exclusions, but the domain-specific phrasing gives sufficient guidance for typical use cases.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

search_wikiA

Search the compliance wiki for articles matching keywords. Returns ranked results with relevance scores and match context. Filter by domain for targeted searches.

ParametersJSON Schema
NameRequiredDescriptionDefault
limitNoMaximum number of results to return
queryYesSearch keywords
domainNoFilter results to a specific compliance domain

TDQS

A3.8/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations, the description carries the full burden. It discloses that the tool 'returns ranked results with relevance scores and match context', but does not state whether it is read-only, any rate limits, or behavior on empty queries. This is minimal but acceptable for a simple search tool.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences, front-loaded with purpose and return information, and includes a useful filtering note. Every sentence earns its place with no wasted words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple search tool with 3 params and no output schema, the description covers what it does, what it returns, and the domain filter. It could be improved by explicitly mentioning read-only nature or contrasting with siblings, but it is adequate for an agent to select and invoke correctly.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so all parameters are already documented. The description adds marginal value by mentioning 'Filter by domain for targeted searches', which reiterates the domain parameter, but does not introduce new semantics. Baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states 'Search the compliance wiki for articles matching keywords' with a specific verb and resource. It distinguishes from sibling tools by focusing on keyword search, while siblings like get_article or wiki_stats serve different functions.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies usage for finding articles via keywords and mentions domain filtering, but does not explicitly state when to use this tool versus alternatives. No alternative tools are named or exclusions are listed, making it implicit rather than explicit.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

wiki_statsA

Get statistics about the compliance knowledge base — article counts, word counts, domains covered, and generation date.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

TDQS

A4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are provided, so the description must carry the full burden. It clearly indicates a read-only statistics operation and names the returned metrics, but does not disclose response format, authentication needs, or any potential limitations. This is adequate for a simple stats tool, but not richer than necessary.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is a single, front-loaded sentence that immediately identifies the tool's action and resource, then enumerates the key statistics. Every word adds value, with no repetition of the name or filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a tool with no parameters and no output schema, the description covers the essential context: what the knowledge base is, what statistics are provided, and that it includes a generation date. It is sufficiently complete for a simple stats tool, though it could optionally mention whether output is a single object or an array.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool has zero parameters, and the schema is empty. The description adds meaning by specifying exactly what statistics are generated, which the schema cannot convey. With 0 params, baseline is 4, and the description meets that bar by providing functional context.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool's purpose: getting statistics about the compliance knowledge base. It lists specific metrics (article counts, word counts, domains covered, generation date) and is distinct from sibling tools which handle queries, searches, articles, and compliance checks.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines3/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description implies this tool is for obtaining aggregate statistics, but it does not explicitly state when to use it versus alternatives like list_articles or search_wiki. No exclusions or alternative guidance is provided, leaving the usage context to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections. Dates show when Glama detected each change.

  1. 6 tool updatesv1.0.0
    • First observedcheck_compliance
    • First observedget_article
    • First observedlist_articles
    • First observedquery_regulation
    • First observedsearch_wiki
    • First observedwiki_stats

TDQS

A4.1/5.0
Disambiguation4/5

Most tools have clearly distinct purposes: stats, search, list, and article retrieval are unambiguous. However, query_regulation and check_compliance both accept a natural language input and return regulatory information, which could lead to misselection if an agent doesn't carefully consider the nuance.

Naming Consistency4/5

Five of six tools follow the verb_noun pattern (query_regulation, search_wiki, get_article, list_articles, check_compliance). The outlier is 'wiki_stats', which is a noun_noun compound rather than an imperative verb phrase, creating a minor inconsistency.

Tool Count5/5

Six tools is well-scoped for a read-only compliance wiki server. Each tool serves a distinct function—statistics, semantic query, keyword search, article retrieval, listing, and compliance checking—with no redundancy or bloat.

Completeness5/5

The tool set covers all natural operations for a knowledge base: discovering articles via search/list, retrieving full content via get_article, querying by semantic intent, and summarizing overall statistics. There are no dead ends; agents can always find a path from discovery to full article access.

Maintenance

ActivityInactive
ResponsivenessSyncing

Resources

Unclaimed servers have limited discoverability.

Looking for Admin?

If you are the server author, to access and configure the admin panel.

Related MCP Connectors

Related MCP Servers

  • F
    license
    Not graded
    quality
    D
    maintenance
    Free hosted MCP server for EU compliance, enabling search across 8 frameworks, cross-framework mapping, policy generation, and gap assessment via natural language.
    -
  • A
    license
    Not graded
    quality
    B
    maintenance
    MCP server for compliance automation of AI agents, enabling EU AI Act compliance, verifiable credentials, and decentralized identity management with 47 tools across 9 modules.
    17
    Apache 2.0

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/thegridwork/wiki'

If you have feedback or need assistance with the MCP directory API, please join our Discord server